All MIBs › CISCO-LWAPP-WLAN-POLICY-MIB
Organization: Cisco Systems Inc.
Last Updated: 2019-11-20
Category: Cisco Devices, Wireless and WLAN
Description: Manages WLAN policy profiles controlling client access and traffic policies on Cisco wireless controllers.
Start monitoring vendor-neutral, standards-based MIB, any SNMPv3-capable network device (SNMP engine identity/boot/clock status) with a free 30-day trial of IPNetwork Monitor. Import MIBs, browse SNMP OIDs, create custom SNMP monitors, configure alerts, and monitor any SNMP-enabled network device from a single console.
What Is CISCO-LWAPP-WLAN-POLICY-MIB?
CISCO-LWAPP-WLAN-POLICY-MIB is a Cisco enterprise MIB implemented on Wireless LAN Controllers acting as Central Controllers for LWAPP access points, used to manage WLAN policy profiles that control client access, switching, and traffic handling. It exposes a policy configuration table defining interface mapping, central switching/authentication modes, DHCP handling, NAT/PAT settings, and per-policy ACL assignment. This is a configuration-status monitoring MIB: operators use it to verify each WLAN's policy profile (cLWlanPolicyCentralSwitchMode, cLWlanPolicyCentralAuthMode, cLWlanPolicyIPv4AclName) is applied as intended, since a misapplied policy can misroute or block client traffic entirely. It depends on the broader LWAPP/CAPWAP wireless controller architecture shared with related CISCO-LWAPP-* MIBs (particularly WLAN configuration and QoS MIBs). It is deployed on Cisco wireless LAN controllers, especially in FlexConnect/branch deployments where central vs. local switching policy per WLAN matters. Engineers can download the CISCO-LWAPP-WLAN-POLICY-MIB file directly to load it into their MIB browser.
IPNetwork Monitor allows you to monitor SNMP objects defined in CISCO-LWAPP-WLAN-POLICY-MIB. Use the built-in SNMP Monitoring Browser to explore available variables, view their current values and descriptions, and select the objects you want to monitor. You can then create SNMP monitors, configure thresholds, and receive alerts when monitored values change.
Supported Devices
- Cisco Wireless LAN Controller (WLC)
Monitoring Examples
An administrator would poll cLWlanPolicyConfigTable/cLWlanPolicyConfigEntry keyed by cLWlanWlanPolicyName to check cLWlanPolicyCentralSwitchMode and cLWlanPolicyCentralAuthMode, confirming whether a given WLAN's traffic is centrally switched/authenticated or handled locally. Checking cLWlanPolicyDhcpCentral and cLWlanPolicyNatPatEnabled together reveals whether client DHCP requests are being centrally proxied with NAT/PAT applied, explaining unexpected client IP addressing. A missing or incorrect cLWlanPolicyIPv4AclName would show why expected ACL-based traffic filtering isn't being enforced on that WLAN.
What Can Be Monitored
- WLAN policy central switch/auth mode
- DHCP central handling
- NAT/PAT enablement
- ACL assignment per policy
- policy row status
This MIB depends on
Related MIBs
Imported Objects
From CISCO-SMI
| ciscoMgmt | OBJECT-IDENTITY |
From SNMP-FRAMEWORK-MIB
| SnmpAdminString |
From SNMPv2-CONF
| MODULE-COMPLIANCE | |
| OBJECT-GROUP |
From SNMPv2-SMI
| IpAddress | |
| MODULE-IDENTITY | |
| OBJECT-TYPE | |
| Unsigned32 |
From SNMPv2-TC
| RowStatus | |
| TruthValue |
OIDs
| OID symbolic | OID numeric | Type | Access | Description |
|---|---|---|---|---|
| ciscoCapwapWlanPolicyMIB | 1.3.6.1.4.1.9.9.853 | This MIB is intended to be implemented on all those devices operating as Central Controllers (CC) that terminate the Light Weight Access Point Protocol tunnel from Cisco Light-weight LWAPP Access Points. This MIB helps to manage the WLANs on the controller. The relationship between CC and the LWAPP APs can be depicted as follows: +......+ +......+ +......+ +......+ + + + + + + + + + CC + + CC + + CC + + CC + + + + + + + + + +......+ +......+ +......+ +......+ .. . . . .. . . . . . . . . . . . . . . . . . . . . . . . +......+ +......+ +......+ +......+ +......+ + + + + + + + + + + + AP + + AP + + AP + + AP + + AP + + + + + + + + + + + +......+ +......+ +......+ +......+ +......+ . . . . . . . . . . . . . . . . . . . . . . . . +......+ +......+ +......+ +......+ +......+ + + + + + + + + + + + MN + + MN + + MN + + MN + + MN + + + + + + + + + + + +......+ +......+ +......+ +......+ +......+ The LWAPP tunnel exists between the controller and the APs. The MNs communicate with the APs through the protocol defined by the 802.11 standard. LWAPP APs, upon bootup, discover and join one of the controllers and the controller pushes the configuration, that includes the WLAN parameters, to the LWAPP APs. The APs then encapsulate all the 802.11 frames from wireless clients inside LWAPP frames and forward the LWAPP frames to the controller. GLOSSARY Access Point ( AP ) An entity that contains an 802.11 medium access control ( MAC ) and physical layer ( PHY ) interface and provides access to the distribution services via the wireless medium for associated clients. LWAPP APs encapsulate all the 802.11 frames in LWAPP frames and sends it to the controller to which it is logically connected to. Central Controller ( CC ) The central entity that terminates the LWAPP protocol tunnel from the LWAPP APs. Throughout this MIB, this entity also referred to as 'controller'. Light Weight Access Point Protocol ( LWAPP ) This is a generic protocol that defines the communication between the Access Points and the controllers. Mobile Node ( MN ) A roaming 802.11 wireless device in a wireless network associated with an access point. Access Control List ( ACL ) A list of rules used to restrict the traffic reaching an interface or the CPU or WLAN. Each ACL is an ordered set of rules and actions. If a rule matches then the action for that rule is applied to the packet. 802.1x The IEEE ratified standard for enforcing port based access control. This was originally intended for use on wired LANs and later extended for use in 802.11 WLAN environments. This defines an architecture with three main parts - a supplicant (Ex. an 802.11 wireless client), an authenticator (the AP) and an authentication server(a Radius server). The authenticator passes messages back and forth between the supplicant and the authentication server to enable the supplicant get authenticated to the network. Temporal Key Integrity Protocol ( TKIP ) A security protocol defined to enhance the limitations of WEP. Message Integrity Check and per-packet keying on all WEP-encrypted frames are two significant enhancements provided by TKIP to WEP. Cisco Key Integrity Protocol ( CKIP ) A proprietary implementation similar to TKIP. CKIP implements key permutation for protecting the CKIP key against attacks. Other features of CKIP include expansion of encryption key to 16 bytes of length for key protection and MIC to ensure data integrity. Wired Equivalent Privacy ( WEP ) A security method defined by 802.11. WEP uses a symmetric key stream cipher called RC4 to encrypt the data packets. Wi-Fi Protected Access ( WPA ) Wi-Fi Protected Access (WPA and WPA2) are security systems created in response to several serious weaknesses found in Wired Equivalent Privacy (WEP). WPA implements the majority of the IEEE 802.11i standard, and was intended as an intermediate measure to take the place of WEP while 802.11i was prepared. WPA is designed to work with all wireless network interface cards, but not necessarily with first generation wireless access points. WLAN Layer 2 Security WLAN layer 2 (MAC) security defines the encryption and authentication approaches such as 802.1x, WPA, WPA2, CKIP and WEP. Delivery Traffic Indication Map ( DTIM ) DTIM is measured in beacon intervals and is the time period during which multicast/broadcast packets are sent to clients. This helps client to go in Power Saving mode and helps to save battery power. Network Admission Control (NAC) Cisco NAC uses the network infrastructure to enforce security policy compliance on all devices that seek to access network computing resources. With the Cisco NAC appliance, network administrators can authenticate, authorize, evaluate, and remediate wired, wireless, and remote users and their machines prior to network access. The Cisco NAC appliance identifies whether networked devices such as laptops, IP phones, or game consoles are compliant with network security policies, and repairs any vulnerabilities before it permits access to the network. Out of Band (OOB) Out-of-band deployments require user traffic to traverse through the NAC appliance only within authentication, posture assessment, and remediation. When a user is authenticated and passes all policy checks, the traffic is switched normally through the network and bypasses the NAC server. Band Select The 2.4 GHz band is congested and clients have to contend with numerous performance challenges. These consist of interference from Bluetooth, microwave ovens, cordless phones, etc.; protection mechanisms from 802.11b legacy clients; and co-channel interference from other access points due to 802.11bg?s limit of three non-overlapping channels. Allowing client Wi-Fi radios capable of dual band (2.4 and 5 GHz) operation move to the less congested 5 GHz radios would improve the overall performance of the network. The Band Select algorithm is based on probe response suppression on clients 2.4G radio. The feature is OFF by default and has to be manually switched ON globally for a WLC. It can be optionally over-ridden per-SSID to disallow it. Network Access Identifier ( NAI ) In order to provide roaming services, it is necessary to have a standardized method for identifying users. NAI is actually the user identity submitted by the client during network authentication. KTS (Key Telephone System) Key Telephone System is an alternative to a private branch exchange (PBX) phone system. A KTS is equipped with several buttons that allow a caller to directly select outgoing lines or incoming calls, and use intercom and conference facilities. NAS-ID (Network Access Server Identifier) NAS-ID string is sent to Radius server by WLC (as radius client) via authentication request, which can be used to classify users to different groups then radius server can reply a customized authentication response. Quality of Service (QoS) The quality of service (QoS) refers to several related aspects of telephony and computer networks that allow the transport of traffic with special requirements. In particular, much technology has been developed to allow computer networks to become as useful as telephone networks for audio conversations, as well as supporting new applications with even stricter service demands. Virtual LAN (VLAN) In computer networking, virtual local area network, virtual LAN or VLAN is a concept of partitioning a physical network, so that distinct broadcast domains are created. This is usually achieved on switch or router devices. Application Visibility and Control (AVC) Application visibility and control (AVC) refers to the capability of a network to identify which layer 7 applications are producing the flows traversing the network. This information is typically presented as packet or byte statistics. Netflow is used to specify which information is to be collected for each flow. Multicast Domain Name System (mDNS) This is the underlying protocol that is used for Service advertisement and discovery in technologies like Bonjour, Zero Touch Configuration REFERENCE [1] Wireless LAN Medium Access Control ( MAC ) and Physical Layer ( PHY ) Specifications. [2] Draft-obara-capwap-lwapp-00.txt, IETF Light Weight Access Point Protocol [3] IEEE 802.11 - The original 1 Mbit/s and 2 Mbit/s, 2.4 GHz RF and IR standard. | ||
| ciscoLwappWlanAaaPolicyConfigGroup | 1.3.6.1.4.1.9.9.853.3.2.4 | This collection of objects represent the AAA Policy configuration of WLAN. | ||
| ciscoLwappWlanPolicyATFConfigGroup | 1.3.6.1.4.1.9.9.853.3.2.3 | This collection of objects represent the ATF Policy name for 2.4ghz and 5ghz based on band id corresponding to WLAN policy. | ||
| ciscoLwappWlanPolicyCompliance | 1.3.6.1.4.1.9.9.853.3.1.1 | The compliance statement for the SNMP entities that implement the ciscoCapwapWlanPolicyMIB module. | ||
| ciscoLwappWlanPolicyComplianceR01 | 1.3.6.1.4.1.9.9.853.3.1.2 | The compliance statement for the SNMP entities that implement the ciscoLwappWlanPolicyMIB module. This deprecates ciscoLwappWlanPolicyCompliance. | ||
| ciscoLwappWlanPolicyComplianceR02 | 1.3.6.1.4.1.9.9.853.3.1.3 | The compliance statement for the SNMP entities that implement the ciscoLwappWlanPolicyMIB module. This deprecates ciscoLwappWlanPolicyComplianceR01. | ||
| ciscoLwappWlanPolicyComplianceR03 | 1.3.6.1.4.1.9.9.853.3.1.4 | The compliance statement for the SNMP entities that implement the ciscoLwappWlanPolicyMIB module. This adds ciscoLwappWlanPolicyConfigGroupFlowMonitor, and deprecates ciscoLwappWlanPolicyComplianceR02. | ||
| ciscoLwappWlanPolicyComplianceR04 | 1.3.6.1.4.1.9.9.853.3.1.5 | The compliance statement for the SNMP entities that implement the ciscoLwappWlanPolicyMIB module. This adds ciscoLwappWlanPolicyConfigGroupRev3, ciscoLwappWlanPolicyConfigGroupCalenderProfile and deprecates ciscoLwappWlanPolicyComplianceR03. | ||
| ciscoLwappWlanPolicyComplianceR05 | 1.3.6.1.4.1.9.9.853.3.1.6 | The compliance statement for the SNMP entities that implement the ciscoLwappWlanPolicyMIB module. This adds ciscoLwappWlanPolicyConfigGroupRev4 and deprecates ciscoLwappWlanPolicyComplianceR04. | ||
| ciscoLwappWlanPolicyCompliances | 1.3.6.1.4.1.9.9.853.3.1 | |||
| ciscoLwappWlanPolicyConfig | 1.3.6.1.4.1.9.9.853.1.2 | |||
| ciscoLwappWlanPolicyConfigGroup | 1.3.6.1.4.1.9.9.853.3.2.1 | This collection of objects represent the Policy configuration of WLAN to be passed to LWAPP AP | ||
| ciscoLwappWlanPolicyConfigGroupCalenderProfile | 1.3.6.1.4.1.9.9.853.3.2.8 | This collection of objects represents calender profile configured for the wireless profile policy. | ||
| ciscoLwappWlanPolicyConfigGroupFlowMonitor | 1.3.6.1.4.1.9.9.853.3.2.6 | This collection of objects represents flow monitors configured for the wireless profile policy. | ||
| ciscoLwappWlanPolicyConfigGroupRev1 | 1.3.6.1.4.1.9.9.853.3.2.2 | This collection of objects represent the Policy configuration of WLAN to be passed to LWAPP AP | ||
| ciscoLwappWlanPolicyConfigGroupRev2 | 1.3.6.1.4.1.9.9.853.3.2.5 | This collection of objects represents the Policy configuration of WLAN to be passed to LWAPP AP. This deprecates ciscoLwappWlanPolicyConfigGroupRev1 | ||
| ciscoLwappWlanPolicyConfigGroupRev3 | 1.3.6.1.4.1.9.9.853.3.2.7 | This collection of objects represents the Policy configuration of WLAN to be passed to LWAPP AP. This deprecates ciscoLwappWlanPolicyConfigGroupRev2 | ||
| ciscoLwappWlanPolicyConfigGroupRev4 | 1.3.6.1.4.1.9.9.853.3.2.9 | This collection of objects represents the Policy configuration of WLAN to be passed to LWAPP AP. This deprecates ciscoLwappWlanPolicyConfigGroupRev3 | ||
| ciscoLwappWlanPolicyConform | 1.3.6.1.4.1.9.9.853.3 | |||
| ciscoLwappWlanPolicyGroups | 1.3.6.1.4.1.9.9.853.3.2 | |||
| ciscoLwappWlanPolicyMIBNotifs | 1.3.6.1.4.1.9.9.853.0 | |||
| ciscoLwappWlanPolicyMIBObjects | 1.3.6.1.4.1.9.9.853.1 | |||
| cLWlanAaaPolicyConfigEntry | 1.3.6.1.4.1.9.9.853.1.2.3.1 | not-accessible | Each entry in this table represents the WLAN AAA policy configuration. | |
| cLWlanAaaPolicyConfigTable | 1.3.6.1.4.1.9.9.853.1.2.3 | not-accessible | This table represents the WLAN AAA policy configuration. | |
| STR cLWlanAaaPolicyName | 1.3.6.1.4.1.9.9.853.1.2.3.1.1 | SnmpAdminString | not-accessible | This object specifies an AAA policy on a policy profile in a controller. |
| INT cLWlanAaaPolicyNasId1 | 1.3.6.1.4.1.9.9.853.1.2.3.1.3 | INTEGER | read-write | This object specifies the NasId option 1. notconfigured - Not Configured sysname - System Name sysip - System IP Address sysmac - System MAC Address apip - AP's IP Address apname - AP's Name apmac - AP's MAC Address apethmac - AP's Ethernet MAC Address appolicytag - AP's Policy Tag apsitetag - AP's Site Tag ssid - SSID Name aplocation - AP's Location . |
| INT cLWlanAaaPolicyNasId2 | 1.3.6.1.4.1.9.9.853.1.2.3.1.4 | INTEGER | read-write | This object specifies the NasId option 2. notconfigured - Not Configured sysname - System Name sysip - System IP Address sysmac - System MAC Address apip - AP's IP Address apname - AP's Name apmac - AP's MAC Address apethmac - AP's Ethernet MAC Address appolicytag - AP's Policy Tag apsitetag - AP's Site Tag ssid - SSID Name aplocation - AP's Location . |
| INT cLWlanAaaPolicyNasId3 | 1.3.6.1.4.1.9.9.853.1.2.3.1.5 | INTEGER | read-write | This object specifies the NasId option 3. notconfigured - Not Configured sysname - System Name sysip - System IP Address sysmac - System MAC Address apip - AP's IP Address apname - AP's Name apmac - AP's MAC Address apethmac - AP's Ethernet MAC Address appolicytag - AP's Policy Tag apsitetag - AP's Site Tag ssid - SSID Name aplocation - AP's Location . |
| T/F cLWlanAaaPolicyRealm | 1.3.6.1.4.1.9.9.853.1.2.3.1.6 | TruthValue | read-write | This object specifies the user to enable or disable realm. TRUE means realm enable FALSE measn realm disable |
| ROW cLWlanAaaPolicyRowStatus | 1.3.6.1.4.1.9.9.853.1.2.3.1.2 | RowStatus | read-create | This object specifies the status column for this row and used to create, modify and delete specific instances of rows in this table. This table supports modification of writable objects when the RowStatus is 'active'. The following objects are mandatory for successful creation of an entry: cLWlanAaaPolicyName. |
| STR cLWlanMonitorIPv4InName | 1.3.6.1.4.1.9.9.853.1.2.4.1.1 | SnmpAdminString | not-accessible | This object represents an IPv4 input flow monitor name configured for the policy profile. |
| ROW cLWlanMonitorIPv4InRowStatus | 1.3.6.1.4.1.9.9.853.1.2.4.1.2 | RowStatus | read-create | This object specifies the status column for this row and is used to create and delete specific instances of rows in this table. This table does not contain writable objects: once the row is created, the only further actions allowed are read or delete. The dynamically created rows should not change across SNMP agent restarts The following objects are mandatory for successful creation of an entry: cLWlanWlanPolicyName, cLWlanMonitorIPv4InName. |
| STR cLWlanMonitorIPv4OutName | 1.3.6.1.4.1.9.9.853.1.2.5.1.1 | SnmpAdminString | not-accessible | This object represents an IPv4 output flow monitor name configured for the policy profile. |
| ROW cLWlanMonitorIPv4OutRowStatus | 1.3.6.1.4.1.9.9.853.1.2.5.1.2 | RowStatus | read-create | This object specifies the status column for this row and is used to create and delete specific instances of rows in this table. This table does not contain writable objects: once the row is created, the only further actions allowed are read or delete. The dynamically created rows should not change across SNMP agent restarts The following objects are mandatory for successful creation of an entry: cLWlanWlanPolicyName, cLWlanMonitorIPv4OutName. |
| STR cLWlanMonitorIPv6InName | 1.3.6.1.4.1.9.9.853.1.2.6.1.1 | SnmpAdminString | not-accessible | This object represents an IPv6 input flow monitor name configured for the policy profile. |
| ROW cLWlanMonitorIPv6InRowStatus | 1.3.6.1.4.1.9.9.853.1.2.6.1.2 | RowStatus | read-create | This object specifies the status column for this row and is used to create and delete specific instances of rows in this table. This table does not contain writable objects: once the row is created, the only further actions allowed are read or delete. The dynamically created rows should not change across SNMP agent restarts The following objects are mandatory for successful creation of an entry: cLWlanWlanPolicyName, cLWlanMonitorIPv6InName. |
| STR cLWlanMonitorIPv6OutName | 1.3.6.1.4.1.9.9.853.1.2.7.1.1 | SnmpAdminString | not-accessible | This object represents an IPv6 output flow monitor name configured for the policy profile. |
| ROW cLWlanMonitorIPv6OutRowStatus | 1.3.6.1.4.1.9.9.853.1.2.7.1.2 | RowStatus | read-create | This object specifies the status column for this row and is used to create and delete specific instances of rows in this table. This table does not contain writable objects: once the row is created, the only further actions allowed are read or delete. The dynamically created rows should not change across SNMP agent restarts The following objects are mandatory for successful creation of an entry: cLWlanWlanPolicyName, cLWlanMonitorIPv6OutName. |
| ROW cLWlanPlcyRowStatus | 1.3.6.1.4.1.9.9.853.1.2.1.1.2 | RowStatus | read-create | This object specifies the status column for this row and used to create, modify and delete specific instances of rows in this table. This table supports modification of writable objects when the RowStatus is 'active'. The following objects are mandatory for successful creation of an entry: cLWlanPolicyName. |
| T/F cLWlanPolicyAaaOverride | 1.3.6.1.4.1.9.9.853.1.2.1.1.33 | TruthValue | read-write | This object specifies to set when aaa override is enabled. A value of 'true' indicates aaa override is enabled. A value of 'false' indicates aaa override is disabled. |
| STR cLWlanPolicyAAAPolicyName | 1.3.6.1.4.1.9.9.853.1.2.1.1.63 | SnmpAdminString | read-write | This object specifies the Wireless AAA Policy Name |
| STR cLWlanPolicyAccountingList | 1.3.6.1.4.1.9.9.853.1.2.1.1.62 | SnmpAdminString | read-write | This object specifies the Accounting List for Policy Profile. |
| T/F cLWlanPolicyARPProxy | 1.3.6.1.4.1.9.9.853.1.2.1.1.71 | TruthValue | read-write | This object specifies whether ARP proxy is enabled on a particular policy profile. A value of 'true' indicates ARP proxy is enabled. A value of 'false' indicates ARP proxy is disabled. |
| T/F cLWlanPolicyAssocCentral | 1.3.6.1.4.1.9.9.853.1.2.1.1.10 | TruthValue | read-write | This object indicates the behavior of the REAP when handling the (re-)association management frames from associated to it through the WLAN policy identified by policy profile name. A value of 'true' indicates AssocCentral is enabled. A value of 'false' indicates AssocCentral is disabled. Note that the value of 'true' will be effective only if the WLAN is configured on a REAP. |
| STR cLWlanPolicyATFPolicyName | 1.3.6.1.4.1.9.9.853.1.2.2.1.3 | SnmpAdminString | read-write | This object represents the AirTime Fairness policy name for 24ghz and 5ghz attached to the policy profile. |
| cLWlanPolicyATFPolicyNameConfigEntry | 1.3.6.1.4.1.9.9.853.1.2.2.1 | not-accessible | An entry into the cLWlanPolicyATFPolicyNameTable represents ATF policy name for 2.4ghz and 5ghz based on band id corresponding to WLAN policy. Entries can be added/deleted by explicit management actions by NMS or by user console. | |
| cLWlanPolicyATFPolicyNameConfigTable | 1.3.6.1.4.1.9.9.853.1.2.2 | not-accessible | This table represents the ATF policy name configuration for 2.4ghz and 5ghz radio interface based on band id. | |
| ROW cLWlanPolicyATFRowStatus | 1.3.6.1.4.1.9.9.853.1.2.2.1.2 | RowStatus | read-create | This object specifies the row Status of the ATF policy map table. |
| U32 cLWlanPolicyBandId | 1.3.6.1.4.1.9.9.853.1.2.2.1.1 | Unsigned32 | not-accessible | This object uniquely identifies the ATF policy name for 24ghz and 5ghz attached to the policy profile. |
| T/F cLWlanPolicyBlacklistingCapability | 1.3.6.1.4.1.9.9.853.1.2.1.1.30 | TruthValue | read-write | This object specifies that one can enable or disable the client backlisting feature for a WLAN. A value of 'true' indicates that the clients can be blacklisted by the controller in case of repetitive auth failure and other reasons like it. A value of 'false' indicates that the clients cannot be blacklisted by the controller. The blacklist timeout value will only be effective if this feature is turned on. |
| U32 cLWlanPolicyBlacklistTimeout | 1.3.6.1.4.1.9.9.853.1.2.1.1.29 | Unsigned32 | read-write | This object specifies the timeout for blacklisted Mobile Stations after which the mobile station will be automatically de-authenticated. Mobile Station are blacklisted by MAC address and their status can be obtained from bsnMobileStationStatus. A timeout setting of 0 indicates no blacklist timeout is set and administrative control ( bsnMobileStationDeleteAction ) is required to deauthenticate the station. |
| T/F cLWlanPolicyBroadcastTagging | 1.3.6.1.4.1.9.9.853.1.2.1.1.58 | TruthValue | read-write | This object specifies to set when broadcast tagging is enabled. A value of 'true' indicates broadcast tagging is enabled. A value of 'false' indicates broadcast tagging is disabled. |
| INT cLWlanPolicyCalendarProfileClientSession | 1.3.6.1.4.1.9.9.853.1.2.8.1.4 | INTEGER | read-write | This object enables or disable client session on calender profile. invalid - No action is configured on calender profile for a client sesion block - denies client association on calender profile. |
| cLWlanPolicyCalendarProfileEntry | 1.3.6.1.4.1.9.9.853.1.2.8.1 | not-accessible | Each entry in this table represents the information about action under calender profile for a given policy | |
| STR cLWlanPolicyCalendarProfileName | 1.3.6.1.4.1.9.9.853.1.2.8.1.1 | SnmpAdminString | not-accessible | This object specifies unique instance of calendar profile |
| ROW cLWlanPolicyCalendarProfileRowStatus | 1.3.6.1.4.1.9.9.853.1.2.8.1.2 | RowStatus | read-create | This is the status column for this row and is used to create and delete specific instances of rows in this table. |
| cLWlanPolicyCalendarProfileTable | 1.3.6.1.4.1.9.9.853.1.2.8 | not-accessible | This table represent calendar profile configuration under WLAN policy | |
| INT cLWlanPolicyCalendarProfileWlan | 1.3.6.1.4.1.9.9.853.1.2.8.1.3 | INTEGER | read-write | This object enables or disable wlan action on calender profile for a given policy profile invalid - No action is configured on calender profile enable - enables wlan action on calender profile. |
| T/F cLWlanPolicyCentralAuthMode | 1.3.6.1.4.1.9.9.853.1.2.1.1.6 | TruthValue | read-write | This object allows the user to enable or disable central authentication for the wlan. A value of 'true' indicates central authentication is enabled. A value of 'false' indicates local authentication is disabled. |
| T/F cLWlanPolicyCentralSwitchMode | 1.3.6.1.4.1.9.9.853.1.2.1.1.5 | TruthValue | read-write | This object allows the user to enable or disable Central switching for wlan. A value of 'true' indicates Central Switching is enabled and Local Switching is disabled. A value of 'false' indicates Cental Switching is disabled and Local Switching is enabled. |
| U32 cLWlanPolicyClientExclTimeout | 1.3.6.1.4.1.9.9.853.1.2.1.1.16 | Unsigned32 | read-write | This object specifies the client exclusiontimeout value of user for a WLAN. Modifying the timeout to zero (0) means the client will be excluded indefinitely until it is manually removed from the exclusion list |
| cLWlanPolicyConfigEntry | 1.3.6.1.4.1.9.9.853.1.2.1.1 | not-accessible | Each entry in this table represents the WLAN policy configuration sent by the controller to LWAPP APs for use during their operations. Entries can be added/deleted by explicit management actions by NMS or by user console. | |
| cLWlanPolicyConfigTable | 1.3.6.1.4.1.9.9.853.1.2.1 | not-accessible | This table represents the WLAN policy configuration sent by the controller to the LWAPP APs for their operation. LWAPP APs exchange configuration messages with the controller and get the required configuration for their 802.11 related operations. As part of these messages, the WLAN configuration is pushed by the controller to the LWAPP APs. Rows are added or deleted by explicit management actions initiated by the user from a network management station through the cLWlanPlcyRowStatus object. | |
| U32 cLWlanPolicyDefaultSgt | 1.3.6.1.4.1.9.9.853.1.2.1.1.65 | Unsigned32 | read-write | This object specifies the default security group tag. |
| STR cLWlanPolicyDescription | 1.3.6.1.4.1.9.9.853.1.2.1.1.3 | SnmpAdminString | read-write | This object specifies the description associated to this WLAN policy.This can be any user defined string. |
| T/F cLWlanPolicyDhcpCentral | 1.3.6.1.4.1.9.9.853.1.2.1.1.7 | TruthValue | read-write | This object indicates the behavior of the Access Point when switching the data frames of the clients associated to it through the WLAN policy identified by policy profile name. A value of 'true' indicates dhcp central is enabled. A value of 'false' indicates dhcp central is disabled. Note that the value of 'true' will be effective only if the WLAN is configured on a Access Point. |
| T/F cLWlanPolicyDHCPDeviceProfiling | 1.3.6.1.4.1.9.9.853.1.2.1.1.20 | TruthValue | read-write | This object specfies the client dhcp profiling on a wlan. A value of 'true' indicates dhcp device profiling is enabled. A value of 'false' indicates dhcp device profiling is disabled. |
| T/F cLWlanPolicyDHCPOption82Apethmac | 1.3.6.1.4.1.9.9.853.1.2.1.1.43 | TruthValue | read-write | This object specifies the DHCP Option82 format Ap ethmac option. A value of 'true' enable DHCP 82 option based on AP eth mac. A value of 'false' disable DHCP 82 option based on AP eth mac. |
| T/F cLWlanPolicyDHCPOption82Aplocation | 1.3.6.1.4.1.9.9.853.1.2.1.1.46 | TruthValue | read-write | This specifies represents the DHCP Option82 format Ap location option A value of 'true' enable DHCP 82 option based on Ap Location. A value of 'false' disable DHCP 82 option based on Ap Location. |
| T/F cLWlanPolicyDHCPOption82Apmac | 1.3.6.1.4.1.9.9.853.1.2.1.1.42 | TruthValue | read-write | This object specifies the DHCP Option82 format Ap mac option. A value of 'true' enable DHCP 82 option based on AP radio mac. A value of 'false' disable DHCP 82 option based on AP radio mac. |
| T/F cLWlanPolicyDHCPOption82Apname | 1.3.6.1.4.1.9.9.853.1.2.1.1.44 | TruthValue | read-write | This object specifies the DHCP Option82 format Ap name option. A value of 'true' enable DHCP 82 option based on AP name. A value of 'false' disable DHCP 82 option based on AP name. |
| T/F cLWlanPolicyDHCPOption82Ascii | 1.3.6.1.4.1.9.9.853.1.2.1.1.39 | TruthValue | read-write | This object specifies the DHCP Option82 Ascii option. A value of 'true' enable DHCP 82 Ascii option. A value of 'false' disable DHCP 82 Ascii option. |
| T/F cLWlanPolicyDHCPOption82Enable | 1.3.6.1.4.1.9.9.853.1.2.1.1.41 | TruthValue | read-write | This object specifies the DHCP Option82 state. A value of 'true' enable DHCP 82 option . A value of 'false' disable DHCP 82 option. |
| T/F cLWlanPolicyDHCPOption82Policytag | 1.3.6.1.4.1.9.9.853.1.2.1.1.45 | TruthValue | read-write | This object specifies the DHCP Option82 format Policy tag option A value of 'true' enable DHCP 82 option based on policy tag. A value of 'false' disable DHCP 82 option based on policy tag. |
| T/F cLWlanPolicyDHCPOption82Rid | 1.3.6.1.4.1.9.9.853.1.2.1.1.40 | TruthValue | read-write | This object specifies the DHCP Option82 Rid option. A value of 'true' enable DHCP 82 option RID. A value of 'false' disable DHCP 82 option RID. |
| T/F cLWlanPolicyDHCPOption82Ssid | 1.3.6.1.4.1.9.9.853.1.2.1.1.48 | TruthValue | read-write | This object specifies the DHCP Option82 format SSID option. A value of 'true' enable DHCP 82 option based on ssid. A value of 'false' disable DHCP 82 option based on ssid. Folowing are the combination for dhcp option82 format- AP MAC alone AP ethernet MAC alone SSID alone Policy tag alone AP location alone AP name and SSID together AP MAC and Vlan-ID together AP name and Vlan-ID together Ethernet MAC and SSID together. |
| T/F cLWlanPolicyDHCPOption82Vlanid | 1.3.6.1.4.1.9.9.853.1.2.1.1.47 | TruthValue | read-write | This object specifies the DHCP Option82 format Vlan_id option. A value of 'true' enable DHCP 82 option based on vlanid A value of 'false' disable DHCP 82 option based on vlanid. |
| INT cLWlanPolicyDhcpRequired | 1.3.6.1.4.1.9.9.853.1.2.1.1.31 | INTEGER | read-write | This object specifies the DHCP requirement for all clients on this WLAN. |
| IP cLWlanPolicyDhcpServerIpAddress | 1.3.6.1.4.1.9.9.853.1.2.1.1.32 | IpAddress | read-write | This object specifies the IP Address of the DHCP Server. Make it 0.0.0.0 or 0:0:0:0:0:0:0:0 to disable DHCP Relay. Any value other than 0.0.0.0 or 0:0:0:0:0:0:0:0 it will be assumed that DHCP Relay is turned on. |
| STR cLWlanPolicyHotspotAnqpServer | 1.3.6.1.4.1.9.9.853.1.2.1.1.69 | SnmpAdminString | read-write | This object specifies the Hotspot 2.0 ANQP Server |
| T/F cLWlanPolicyHttpDeviceProfiling | 1.3.6.1.4.1.9.9.853.1.2.1.1.19 | TruthValue | read-write | This object specfies the client local profiling on a wlan. A value of 'true' indicates http device profiling is enabled. A value of 'false' indicate http device profiling is disabled. |
| T/F cLWlanPolicyInlineTagging | 1.3.6.1.4.1.9.9.853.1.2.1.1.66 | TruthValue | read-write | This object specifies whether inline tagging flag is enabled on a particular policy profile. A value of 'true' indicates inline tagging is enabled. A value of 'false' indicates inline tagging is disabled. |
| STR cLWlanPolicyInterfaceName | 1.3.6.1.4.1.9.9.853.1.2.1.1.4 | SnmpAdminString | read-write | This object represents the interface attached to the wireless lan. |
| STR cLWlanPolicyIPv4AclName | 1.3.6.1.4.1.9.9.853.1.2.1.1.11 | SnmpAdminString | read-write | This object specifies the IPV4 ACL Name for wlan. |
| STR cLWlanPolicyIPv6AclName | 1.3.6.1.4.1.9.9.853.1.2.1.1.12 | SnmpAdminString | read-write | This object specifies the IPV6 ACL Name for wlan. |
| INT cLWlanPolicyIPv6proxy | 1.3.6.1.4.1.9.9.853.1.2.1.1.72 | INTEGER | read-write | This object specifies the type of IPV6 proxy mode configured noproxy - no ipv6 proxy configured dadproxy - DAD proxy is configured. fullproxy - DAD and ND proxy is configured. |
| STR cLWlanPolicyL2AclName | 1.3.6.1.4.1.9.9.853.1.2.1.1.13 | SnmpAdminString | read-write | This object specifies the name of the L2ACL applied to this WLAN. If it is required to remove the ACL name for a WLAN, it should be set to 'none'. |
| STR cLWlanPolicyMdnsPolicy | 1.3.6.1.4.1.9.9.853.1.2.1.1.68 | SnmpAdminString | read-write | This object specifies the mDNS service policy configured under WLAN policy. |
| T/F clWlanPolicyMobilityAnchor | 1.3.6.1.4.1.9.9.853.1.2.1.1.57 | TruthValue | read-write | This object specifies the user to enable or disable mobility anchor for a policy profile. A value of 'true' indicates mobility anchor is active. A Value of 'false' indicates mobility anchor is disabled. |
| cLWlanPolicyMonitorIPv4InConfigEntry | 1.3.6.1.4.1.9.9.853.1.2.4.1 | not-accessible | Each entry in this table represents an IPv4 input flow monitor configured for AVC. | |
| cLWlanPolicyMonitorIPv4InConfigTable | 1.3.6.1.4.1.9.9.853.1.2.4 | not-accessible | This table contains the list of IPv4 flow monitors configured for AVC in the input (or ingress) direction. Rows are added or deleted by explicit management actions initiated by the user from a network management station through the cLWlanMonitorIPv4InRowStatus object. | |
| cLWlanPolicyMonitorIPv4OutConfigEntry | 1.3.6.1.4.1.9.9.853.1.2.5.1 | not-accessible | Each entry in this table represents an IPv4 output flow monitor configured for AVC. | |
| cLWlanPolicyMonitorIPv4OutConfigTable | 1.3.6.1.4.1.9.9.853.1.2.5 | not-accessible | This table contains the list of IPv4 flow monitors configured for AVC in the output (or egress) direction. Rows are added or deleted by explicit management actions initiated by the user from a network management station through the cLWlanMonitorIPv4OutRowStatus object. | |
| cLWlanPolicyMonitorIPv6InConfigEntry | 1.3.6.1.4.1.9.9.853.1.2.6.1 | not-accessible | Each entry in this table represents an IPv6 input flow monitor configured for AVC. | |
| cLWlanPolicyMonitorIPv6InConfigTable | 1.3.6.1.4.1.9.9.853.1.2.6 | not-accessible | This table contains the list of IPv6 flow monitors configured for AVC in the input (or ingress) direction. Rows are added or deleted by explicit management actions initiated by the user from a network management station through the cLWlanMonitorIPv6InRowStatus object. | |
| cLWlanPolicyMonitorIPv6OutConfigEntry | 1.3.6.1.4.1.9.9.853.1.2.7.1 | not-accessible | Each entry in this table represents an IPv6 output flow monitor configured for AVC. | |
| cLWlanPolicyMonitorIPv6OutConfigTable | 1.3.6.1.4.1.9.9.853.1.2.7 | not-accessible | This table contains the list of IPv6 flow monitors configured for AVC in the output (or egress) direction. Rows are added or deleted by explicit management actions initiated by the user from a network management station through the cLWlanMonitorIPv6OutRowStatus object. | |
| T/F cLWlanPolicyMulticastFilter | 1.3.6.1.4.1.9.9.853.1.2.1.1.73 | TruthValue | read-write | This object specifies whether multicast filter is enabled on a particular policy profile. A value of 'true' indicates multicast filter is enabled. A value of 'false' indicates multicast filter is disabled. |
| T/F cLWlanPolicyNac | 1.3.6.1.4.1.9.9.853.1.2.1.1.34 | TruthValue | read-write | This object specifies to enabling/disabling NAC. |
| INT cLWlanPolicyNacType | 1.3.6.1.4.1.9.9.853.1.2.1.1.70 | INTEGER | read-write | This object specifies the type of NAC configured radius - Identity Service Engine NAC configured xwf - Express Wi-Fi NAC configured. |
| T/F cLWlanPolicyNativeProfiling | 1.3.6.1.4.1.9.9.853.1.2.1.1.17 | TruthValue | read-write | This object specfies to enable or disable client device classification. A value of 'true' indicates native profiling is enabled. A value of 'false' indicates native profiling is disabled. |
| T/F cLWlanPolicyNatPatEnabled | 1.3.6.1.4.1.9.9.853.1.2.1.1.9 | TruthValue | read-write | This object specifies whether Network Address Translation (NAT) and Port Address Translation (PAT) are enabled on this WLAN. This can be enabled only when cLReapWlanDhcpCentral is set to 'true'. A value of 'true' indicates NATPAT is enabled. A value of 'false' indicates NATPAT is disabled. Note that the value of 'true' will be effective only if the WLAN is configured as Locally Switched. |
| T/F cLWlanPolicyNBARProtocolDiscovery | 1.3.6.1.4.1.9.9.853.1.2.1.1.55 | TruthValue | read-write | This object allows the user to enable or disable NBAR Protocol discovery for a wlan. A value of 'true' indicates NBAR protocol discovery is active, A value of 'false' indicates NBAR protocol discovery is disabled. |
| STR cLWlanPolicyNetflowIPv4InputMonitorName | 1.3.6.1.4.1.9.9.853.1.2.1.1.21 | SnmpAdminString | read-write | This object specifies the input IPv4 Netflow Monitor name assigned to this WLAN. An empty string specifies no flow monitor is being associated to WLAN policy profile. An empty flow monitor name should be used to de-associate the monitor from the profile. |
| STR cLWlanPolicyNetflowIPv4OutputMonitorName | 1.3.6.1.4.1.9.9.853.1.2.1.1.22 | SnmpAdminString | read-write | This object specifies the output IPv4 Netflow Monitor name assigned to this WLAN. An empty string specifies no flow monitor is being associated to WLAN policy profile. An empty flow monitor name should be used to de-associate the monitor from the profile. |
| STR cLWlanPolicyNetflowIPv6InputMonitorName | 1.3.6.1.4.1.9.9.853.1.2.1.1.23 | SnmpAdminString | read-write | This object specifies the input IPv6 Netflow Monitor name assigned to this WLAN. An empty string specifies no flow monitor is being associated to WLAN policy profile. An empty flow monitor name should be used to de-associate the monitor from the profile. |
| STR cLWlanPolicyNetflowIPv6OutputMonitorName | 1.3.6.1.4.1.9.9.853.1.2.1.1.24 | SnmpAdminString | read-write | This object specifies the output IPv6 Netflow Monitor name assigned to this WLAN. An empty string specifies no flow monitor is being associated to WLAN policy profile. An empty flow monitor name should be used to de-associate the monitor from the profile. |
| T/F cLWlanPolicyPassiveClient | 1.3.6.1.4.1.9.9.853.1.2.1.1.54 | TruthValue | read-write | This object specifies whether passive-client support is enabled or not on a policy. |
| T/F cLWlanPolicyQBSSLoad | 1.3.6.1.4.1.9.9.853.1.2.1.1.74 | TruthValue | read-write | This object specifies whether QBSSload is enabled on a particular policy profile. A value of 'true' indicates QBSSload is enabled. A value of 'false' indicates QBSSload is disabled. |
| T/F cLWlanPolicyQosCallSnooping | 1.3.6.1.4.1.9.9.853.1.2.1.1.64 | TruthValue | read-write | This object specifies if QoS call snooping is enabled A value of 'true' indicates call snoop is enabled. A value of 'false' indicates call snoop is disabled. |
| INT cLWlanPolicyQosFastlane | 1.3.6.1.4.1.9.9.853.1.2.1.1.38 | INTEGER | read-write | This object specifies the user to enable or disable Auto Qos mode in wireless policy profile. disable - Disable of AutoQos Wireless Enterprise Policy. enterprise - Enable AutoQos Wireless Enterprise Policy. voice - Enabling Auto QoS Voice will enable call-snooping. guest - Enable AutoQos Wireless Guest Policy. fastlane - Enable AutoQos Wireless Fastlane Policy |
| STR cLWlanPolicyQosPerBSSIDInput | 1.3.6.1.4.1.9.9.853.1.2.1.1.27 | SnmpAdminString | read-write | This object specifies the per client ingress service name. |
| STR cLWlanPolicyQosPerBSSIDOutput | 1.3.6.1.4.1.9.9.853.1.2.1.1.28 | SnmpAdminString | read-write | This object specifies the per client egress service name. |
| STR cLWlanPolicyQosPerSSIDInput | 1.3.6.1.4.1.9.9.853.1.2.1.1.25 | SnmpAdminString | read-write | This object specifies the per ssid ingress service name. |
| STR cLWlanPolicyQosPerSSIDOutput | 1.3.6.1.4.1.9.9.853.1.2.1.1.26 | SnmpAdminString | read-write | This object specifies the per ssid egress service name. |
| T/F cLWlanPolicyRadiusHttpProfiling | 1.3.6.1.4.1.9.9.853.1.2.1.1.36 | TruthValue | read-write | This object specifies the Radius http profiling. |
| STR cLWlanPolicyReanchorClassmap | 1.3.6.1.4.1.9.9.853.1.2.1.1.60 | SnmpAdminString | read-write | This object specifies the classmap containing the real-time protocols, identified by AVC, to monitor to decide whether a wireless client has to be reanchored to its foreign WLC. |
| U32 cLWlanPolicySessionTimeout | 1.3.6.1.4.1.9.9.853.1.2.1.1.14 | Unsigned32 | read-write | This object specifies the session timeout to be applied on client using a Policy. |
| T/F cLWlanPolicySgaclEnforcement | 1.3.6.1.4.1.9.9.853.1.2.1.1.67 | TruthValue | read-write | This object specifies the security group access control lists enforcement for a policy profile |
| STR cLWlanPolicySplitMacAcl | 1.3.6.1.4.1.9.9.853.1.2.1.1.49 | SnmpAdminString | read-write | This object specifies the ACL name for the split tunnel. |
| T/F cLWlanPolicyStaticIPMobility | 1.3.6.1.4.1.9.9.853.1.2.1.1.56 | TruthValue | read-write | This object specifies whether static ip mobility support is enabled or not on a policy. |
| T/F cLWlanPolicyStatus | 1.3.6.1.4.1.9.9.853.1.2.1.1.35 | TruthValue | read-write | This object specifies whether the policy profile is shutdown or active. A value of 'true' indicates Wlan policy is active. A value of 'false' indicates Wlan policy is shutdown. |
| STR cLWlanPolicySubscriberPolicyName | 1.3.6.1.4.1.9.9.853.1.2.1.1.18 | SnmpAdminString | read-write | This object specifies a native profiling classification policy configured on the Wireless LAN Controller. |
| U32 cLWlanPolicyUserIdleThreshold | 1.3.6.1.4.1.9.9.853.1.2.1.1.37 | Unsigned32 | read-write | This object specifies a threshold triggered timeout where if a client has not sent a threshold quota of data within the specified user idle timeout, the client is considered to be inactive and is deauthenticated. If the data sent by the client is more than the threshold quota specified within the user idle timeout, the client is considered to be active and the controller refreshes for another timeout period. If the threshold quota is exhausted within the timeout period, the timeout period is refreshed. |
| U32 cLWlanPolicyUserIdleTimeout | 1.3.6.1.4.1.9.9.853.1.2.1.1.15 | Unsigned32 | read-write | This object specifies the timeout value of user for a WLAN. |
| T/F cLWlanPolicyVlanCentralSwitching | 1.3.6.1.4.1.9.9.853.1.2.1.1.50 | TruthValue | read-write | This object specifies whether switching will be local or central when the flag is set. A value of 'true' enable vlan based central switching. A value of 'false' disable vlan based central switching. |
| T/F cLWlanPolicyWgbVlan | 1.3.6.1.4.1.9.9.853.1.2.1.1.59 | TruthValue | read-write | This object specifies to enabling/disabling Client VLAN. A value of 'true' indicates Client Vlan is enabled. A value of 'false' indicates Client Vlan is disabled. |
| STR cLWlanUmbrellaParamMapName | 1.3.6.1.4.1.9.9.853.1.2.1.1.61 | SnmpAdminString | read-write | This object specifies a the umbrella parameter map name configured on the Wireless LAN Controller. |
| STR cLWlanWlanPolicyName | 1.3.6.1.4.1.9.9.853.1.2.1.1.1 | SnmpAdminString | not-accessible | This object specifies one instance of a WLAN policy on the controller. |
RFC description
Cisco LWAPP controller WLAN policy management for lightweight access point protocol.
Start monitoring Cisco Wireless LAN Controllers (LWAPP-based) with a free 30-day trial of IPNetwork Monitor. Import MIBs, browse SNMP OIDs, create custom SNMP monitors, configure alerts, and monitor any SNMP-enabled network device from a single console.