WS-SW-ROLE-FIREWALL-MIB

All MIBs › WS-SW-ROLE-FIREWALL-MIB

Organization: Motorola Pvt Ltd

Last Updated: 2009-02-24

Category: Symbol Technologies Wireless

Description: Manages Motorola wireless switch role-based firewall policy rules, user role assignment, and enforcement statistics.

Start monitoring vendor-neutral, standards-based MIB, any SNMPv3-capable network device (SNMP engine identity/boot/clock status) with a free 30-day trial of IPNetwork Monitor. Import MIBs, browse SNMP OIDs, create custom SNMP monitors, configure alerts, and monitor any SNMP-enabled network device from a single console.

What Is WS-SW-ROLE-FIREWALL-MIB?

WS-SW-ROLE-FIREWALL-MIB is a Motorola (formerly Symbol Technologies) wireless switch MIB covering the role-based firewall feature, which applies access control policies to wireless clients based on an assigned user role. It is intended to expose configured firewall rule sets, the mapping of user roles to policy, and enforcement statistics such as permitted/denied packet counts per rule. Its monitoring purpose is oriented toward security policy/software status: it would let an operator verify that role-based access control is being enforced as configured and identify roles or rules generating unusually high deny counts, which could indicate a misconfiguration or an attempted policy violation, though the module description gives no further detail and no object names were supplied. It depends on the broader Motorola/Symbol wireless switch role-based access control architecture. It is deployed on Motorola/Symbol WS-series wireless switches enforcing per-role network access policy for wireless clients. Network engineers evaluating or troubleshooting this functionality can download the WS-SW-ROLE-FIREWALL-MIB file directly to load it into their MIB browser.

IPNetwork Monitor allows you to monitor SNMP objects defined in WS-SW-ROLE-FIREWALL-MIB. Use the built-in SNMP Monitoring Browser to explore available variables, view their current values and descriptions, and select the objects you want to monitor. You can then create SNMP monitors, configure thresholds, and receive alerts when monitored values change.

Supported Devices

Motorola / Symbol Technologies WS-series wireless switch

Monitoring Examples

No sample objects were provided for this module, so a concrete polling scenario cannot be described without inventing names; based on the short description, this MIB would be expected to expose a role-to-firewall-rule mapping table along with per-rule hit/deny counters. An operator would typically poll such counters to confirm role-based policy enforcement is active and to spot a role generating an abnormal number of denied packets, but no confirmed object identifiers are available here.

Imported Objects

From SNMPv2-CONF

MODULE-COMPLIANCE
OBJECT-GROUP

From SNMPv2-SMI

BITS
MODULE-IDENTITY
OBJECT-TYPE

From SNMPv2-TC

DisplayString
PhysAddress
RowStatus
TruthValue

From WS-SMI

wsSw	OBJECT-IDENTITY

From WS-TYPE-MIB

AbbrevRowStatus
DoActionNow

OIDs

OID symbolic	OID numeric	Type	Access	Description
wsSwRoleFirewall	1.3.6.1.4.1.388.14.2.20
wsSwRoleFirewallMibModule	1.3.6.1.4.1.388.14.2.20.1			Description.
wsSwRoleFirewallMib	1.3.6.1.4.1.388.14.2.20.1.1
wsSwRoleTable	1.3.6.1.4.1.388.14.2.20.1.1.1		not-accessible	Each MU will be assigned a role defined in this table
wsSwRoleEntry	1.3.6.1.4.1.388.14.2.20.1.1.1.1		not-accessible	An entry in the role table
INT wsSwRoleSequenceNumber	1.3.6.1.4.1.388.14.2.20.1.1.1.1.1	INTEGER	read-only	If there are multiple role match, then the lowest sequence number match will be considered. This should be typically specified in multiples of 10 like 10, 20, 30 etc., so that new role can be inserted in between. For e.g. to insert another role between 10 and 20, one has to specify a match-seq-no value of 15.
STR wsSwRoleName	1.3.6.1.4.1.388.14.2.20.1.1.1.1.2	DisplayString	read-only	Name of the Role
ROL wsSwRoleAuthType	1.3.6.1.4.1.388.14.2.20.1.1.1.1.3	RoleAuthType	read-create	Specifies MU authentication type
VAL wsSwRoleAuthMatchExpression	1.3.6.1.4.1.388.14.2.20.1.1.1.1.4	ValueCmpExpression	read-create	Specifies MU authentication to match
ROL wsSwRoleEncType	1.3.6.1.4.1.388.14.2.20.1.1.1.1.5	RoleEncryptType	read-create	Specifies MU encryption type
VAL wsSwRoleEncMatchExpression	1.3.6.1.4.1.388.14.2.20.1.1.1.1.6	ValueCmpExpression	read-create	Specifies MU encryption type to match
STR wsSwRoleApLocation	1.3.6.1.4.1.388.14.2.20.1.1.1.1.7	DisplayString	read-create	Radio name configuration
STR wsSwRoleApLocationExpression	1.3.6.1.4.1.388.14.2.20.1.1.1.1.8	StringMatchExpression	read-create	Matching expression which matches the radio name wsSwRoleRadioDescr with the radio name configured in wireless
STR wsSwRoleLocation	1.3.6.1.4.1.388.14.2.20.1.1.1.1.9	DisplayString	read-create	Specifies MU zone
STR wsSwRoleLocationMatchExpression	1.3.6.1.4.1.388.14.2.20.1.1.1.1.10	StringMatchExpression	read-create	Zone-name this should match any one the zones present in SOLE
STR wsSwRoleEssid	1.3.6.1.4.1.388.14.2.20.1.1.1.1.11	DisplayString	read-create	Specifies MU essid
STR wsSwRoleEssidMatchExpression	1.3.6.1.4.1.388.14.2.20.1.1.1.1.12	StringMatchExpression	read-create	this should match the essid specified in wlan ssid command in wireless context
PHY wsSwRoleMuMac	1.3.6.1.4.1.388.14.2.20.1.1.1.1.13	PhysAddress	read-create	Specifies MU MAC address
PHY wsSwRoleMuMacMask	1.3.6.1.4.1.388.14.2.20.1.1.1.1.14	PhysAddress	read-create	Specifies MU MAC mask
T/F wsSwRoleMuMacAny	1.3.6.1.4.1.388.14.2.20.1.1.1.1.15	TruthValue	read-create	The user does not want to set mac or mask
STR wsSwRoleGroupName	1.3.6.1.4.1.388.14.2.20.1.1.1.1.16	DisplayString	read-create	Radio name configuration
STR wsSwRoleRadioGroupMatchExpression	1.3.6.1.4.1.388.14.2.20.1.1.1.1.17	StringMatchExpression	read-create	Matching expression which matches the radio name wsSwRoleRadioDescr with the radio name configured in wireless
ABB wsSwRoleRowStatus	1.3.6.1.4.1.388.14.2.20.1.1.1.1.18	AbbrevRowStatus	read-create	Create or delete an entry from role table
wsSwRoleFirewallPolicyTable	1.3.6.1.4.1.388.14.2.20.1.1.2		not-accessible	This table will assign firewall policy in inbound and outbound direction for a role
wsSwRoleFirewallPolicyEntry	1.3.6.1.4.1.388.14.2.20.1.1.2.1		not-accessible	An entry in the RoleFirewallPolicy Table.
INT wsSwRoleFirewallPolicyRolePriority	1.3.6.1.4.1.388.14.2.20.1.1.2.1.1	INTEGER	read-only	Role Priority needed for returning roles in a sorted order
STR wsSwRoleFirewallPolicyRoleName	1.3.6.1.4.1.388.14.2.20.1.1.2.1.2	DisplayString	read-only	Name of Role
INT wsSwRoleFirewallPolicyDirection	1.3.6.1.4.1.388.14.2.20.1.1.2.1.3	INTEGER	read-only	This Firewall policy can be applied for which direction ( inbound or outbound)
INT wsSwRoleFirewallPolicyAclPrecedence	1.3.6.1.4.1.388.14.2.20.1.1.2.1.4	INTEGER	read-only	ACL precedence - Each Role can have 2 Acls attached in either direction (IN and OUT). The precedences of Acls attached in same direction have to be different.
STR wsSwRoleFirewallPolicyAclName	1.3.6.1.4.1.388.14.2.20.1.1.2.1.5	DisplayString	read-only	This either an IP Acl or a Mac ACL configured as apart of global Acl configuration which we are attaching to the role
ABB wsSwRoleFirewallPolicyRowStatus	1.3.6.1.4.1.388.14.2.20.1.1.2.1.6	AbbrevRowStatus	read-write	Row Status - supports create and delete
wsSwRoleMuTable	1.3.6.1.4.1.388.14.2.20.1.1.3		not-accessible	Description.
wsSwRoleMuEntry	1.3.6.1.4.1.388.14.2.20.1.1.3.1		not-accessible	Table Of MU mac addresses belonging to a role
INT wsSwRolePriority	1.3.6.1.4.1.388.14.2.20.1.1.3.1.1	INTEGER	read-only	Role Priority
STR wsSwRoleMuTableRoleName	1.3.6.1.4.1.388.14.2.20.1.1.3.1.2	DisplayString	read-only	Role Name
PHY wsSwRoleMuTableMUMac	1.3.6.1.4.1.388.14.2.20.1.1.3.1.3	PhysAddress	read-only	Mac address of MU belonging to the role
T/F wsSwRoleAssignmentImmediateEnable	1.3.6.1.4.1.388.14.2.20.1.1.4	TruthValue	read-write	Enable/Disable role assignment action immediate. When a new role is created send De-Auth to all MU's if this configuration is enabled. No de-auth will be sent if this flag is off, so Mu's will get applied with this new role when it connects next time.
STR wsSwRoleConfigLastError	1.3.6.1.4.1.388.14.2.20.1.1.5	DisplayString	read-only	For displaying last error encountered during configuration
wsSwRoleFirewallConformance	1.3.6.1.4.1.388.14.2.20.1.1.100
wsSwRoleFirewallCompliances	1.3.6.1.4.1.388.14.2.20.1.1.100.1
wsCcRfCompliance	1.3.6.1.4.1.388.14.2.20.1.1.100.1.1
wsSwRoleFirewallGroups	1.3.6.1.4.1.388.14.2.20.1.1.100.2
wsSwRoleFirewallGroup	1.3.6.1.4.1.388.14.2.20.1.1.100.2.1

RFC description

Configures role-based firewall policies on wireless switches with authentication and encryption type management.

Start monitoring Motorola / Symbol Technologies WS-series wireless switch (role-based ACL permit/deny counter status) with a free 30-day trial of IPNetwork Monitor. Import MIBs, browse SNMP OIDs, create custom SNMP monitors, configure alerts, and monitor any SNMP-enabled network device from a single console.

Download WS-SW-ROLE-FIREWALL-MIB

What Is WS-SW-ROLE-FIREWALL-MIB?

Supported Devices

Monitoring Examples

This MIB depends on

Related MIBs

RFC description