CISCO-DOT11-CONTEXT-SERVICES-MIB

This MIB supports managing the devices offering
        WDS and WNS services.
        
        The hierarchy of the devices offering the wireless
        domain and network services looks like the following.
                                              
                     += = = = +
                     |        |
                     |  WNS   |  (Campus level)
                     |        |
                     += = = = +
                     /        \
                    /          \
                   /            \
                  /              \
                 \/              \/
              += = =+          += = =+
              |     |          |     | 
              | WNS |          | WNS |  
              |     |          |     |
              += = =+          += = =+
              /     \                \
             /       \                \
            /         \                \
           /           \                \
          \/           \/               \/
        +=====+       +=====+          +=====+
        |     |       |     |          |     |
        | WDS |       | WDS |          | WDS | ( Subnet
        |     |       |     |          |     |   level-
        +=====+       +=====+          +=====+   Single
        /  \             \                 \   broadcast
        /    \             \                 \   domain )
        /      \             \                 \
        /        \             \                 \
        /          \             \                 \
        \/          \/            \/                \/
        +~-~-~+      +~-~-~+       +~-~-~+           +~-~-~+
        +     +      +     +       +     +           +     +
        + AP  +      + AP  +       + AP  +           + AP  +
        +     +      +     +       +     +           +     +
        +~-~-~+      +~-~-~+       +~-~-~+           +~-~-~+
        ..            .             .                 .
        .  .            .             .                 .
        .    .            .             .                 .
        .      .            .             .                 .
        .        .            .             .                 .
        \/        \/           \/            \/                \/
        +.....+  +.....+      +-.-.-.+       +~-~-~+          +......+
        +     +  +     +      +      +       +     +          +      +
        + MN  +  + MN  +      + WGB  +       + AP  +          +  MN  +
        +     +  +     +      +      +       +     +          +      +
        +.....+  +.....+      +-.-.-.+       +~-~-~+          +......+
                   .             .  .
                  .             .    .
                 .             .      .
                .             .        .
               \/            \/        \/
            ++++++++      +......+   +......+
            +      +      +      +   +      +
            + EN   +      +  MN  +   +  MN  +
            +      +      +      +   +      +
            ++++++++      +......+   +......+
        
        The diagram above depicts the overall campus network
        hierarchy and the services being offered at various
        levels in the hierarchy.  Here, Infrastructure Node
        Authentication services are offered by the device
        providing WNS at the root (Campus) level.  WNS
        at this level thus span an enterprise campus that
        resides in a geographic location.
        
        WNS are offered at various levels as shown in the
        hierarchy to achieve scalability.  WNS at the
        subsequent levels other than the root level include
        authentication services for MNs and are typically
        confined to a single building.
        
        At the broadcast domain level,  the WDS include
        authentication and registration services for the APs.
        An AP provides Proxy Authentication and  registration
        services for the MNs.  The APs that connect to parent
        APs through the wireless interface ( as shown by the
        dotted lines ) are Repeater-APs.  The WGBs are managed
        in the same manner as the MNs.  However, the Ethernet
        Nodes ( EN ) that are connected to the WGB won't be
        served as part of the WDS.
         
                          GLOSSARY
        
        Access Point ( AP )
        
        Any entity that contains an 802.11 medium access
        control ( MAC ) and physical layer ( PHY ) interface
        and provides access to the distribution services via
        the wireless medium for associated clients.
        
        Wireless Bridge 
        
        An 802.11 entity that provides wireless connectivity
        between two wired LAN segments and is used in point-
        to-point or point-multipoint configurations.
        
        Mobile Node ( MN )
        
        A roaming 802.11 wireless device in a wireless
        network associated with an access point.
        
        
        WorkGroup Bridge ( WGB )
        
        A work-group bridge is a non-STP AP with an 802.11
        primary port and a secondary Ethernet port that
        provides access to a non-STP secondary Ethernet LAN
        segment.  STP refers to the IEEE 802.1D Spanning Tree
        Protocol.  An 'STP AP' executes the 802.1D STP and
        the 802.1D STP is operated on an 'STP link'.  A
        'non-STP AP' does not execute the 802.1D STP.
        
        Repeater-AP
        
        A repeater is a 'wireless AP' that is attached to a
        parent AP on an 802.11 primary port.  The Ethernet
        port is disabled in a Repeater-AP.
        
        Infrastructure Node ( IN )
         
        This term refers to Access Points, Wireless Bridges
        and those devices that implement and offer WNS and
        WDS as shown in the network hierarchy.
        
        Ethernet Node ( EN )
        
        The node that gets the uplink to the Wireless AP
        via the WGB.  This node connects to the WGB through
        its primary Ethernet port.
        
        Context
        
        The mobility context for an MN includes its current
        mobility bindings with the APs, IP/802 address
        bindings, cached configuration parameters, QoS state,
        IP group membership, authentication state, accounting
        statistics, and other dynamically derived protocol
        state information.
        
        Wireless Domain Services
        
        The set of services being offered at a particular
        broadcast domain that may be an IP subnet or a
        particular VLAN.  The services include the following.
        
        1. MN security credential caching to provide seamless,
        secure intra-subnet roaming.
        
        2. Authenticated context transfer for roaming client
        within the subnet.
        
        Since, by definition, the WDS are bound to one subnet
        ( broadcast domain ), if implemented in a device
        spanning multiple subnets, the implementation should
        take care to provide separate set of services for
        each of the subnets.
                       
        Wireless Network Services
        
        The set of services that can be visualized as being
        offered at various levels other than the lowest
        (subnet) level of a hierarchical campus network.
        
        At the root level, Infrastructure Authentication
        services for all the devices in the network that
        provide WNS and WDS are offered.  In case if WNS are
        not distributed at several levels as shown in the
        hierarchy above and is confined to be offered only at
        a single root level, the services offered also
        include authentication services for the MNs.
        
        WNS Entity
        
        The logical entity that resides in an infrastructure
        node and offers WNS to the descendants of that
        infrastructure node in the wireless services
        hierarchy.
        
        WDS Entity
        
        The logical entity that resides in an infrastructure
        node and offers WDS to the descendants of that
        infrastructure node in the wireless services
        hierarchy. 
        
        WS Entity
        
        Refers to one of WNS / WDS Entities.
        
        Parent Node
        
        The node that immediately precedes an infrastructure
        node in the hierarchy.  For mobile nodes, the parent
        APs provide proxy wireless services by talking to 
        their immediate parent nodes that offer WDS.
        
        Root Node
        
        The infrastructure node that is at the highest level
        in the services hierarchy and that offers WNS.
        The WNS entity acts as the IN Authenticator
        for the rest of the infrastructure nodes. In case if
        WNS are not distributed, the root node also acts as
        the Mobile Node Authenticator ( See description
        below ).
        
        Descendant
        
        A node that is in the sub-tree of the campus hierarchy
        tree rooted at the node providing WNS.
        
        Infrastructure Node ( IN ) Authenticator
        
        The logical entity that communicates with the AAA
        server and provides authentication Services for the
        infrastructure nodes.  Details of the IN
        Authenticator have to be configured in the device
        providing WDS manually.  The AP learns about the IN
        Authenticator automatically upon registering with its
        immediate parent.  The WDS also includes MN
        authentication services if the entity providing WDS is
        at the root level in the hierarchy.
        
        Mobile Node ( MN ) Authenticator
        
        The logical entity that communicates with the AAA
        server and provides authentication Services for mobile
        nodes. An infrastructure node learns the whereabouts
        of the MN Authenticator from the root node.
        
        Wireless Network Manager ( WNM )
        
        The network management system that manages the
        entire hierarchy of devices providing WNS and WDS.
        
        Advertisement
        
        The process by which the Access Points identify their
        parent nodes providing WDS.  APs listen to the
        advertisements of the WDS entities and gets registered
        with one of those entities to facilitate secured
        context transfer.
        
        WLCCP
        
        Wireless LAN Context Control Protocol.  Used to
        establish and manage the network topology and
        securely manage the 'operational context' for mobile
        stations in a campus network.                  
        
        AAA
        
        Authentication, Authorization, Accounting
        
        A node will request network access by executing a
        protocol to an authentication server that provides
        protocols and services for providing authentication,
        authorization and session accounting.
        
        Service Set Identifier ( SSID )
        
        802.11 Service Set Identifier.  An SSID identifies a
        set of mobile nodes grouped into a logical 'service
        set' and the APs that provide access for the service
        set.
        
        Wired Equivalent Privacy (WEP)
        
        This protocol uses a pseudo random generator and RC4
        stream cipher and is specified by the 802.11 standard
        as the algorithm for encryption and authentication 
        over the wireless segment of the LAN.
        
        Temporal Key Integrity Protocol ( TKIP )
        
        This protocol provides initialization vector hashing
        and a Message Integrity Check ( MIC ) to ensure data
        integrity.  TKIP includes use of dynamic keys to 
        defeat capture of passive keys.  TKIP uses the RC4 
        cipher as WEP but the difference is that TKIP changes
        temporal keys every 10,000 packets thereby providing a
        dynamic distribution network that enhances the 
        security of the network.
        
        Cisco Key Integrity Protocol ( CKIP )
        
        A proprietary implementation similar to TKIP.  CKIP
        implements key permutation for protecting the CKIP
        key against attacks.  Other features of CKIP include
        expansion of encryption key to 16 bytes of length for
        key protection and MIC to ensure data integrity.
        
        
        Wireless services at subnet level
        =================================
        
                     +========+
                     |        |
                     |  WDS   | ( Subnet level - Broadcast
                     |        |   domain )
                     +========+
                      /      \
                     /        \
                    /          \
                   /            \
                  /              \
                 \/              \/
               +~-~-~+         +~-~-~+
               +     +         +     +
               + AP  +         + AP  +
               +     +         +     +
               +~-~-~+         +~-~-~+
               .   .               .
              .     .               .
             .       .               .
            .         .               .
           .           .               .
          .             .               .
         \/             \/              \/
        +......+       +-.-.-.+        +~-~-~-+
        +      +       +      +        +      +
        +  MN  +       + WGB  +        +  AP  +
        +      +       +      +        +      +
        +......+       +-.-.-.+        +~-~-~-+
        
        
        The above diagram depicts how wireless services are
        being offered in an infrastructure node implementing
        WDS. In such a network, the WDS entity provides
        authentication services to both the infrastructure
        and mobile nodes.
        
        The other entities in the diagram are the Mobile Node
        ( MN ), the Workgroup Bridge (WGB) and another
        AP-in-repeater mode.  The Repeater-APs first perform
        initial authentication with the AAA server ( through
        WDS ) and then perform infrastructure authentication
        and registration with the WDS entity. The WGBs go
        through the same procedure as the MNs for
        authentication and registration with the WDS entity.

Imported Objects

ciscoExperimentCISCO-SMI
CiscoInetAddressMaskCISCO-TC
InterfaceIndex, ifPhysAddressIF-MIB
InetAddressType, InetAddressINET-ADDRESS-MIB
SnmpAdminStringSNMP-FRAMEWORK-MIB
MODULE-COMPLIANCE, OBJECT-GROUP, NOTIFICATION-GROUPSNMPv2-CONF
NOTIFICATION-TYPE, MODULE-IDENTITY, OBJECT-TYPE, Counter32, Gauge32, Unsigned32SNMPv2-SMI
MacAddress, TruthValue, RowStatus, TimeInterval, TimeStamp, TEXTUAL-CONVENTIONSNMPv2-TC
ciscoDot11ContextServicesMIB .1.3.6.1.4.1.9.10.110
ciscoDot11csMIBNotifications .1.3.6.1.4.1.9.10.110.0
cDot11csElectedAsWds .1.3.6.1.4.1.9.10.110.0.1
cDot11csInRegisteredWithWs .1.3.6.1.4.1.9.10.110.0.2
cDot11csInDeRegisteredWithWs .1.3.6.1.4.1.9.10.110.0.3
ciscoDot11csMIBObjects .1.3.6.1.4.1.9.10.110.1
cDot11csConfigGlobal .1.3.6.1.4.1.9.10.110.1.1
cDot11csServiceType .1.3.6.1.4.1.9.10.110.1.1.1
cDot11csWnsEntityName .1.3.6.1.4.1.9.10.110.1.1.10
cDot11csMnaIpAddressType .1.3.6.1.4.1.9.10.110.1.1.11
cDot11csMnaIpAddress .1.3.6.1.4.1.9.10.110.1.1.12
cDot11csIsRootNode .1.3.6.1.4.1.9.10.110.1.1.13
cDot11csNodeOperationMode .1.3.6.1.4.1.9.10.110.1.1.14
cDot11csWnsTable .1.3.6.1.4.1.9.10.110.1.1.15
cDot11csWnsEntry .1.3.6.1.4.1.9.10.110.1.1.15.1
cDot11csWnsIndex .1.3.6.1.4.1.9.10.110.1.1.15.1.1
cDot11csWnsAddrType .1.3.6.1.4.1.9.10.110.1.1.15.1.2
cDot11csWnsSubnetAddr .1.3.6.1.4.1.9.10.110.1.1.15.1.3
cDot11csWnsSubnetMask .1.3.6.1.4.1.9.10.110.1.1.15.1.4
cDot11csWnsRowStatus .1.3.6.1.4.1.9.10.110.1.1.15.1.5
cDot11csWnmConfigTable .1.3.6.1.4.1.9.10.110.1.1.16
cDot11csWnmConfigEntry .1.3.6.1.4.1.9.10.110.1.1.16.1
cDot11csWnmConfigIpAddressType .1.3.6.1.4.1.9.10.110.1.1.16.1.1
cDot11csWnmConfigIpAddress .1.3.6.1.4.1.9.10.110.1.1.16.1.2
cDot11csWnmConfigAuthenState .1.3.6.1.4.1.9.10.110.1.1.16.1.3
cDot11csWnmConfigRowStatus .1.3.6.1.4.1.9.10.110.1.1.16.1.4
cDot11csWdsInstanceTable .1.3.6.1.4.1.9.10.110.1.1.17
cDot11csWdsInstanceEntry .1.3.6.1.4.1.9.10.110.1.1.17.1
cDot11csWdsInstanceIndex .1.3.6.1.4.1.9.10.110.1.1.17.1.1
cDot11csWdsInstanceNodeIndex .1.3.6.1.4.1.9.10.110.1.1.17.1.2
cDot11csWdsInstanceInterfaceIndex .1.3.6.1.4.1.9.10.110.1.1.17.1.3
cDot11csWdsInstancePriority .1.3.6.1.4.1.9.10.110.1.1.17.1.4
cDot11csWdsInstanceState .1.3.6.1.4.1.9.10.110.1.1.17.1.5
cDot11csWdsInstanceRowStatus .1.3.6.1.4.1.9.10.110.1.1.17.1.6
cDot11csStatusTable .1.3.6.1.4.1.9.10.110.1.1.18
cDot11csStatusEntry .1.3.6.1.4.1.9.10.110.1.1.18.1
cDot11csStatusNodeIndex .1.3.6.1.4.1.9.10.110.1.1.18.1.1
cDot11csStatusAdminStatus .1.3.6.1.4.1.9.10.110.1.1.18.1.2
cDot11csStatusOperStatus .1.3.6.1.4.1.9.10.110.1.1.18.1.3
cDot11csStatusChangeTimeStamp .1.3.6.1.4.1.9.10.110.1.1.18.1.4
cDot11csStatusAdvtInterval .1.3.6.1.4.1.9.10.110.1.1.18.1.5
cDot11csStatusInRegistrations .1.3.6.1.4.1.9.10.110.1.1.18.1.6
cDot11csStatusInDeRegistrations .1.3.6.1.4.1.9.10.110.1.1.18.1.7
cDot11csStatusCurrentlyRegisteredIns .1.3.6.1.4.1.9.10.110.1.1.18.1.8
cDot11csStatusSentAdvts .1.3.6.1.4.1.9.10.110.1.1.18.1.9
cDot11csElectedAsWdsEnable .1.3.6.1.4.1.9.10.110.1.1.19
cDot11csParentNodeIpAddressType .1.3.6.1.4.1.9.10.110.1.1.2
cDot11csInRegisteredWithWsEnable .1.3.6.1.4.1.9.10.110.1.1.20
cDot11csInDeRegisteredWithWsEnable .1.3.6.1.4.1.9.10.110.1.1.21
cDot11csParentNodeIpAddress .1.3.6.1.4.1.9.10.110.1.1.3
cDot11csPrimaryRootNodeAddrType .1.3.6.1.4.1.9.10.110.1.1.4
cDot11csPrimaryRootNodeAddr .1.3.6.1.4.1.9.10.110.1.1.5
cDot11csSecondaryRootNodeAddrType .1.3.6.1.4.1.9.10.110.1.1.6
cDot11csSecondaryRootNodeAddr .1.3.6.1.4.1.9.10.110.1.1.7
cDot11csCurrentRootNodeAddrType .1.3.6.1.4.1.9.10.110.1.1.8
cDot11csCurrentRootNodeAddr .1.3.6.1.4.1.9.10.110.1.1.9
cDot11csDescendantIn .1.3.6.1.4.1.9.10.110.1.2
cDot11csDescendantInTable .1.3.6.1.4.1.9.10.110.1.2.1
cDot11csDescendantInEntry .1.3.6.1.4.1.9.10.110.1.2.1.1
cDot11csDescendantInId .1.3.6.1.4.1.9.10.110.1.2.1.1.1
cDot11csDescendantInType .1.3.6.1.4.1.9.10.110.1.2.1.1.2
cDot11csDescendantInIpAddressType .1.3.6.1.4.1.9.10.110.1.2.1.1.3
cDot11csDescendantInIpAddress .1.3.6.1.4.1.9.10.110.1.2.1.1.4
cDot11csDescendantInRegistrationAge .1.3.6.1.4.1.9.10.110.1.2.1.1.5
cDot11csDescendantInCtkRefreshes .1.3.6.1.4.1.9.10.110.1.2.1.1.6
cDot11csDescendantInNskExpiryTimeOut .1.3.6.1.4.1.9.10.110.1.2.1.1.7
cDot11csMn .1.3.6.1.4.1.9.10.110.1.3
cDot11csMnContextTable .1.3.6.1.4.1.9.10.110.1.3.1
cDot11csMnContextEntry .1.3.6.1.4.1.9.10.110.1.3.1.1
cDot11csMnContextId .1.3.6.1.4.1.9.10.110.1.3.1.1.1
cDot11csMnCipherNegotiated .1.3.6.1.4.1.9.10.110.1.3.1.1.10
cDot11csMnContextSsid .1.3.6.1.4.1.9.10.110.1.3.1.1.2
cDot11csMnContextSystemName .1.3.6.1.4.1.9.10.110.1.3.1.1.3
cDot11csMnContextUserId .1.3.6.1.4.1.9.10.110.1.3.1.1.4
cDot11csMnContextIpAddressType .1.3.6.1.4.1.9.10.110.1.3.1.1.5
cDot11csMnContextIpAddress .1.3.6.1.4.1.9.10.110.1.3.1.1.6
cDot11csMnParentInIpAddress .1.3.6.1.4.1.9.10.110.1.3.1.1.7
cDot11csMnRegistrationAge .1.3.6.1.4.1.9.10.110.1.3.1.1.8
cDot11csMnNskExpiryTimeOut .1.3.6.1.4.1.9.10.110.1.3.1.1.9
ciscoDot11csMIBConformance .1.3.6.1.4.1.9.10.110.2
ciscoDot11csMIBCompliances .1.3.6.1.4.1.9.10.110.2.1
ciscoDot11csMIBGroups .1.3.6.1.4.1.9.10.110.2.2