CISCO-LWAPP-AAA-MIB

This MIB is intended to be implemented on all those
devices operating as Central Controllers (CC), that
terminate the Light Weight Access Point Protocol
tunnel from Cisco Light-weight LWAPP Access Points.
        
Information provided by this MIB is used to manage
AAA information on the controller.
        
The relationship between CC and the LWAPP APs
can be depicted as follows:
        
      +......+     +......+     +......+
      +      +     +      +     +      +
      +  CC  +     +  CC  +     +  CC  +
      +      +     +      +     +      +
      +......+     +......+     +......+
        ..            .             .
        ..            .             .
       .  .            .             .
      .    .            .             .
     .      .            .             .
    .        .            .             .
+......+ +......+     +......+      +......+
+      + +      +     +      +      +      +
+  AP  + +  AP  +     +  AP  +      +  AP  +
+      + +      +     +      +      +      +
+......+ +......+     +......+      +......+
           .              .             .
         .  .              .             .
        .    .              .             .
       .      .              .             .
      .        .              .             .
   +......+ +......+     +......+      +......+
   +      + +      +     +      +      +      +
   +  MN  + +  MN  +     +  MN  +      +  MN  +
   +      + +      +     +      +      +      +
   +......+ +......+     +......+      +......+
        
        
The LWAPP tunnel exists between the controller and
the APs.  The MNs communicate with the APs through
the protocol defined by the 802.11 standard.
        
LWAPP APs, upon bootup, discover and join one of the
controllers and the controller pushes the configuration,
that includes the WLAN parameters, to the LWAPP APs.
The APs then encapsulate all the 802.11 frames from
wireless clients inside LWAPP frames and forward
the LWAPP frames to the controller.
        
                   GLOSSARY
        
Access Point ( AP )
        
An entity that contains an 802.11 medium access
control ( MAC ) and physical layer ( PHY ) interface
and provides access to the distribution services via
the wireless medium for associated clients.  
        
LWAPP APs encapsulate all the 802.11 frames in
LWAPP frames and sends them to the controller to which
it is logically connected.
        
Light Weight Access Point Protocol ( LWAPP )
        
This is a generic protocol that defines the 
communication between the Access Points and the
Central Controller. 
        
Mobile Node ( MN )
        
A roaming 802.11 wireless device in a wireless
network associated with an access point. Mobile Node 
and client are used interchangeably. 
        
Terminal Access Controller Access-Control System 
( TACACS ) 
        
A remote authentication protocol that is used to 
communicate with an authentication server. 
TACACS allows a remote access server to communicate 
with an authentication server in order to determine 
if the user has access to the network.
        
Remote Authentication Dial In User Service (RADIUS) 
        
It is an AAA (authentication, authorization and accounting) 
protocol for applications such as network access or 
IP mobility. It is intended to work in both local and 
roaming situations.
        
Wireless LAN ( WLAN ) 
        
It is a wireless local area network, which is the 
linking of two or more computers without using wires. 
It uses radio communication to accomplish the same 
functionality of a wired LAN.
        
PAP - Password Authentication Protocol
CHAP - Challenge Handshake Authentication Protocol
MD5-CHAP - Message Digest 5 Challenge Handshake Authentication
           Protocol
        
LSC - Local Significant Certificate
        
LSC can be used if we want our own public key 
infrastructure (PKI) to provide better security, 
to have control of our certificate authority (CA), 
and to define policies, restrictions, and usages 
on the generated certificates.
        
REFERENCE
        
[1] Wireless LAN Medium Access Control ( MAC ) and
Physical Layer ( PHY ) Specifications
        
[2] Draft-obara-capwap-lwapp-00.txt, IETF Light 
Weight Access Point Protocol 
    

Imported Objects

CLSecKeyFormatCISCO-LWAPP-TC-MIB
cLWlanIndexCISCO-LWAPP-WLAN-MIB
ciscoMgmtCISCO-SMI
CiscoURLStringCISCO-TC
InetPortNumber, InetAddress, InetAddressTypeINET-ADDRESS-MIB
SnmpAdminStringSNMP-FRAMEWORK-MIB
MODULE-COMPLIANCE, NOTIFICATION-GROUP, OBJECT-GROUPSNMPv2-CONF
OBJECT-TYPE, Counter32, Gauge32, Integer32, Unsigned32, NOTIFICATION-TYPE, MODULE-IDENTITYSNMPv2-SMI
StorageType, RowStatus, TimeInterval, TruthValue, MacAddressSNMPv2-TC

Objects

ciscoLwappAAAMIB .1.3.6.1.4.1.9.9.598
ciscoLwappAAAMIBNotifs .1.3.6.1.4.1.9.9.598.0
ciscoLwappAAAMIBObjects .1.3.6.1.4.1.9.9.598.1
claConfigObjects .1.3.6.1.4.1.9.9.598.1.1
claPriorityTable .1.3.6.1.4.1.9.9.598.1.1.1
claPriorityEntry .1.3.6.1.4.1.9.9.598.1.1.1.1
claPriorityAuth .1.3.6.1.4.1.9.9.598.1.1.1.1.1
claPriorityOrder .1.3.6.1.4.1.9.9.598.1.1.1.1.2
claWebRadiusAuthentication .1.3.6.1.4.1.9.9.598.1.1.10
claRadiusFallbackMode .1.3.6.1.4.1.9.9.598.1.1.11
claRadiusFallbackUsername
.1.3.6.1.4.1.9.9.598.1.1.12
claRadiusFallbackInterval .1.3.6.1.4.1.9.9.598.1.1.13
claRadiusAuthMacDelimiter .1.3.6.1.4.1.9.9.598.1.1.14
claRadiusAcctMacDelimiter .1.3.6.1.4.1.9.9.598.1.1.15
claAcceptMICertificate
.1.3.6.1.4.1.9.9.598.1.1.16
claAcceptLSCertificate
.1.3.6.1.4.1.9.9.598.1.1.17
claAllowAuthorizeLscApAgainstAAA
.1.3.6.1.4.1.9.9.598.1.1.18
claSscHashValidationEnabled
.1.3.6.1.4.1.9.9.598.1.1.19
claTacacsServerTable .1.3.6.1.4.1.9.9.598.1.1.2
claTacacsServerEntry .1.3.6.1.4.1.9.9.598.1.1.2.1
claTacacsServerType .1.3.6.1.4.1.9.9.598.1.1.2.1.1
claTacacsServerStorageType
.1.3.6.1.4.1.9.9.598.1.1.2.1.10
claTacacsServerRowStatus
.1.3.6.1.4.1.9.9.598.1.1.2.1.11
claTacacsServerPriority .1.3.6.1.4.1.9.9.598.1.1.2.1.2
claTacacsServerAddressType
.1.3.6.1.4.1.9.9.598.1.1.2.1.3
claTacacsServerAddress
.1.3.6.1.4.1.9.9.598.1.1.2.1.4
claTacacsServerPortNum
.1.3.6.1.4.1.9.9.598.1.1.2.1.5
claTacacsServerEnabled
.1.3.6.1.4.1.9.9.598.1.1.2.1.6
claTacacsServerSecretType
.1.3.6.1.4.1.9.9.598.1.1.2.1.7
claTacacsServerSecret
.1.3.6.1.4.1.9.9.598.1.1.2.1.8
claTacacsServerTimeout .1.3.6.1.4.1.9.9.598.1.1.2.1.9
claSscCertificateSubject .1.3.6.1.4.1.9.9.598.1.1.20
claSscCertificateValidity .1.3.6.1.4.1.9.9.598.1.1.21
claSscCertificateHashKey .1.3.6.1.4.1.9.9.598.1.1.22
claRadiusAuthServerTable .1.3.6.1.4.1.9.9.598.1.1.23
claRadiusAuthServerEntry .1.3.6.1.4.1.9.9.598.1.1.23.1
claRadiusAuthServerIndex .1.3.6.1.4.1.9.9.598.1.1.23.1.1
claRadiusAuthServerIPSecAuthMethod .1.3.6.1.4.1.9.9.598.1.1.23.1.2
claRadiusAuthServerKey .1.3.6.1.4.1.9.9.598.1.1.23.1.3
claRadiusAuthServerKeyFormat .1.3.6.1.4.1.9.9.598.1.1.23.1.4
claRadiusAuthServerIsActive .1.3.6.1.4.1.9.9.598.1.1.23.1.5
claRadiusAuthServerTunnelProxy
.1.3.6.1.4.1.9.9.598.1.1.23.1.6
claRadiusAuthServerPacState
.1.3.6.1.4.1.9.9.598.1.1.23.1.7
claRadiusAccServerTable .1.3.6.1.4.1.9.9.598.1.1.24
claRadiusAccServerEntry .1.3.6.1.4.1.9.9.598.1.1.24.1
claRadiusAccServerIndex .1.3.6.1.4.1.9.9.598.1.1.24.1.1
claRadiusAccServerIPSecAuthMethod .1.3.6.1.4.1.9.9.598.1.1.24.1.2
claRadiusAccServerKey .1.3.6.1.4.1.9.9.598.1.1.24.1.3
claRadiusAccServerKeyFormat .1.3.6.1.4.1.9.9.598.1.1.24.1.4
claRadiusAccServerIsActive .1.3.6.1.4.1.9.9.598.1.1.24.1.5
claRadiusAccServerTunnelProxy
.1.3.6.1.4.1.9.9.598.1.1.24.1.6
claRadiusAccServerPacState
.1.3.6.1.4.1.9.9.598.1.1.24.1.7
claRadiusAuthServerRealmTable .1.3.6.1.4.1.9.9.598.1.1.25
claRadiusAuthServerRealmEntry .1.3.6.1.4.1.9.9.598.1.1.25.1
claRadiusAuthServerRealm
.1.3.6.1.4.1.9.9.598.1.1.25.1.1
claRadiusAuthRealmRowStatus
.1.3.6.1.4.1.9.9.598.1.1.25.1.2
claRadiusAcctServerRealmTable .1.3.6.1.4.1.9.9.598.1.1.26
claRadiusAcctServerRealmEntry .1.3.6.1.4.1.9.9.598.1.1.26.1
claRadiusAcctServerRealm
.1.3.6.1.4.1.9.9.598.1.1.26.1.1
claRadiusAcctRealmRowStatus
.1.3.6.1.4.1.9.9.598.1.1.26.1.2
claTacacsFallbackTestInterval .1.3.6.1.4.1.9.9.598.1.1.27
claWlanTable .1.3.6.1.4.1.9.9.598.1.1.3
claWlanEntry .1.3.6.1.4.1.9.9.598.1.1.3.1
claWlanAcctServerEnabled
.1.3.6.1.4.1.9.9.598.1.1.3.1.1
claWlanAuthServerEnabled
.1.3.6.1.4.1.9.9.598.1.1.3.1.2
claWlanOverwriteInterface
.1.3.6.1.4.1.9.9.598.1.1.3.1.3
claWlanInterimUpdate
.1.3.6.1.4.1.9.9.598.1.1.3.1.4
claWlanInterimUpdateInterval .1.3.6.1.4.1.9.9.598.1.1.3.1.5
claRadiusServerGlobalActivatedEnabled
.1.3.6.1.4.1.9.9.598.1.1.4
claRadiusServerGlobalDeactivatedEnabled
.1.3.6.1.4.1.9.9.598.1.1.5
claRadiusServerWlanActivatedEnabled
.1.3.6.1.4.1.9.9.598.1.1.6
claRadiusServerWlanDeactivatedEnabled
.1.3.6.1.4.1.9.9.598.1.1.7
claRadiusReqTimedOutEnabled
.1.3.6.1.4.1.9.9.598.1.1.8
claSaveUserData
.1.3.6.1.4.1.9.9.598.1.1.9
claStatusObjects .1.3.6.1.4.1.9.9.598.1.2
claRadiusServerTable .1.3.6.1.4.1.9.9.598.1.2.1
claRadiusServerEntry .1.3.6.1.4.1.9.9.598.1.2.1.1
claRadiusReqId .1.3.6.1.4.1.9.9.598.1.2.1.1.1
claRadiusAddressType
.1.3.6.1.4.1.9.9.598.1.2.1.1.2
claRadiusAddress
.1.3.6.1.4.1.9.9.598.1.2.1.1.3
claRadiusPortNum
.1.3.6.1.4.1.9.9.598.1.2.1.1.4
claRadiusWlanIdx .1.3.6.1.4.1.9.9.598.1.2.1.1.5
claRadiusClientMacAddress
.1.3.6.1.4.1.9.9.598.1.2.1.1.6
claRadiusUserName
.1.3.6.1.4.1.9.9.598.1.2.1.1.7
claDBCurrentUsedEntries
.1.3.6.1.4.1.9.9.598.1.2.2
claRadiusAuthClientAccessRequestsTotal
.1.3.6.1.4.1.9.9.598.1.2.3
claRadiusAuthClientAccessResponseTotal
.1.3.6.1.4.1.9.9.598.1.2.4
claRadiusAuthClientAccessAcceptsTotal
.1.3.6.1.4.1.9.9.598.1.2.5
claRadiusServerAvpTable .1.3.6.1.4.1.9.9.598.1.2.6
claRadiusServerAvpEntry .1.3.6.1.4.1.9.9.598.1.2.6.1
claWlanId .1.3.6.1.4.1.9.9.598.1.2.6.1.1
claRadiusType .1.3.6.1.4.1.9.9.598.1.2.6.1.2
claAvpEntryId .1.3.6.1.4.1.9.9.598.1.2.6.1.3
claAvpVendorId .1.3.6.1.4.1.9.9.598.1.2.6.1.4
claAvpAttribute .1.3.6.1.4.1.9.9.598.1.2.6.1.5
claAvpType .1.3.6.1.4.1.9.9.598.1.2.6.1.6
claAvpValue
.1.3.6.1.4.1.9.9.598.1.2.6.1.7
claGlobalObjects .1.3.6.1.4.1.9.9.598.1.3
claTacacsDnsServerEnabled
.1.3.6.1.4.1.9.9.598.1.3.1
claRadiusDnsServerAddressType
.1.3.6.1.4.1.9.9.598.1.3.10
claRadiusDnsServerAddress
.1.3.6.1.4.1.9.9.598.1.3.11
claRadiusDnsServerPort
.1.3.6.1.4.1.9.9.598.1.3.12
claRadiusDnsServerSecretType
.1.3.6.1.4.1.9.9.598.1.3.13
claRadiusDnsServerSecret
.1.3.6.1.4.1.9.9.598.1.3.14
claRadiusDnsServerURL
.1.3.6.1.4.1.9.9.598.1.3.15
claRadiusDnsServerTimeout .1.3.6.1.4.1.9.9.598.1.3.16
claAAARadiusAuthCallStationIdType .1.3.6.1.4.1.9.9.598.1.3.17
claRadiusDnsAuthnetworkState
.1.3.6.1.4.1.9.9.598.1.3.18
claRadiusDnsAuthmgmtState
.1.3.6.1.4.1.9.9.598.1.3.19
claTacacsDnsServerAddressType
.1.3.6.1.4.1.9.9.598.1.3.2
claRadiusDnsAcctnetworkState
.1.3.6.1.4.1.9.9.598.1.3.20
claRadiusDnsAuthRetransmitTimeout .1.3.6.1.4.1.9.9.598.1.3.21
claRadiusDnsAcctRetransmitTimeout .1.3.6.1.4.1.9.9.598.1.3.22
claRadiusDnsAuthRfc3576State
.1.3.6.1.4.1.9.9.598.1.3.23
claRadiusFramedMtu .1.3.6.1.4.1.9.9.598.1.3.24
claRadiusDnsAuthMgmtRetransmitTimeout .1.3.6.1.4.1.9.9.598.1.3.25
claMgmtUserReauthInterval .1.3.6.1.4.1.9.9.598.1.3.26
claTacacsDnsServerAddress
.1.3.6.1.4.1.9.9.598.1.3.3
claTacacsDnsServerPort
.1.3.6.1.4.1.9.9.598.1.3.4
claTacacsDnsServerSecretType
.1.3.6.1.4.1.9.9.598.1.3.5
claTacacsDnsServerSecret
.1.3.6.1.4.1.9.9.598.1.3.6
claTacacsDnsServerURL
.1.3.6.1.4.1.9.9.598.1.3.7
claTacacsDnsServerTimeout .1.3.6.1.4.1.9.9.598.1.3.8
claRadiusDnsServerEnabled
.1.3.6.1.4.1.9.9.598.1.3.9
ciscoLwappAAAMIBConform .1.3.6.1.4.1.9.9.598.2
ciscoLwappAAAMIBCompliances .1.3.6.1.4.1.9.9.598.2.1
ciscoLwappAAAMIBGroups .1.3.6.1.4.1.9.9.598.2.2

Notifications/Traps

NameOIDDescription
ciscoLwappAAARadiusServerGlobalActivated



.1.3.6.1.4.1.9.9.598.0.1
ication is sent by the agent when the
controller detects that the RADIUS server is 
activated in the global list. The RADIUS server
is identified by the address (claRadiusAddress)
and port number (claRadiusPortNum).
ciscoLwappAAARadiusServerGlobalDeactivated



.1.3.6.1.4.1.9.9.598.0.2
ication is sent by the agent when the
controller detects that the RADIUS server is 
deactivated in the global list. The RADIUS server
is identified by the address (claRadiusAddress)
and port number (claRadiusPortNum).
ciscoLwappAAARadiusServerWlanActivated




.1.3.6.1.4.1.9.9.598.0.3
ication is sent by the agent when the
controller detects that the RADIUS server is 
activated on the WLAN. The RADIUS server
is identified by the address (claRadiusAddress)
and port number (claRadiusPortNum).
ciscoLwappAAARadiusServerWlanDeactivated




.1.3.6.1.4.1.9.9.598.0.4
ication is sent by the agent when the
controller detects that the RADIUS server is 
deactivated on the WLAN. The RADIUS server
is identified by the address (claRadiusAddress)
and port number (claRadiusPortNum).
ciscoLwappAAARadiusReqTimedOut





.1.3.6.1.4.1.9.9.598.0.5
ication is sent by the agent when the
controller detects that the RADIUS server failed 
to respond to request from a client/user. The RADIUS 
server is identified by the address (claRadiusAddress)
and port number (claRadiusPortNum).
ciscoLwappAAARadiusAuthServerAvailable



.1.3.6.1.4.1.9.9.598.0.6
ication is sent by the agent when the
controller detects that the RADIUS authenticating
server is available/responsive when it was
previously unavailable/unresponsive. The state
change triggers this notification. The RADIUS
server is identified by the address
(claRadiusAddress) and port number
(claRadiusPortNum).
ciscoLwappAAARadiusAuthServerUnavailable



.1.3.6.1.4.1.9.9.598.0.7
ication is sent by the agent when the
controller detects that the RADIUS authenticating
server is unavailable/unresponsive when it was
previously available/responsive. The state change
triggers this notification. The RADIUS server
is identified by the address (claRadiusAddress)
and port number (claRadiusPortNum).
ciscoLwappAAARadiusAcctServerAvailable



.1.3.6.1.4.1.9.9.598.0.8
ication is sent by the agent when the
controller detects that the RADIUS accounting server
is available/responsive when it was previously
unavailable/unresponsive. The state change
triggers this notification. The RADIUS server
is identified by the address (claRadiusAddress)
and port number (claRadiusPortNum).
ciscoLwappAAARadiusAcctServerUnavailable



.1.3.6.1.4.1.9.9.598.0.9
ication is sent by the agent when the
controller detects that the RADIUS accounting server
is unavailable/unresponsive when it was previously
available/responsive. The state change triggers
this notification. The RADIUS server is identified
by the address (claRadiusAddress) and port number
(claRadiusPortNum).