CISCO-LWAPP-ROGUE-MIB Table View

This table provides the configuration needed
by the controller for classifying rogue APs. 
The user defines the custom rules which are 
used to classify the APs under different 
classification types. When a new rule is created 
priority will be assigned automatically by controller, 
highest priority given to rule which are created first. 
Also if user is changing the priority of a rule manually, 
the new priority should not be used by any other existing rule.

cLRuleConfigEntry row .1.3.6.1.4.1.9.9.610.1.1.3.1.1

Each entry represents a conceptual row
(as identified by a rule name)in cLRuleConfigTable.

Indexes

cLRuleName

Column	Syntax	OID
cLRuleName This object represents the rule name to identify this entry.	OctetString Constraints: range: 1-32	.1.3.6.1.4.1.9.9.610.1.1.3.1.1.1
cLRuleRogueType This object specifies the classification applied to the rogue AP that matches this rule. friendly - known and acknowledged rogue AP malicious - unknown AP that matches user defined malicious rules unclass…	Enumerationr/w Enumerated Values: 1 friendly 2 malicious 3 unclassified 4 custom	.1.3.6.1.4.1.9.9.610.1.1.3.1.1.2
cLRuleConditionsMatch This object specifies how the conditions defined by corresponding instances of cLConditionType, are matched under each rule. all - all the conditions defined per rule should be matched any - any conditions defined per …	Enumerationr/w Enumerated Values: 1 all 2 any	.1.3.6.1.4.1.9.9.610.1.1.3.1.1.3
cLRulePriority This object specifies the order in which the rules will be applied. The rules will be applied from lowest to highest and gaps are allowed. Each rule must have and unique value for this object.	SNMPv2-SMIUnsigned32r/w Type Constraints: range: 0..4294967295	.1.3.6.1.4.1.9.9.610.1.1.3.1.1.4
cLRuleEnable This object specifies whether this rule is enabled or not. A value of 'true' specifies this rule is enabled. A value of 'false' specifies this rule is disabled.	SNMPv2-TCTruthValuer/w Type Values: 1 true 2 false Description: Represents a boolean value.	.1.3.6.1.4.1.9.9.610.1.1.3.1.1.5
cLRuleStorageType This object specifies the storage type for this conceptual row.	SNMPv2-TCStorageTyper/w Type Values: 1 other 2 volatile 3 nonVolatile 4 permanent 5 readOnly Description: Describes the memory realization of a conceptual row. A row which is volatile(2) is lost upon reboot. A row which is either nonVolatile(3), permanent(4) or readOnly(5), is backed up by stable storage. A row which is …	.1.3.6.1.4.1.9.9.610.1.1.3.1.1.6
cLRuleRowStatus This object specifies the status column for a conceptual row in this table. All writable objects in this row may be modified when the row is active.	SNMPv2-TCRowStatusr/w Type Values: 1 active 2 notInService 3 notReady 4 createAndGo 5 createAndWait 6 destroy Description: The RowStatus textual convention is used to manage the creation and deletion of conceptual rows, and is used as the value of the SYNTAX clause for the status column of a conceptual row (as described in Section 7.7.1 of …	.1.3.6.1.4.1.9.9.610.1.1.3.1.1.7
cLRuleSeverityScore This object specifies the custom classification severity score of the rules. This object is applicable when cLRuleRogueType is configured as 'custom'.	SNMPv2-SMIUnsigned32r/w Type Constraints: range: 0..4294967295	.1.3.6.1.4.1.9.9.610.1.1.3.1.1.8
cLRuleClassificationName This object represents the rule classification name. This object is applicable when cLRuleRogueType is configured as 'custom'.	SNMP-FRAMEWORK-MIBSnmpAdminStringr/w Type Constraints: range: 0..255	.1.3.6.1.4.1.9.9.610.1.1.3.1.1.9
cLRuleNotifyType This object specifies how the notification is defined for the rogue rule. global - Configure notification to trap receiver only. local - Configure notification to monitor page(local) only. none - Configure no notificati…	Enumerationr/w Enumerated Values: 1 global 2 local 3 none 4 all	.1.3.6.1.4.1.9.9.610.1.1.3.1.1.10
cLRuleStateType This object specifies the rule to configure state of the rogue. alert - Configure alert state on rogue ap. contain - Configure contain state on rogue ap. internal - Configure internal state on rogue ap. external - Conf…	Enumerationr/w Enumerated Values: 1 alert 2 contain 3 internal 4 external 5 delete	.1.3.6.1.4.1.9.9.610.1.1.3.1.1.11

This table represents the configuration of
conditions that can be applied to a rule.

cLConditionConfigEntry row .1.3.6.1.4.1.9.9.610.1.1.3.2.1

Each entry represents a conceptual row in
cLConditionConfigTable, as identified by a
specific condition name to be applied on a
specific rule name.

Indexes

cLRuleName cLConditionName

Column	Syntax	OID
cLConditionName This object represents the condition name.	OctetString Constraints: range: 1-64	.1.3.6.1.4.1.9.9.610.1.1.3.2.1.1
cLConditionType This object specifies the condition type for this condition associated with a rule. managedSsid - matches managed SSID rssi - required minimum RSSI duration - limited to this time duration clientCou…	Enumerationr/w Enumerated Values: 1 managedSsid 2 rssi 3 duration 4 clientCount 5 noEncryption 6 userConfigSsid 7 wildCardSsid	.1.3.6.1.4.1.9.9.610.1.1.3.2.1.2
cLConditionValue This object specifies the value associated with the condition type as specified by the corresponding cLConditionType instance. If cLConditionType is 'userConfigSsid', then corresponding 'cLConditionValue' can only ta…	SNMPv2-SMIInteger32r/w Type Constraints: range: -2147483648..2147483647	.1.3.6.1.4.1.9.9.610.1.1.3.2.1.3
cLConditionEnable This object specifies whether matching against this condition is enabled or not. A value of 'true' indicates matching against this condition is enabled. A value of 'false' indicates matching against this condition is…	SNMPv2-TCTruthValuer/w Type Values: 1 true 2 false Description: Represents a boolean value.	.1.3.6.1.4.1.9.9.610.1.1.3.2.1.4
cLConditionStorageType This object specifies the storage type for this conceptual row.	SNMPv2-TCStorageTyper/w Type Values: 1 other 2 volatile 3 nonVolatile 4 permanent 5 readOnly Description: Describes the memory realization of a conceptual row. A row which is volatile(2) is lost upon reboot. A row which is either nonVolatile(3), permanent(4) or readOnly(5), is backed up by stable storage. A row which is …	.1.3.6.1.4.1.9.9.610.1.1.3.2.1.5
cLConditionRowStatus This object specifies the status column for a conceptual row in this table. All writable objects except cLConditionType in this row may be modified when the row is active.	SNMPv2-TCRowStatusr/w Type Values: 1 active 2 notInService 3 notReady 4 createAndGo 5 createAndWait 6 destroy Description: The RowStatus textual convention is used to manage the creation and deletion of conceptual rows, and is used as the value of the SYNTAX clause for the status column of a conceptual row (as described in Section 7.7.1 of …	.1.3.6.1.4.1.9.9.610.1.1.3.2.1.6
cLConditionRssi This object specifies the minimum value of RSSI that a rogue AP must have in order to match cLConditionType of 'rssi'.	SNMPv2-SMIInteger32r/w Type Constraints: range: -2147483648..2147483647	.1.3.6.1.4.1.9.9.610.1.1.3.2.1.7
cLConditionClientCount This object specifies the minimum value of client count that a rogue AP must have in order to match cLConditionType of 'clientCount'.	SNMPv2-SMIUnsigned32r/w Type Constraints: range: 0..4294967295	.1.3.6.1.4.1.9.9.610.1.1.3.2.1.8
cLConditionNoEncryptionEnabled This object specifies whether or not encryption is enabled. A value of 'true' indicates that encryption is not enabled. A value of 'false' indicates that encryption is enabled for this condition.	SNMPv2-TCTruthValuer/w Type Values: 1 true 2 false Description: Represents a boolean value.	.1.3.6.1.4.1.9.9.610.1.1.3.2.1.9
cLConditionManagedSsidEnabled This object specifies whether or not managed SSID is enabled. A value of 'true' indicates managed SSID is enabled. A value of 'false' indicates managed SSID is not enabled for this condition.	SNMPv2-TCTruthValuer/w Type Values: 1 true 2 false Description: Represents a boolean value.	.1.3.6.1.4.1.9.9.610.1.1.3.2.1.10
cLConditionDuration This object specifies the minimum value of duration, in seconds, a rogue AP must be present in order to match cLConditionType of 'duration'.	secondsSNMPv2-SMIUnsigned32r/w Type Constraints: range: 0..4294967295	.1.3.6.1.4.1.9.9.610.1.1.3.2.1.11

This table represents the configuration of
SSID for a rule. This is applicable to 
conditions within a rule which has the 
corresponding cLConditionType taking on the value 
of 'userConfigSsid'.

cLConditionSsidConfigEntry row .1.3.6.1.4.1.9.9.610.1.1.3.3.1

Each entry represents a conceptual row in
cLConditionSsidConfigTable.

Indexes

cLRuleName cLConditionName cLConditionSsidValue

Column	Syntax	OID
cLConditionSsidValue This object represents the SSID value for this condition associated with a rule.	OctetString Constraints: range: 1-32	.1.3.6.1.4.1.9.9.610.1.1.3.3.1.1
cLConditionSsidStorageType This object specifies the storage type for this conceptual row.	SNMPv2-TCStorageTyper/w Type Values: 1 other 2 volatile 3 nonVolatile 4 permanent 5 readOnly Description: Describes the memory realization of a conceptual row. A row which is volatile(2) is lost upon reboot. A row which is either nonVolatile(3), permanent(4) or readOnly(5), is backed up by stable storage. A row which is …	.1.3.6.1.4.1.9.9.610.1.1.3.3.1.2
cLConditionSsidRowStatus This object specifies the status column for a conceptual row in this table. All writable objects in this row may not be modified when the row is active.	SNMPv2-TCRowStatusr/w Type Values: 1 active 2 notInService 3 notReady 4 createAndGo 5 createAndWait 6 destroy Description: The RowStatus textual convention is used to manage the creation and deletion of conceptual rows, and is used as the value of the SYNTAX clause for the status column of a conceptual row (as described in Section 7.7.1 of …	.1.3.6.1.4.1.9.9.610.1.1.3.3.1.3
cLConditionSsidType This object specifies the ssid type that is present in the rule condition.	Enumerationr/w Enumerated Values: 1 normal 2 wildCard	.1.3.6.1.4.1.9.9.610.1.1.3.3.1.4

The table lists the APs, as identified by the AP's mac address,
which should not be treated as rogue by the controller.
These APs are the autonomous access points that have been 
manually added to WCS.

cLRogueIgnoreListEntry row .1.3.6.1.4.1.9.9.610.1.1.4.1.1

Each entry represents a conceptual row in this table.
There will be a row for each entry of the autonomous
APs which are manually added to WCS. When the autonomous
AP is no longer managed by WCS, the corresponding row …

Indexes

cLRogueIgnoreListMACAddress

Column	Syntax	OID
cLRogueIgnoreListMACAddress This is the MAC Address of the AP to be put in the rogue ignore list.	SNMPv2-TCMacAddress Type Constraints: range: 6 Description: Represents an 802 MAC address represented in the `canonical' order defined by IEEE 802.1a, i.e., as if it were transmitted least significant bit first, even though 802.5 (in contrast to other 802.x protocols) requires M…	.1.3.6.1.4.1.9.9.610.1.1.4.1.1.1
cLRogueIgnoreListStorageType This object specifies the storage type for this conceptual row.	SNMPv2-TCStorageTyper/w Type Values: 1 other 2 volatile 3 nonVolatile 4 permanent 5 readOnly Description: Describes the memory realization of a conceptual row. A row which is volatile(2) is lost upon reboot. A row which is either nonVolatile(3), permanent(4) or readOnly(5), is backed up by stable storage. A row which is …	.1.3.6.1.4.1.9.9.610.1.1.4.1.1.2
cLRogueIgnoreListRowStatus This object specifies the status of the conceptual row. All writable objects in this row may not be modified when the row is active.	SNMPv2-TCRowStatusr/w Type Values: 1 active 2 notInService 3 notReady 4 createAndGo 5 createAndWait 6 destroy Description: The RowStatus textual convention is used to manage the creation and deletion of conceptual rows, and is used as the value of the SYNTAX clause for the status column of a conceptual row (as described in Section 7.7.1 of …	.1.3.6.1.4.1.9.9.610.1.1.4.1.1.3

Rogue Table. This table lists all the Rogue APs detected by
Detecting APs.

cLRogueApListEntry row .1.3.6.1.4.1.9.9.610.1.1.6.2.1

An entry containing contains management information
of a particular rogue AP.

Indexes

cLRogueApMacAddr

Column	Syntax	OID
cLRogueApMacAddr MAC Address of the rogue AP Interface.	SNMPv2-TCMacAddress Type Constraints: range: 6 Description: Represents an 802 MAC address represented in the `canonical' order defined by IEEE 802.1a, i.e., as if it were transmitted least significant bit first, even though 802.5 (in contrast to other 802.x protocols) requires M…	.1.3.6.1.4.1.9.9.610.1.1.6.2.1.1
cLRogueApSeverityScore This object represents the severity score of the AP Interface.	SNMPv2-SMIUnsigned32 Type Constraints: range: 0..4294967295	.1.3.6.1.4.1.9.9.610.1.1.6.2.1.2
cLRogueApRuleName This object represents the rule name that is applied.	SNMP-FRAMEWORK-MIBSnmpAdminString Type Constraints: range: 0..255	.1.3.6.1.4.1.9.9.610.1.1.6.2.1.3
cLRogueApClassName This object represents the class name that is applied.	SNMP-FRAMEWORK-MIBSnmpAdminString Type Constraints: range: 0..255	.1.3.6.1.4.1.9.9.610.1.1.6.2.1.4

Rogue Table. This table lists all the Rogue Clients detected by
APs.

cLRogueClientEntry row .1.3.6.1.4.1.9.9.610.1.1.7.1.1

An Entry in cLRogueClientTable.

Indexes

cLRogueClientMacAddress

Column	Syntax	OID
cLRogueClientMacAddress MAC Address of the rogue AP Client Interface.	SNMPv2-TCMacAddress Type Constraints: range: 6 Description: Represents an 802 MAC address represented in the `canonical' order defined by IEEE 802.1a, i.e., as if it were transmitted least significant bit first, even though 802.5 (in contrast to other 802.x protocols) requires M…	.1.3.6.1.4.1.9.9.610.1.1.7.1.1.1
cLRogueClientGatewayMacAddress This object represents the MAC Address of the rogue AP Client gateway.	SNMPv2-TCMacAddress Type Constraints: range: 6 Description: Represents an 802 MAC address represented in the `canonical' order defined by IEEE 802.1a, i.e., as if it were transmitted least significant bit first, even though 802.5 (in contrast to other 802.x protocols) requires M…	.1.3.6.1.4.1.9.9.610.1.1.7.1.1.2

Rogue Station Table. This table lists all the Detecting AP 
Interfaces that detected a particular Rogue.

cLRogueAPDetectingAPEntry row .1.3.6.1.4.1.9.9.610.1.1.8.1.1

An entry in cLRogueAPDetectingAPEntry.

Indexes

cLRogueApMacAddr cLRogueAPDetectingAPMacAddress cLRogueAPDetectingAPSlotId

Column	Syntax	OID
cLRogueAPDetectingAPMacAddress This object represents the MAC Address of Detecting AP Interface that Detected the Rogue.	SNMPv2-TCMacAddress Type Constraints: range: 6 Description: Represents an 802 MAC address represented in the `canonical' order defined by IEEE 802.1a, i.e., as if it were transmitted least significant bit first, even though 802.5 (in contrast to other 802.x protocols) requires M…	.1.3.6.1.4.1.9.9.610.1.1.8.1.1.1
cLRogueAPDetectingAPSlotId This object represent the slot and band index of the Detecting AP Interface that detected the Rogue. Use cLRogueAPPhysicalAPSlot for Slot ID of the Detecting AP Interface.	Unsigned32 Constraints: range: 0-2	.1.3.6.1.4.1.9.9.610.1.1.8.1.1.2
cLRogueAPRadioType This object represents the Detecting AP Interface type that detected the Rogue.	Enumeration Enumerated Values: 1 dot11b 2 dot11a 3 dot11abgn 4 uwb 5 dot11g 6 dot11n24 7 dot11n5 8 unknown 9 dot11ac 10 dot11ax24 11 dot11ax5 12 dot11ax6	.1.3.6.1.4.1.9.9.610.1.1.8.1.1.3
cLRogueAPDetectingAPName This object represents the name of Detecting AP Interface that detected the Rogue.	SNMP-FRAMEWORK-MIBSnmpAdminString Type Constraints: range: 0..255	.1.3.6.1.4.1.9.9.610.1.1.8.1.1.4
cLRogueAPChannelNumber This object represents the advertised Channel Number of the Detecting AP Interface picked up from the Rogue. Use in conjuction with cLRogueAPRadioType to resolve ambiguity between channels numbers of 2.4GHz and 5GHz …	SNMPv2-SMIInteger32 Type Constraints: range: -2147483648..2147483647	.1.3.6.1.4.1.9.9.610.1.1.8.1.1.5
cLRogueAPSsid This object represents the SSID Advertised by Rogue Station.	SNMP-FRAMEWORK-MIBSnmpAdminString Type Constraints: range: 0..255	.1.3.6.1.4.1.9.9.610.1.1.8.1.1.6
cLRogueAPHiddenSsid This object represents the hidden ssid indication on this detecting AP.	Enumeration Enumerated Values: 0 disabled 1 enabled	.1.3.6.1.4.1.9.9.610.1.1.8.1.1.7
cLRogueAPDetectingAPRSSI This object represents the Rogue RSSI as seen by Detecting AP Interface.	SNMPv2-SMIInteger32 Type Constraints: range: -2147483648..2147483647	.1.3.6.1.4.1.9.9.610.1.1.8.1.1.8
cLRogueAPContainmentMode This object represents the containment mode used by the AP if the rogue is in 'contained' state. A value of '0' indicates invalid containment mode. A value of '1' indicates deauth broadcast used for contianment. A valu…	Enumeration Enumerated Values: 0 invalid 1 deauthBroadcast 2 cfp 3 clientContianment 4 adhocContainment 5 max 99 unknown	.1.3.6.1.4.1.9.9.610.1.1.8.1.1.9
cLRogueAPContainmentChannelCount This object represents the number of channels used for rogue containment.	SNMPv2-SMIUnsigned32 Type Constraints: range: 0..4294967295	.1.3.6.1.4.1.9.9.610.1.1.8.1.1.10
cLRogueAPContainmentChannels This object represents the comma separated string of channels used for rogue containment.	SNMP-FRAMEWORK-MIBSnmpAdminString Type Constraints: range: 0..255	.1.3.6.1.4.1.9.9.610.1.1.8.1.1.11
cLRogueAPDetectingAPLastHeard This object represents the no. of seconds ago when this Rogue was last heard by this AP.	SNMPv2-SMICounter32 Type Constraints: range: 0..4294967295	.1.3.6.1.4.1.9.9.610.1.1.8.1.1.12
cLRogueAPDetectingAPWepMode This object represents the WEP mode on this detecting AP.	Enumeration Enumerated Values: 0 disabled 1 enabled	.1.3.6.1.4.1.9.9.610.1.1.8.1.1.13
cLRogueAPDetectingAPPreamble This object represents the Preamble on this detecting AP.	Enumeration Enumerated Values: 0 long 1 short 2 notSupported	.1.3.6.1.4.1.9.9.610.1.1.8.1.1.14
cLRogueAPDetectingAPWpaMode This object represents the WPA mode on this detecting AP.	Enumeration Enumerated Values: 0 disabled 1 enabled	.1.3.6.1.4.1.9.9.610.1.1.8.1.1.15
cLRogueAPDetectingAPWpa2Mode This object represents the WPA2 mode on this detecting AP.	Enumeration Enumerated Values: 0 disabled 1 enabled	.1.3.6.1.4.1.9.9.610.1.1.8.1.1.16
cLRogueAPDetectingAPFTMode This object represents the Fast transition mode on this detecting AP. A value of 'disabled' indicates FT is disabled on the detecting AP. A value of 'enabled' indicates FT is enabled on the detecting AP.	Enumeration Enumerated Values: 0 disabled 1 enabled	.1.3.6.1.4.1.9.9.610.1.1.8.1.1.17
cLRogueAPDetectingAPSNR This object represents the SNR seen by Detecting AP Interface from Rogue	SNMPv2-SMIInteger32 Type Constraints: range: -2147483648..2147483647	.1.3.6.1.4.1.9.9.610.1.1.8.1.1.18
cLRogueAPChannelWidth This object represents the represents the channel width of the detecting AP. Each enumeration represents which part of the band the detecting AP is configured.	Enumeration Enumerated Values: 1 five 2 ten 3 twenty 4 aboveforty 5 belowforty 6 abovefortyAndEighty 7 abovefortyBelowEighty 8 aboveEightyBelowforty 9 belowfortyBelowEighty 10 aboveOnesixtyAboveFortyAboveEighty 11 belowOnesixtyAboveFortyAboveEighty 12 aboveOnesixtyBelowFortyAboveEighty 13 belowOnesixtyBelowFortyAboveEighty 14 aboveOnesixtyAboveFortyBelowEighty 15 belowOnesixtyAboveFortyBelowEighty 16 aboveOnesixtyBelowFortyBelowEighty 17 belowOnesixtyBelowFortyBelowEighty	.1.3.6.1.4.1.9.9.610.1.1.8.1.1.19
cLRogueAPPhysicalAPSlot Reporting AP Physical Slot ID	SNMPv2-SMIInteger32 Type Constraints: range: -2147483648..2147483647	.1.3.6.1.4.1.9.9.610.1.1.8.1.1.20