CISCO-DOT11-SSID-SECURITY-MIB Table View

Table-centric layout grouping table, row, and column objects.

Tables
7
Rows
7
Columns
37
.1.3.6.1.4.1.9.9.413.1.1.1 · 1 row entry · 21 columns
This table contains the list of SSIDs that all 
radio interfaces of this device should install
and use for client associations.
cdot11SecAuxSsidEntry entry .1.3.6.1.4.1.9.9.413.1.1.1.1
A collection of attributes defining an auxiliary
service set ID which client stations can use for
association for the device. Entries can be
installed on multiple radio interfaces.
Indexes
cdot11SecAuxSsid
Column Syntax OID
cdot11SecAuxSsid
This object specifies a SSID defined on this
IEEE 802.11 wireless LAN device. The SSID will
be installed on the radio interfaces for client
associations. The radio interface shall respond
to probe requests using th…
CDot11SsidString
Textual Convention: CDot11SsidString OctetString
Type Constraints:
range: 1..32
.1.3.6.1.4.1.9.9.413.1.1.1.1.1
cdot11SecAuxSsidBroadcast
This object indicates if an auxiliary SSID
is a Broadcast SSID. There should only be one
Broadcast SSID installed on any IEEE 802.11
radio interface if Multiple BSSID feature is
not enabled. To enable this SSID for…
SNMPv2-TCTruthValuer/w
Textual Convention: SNMPv2-TCTruthValue Enumeration
Type Values:
1true
2false
.1.3.6.1.4.1.9.9.413.1.1.1.1.2
cdot11SecAuxSsidInfraStruct
This object indicates if an auxiliary SSID
is an infra-structure SSID. There should only be
one infra-structure SSID installed on any IEEE
802.11 radio interface. The infra-structure
SSID is used for uplink associa…
Enumerationr/w
Enumerated Values:
1infraStructure
2nonInfraStructure
3optional
.1.3.6.1.4.1.9.9.413.1.1.1.1.3
cdot11SecAuxSsidProxyMobileIp
This object indicates if an auxiliary SSID
is enabled for Proxy Mobile-IP support. If
Proxy Mobile-IP is not supported in VLAN
network environment, cdot11SecAuxSsidVlan should
be '0' when Proxy Mobile-IP is enabled v…
SNMPv2-TCTruthValuer/w
Textual Convention: SNMPv2-TCTruthValue Enumeration
Type Values:
1true
2false
.1.3.6.1.4.1.9.9.413.1.1.1.1.4
cdot11SecAuxSsidMaxStations
This object defines the maximum number of IEEE
802.11 stations which may associate to a radio
interface through this SSID. If the value
is '0', the maximum number is limited only by the
IEEE 802.11 standard and any …
Unsigned32r/w
Constraints:
range: 0-2007
.1.3.6.1.4.1.9.9.413.1.1.1.1.5
cdot11SecAuxSsidVlan
This object defines the VLAN trunk at which the
traffic will be used when a client is associating
with this SSID. The default value is '0', no
VLAN is configured or used for this SSID.
CISCO-DOT11-IF-MIBCDot11IfVlanIdOrZeror/w
Textual Convention: CISCO-DOT11-IF-MIBCDot11IfVlanIdOrZero Unsigned32
Type Constraints:
range: 0..4095
.1.3.6.1.4.1.9.9.413.1.1.1.1.6
cdot11SecAuxSsidWpaPsk
This object configures Wi-Fi Protected Access
Pre-shared Key for this SSID. This key is used
for association authentication and dynamic
encryption key generation. The default value
is ''H if this shared key feature …
CDot11WiFiPaPreSharedKeyr/w
Textual Convention: CDot11WiFiPaPreSharedKey OctetString
Type Constraints:
range: 0..128
.1.3.6.1.4.1.9.9.413.1.1.1.1.7
cdot11SecAuxRadiusAccounting
This object defines the name of the AAA accounting
list to be used for association accounting. The
default value is an empty string if AAA accounting
is not enabled.
SNMP-FRAMEWORK-MIBSnmpAdminStringr/w
Textual Convention: SNMP-FRAMEWORK-MIBSnmpAdminString OctetString
Type Constraints:
range: 0..255
.1.3.6.1.4.1.9.9.413.1.1.1.1.8
cdot11SecAuxSsidLoginUsername
This object specifies the username used for
LEAP authentication and association to an uplink
AP while this SSID is in infra-structure mode, i.e.
cdot11SecAuxSsidInfraStruct is 'true'. The default
value is an empty s…
SNMP-FRAMEWORK-MIBSnmpAdminStringr/w
Textual Convention: SNMP-FRAMEWORK-MIBSnmpAdminString OctetString
Type Constraints:
range: 0..255
.1.3.6.1.4.1.9.9.413.1.1.1.1.9
cdot11SecAuxSsidLoginPassword
This object specifies the password used for
LEAP authentication association to an uplink
AP while this SSID is in infra-structure mode, i.e.
cdot11SecAuxSsidInfraStruct is 'true'. The default
value is an empty string i…
SNMP-FRAMEWORK-MIBSnmpAdminStringr/w
Textual Convention: SNMP-FRAMEWORK-MIBSnmpAdminString OctetString
Type Constraints:
range: 0..255
.1.3.6.1.4.1.9.9.413.1.1.1.1.10
cdot11SecAuxSsidAuthKeyMgmt
This object specifies the type of key management
employed for encryption keys defined for the VLAN
in cdot11SecAuxSsidVlan.

WPA key management('wpa') should only be selected
when encryption is TKIP or AES…
CDot11SecAuthKeyMgmtTyper/w
Textual Convention: CDot11SecAuthKeyMgmtType Bits
Type Values:
0cckm
1wpa
2wpa1
3wpa2
.1.3.6.1.4.1.9.9.413.1.1.1.1.11
cdot11SecAuxSsidAuthKeyMgmtOpt
This object specifies if the type of key
management, cdot11SecAuxSsidAuthKeyMgmt,
selected is optional. If it is 'true' and
cdot11SecAuxSsidAuthKeyMgmt is not 'none',
the key management is optional. If it is
'false…
SNMPv2-TCTruthValuer/w
Textual Convention: SNMPv2-TCTruthValue Enumeration
Type Values:
1true
2false
.1.3.6.1.4.1.9.9.413.1.1.1.1.12
cdot11SecAuxSsidRowStatus
This is used to create a new SSID entry on this
device, and modify or delete an existing SSID
entry.

Creation of rows must be done via 'createAndGo'
with or without optional objects. This object will
SNMPv2-TCRowStatusr/w
Textual Convention: SNMPv2-TCRowStatus Enumeration
Type Values:
1active
2notInService
3notReady
4createAndGo
5createAndWait
6destroy
.1.3.6.1.4.1.9.9.413.1.1.1.1.13
cdot11SecAuxSsidWirelessNetId
This object sets the Wireless Network ID of this
SSID. This ID is used for Cisco GRE tunneling in
layer 3 switching. The valid range for the ID is
'1' to '4096' and the default value is '0' and it
indicates no ID is …
Integer32r/w
Constraints:
range: 0-4096
.1.3.6.1.4.1.9.9.413.1.1.1.1.14
cdot11SecSsidRedirectAddrType
This is the address type of for the
cdot11SecSsidRedirectDestAddr.
INET-ADDRESS-MIBInetAddressTyper/w
Textual Convention: INET-ADDRESS-MIBInetAddressType Enumeration
Type Values:
0unknown
1ipv4
2ipv6
3ipv4z
4ipv6z
16dns
25l2vpn
.1.3.6.1.4.1.9.9.413.1.1.1.1.15
cdot11SecSsidRedirectDestAddr
This is the destination address set to all packets
received from wireless clients associated to this
wireless station using the cdot11SecAuxSsid. The
cdot11SecSsidRedirectAddrType specifies the type
of this address.…
INET-ADDRESS-MIBInetAddressr/w
Textual Convention: INET-ADDRESS-MIBInetAddress OctetString
Type Constraints:
range: 0..255
.1.3.6.1.4.1.9.9.413.1.1.1.1.16
cdot11SecSsidRedirectFilter
When the packet redirection feature is enable
(i.e., cdot11SecSsidRedirectAddrType is 'ipv4'
and cdot11SecSsidRedirectDestAddr value is not
'00000000'H), this is the Cisco IP extended
access list number or name used f…
SNMP-FRAMEWORK-MIBSnmpAdminStringr/w
Textual Convention: SNMP-FRAMEWORK-MIBSnmpAdminString OctetString
Type Constraints:
range: 0..255
.1.3.6.1.4.1.9.9.413.1.1.1.1.17
cdot11SecSsidInformationElement
This is the set of Information Elements and
extended capabilities embedded in the SSID
broadcasted in beacons and probe responses.
The extended capabilities 'advertisement' and 'wps'
are allowed only if 'ssidl' is set.
CDot11InformationElementTyper/w
Textual Convention: CDot11InformationElementType Bits
Type Values:
0ssidl
1advertisement
2wps
.1.3.6.1.4.1.9.9.413.1.1.1.1.18
cdot11SecAuxSsidVlanName
This is the name of the cdot11SecAuxSsidVlan. Either
cdot11SecAuxSsidVlan or cdot11SecAuxSsidVlanName can
be used to set the VLAN trunk for client traffic of
this SSID. If both cdot11SecAuxSsidVlanName and
cdot11Sec…
CDot11VlanNamer/w
Textual Convention: CDot11VlanName OctetString
Type Constraints:
range: 1..32
.1.3.6.1.4.1.9.9.413.1.1.1.1.19
cdot11SecAuxSsidMbssidBroadcast
This object controls if this SSID shall be
broadcasted if MBSSID is enabled at the interface
which this SSID is attached, i.e.
if both cd11IfMultipleBssidEnable and
cdot11SecAuxSsidMbssidBroadcastis are 'true', then
SNMPv2-TCTruthValuer/w
Textual Convention: SNMPv2-TCTruthValue Enumeration
Type Values:
1true
2false
.1.3.6.1.4.1.9.9.413.1.1.1.1.20
cdot11SecAuxSsidMbssidDtimPeriod
This is the DTIM period for this MBSSID enabled SSID.
It is the number of beacon intervals that shall elapse
between transmission of Beacons frames containing a
TIM element whose DTIM Count field is 0.

Th…
beaconsInteger32r/w
Constraints:
range: 0-255
.1.3.6.1.4.1.9.9.413.1.1.1.1.21
.1.3.6.1.4.1.9.9.413.1.1.2 · 1 row entry · 6 columns
This table contains attributes to configure
authentication parameters for SSIDs listed in the 
cdot11SecAuxSsidTable.  This table extends the 
IEEE802dot11-MIB dot11AuthenticationAlgorithmsTable 
to defines additional attributes authentication
procedures for multiple SSIDs.  Multiple 
authentication algorithms can apply to a single 
auxiliary SSID.
          
This table has an expansion dependent relationship
on the cdot11SecAuxSsidTable.  For each entry in 
this table, there exists at least an entry in the  
cdot11SecAuxSsidTable.
cdot11SecAuxSsidAuthEntry entry .1.3.6.1.4.1.9.9.413.1.1.2.1
Each entry specifies a pre-defined
authentication algorithms and additional
authentication procedures for clients of an
auxiliary SSID. The three pre-defined
authentication algorithms are:
openSystem(1),
sh…
Indexes
cdot11SecAuxSsid IEEE802dot11-MIBdot11AuthenticationAlgorithmsIndex
Column Syntax OID
cdot11SecAuxSsidAuthEnabled
If the value is 'true', this device may
authenticate an association using SSID (specified
by cdot11SecAuxSsid) with the corresponding
pre-defined algorithm (identified by the
dot11AuthenticationAlgorithmsIndex). The…
SNMPv2-TCTruthValuer/w
Textual Convention: SNMPv2-TCTruthValue Enumeration
Type Values:
1true
2false
.1.3.6.1.4.1.9.9.413.1.1.2.1.1
cdot11SecAuxSsidAuthPlusEap
If both the values of this object and
cdot11SecAuxSsidAuthEnabled are 'true', the
association authentication must complete additional
network-level EAP authentication before client
stations will be unblocked from th…
SNMPv2-TCTruthValuer/w
Textual Convention: SNMPv2-TCTruthValue Enumeration
Type Values:
1true
2false
.1.3.6.1.4.1.9.9.413.1.1.2.1.2
cdot11SecAuxSsidAuthPlusMac
If both the values of this object and
cdot11SecAuxSsidAuthEnabled are 'true', the
association authentication must complete additional
MAC address authentication before client stations
will be unblocked from their associ…
SNMPv2-TCTruthValuer/w
Textual Convention: SNMPv2-TCTruthValue Enumeration
Type Values:
1true
2false
.1.3.6.1.4.1.9.9.413.1.1.2.1.3
cdot11SecAuxSsidAuthEapMethod
If the value of cdot11SecAuxSsidAuthPlusEap
is 'true' or dot11AuthenticationAlgorithm is
Network-EAP, this is the EAP method list to use
for the EAP authentication. The default is an
empty string if EAP is not used.
SNMP-FRAMEWORK-MIBSnmpAdminStringr/w
Textual Convention: SNMP-FRAMEWORK-MIBSnmpAdminString OctetString
Type Constraints:
range: 0..255
.1.3.6.1.4.1.9.9.413.1.1.2.1.4
cdot11SecAuxSsidAuthMacMethod
If the value of cdot11SecAuxSsidAuthPlusMac
is 'true', this is the MAC address method list to
use for the MAC authentication. The default is
an empty string if MAC address authentication
is not used.
SNMP-FRAMEWORK-MIBSnmpAdminStringr/w
Textual Convention: SNMP-FRAMEWORK-MIBSnmpAdminString OctetString
Type Constraints:
range: 0..255
.1.3.6.1.4.1.9.9.413.1.1.2.1.5
cdot11SecAuxSsidAuthMacAlternate
If the values of this object,
cdot11SecAuxSsidAuthEnabled,
cdot11SecAuxSsidAuthPlusMac, and
cdot11SecAuxSsidAuthPlusEap are all 'true' and
the dot11AuthenticationAlgorithm is 'openSystem'
the, the association authen…
SNMPv2-TCTruthValuer/w
Textual Convention: SNMPv2-TCTruthValue Enumeration
Type Values:
1true
2false
.1.3.6.1.4.1.9.9.413.1.1.2.1.6
.1.3.6.1.4.1.9.9.413.1.1.3 · 1 row entry · 1 columns
This table contains the list of SSIDs installed 
on radio interfaces of this device and are used 
for client association.
          
This table has an expansion dependent relationship
on the ifTable.  For each entry in this table, 
there exists at least an entry in the ifTable of 
ifType ieee80211(71).
cdot11SecInterfSsidEntry entry .1.3.6.1.4.1.9.9.413.1.1.3.1
A collection of attributes for an auxiliary
service set ID installed on a IEEE 802.11 radio
interface. An interface can have multiple
auxiliary service set ID installed and the
current maximum for each radio interfac…
Indexes
IF-MIBifIndex cdot11SecAuxSsid
Column Syntax OID
cdot11SecInterfSsidRowStatus
This is used to install a new SSID configuration,
and modify or delete an existing SSID configuration
on a radio interface.

Creation of rows must be done via 'createAndGo' and
with an existing ifIndex of …
SNMPv2-TCRowStatusr/w
Textual Convention: SNMPv2-TCRowStatus Enumeration
Type Values:
1active
2notInService
3notReady
4createAndGo
5createAndWait
6destroy
.1.3.6.1.4.1.9.9.413.1.1.3.1.1
.1.3.6.1.4.1.9.9.413.1.1.4 · 1 row entry · 2 columns
This table contains the list of available radio MAC
addresses for supporting MBSSID on the IEEE 802.11 
radio. 
          
This table has an expansion dependent relationship
on the ifTable.  For each entry in this table, there
exists at least an entry in the ifTable of ifType
ieee80211(71).
cdot11MbssidMacAddrSupportEntry entry .1.3.6.1.4.1.9.9.413.1.1.4.1
Each entry is a MAC address assigned to the IEEE
802.11 radio available to be used as a BSSID and
broadcasted in the radio beacon when MBSSID feature
is enabled.
Indexes
IF-MIBifIndex cdot11MbssidMacAddrIndex
Column Syntax OID
cdot11MbssidMacAddrIndex
This is an unique index identifying the
MAC address assigned on the radio. If MBSSID
is not supported on this device, the only
available index number is 1. Currently, if MBSSID
is supported, the index numbers are 1 t…
Integer32
Constraints:
range: 1-256
.1.3.6.1.4.1.9.9.413.1.1.4.1.1
cdot11MbssidMacAddrSupported
This MAC address can be used as BSSID and
broadcasted in the beacon with a SSID when
cd11IfMultipleBssidEnable is 'true'.
SNMPv2-TCMacAddress
Textual Convention: SNMPv2-TCMacAddress OctetString
Type Constraints:
range: 6
.1.3.6.1.4.1.9.9.413.1.1.4.1.2
.1.3.6.1.4.1.9.9.413.1.1.5 · 1 row entry · 2 columns
This table displays the list of SSIDs and their
corresponding BSSIDs configured on the IEEE 
802.11 radios.
          
This table has an expansion dependent relationship
on the ifTable.  For each entry in this table, there
exists at least an entry in the ifTable of ifType
ieee80211(71).
cdot11MbssidInterfaceEntry entry .1.3.6.1.4.1.9.9.413.1.1.5.1
Each entry defines an SSID being configured on
the radio and the corresponding BSSID.
Indexes
IF-MIBifIndex cdot11SecAuxSsid
Column Syntax OID
cdot11MbssidIfMacAddress
This is the BSSID to be sent with the radio SSID.
If MBSSID feature is not enabled (i.e.
cd11IfMultipleBssidEnable is 'false'), all SSIDs
will be sent by the radio with the same BSSID and
that is the radio hardware M…
SNMPv2-TCMacAddress
Textual Convention: SNMPv2-TCMacAddress OctetString
Type Constraints:
range: 6
.1.3.6.1.4.1.9.9.413.1.1.5.1.1
cdot11MbssidIfBroadcast
If d11IfMultipleBssidEnable is 'true', MBSSID
is enabled for the radio and this SSID is a
broadcast SSID as follows
'true' - This SSID is a broadcast SSID and
being broadcasted in the radio beacon.
SNMPv2-TCTruthValue
Textual Convention: SNMPv2-TCTruthValue Enumeration
Type Values:
1true
2false
.1.3.6.1.4.1.9.9.413.1.1.5.1.2
.1.3.6.1.4.1.9.9.413.1.1.7 · 1 row entry · 2 columns
This table lists the backup VLANs configured
on a SSID.
          
The number of backup VLANs that can be configured 
for each SSID identified by cdot11SecAuxSsid is 
limited by the value of dot11SecSsidMaxBackupVlans.
          
This table has an expansion depedent relationship with
cdot11SecAuxSsidTable. The value of cdot11SecAuxSsid
for the entries in this table must exist in
cdot11SecAuxSsidTable. 
          
When an entry in  cdot11SecAuxSsidTable is deleted,
all the backup VLANs configured for the corresponding
SSID get deleted from this table.
cdot11SecSsidBackupVlanEntry entry .1.3.6.1.4.1.9.9.413.1.1.7.1
Each entry defines a backup VLAN configured on an
SSID.
Indexes
cdot11SecAuxSsid cdot11SecSsidBackupVlan
Column Syntax OID
cdot11SecSsidBackupVlan
The backup VLAN configured on a SSID identified
by the instance identifier value of cdot11SecAuxSsid.
Unsigned32
Constraints:
range: 1-4095
.1.3.6.1.4.1.9.9.413.1.1.7.1.1
cdot11SecSsidBackupVlanRowStatus
The status of this conceptual row.
SNMPv2-TCRowStatusr/w
Textual Convention: SNMPv2-TCRowStatus Enumeration
Type Values:
1active
2notInService
3notReady
4createAndGo
5createAndWait
6destroy
.1.3.6.1.4.1.9.9.413.1.1.7.1.2
.1.3.6.1.4.1.9.9.413.1.4.1 · 1 row entry · 3 columns
This table contains the mapping of VLAN names to 
IDs.  A RADIUS server servering this wireless 
station can assign wireless clients associating 
to this station to a particular VLAN by either 
a VLAN name or an ID.
          
When the VLAN assign of a client is via VLAN name,
this table is used to look up for the corresponding
VLAN ID and VLAN configured on this wireless
station.  Each VLAN name uniquely identifies a 
VLAN on a wireless station, and  a VLAN ID can 
associate to multiple VLAN names in this table.
cdot11SecVlanNameEntry entry .1.3.6.1.4.1.9.9.413.1.4.1.1
A collection of attributes defining the properties
of a VLAN name and the corresponding VLAN ID.
Indexes
cdot11SecVlanName
Column Syntax OID
cdot11SecVlanName
This object defines the VLAN name assigned to
wireless clients by the RADIUS server serving
this wireless station.
CDot11VlanName
Textual Convention: CDot11VlanName OctetString
Type Constraints:
range: 1..32
.1.3.6.1.4.1.9.9.413.1.4.1.1.1
cdot11SecVlanNameId
This object defines the VLAN trunk to which
a client associating to this wireless station
will be on. The value is '0' is not valid.
CISCO-DOT11-IF-MIBCDot11IfVlanIdOrZeror/w
Textual Convention: CISCO-DOT11-IF-MIBCDot11IfVlanIdOrZero Unsigned32
Type Constraints:
range: 0..4095
.1.3.6.1.4.1.9.9.413.1.4.1.1.2
cdot11SecVlanNameRowStatus
This is used to create a new VLAN name to ID
mapping entry on this device, and modify or delete
an existing mapping entry.

Creation of rows must be done via 'createAndGo'
with all other mandatory objects…
SNMPv2-TCRowStatusr/w
Textual Convention: SNMPv2-TCRowStatus Enumeration
Type Values:
1active
2notInService
3notReady
4createAndGo
5createAndWait
6destroy
.1.3.6.1.4.1.9.9.413.1.4.1.1.3