CISCO-LWAPP-ACL-MIB
- Registered at
- 1.3.6.1.4.1.9.9.577
- Last updated
- 2017-04-24 00:00
- Organization
- Cisco Systems Inc.
- Revisions
- 2017-04-24 00:00, 2010-03-04 00:00, 2006-08-29 00:00, 2006-07-19 00:00
- Namespace
- cisco
- Source file
CISCO-LWAPP-ACL-MIB- Digest
sha256:c3975cdd4c469b3b81a2d01a75c8567f0cb2514634b009f4f187f2ee1c1a8081
Description
This MIB is intended to be implemented on all those devices operating as Central Controllers (CC) that terminate the Light Weight Access Point Protocol tunnel from Light-weight LWAPP Access Points. This MIB provides configuration and status information about the ACLs on the controller. Particularly this mib covers the CPU ACLs for the wireless controllers. Traffic to the controller CPU comes from the NPU (Network Processing Unit). Using CPU ACLs, the user can place restrictions on type of traffic reaching the CPU of the controller from the NPU. CPU ACLs introduce an ACL for the traffic to the CPU of controller. With this ACL the type of packets reaching the CPU can be controlled. The mode of operation is as follows. The administrator designates one ACL for the traffic to the CPU. The ACL kicks in for packets from the NPU to the CPU. Each ACL is an ordered set of rules. If a rule matches then action for that rule is applied to the packet. The decision to send or drop the packet is taken based on the action parameter of the ACL. There will be no ACL for the packets from the CPU to the NPU. GLOSSARY Access Control List ( ACL ) A list of rules used to restrict the traffic reaching an interface or the CPU. Each ACL is an ordered set of rules and actions. If a rule matches then the action for that rule is applied to the packet. Access Point ( AP ) An entity that contains an 802.11 medium access control ( MAC ) and physical layer ( PHY ) interface and provides acess to the distribution services via the wireless medium for associated clients. CPU ACL ( CPU ACL ) The ACL applied to the CPU. This controls the type of traffic reaching the CPU of the controller. Network Processing Unit ( NPU ) This entity is responsible for forwarding traffic to the CPU. The only exceptions are data coming through the console port and the Service port i.e. these communicate directly with the CPU and not via the NPU. Light Weight Access Point Protocol ( LWAPP ) This is a generic protocol that defines the communciation between the Access Points and the Central Controller. REFERENCE [1] Part 11 Wireless LAN Medium Access Control ( MAC ) and Physical Layer ( PHY ) Specifications.
Contact
Cisco Systems, Customer Service Postal: 170 West Tasman Drive San Jose, CA 95134 USA Tel: +1 800 553-NETS Email: cs-wnbu-snmp@cisco.com
Imports
| From | Symbols |
|---|---|
| CISCO-SMI | ciscoMgmt |
| CISCO-TC | CiscoURLString |
| INET-ADDRESS-MIB | InetAddress, InetAddressType |
| SNMP-FRAMEWORK-MIB | SnmpAdminString |
| SNMPv2-CONF | MODULE-COMPLIANCE, NOTIFICATION-GROUP, OBJECT-GROUP |
| SNMPv2-SMI | Counter32, MODULE-IDENTITY, NOTIFICATION-TYPE, OBJECT-IDENTITY, OBJECT-TYPE, Unsigned32, iso |
| SNMPv2-TC | DisplayString, RowStatus, TEXTUAL-CONVENTION, TruthValue |
Imported by
Nothing in this corpus imports this module.
Load order
Every file a consumer needs in order to load this module, dependencies first.
CISCO-LWAPP-ACL-MIB CISCO-SMI CISCO-TC INET-ADDRESS-MIB SNMP-FRAMEWORK-MIB SNMPv2-CONF SNMPv2-SMI SNMPv2-TC
Objects
| Name | OID | Syntax | Access | Status |
|---|---|---|---|---|
| ciscoLwappAclMIBNotifs OBJECT-IDENTITY | 1.3.6.1.4.1.9.9.577.0 | |||
| ciscoLwappAclMIBObjects OBJECT-IDENTITY | 1.3.6.1.4.1.9.9.577.1 | |||
| ciscoLwappCpuAcl OBJECT-IDENTITY | 1.3.6.1.4.1.9.9.577.1.1 | |||
| claCpuAclTable OBJECT-TYPE This table represents the CPU ACL related parameters of the controller. | 1.3.6.1.4.1.9.9.577.1.1.1 | not-accessible | current | |
| claCpuAclEntry OBJECT-TYPE Each entry represents a conceptual row in this table. For each CPU ACL of the controller, there will be a row. | 1.3.6.1.4.1.9.9.577.1.1.1.1 | not-accessible | current | |
| claCpuAclIndex OBJECT-TYPE This object represents unique instance of a CPU ACL on the controller. | 1.3.6.1.4.1.9.9.577.1.1.1.1.1 | Unsigned32 | not-accessible | current |
| claCpuAclName OBJECT-TYPE This object specifies name of the ACL applied to the CPU. The access list to be applied should already exist on the controller. If it is required to remove the ACL for the CPU, this field should be set to an empty string. | 1.3.6.1.4.1.9.9.577.1.1.1.1.2 | SnmpAdminString (SIZE(0..32)) | read-write | current |
| claCpuAclPacketApplicability OBJECT-TYPE This object specifies whether CPU ACL applied for only wired packets, wireless packets or both. From release 7.0 onwards, wired and wireless is not supported. A value of none(1) indicates that, no ACL applied to CPU. A value of wired(2) indicates that, ACL applied to wired packets. A value of wireless(3) indicates that, ACL applied to wireless packets. A value of both(4) indicates that, the attribute claCpuAclName got set. | 1.3.6.1.4.1.9.9.577.1.1.1.1.3 | INTEGER {none(1), wired(2), wireless(3), both(4)} | read-write | current |
| ciscoLwappControllerAcl OBJECT-IDENTITY | 1.3.6.1.4.1.9.9.577.1.2 | |||
| claAclTable OBJECT-TYPE The table represents the ACLs (Access Control Lists) and counter status on the Switch. | 1.3.6.1.4.1.9.9.577.1.2.1 | not-accessible | current | |
| claAclEntry OBJECT-TYPE Each entry represents a conceptual row in this table. For each ACL on the controller, there will be a row. | 1.3.6.1.4.1.9.9.577.1.2.1.1 | not-accessible | current | |
| claAclName OBJECT-TYPE This object represents name of the Access Control List. | 1.3.6.1.4.1.9.9.577.1.2.1.1.1 | OCTET STRING (SIZE(1..32)) | not-accessible | current |
| claAclCounterClear OBJECT-TYPE This object specifies the counter clear value of a unique ACL name. A value of 'true' indicates that, ACL counter will be cleared. A value of 'false' indicates that, ACL counter will not be cleared. | 1.3.6.1.4.1.9.9.577.1.2.1.1.2 | TruthValue | read-write | current |
| claAclRuleTable OBJECT-TYPE This table represents the rules and number of hits under ACL on the switch. | 1.3.6.1.4.1.9.9.577.1.2.2 | not-accessible | current | |
| claAclRuleEntry OBJECT-TYPE Each entry represents a conceptual row in this table. For each ACL rule of the controller, there will be a row. | 1.3.6.1.4.1.9.9.577.1.2.2.1 | not-accessible | current | |
| claAclRuleIndex OBJECT-TYPE This object represents index of the ACL rule. This can be updated to reset the sequence of the rules of an ACL. | 1.3.6.1.4.1.9.9.577.1.2.2.1.2 | Unsigned32 (1..64) | not-accessible | current |
| claAclRuleHits OBJECT-TYPE This object indicates number of hits in the particular rule under the ACL. This object is cleared by setting the claAclCounterClear object. | 1.3.6.1.4.1.9.9.577.1.2.2.1.3 | Counter32 | read-only | current |
| claAclUrlTable OBJECT-TYPE This table represents the URL ACLs (Access Control Lists). | 1.3.6.1.4.1.9.9.577.1.2.3 | not-accessible | current | |
| claAclUrlEntry OBJECT-TYPE Each entry represents a conceptual row in this table. For each ACL rule of the controller, there will be a row. | 1.3.6.1.4.1.9.9.577.1.2.3.1 | not-accessible | current | |
| claAclUrlIndex OBJECT-TYPE This object represents index of the ACL URL. This can be updated to reset the sequence of the URL entries of an ACL. | 1.3.6.1.4.1.9.9.577.1.2.3.1.1 | Unsigned32 (1..10) | not-accessible | current |
| claAclUrlName OBJECT-TYPE This object specifies URL used for ACL. This is used by ACL to permit or deny | 1.3.6.1.4.1.9.9.577.1.2.3.1.2 | CiscoURLString | read-create | current |
| claAclUrlRowStatus OBJECT-TYPE This is the status column for this row and is used to create and delete specific instances of rows in this table. | 1.3.6.1.4.1.9.9.577.1.2.3.1.3 | RowStatus | read-create | current |
| claUrlAclTable OBJECT-TYPE This table represents URL ACLs on the switch. | 1.3.6.1.4.1.9.9.577.1.2.4 | not-accessible | current | |
| claUrlAclEntry OBJECT-TYPE Each entry represents the attributes for cLlaUrlAclTable. An entry gets added to the table on creating a Url ACL. Only 64 Url-Acls can be configured | 1.3.6.1.4.1.9.9.577.1.2.4.1 | not-accessible | current | |
| claUrlAclName OBJECT-TYPE This object specifies name of the URL Access Control List. | 1.3.6.1.4.1.9.9.577.1.2.4.1.1 | OCTET STRING (SIZE(1..32)) | not-accessible | current |
| claUrlAclApplyMode OBJECT-TYPE This object specifies the apply mode of the URL ACL on the switch. A value of notapplied(1) indicates that, URL ACL not applied. A value of applied(2) indicates that, URL ACL has been applied on the switch. | 1.3.6.1.4.1.9.9.577.1.2.4.1.2 | INTEGER {notapplied(1), applied(2)} | read-create | current |
| claUrlAclCounterClear OBJECT-TYPE This object specifies the URL ACL counter clear value. A value of 'true' indicates that, URL ACL counters will be cleared. A value of 'false' indicates that, URL ACL counters will not be cleared. | 1.3.6.1.4.1.9.9.577.1.2.4.1.3 | TruthValue | read-create | current |
| claUrlAclRowStatus OBJECT-TYPE This object specifies status column for this row and used to create and delete specific instances of rows in this table. | 1.3.6.1.4.1.9.9.577.1.2.4.1.4 | RowStatus | read-create | current |
| claUrlAclListType OBJECT-TYPE This object specifies the URL ACL list type. A value of whitelist(1) indicates that, all the url configured in acl will only be permitted. A value of blacklist(2) indicates that, only rules specified in the acl will be denied | 1.3.6.1.4.1.9.9.577.1.2.4.1.5 | INTEGER {whitelist(1), blacklist(2)} | read-create | current |
| claUrlAclRuleTable OBJECT-TYPE This table represents URL ACL Rules. | 1.3.6.1.4.1.9.9.577.1.2.5 | not-accessible | current | |
| claUrlAclRuleEntry OBJECT-TYPE Each entry represents the attributes for claUrlAclRuleTable. An entry gets added to the table on creating a rule on URL ACL.In a given ACL there can only be 100 rules | 1.3.6.1.4.1.9.9.577.1.2.5.1 | not-accessible | current | |
| claUrlAclRuleIndex OBJECT-TYPE This object represents the unique index of the URL ACL rule. This can be updated to reset the sequence of the rules of an URL ACL. | 1.3.6.1.4.1.9.9.577.1.2.5.1.1 | Unsigned32 | not-accessible | current |
| claUrlAclRuleUrl OBJECT-TYPE This object specifies the URL of a rule. | 1.3.6.1.4.1.9.9.577.1.2.5.1.2 | OCTET STRING (SIZE(1..255)) | read-create | current |
| claUrlAclRuleAction OBJECT-TYPE This object specifies the permission mode of a rule. A value of deny(0) indicates that, URL is to be denied. A value of permit(1) indicates that, URL is to be permitted. | 1.3.6.1.4.1.9.9.577.1.2.5.1.3 | INTEGER {deny(1), permit(2)} | read-create | current |
| claUrlAclRuleHits OBJECT-TYPE This object indicates number of hits in the particular rule under the URL ACL.This object is cleared by setting the claUrlAclCounterClear object. | 1.3.6.1.4.1.9.9.577.1.2.5.1.4 | Counter32 | read-only | current |
| claUrlAclRuleRowStatus OBJECT-TYPE This is the status column for this row and is used to create and delete specific instances of rows in this table. | 1.3.6.1.4.1.9.9.577.1.2.5.1.5 | RowStatus | read-create | current |
| ciscoLwappControllerAclGeneral OBJECT-IDENTITY | 1.3.6.1.4.1.9.9.577.1.3 | |||
| claAclCounterEnable OBJECT-TYPE This object specifies the ACL Counters status if packets are hitting any of the ACLs that are configured on the controller. A value of 'true' indicates that ACL counter is enabled. A value of 'false' indicates that ACL counter is disabled. | 1.3.6.1.4.1.9.9.577.1.3.1 | TruthValue | read-write | current |
| claUrlAclExternalServerIpType OBJECT-TYPE This object specifies the IP address type of External server to which the blocked URL will be redirected. | 1.3.6.1.4.1.9.9.577.1.3.2 | InetAddressType | read-write | current |
| claUrlAclExternalServerIp OBJECT-TYPE This object specifies the Ip address of External server to which the blocked URL will be redirected. | 1.3.6.1.4.1.9.9.577.1.3.3 | InetAddress | read-write | current |
| ciscoLwappAclMIBConform OBJECT-IDENTITY | 1.3.6.1.4.1.9.9.577.2 | |||
| ciscoLwappAclMIBCompliances OBJECT-IDENTITY | 1.3.6.1.4.1.9.9.577.2.1 | |||
| ciscoLwappAclMIBGroups OBJECT-IDENTITY | 1.3.6.1.4.1.9.9.577.2.2 |
Conformance
| Name | OID | Status |
|---|---|---|
| ciscoLwappAclMIBCompliance MODULE-COMPLIANCE The compliance statement for the SNMP entities that implement the ciscoLwappAclMIB module. | 1.3.6.1.4.1.9.9.577.2.1.1 | deprecated |
| ciscoLwappAclMIBComplianceRev1 MODULE-COMPLIANCE The compliance statement for the SNMP entities that implement the ciscoLwappAclMIB module. | 1.3.6.1.4.1.9.9.577.2.1.2 | current |
| ciscoLwappCpuAclGroup OBJECT-GROUP This collection of objects represents the information about the general attributes of CPU ACL. | 1.3.6.1.4.1.9.9.577.2.2.1 | current |
| ciscoLwappAclGroup OBJECT-GROUP This collection of objects represents the information about the general attributes of controller ACL. | 1.3.6.1.4.1.9.9.577.2.2.2 | current |