forked from librenms/librenms-mibs
-
Notifications
You must be signed in to change notification settings - Fork 0
/
Copy pathAIRESPACE-WIRELESS-MIB
16980 lines (15526 loc) · 608 KB
/
AIRESPACE-WIRELESS-MIB
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
136
137
138
139
140
141
142
143
144
145
146
147
148
149
150
151
152
153
154
155
156
157
158
159
160
161
162
163
164
165
166
167
168
169
170
171
172
173
174
175
176
177
178
179
180
181
182
183
184
185
186
187
188
189
190
191
192
193
194
195
196
197
198
199
200
201
202
203
204
205
206
207
208
209
210
211
212
213
214
215
216
217
218
219
220
221
222
223
224
225
226
227
228
229
230
231
232
233
234
235
236
237
238
239
240
241
242
243
244
245
246
247
248
249
250
251
252
253
254
255
256
257
258
259
260
261
262
263
264
265
266
267
268
269
270
271
272
273
274
275
276
277
278
279
280
281
282
283
284
285
286
287
288
289
290
291
292
293
294
295
296
297
298
299
300
301
302
303
304
305
306
307
308
309
310
311
312
313
314
315
316
317
318
319
320
321
322
323
324
325
326
327
328
329
330
331
332
333
334
335
336
337
338
339
340
341
342
343
344
345
346
347
348
349
350
351
352
353
354
355
356
357
358
359
360
361
362
363
364
365
366
367
368
369
370
371
372
373
374
375
376
377
378
379
380
381
382
383
384
385
386
387
388
389
390
391
392
393
394
395
396
397
398
399
400
401
402
403
404
405
406
407
408
409
410
411
412
413
414
415
416
417
418
419
420
421
422
423
424
425
426
427
428
429
430
431
432
433
434
435
436
437
438
439
440
441
442
443
444
445
446
447
448
449
450
451
452
453
454
455
456
457
458
459
460
461
462
463
464
465
466
467
468
469
470
471
472
473
474
475
476
477
478
479
480
481
482
483
484
485
486
487
488
489
490
491
492
493
494
495
496
497
498
499
500
501
502
503
504
505
506
507
508
509
510
511
512
513
514
515
516
517
518
519
520
521
522
523
524
525
526
527
528
529
530
531
532
533
534
535
536
537
538
539
540
541
542
543
544
545
546
547
548
549
550
551
552
553
554
555
556
557
558
559
560
561
562
563
564
565
566
567
568
569
570
571
572
573
574
575
576
577
578
579
580
581
582
583
584
585
586
587
588
589
590
591
592
593
594
595
596
597
598
599
600
601
602
603
604
605
606
607
608
609
610
611
612
613
614
615
616
617
618
619
620
621
622
623
624
625
626
627
628
629
630
631
632
633
634
635
636
637
638
639
640
641
642
643
644
645
646
647
648
649
650
651
652
653
654
655
656
657
658
659
660
661
662
663
664
665
666
667
668
669
670
671
672
673
674
675
676
677
678
679
680
681
682
683
684
685
686
687
688
689
690
691
692
693
694
695
696
697
698
699
700
701
702
703
704
705
706
707
708
709
710
711
712
713
714
715
716
717
718
719
720
721
722
723
724
725
726
727
728
729
730
731
732
733
734
735
736
737
738
739
740
741
742
743
744
745
746
747
748
749
750
751
752
753
754
755
756
757
758
759
760
761
762
763
764
765
766
767
768
769
770
771
772
773
774
775
776
777
778
779
780
781
782
783
784
785
786
787
788
789
790
791
792
793
794
795
796
797
798
799
800
801
802
803
804
805
806
807
808
809
810
811
812
813
814
815
816
817
818
819
820
821
822
823
824
825
826
827
828
829
830
831
832
833
834
835
836
837
838
839
840
841
842
843
844
845
846
847
848
849
850
851
852
853
854
855
856
857
858
859
860
861
862
863
864
865
866
867
868
869
870
871
872
873
874
875
876
877
878
879
880
881
882
883
884
885
886
887
888
889
890
891
892
893
894
895
896
897
898
899
900
901
902
903
904
905
906
907
908
909
910
911
912
913
914
915
916
917
918
919
920
921
922
923
924
925
926
927
928
929
930
931
932
933
934
935
936
937
938
939
940
941
942
943
944
945
946
947
948
949
950
951
952
953
954
955
956
957
958
959
960
961
962
963
964
965
966
967
968
969
970
971
972
973
974
975
976
977
978
979
980
981
982
983
984
985
986
987
988
989
990
991
992
993
994
995
996
997
998
999
1000
AIRESPACE-WIRELESS-MIB DEFINITIONS ::= BEGIN
IMPORTS
MODULE-IDENTITY,
OBJECT-TYPE,
NOTIFICATION-TYPE,
Integer32,
Counter32,
Unsigned32,
Counter64,
Gauge32,
IpAddress,
TimeTicks
FROM SNMPv2-SMI
NOTIFICATION-GROUP,
OBJECT-GROUP,
MODULE-COMPLIANCE
FROM SNMPv2-CONF
TEXTUAL-CONVENTION,
DisplayString,
RowStatus,
MacAddress,
TruthValue,
TimeInterval
FROM SNMPv2-TC
airespace
FROM AIRESPACE-REF-MIB;
-- ********************************************************************
-- * MODULE IDENTITY
-- ********************************************************************
bsnWireless MODULE-IDENTITY
LAST-UPDATED "201002090000Z"
ORGANIZATION "Airespace, Inc."
CONTACT-INFO
"Cisco Systems,
Customer Service
Postal: 170 West Tasman Drive
San Jose, CA 95134
USA
Tel: +1 800 553-NETS
Email: [email protected]"
DESCRIPTION
"This MIB is intended to be implemented on all those
devices operating as Central Controllers (CC) that
terminate the Light Weight Access Point Protocol
tunnel from Light-weight LWAPP Access Points.
This MIB provides configuration and status information
for 802.11 Access Points, LAN configuration, AAA,
Mobility, IpSec, Radio Rescouce Management and 802.11
global parameters.
The relationship between controller and the LWAPP
APs can be depicted as follows:
+......+ +......+ +......+ +......+
+ + + + + + + +
+ CC + + CC + + CC + + CC +
+ + + + + + + +
+......+ +......+ +......+ +......+
.. . . .
.. . . .
. . . . .
. . . . .
. . . . .
. . . . .
+......+ +......+ +......+ +......+ +......+
+ + + + + + + + + +
+ AP + + AP + + AP + + AP + + AP +
+ + + + + + + + + +
+......+ +......+ +......+ +......+ +......+
. . . .
. . . . .
. . . . .
. . . . .
. . . . .
+......+ +......+ +......+ +......+ +......+
+ + + + + + + + + +
+ MN + + MN + + MN + + MN + + MN +
+ + + + + + + + + +
+......+ +......+ +......+ +......+ +......+
The LWAPP tunnel exists between the controller and
the APs. The MNs communicate with the APs through
the protocol defined by the 802.11 standard.
LWAPP APs, upon bootup, discover and join one of the
controllers and the controller pushes the configuration,
that includes the WLAN parameters, to the LWAPP APs.
The APs then encapsulate all the 802.11 frames from
wireless clients inside LWAPP frames and forward
the LWAPP frames to the controller.
GLOSSARY
Access Point ( AP )
An entity that contains an 802.11 medium access
control ( MAC ) and physical layer ( PHY ) interface
and provides access to the distribution services via
the wireless medium for associated clients.
LWAPP APs encapsulate all the 802.11 frames in
LWAPP frames and sends it to the controller to which
it is logically connected.
Basic Service Set Identifier (BSSID)
The identifier for the service set comprising of
all the 802.11 stations under the control of
one coordinating Access Point. This identifier
happens to be the MAC address of the dot11 radio
interface of the Access Point. The wireless
clients that associate with the Access Point
get the wired uplink through this particular
dot11 interface.
Central Controller ( CC )
The central entity that terminates the LWAPP protocol
tunnel from the LWAPP APs. Throughout this MIB,
this entity also referred to as 'controller'.
Light Weight Access Point Protocol ( LWAPP )
This is a generic protocol that defines the
communication between the Access Points and the
Central Controller.
Mobile Node ( MN )
A roaming 802.11 wireless device in a wireless
network associated with an access point.
Station Management (SMT)
This term refers to the internal management of the
802.11 protocol operations by the AP to work
cooperatively with the other APs and 802.11
devices in the network.
REFERENCE
[1] Part 11 Wireless LAN Medium Access Control ( MAC )
and Physical Layer ( PHY ) Specifications.
[2] Draft-obara-capwap-lwapp-00.txt, IETF Light
Weight Access Point Protocol."
REVISION "201002090000Z"
DESCRIPTION
"Updated:-
bsnDot11EssStaticWEPEncryptionType,
bsnDot11Ess8021xEncryptionType,
bsnMobileStationReasonCode,
bsnMobileStationProtocol,
bsnRogueAPRadioType,
bsnRogueAPAirespaceAPPreamble,
bsnAPMonitorOnlyMode,
bsnAPType,
bsnAPIfPhyChannelNumber,
bsnAPIfSniffChannel,
bsnRogueLocationDiscoveryProtocol,
bsnAPAuthCertificateType,
bsnStationReasonCode,
bsnAPAuthorizationFailureCause
bsnAPIfUpDownCause
Added:-
bsnRogueAPDetectingAPRadioType,
bsnRogueAPDetectingAPMacAddress,
bsnRogueAPMaxRssiRadioType,
bsnRogueAPClassType,
bsnRogueAPChannel,
bsnRogueAPDetectingAPName,
bsnRogueAPChannelWidth,
bsnAPIfRxNeighborChannel,
bsnAPIfRxNeighborChannelWidth,
bsnStandardSignatureInterval,
bsnCustomSignatureInterval,
bsnImpersonatingSourceMacAddr,
bsnAPPreviousChannelNumberTrapVariable,
bsnAPReasonCodeTrapVariable,
bsnNoiseBeforeChannelUpdate,
bsnNoiseAfterChannelUpdate,
bsnInterferenceBeforeChannelUpdate,
bsnInterferenceAfterChannelUpdate,
bsnPingTestMaxTimeInterval,
bsnPingTestMinTimeInterval,
bsnPingTestAvgTimeInterval,
bsnDot11StationDisassociate,
bsnDot11StationDeauthenticate,
bsnDot11StationAuthenticateFail,
bsnDot11StationAssociateFail,
bsnAPIfUp,
bsnAPIfDown,
bsnAPLoadProfileFailed,
bsnAPNoiseProfileFailed,
bsnAPInterferenceProfileFailed,
bsnAPCoverageProfileFailed,
bsnAPCurrentTxPowerChanged,
bsnAPCurrentChannelChanged,
bsnRogueAPDetected,
bsnAPLoadProfileUpdatedToPass,
bsnAPNoiseProfileUpdatedToPass,
bsnAPInterferenceProfileUpdatedToPass,
bsnAPCoverageProfileUpdatedToPass,
bsnApMaxRogueCountExceeded,
bsnApMaxRogueCountClear,
bsnDot11StationBlacklisted,
bsnDot11StationAssociate,
bsnApBigNavDosAttack,
bsnWpaMicErrorCounterActivated,
bsnRogueAPDetectedOnWiredNetwork,
bsnApHasNoRadioCards,
bsnDuplicateIpAddressReported,
bsnAPContainedAsARogue,
bsnAPRadioCardTxFailure,
bsnAPRadioCardTxFailureClear,
bsnAPRadioCardRxFailure,
bsnAPRadioCardRxFailureClear,
bsnAPImpersonationDetected,
bsnAPIPAddressFallback,
bsnRadarChannelDetected,
bsnRadarChannelCleared,
radioCoreDumpTrap,
invalidRadioTrap,
bsnEssGroup1,
bsnGlobalDot11Group1,
bsnAAAGroup1,
bsnTrapsGroupRev1,
bsnWrasObsGroup1,
bsnWrasTrapRev1,
bsnApGroupRev1,
bsnUtilityGroupRev1,
bsnWrasComplianceRev1
Obsoleted:-
bsnMobileStationExtStatsTable,
bsnSystemTimezoneDaylightSavings,
bsnAPUp,
bsnAPDown,
bsnWrasObsTrap,
bsnWrasTrap,
Deprecated:-
bsnGlobalDot11CountryIndex,
bsnGlobalDot11LoadBalancing,
bsnGlobalDot11bMaximumTransmitPowerLevel,
bsnGlobalDot11bFirstChannelNumber,
bsnGlobalDot11bNumberofChannels,
bsnGlobalDot11aMaximumTransmitPowerLevel,
bsnGlobalDot11aFirstChannelNumber,
bsnGlobalDot11aNumberofChannels,
bsnRadiusAuthCacheCredentialsLocally,
bsnAPGroupsVlanMappingTable,
bsnAPAssociated,
bsnAPRegulatoryDomainMismatch,
countryChangeTrap,
bsnEssGroup,
bsnApGroup,
bsnGlobalDot11Group,
bsnAAAGroup,
bsnTrapsGroup,
bsnUtilityGroup,
bsnWrasCompliance"
REVISION "200604100000Z"
DESCRIPTION
"Updated MIB with description and format"
REVISION "200510300000Z"
DESCRIPTION
"Airespace MIB"
::= { airespace 2 }
-- *******************************************************************
-- * Major sections
-- *******************************************************************
--
-- Airespace Wireless LAN Configuration Attributes
-- DEFINED AS "The bsnEss object provides all the
-- configuration and operation of Wireless LAN";
bsnEss OBJECT IDENTIFIER
::= { bsnWireless 1 }
-- Airespace AP Attributes
-- DEFINED AS "The bsnAP object provides all the
-- configuration and operation of Airespace APs that
-- are associated with the Switch";
bsnAP OBJECT IDENTIFIER
::= { bsnWireless 2 }
-- Airespace 802.11 Standard Attributes applied Globally
-- DEFINED AS "The bsnGlobalDot11 object class provides support for
-- standard 802.11 parameters for STM,MAC,RES,PHY which would be common
-- to all WLAN on Airespace"
bsnGlobalDot11 OBJECT IDENTIFIER
::= { bsnWireless 3 }
-- Airespace Radio Resource Management Configuration Parameters
-- DEFINED AS "The bsnRrm object provides all the
-- configuration and monitoring of RF Group parameters ";
bsnRrm OBJECT IDENTIFIER
::= { bsnWireless 4 }
-- Airespace Authentication, Authorization, and Accounting Attributes
-- DEFINED AS "The bsnAaa object class provides all standard
-- information to support configuration of RADIUS and TACACS+
-- client operation.";
bsnAAA OBJECT IDENTIFIER
::= { bsnWireless 5 }
-- Airespace Trap Configuration and Trap definition
-- DEFINED AS "The bsnTrap object class provides all notification that
-- Switch need to generate for Management System. It also provides to
-- configure generation of notification.
bsnTrap OBJECT IDENTIFIER
::= { bsnWireless 6 }
-- Airespace General Utilities
-- DEFINED AS "The bsnUtility object class provides utilities like
-- Ping, LinkTest, Syslog that are supported by the Switch
bsnUtility OBJECT IDENTIFIER
::= { bsnWireless 7 }
-- Airespace Mobility Group Parameters
-- DEFINED AS "The bsnMobility object class provides configuration
-- of Mobility Group and Mobility Statistics.
bsnMobility OBJECT IDENTIFIER
::= { bsnWireless 8 }
-- Airespace Global IpSec Group
-- DEFINED AS "The bsnIpsec object class provides configuration
-- of ID and CA Certificates
bsnIpsec OBJECT IDENTIFIER
::= { bsnWireless 9 }
bsnWrasGroups OBJECT IDENTIFIER
::= { bsnWireless 50 }
bsnWrasCompliances OBJECT IDENTIFIER
::= { bsnWireless 51 }
WEPKeytype ::= TEXTUAL-CONVENTION
STATUS current
DESCRIPTION
"This object indicates the WEP Key type."
SYNTAX OCTET STRING (SIZE (4..32))
ProfileState ::= TEXTUAL-CONVENTION
STATUS current
DESCRIPTION
"This object indicates the profile state."
SYNTAX INTEGER {
fail(0),
pass(1)
}
BsnTxtSignatureMacInfo ::= TEXTUAL-CONVENTION
STATUS current
DESCRIPTION
"This textual convention defines the pattern followed
by the LWAPP APs to perform signature analysis with
the signature and report the results to the
Controller.
The semantics are described as follows.
bsnSignatureMacAll - The Controller would set the
'Mac Info' parameter of the 'Signature Add LWAPP
Message' to this value to indicate the LWAPP AP that
the signature analysis and pattern matching should
be tracked and reported on a per-signature and
per-channel basis.
bsnSignatureMacIndividual - The Controller would set
the 'Mac Info' parameter of the 'Signature Add LWAPP
Message' to this value to indicate the LWAPP AP that
the signature analysis and pattern matching should
be tracked and reported separately for individual
MAC addresses, that are the sources of the received
802.11 data and/or management frames.
bsnStandardSigMacBoth - The Controller would set the
'Mac Info' parameter of the 'Signature Add LWAPP
Message' to this value to indicate the LWAPP AP that
the signature analysis and pattern matching should
be tracked on a per signature as well as per-MAC
address basis."
SYNTAX INTEGER {
bsnSignatureMacAll(0),
bsnSignatureMacIndividual(1),
bsnSignatureMacBoth(2)
}
BsnSignaturePatternOffSetStart ::= TEXTUAL-CONVENTION
STATUS current
DESCRIPTION
"This object indicates how an offset should be applied
while doing signature analysis for QOS and non-QOS
data frames. This is introduced since 802.11e QOS
frames have an additional 2-byte QOS header which
results in the current implementation not being
able to find the start of the date frames for
signature analysis. The semantics of the values are
as follows.
sigPattStartFrm - This indicates that the
required offset should be applied to the start of
the data frame, before performing pattern matching
of the signature on the data frame.
sigPattStartFrmBody - This value indicates
that the required offset should be applied to the
start of the frame body, after the header, before
performing pattern matching of the signature on the
data frame."
SYNTAX INTEGER {
sigPattStartFrm(0),
sigPattStartFrmBody(1)
}
-- ************************************************************
-- * MIB attribute OBJECT-TYPE definitions follow
-- ************************************************************
--
-- ***********************************************************
-- * bsnEss Objects
-- * Airespace IEEE 802.11 Extended Service Set Table
-- *
-- ***********************************************************
bsnDot11EssTable OBJECT-TYPE
SYNTAX SEQUENCE OF BsnDot11EssEntry
MAX-ACCESS not-accessible
STATUS current
DESCRIPTION
"Ess(WLAN) Configuration Table indexed by bsnDot11EssIndex.
Maximum of 17 WLANs can be created on Airespace Switch.
bsnDot11EssIndex of 17 is reserved for WLAN for Third Party
APs(non-Airespace APs)."
::= { bsnEss 1 }
bsnDot11EssEntry OBJECT-TYPE
SYNTAX BsnDot11EssEntry
MAX-ACCESS not-accessible
STATUS current
DESCRIPTION
"An entry in bsnDot11EssTable"
INDEX { bsnDot11EssIndex }
::= { bsnDot11EssTable 1 }
BsnDot11EssEntry ::= SEQUENCE {
bsnDot11EssIndex Unsigned32,
bsnDot11EssSsid DisplayString,
bsnDot11EssSessionTimeout Unsigned32,
bsnDot11EssMacFiltering INTEGER,
bsnDot11EssAdminStatus INTEGER,
bsnDot11EssSecurityAuthType INTEGER,
bsnDot11EssStaticWEPSecurity INTEGER,
bsnDot11EssStaticWEPEncryptionType INTEGER,
bsnDot11EssStaticWEPDefaultKey WEPKeytype,
bsnDot11EssStaticWEPKeyIndex INTEGER,
bsnDot11EssStaticWEPKeyFormat INTEGER,
bsnDot11Ess8021xSecurity INTEGER,
bsnDot11Ess8021xEncryptionType INTEGER,
bsnDot11EssWPASecurity INTEGER,
bsnDot11EssWPAEncryptionType INTEGER,
bsnDot11EssIpsecSecurity INTEGER,
bsnDot11EssVpnEncrTransform INTEGER,
bsnDot11EssVpnAuthTransform INTEGER,
bsnDot11EssVpnIkeAuthMode INTEGER,
bsnDot11EssVpnSharedKey OCTET STRING,
bsnDot11EssVpnSharedKeySize Unsigned32,
bsnDot11EssVpnIkePhase1Mode INTEGER,
bsnDot11EssVpnIkeLifetime Integer32,
bsnDot11EssVpnIkeDHGroup INTEGER,
bsnDot11EssIpsecPassthruSecurity INTEGER,
bsnDot11EssVpnPassthruGateway IpAddress,
bsnDot11EssWebSecurity INTEGER,
bsnDot11EssRadioPolicy INTEGER,
bsnDot11EssQualityOfService INTEGER,
bsnDot11EssDhcpRequired INTEGER,
bsnDot11EssDhcpServerIpAddress IpAddress,
bsnDot11EssVpnContivityMode INTEGER,
bsnDot11EssVpnQotdServerAddress IpAddress,
bsnDot11EssBlacklistTimeout Integer32,
bsnDot11EssNumberOfMobileStations Counter32,
bsnDot11EssWebPassthru INTEGER,
bsnDot11EssCraniteSecurity INTEGER,
bsnDot11EssBlacklistingCapability INTEGER,
bsnDot11EssInterfaceName DisplayString,
bsnDot11EssAclName DisplayString,
bsnDot11EssAAAOverride INTEGER,
bsnDot11EssWPAAuthKeyMgmtMode INTEGER,
bsnDot11EssWPAAuthPresharedKey OCTET STRING,
bsnDot11EssWepAllowSharedKeyAuth INTEGER,
bsnDot11EssFortressSecurity INTEGER,
bsnDot11EssL2tpSecurity INTEGER,
bsnDot11EssWPAAuthPresharedKeyHex OCTET STRING,
bsnDot11EssBroadcastSsid INTEGER,
bsnDot11EssExternalPolicyValidation INTEGER,
bsnDot11EssRSNSecurity INTEGER,
bsnDot11EssRSNWPACompatibilityMode INTEGER,
bsnDot11EssRSNAllowTKIPClients INTEGER,
bsnDot11EssRSNAuthKeyMgmtMode INTEGER,
bsnDot11EssRSNAuthPresharedKey OCTET STRING,
bsnDot11EssRSNAuthPresharedKeyHex OCTET STRING,
bsnDot11EssIPv6Bridging INTEGER,
bsnDot11EssRowStatus RowStatus,
bsnDot11EssWmePolicySetting INTEGER,
bsnDot11Ess80211ePolicySetting INTEGER,
bsnDot11EssWebPassthroughEmail INTEGER,
bsnDot11Ess7920PhoneSupport INTEGER,
bsnDot11EssRadiusAuthPrimaryServer DisplayString,
bsnDot11EssRadiusAuthSecondaryServer DisplayString,
bsnDot11EssRadiusAuthTertiaryServer DisplayString,
bsnDot11EssRadiusAcctPrimaryServer DisplayString,
bsnDot11EssRadiusAcctSecondaryServer DisplayString,
bsnDot11EssRadiusAcctTertiaryServer DisplayString
}
bsnDot11EssIndex OBJECT-TYPE
SYNTAX Unsigned32 (1..517)
MAX-ACCESS read-create
STATUS current
DESCRIPTION
"Index of the Ess(WLAN) within Airespace Switch.
Airespace Switch supports 517 ESS(Wlans) so index
will be from 1 to 517. 517 is to be used for ESS(WLAN)
created for support of Third Party APs(non-Airespace APs)"
::= { bsnDot11EssEntry 1 }
bsnDot11EssSsid OBJECT-TYPE
SYNTAX DisplayString (SIZE (1..32))
MAX-ACCESS read-create
STATUS current
DESCRIPTION
"SSID assigned to ESS(WLAN)"
::= { bsnDot11EssEntry 2 }
bsnDot11EssSessionTimeout OBJECT-TYPE
SYNTAX Unsigned32 (0..86400)
MAX-ACCESS read-create
STATUS current
DESCRIPTION
"Maximum time of a Mobile Station session.
Value of 0 means infinite time(no timeout set)."
DEFVAL { 0 }
::= { bsnDot11EssEntry 4 }
bsnDot11EssMacFiltering OBJECT-TYPE
SYNTAX INTEGER {
disable(0),
enable(1)
}
MAX-ACCESS read-create
STATUS current
DESCRIPTION
"A type of security policy for Mobile Stations
(Clients). Select to filter clients by MAC address.
By selecting this Security, you need to create
MacFilters in bsnUsersTable or have MacFilters
configured on Radius Servers specified in
bsnRadiusAuthenticationTable"
DEFVAL { disable }
::= { bsnDot11EssEntry 5 }
bsnDot11EssAdminStatus OBJECT-TYPE
SYNTAX INTEGER {
disable(0),
enable(1)
}
MAX-ACCESS read-create
STATUS current
DESCRIPTION
"Administrative Status of ESS(WLAN). By disabling an
ESS the corresponding SSID is no longer broadcasted
in AP beacons."
DEFVAL { disable }
::= { bsnDot11EssEntry 6 }
bsnDot11EssSecurityAuthType OBJECT-TYPE
SYNTAX INTEGER {
authOpen(0),
authSharedKey(1),
authCiscoLeap(128)
}
MAX-ACCESS read-only
STATUS current
DESCRIPTION
"Type of 802.11 Authentication."
DEFVAL { authOpen }
::= { bsnDot11EssEntry 7 }
bsnDot11EssStaticWEPSecurity OBJECT-TYPE
SYNTAX INTEGER {
enable(1),
disable(0)
}
MAX-ACCESS read-create
STATUS current
DESCRIPTION
"Status of Static WEP Security policy. If enabled, WEP
Encryption WEP Default Key, Key Index and Key Format should
also be specified."
DEFVAL { disable }
::= { bsnDot11EssEntry 8 }
bsnDot11EssStaticWEPEncryptionType OBJECT-TYPE
SYNTAX INTEGER {
wep104(0),
wep40(2),
wep128(3),
notset(4)
}
MAX-ACCESS read-create
STATUS current
DESCRIPTION
"Type of Static WEP Encryption. Length of key specified in
Default Key depends on this attribute."
DEFVAL { wep104 }
::= { bsnDot11EssEntry 9 }
bsnDot11EssStaticWEPDefaultKey OBJECT-TYPE
SYNTAX WEPKeytype
MAX-ACCESS read-create
STATUS current
DESCRIPTION
"Static WEP Default Key. For wep104 encryption either
26 bit hex key or 13 bit ascii key should be
specified. For wep40 encryption 10 bit hex key or 5
bit ascii key should be specified. For wep128
encryption 32 bit hex key or 16 bit ascii key should
be specified."
::= { bsnDot11EssEntry 10 }
bsnDot11EssStaticWEPKeyIndex OBJECT-TYPE
SYNTAX INTEGER (0..4)
MAX-ACCESS read-create
STATUS current
DESCRIPTION
"According to 802.11 standard 4 keys are supported.
So 802.11 Mobile Stations(Client) can have upto 4
keys. This index is for informing Mobile Station
which key it should use for Static WEP Authentication"
::= { bsnDot11EssEntry 11 }
bsnDot11EssStaticWEPKeyFormat OBJECT-TYPE
SYNTAX INTEGER {
hex(1),
ascii(2),
default(0)
}
MAX-ACCESS read-create
STATUS current
DESCRIPTION
"This is not persistant.Reading this attribute will
always return default. The format of the key specified
in Airespace switch keeps record of the Index."
::= { bsnDot11EssEntry 12 }
bsnDot11Ess8021xSecurity OBJECT-TYPE
SYNTAX INTEGER {
enable(1),
disable(0)
}
MAX-ACCESS read-create
STATUS current
DESCRIPTION
"Status of 802.1X security policy."
DEFVAL { enable }
::= { bsnDot11EssEntry 13 }
bsnDot11Ess8021xEncryptionType OBJECT-TYPE
SYNTAX INTEGER {
wep104(0),
wep40(2),
wep128(3),
none(4)
}
MAX-ACCESS read-create
STATUS current
DESCRIPTION
"Type of 802.1X Encryption. This applies if
bsnDot11Ess8021xSecurity is in enabled state."
DEFVAL { wep104 }
::= { bsnDot11EssEntry 14 }
bsnDot11EssWPASecurity OBJECT-TYPE
SYNTAX INTEGER {
enable(1),
disable(0)
}
MAX-ACCESS read-create
STATUS deprecated
DESCRIPTION
"Status of WPA security policy.
This has been deprecated for cLWSecDot11EssCckmTable."
DEFVAL { disable }
::= { bsnDot11EssEntry 16 }
bsnDot11EssWPAEncryptionType OBJECT-TYPE
SYNTAX INTEGER {
wep104(0),
wep40(2),
wep128(3),
tkipmic(5)
}
MAX-ACCESS read-create
STATUS deprecated
DESCRIPTION
"Type of WPA Encryption. This applies when
bsnDot11EssWPASecurity is in enable state.
This has been deprecated for cLWSecDot11EssCckmTable."
DEFVAL { tkipmic }
::= { bsnDot11EssEntry 17 }
bsnDot11EssIpsecSecurity OBJECT-TYPE
SYNTAX INTEGER {
enable(1),
disable(0)
}
MAX-ACCESS read-create
STATUS current
DESCRIPTION
"Status of IpSec (VPN) security policy. Note that this
cannot be applied with Web security policy."
DEFVAL { disable }
::= { bsnDot11EssEntry 18 }
bsnDot11EssVpnEncrTransform OBJECT-TYPE
SYNTAX INTEGER {
tripleDes(0),
none(1),
des(2),
aesCbc(3)
}
MAX-ACCESS read-create
STATUS current
DESCRIPTION
"The Encryption algorithm employed by this Vpn(IpSec)
Encryption. This applies only when
bsnDot11EssIpsecSecurity is in enable state."
DEFVAL { tripleDes }
::= { bsnDot11EssEntry 19 }
bsnDot11EssVpnAuthTransform OBJECT-TYPE
SYNTAX INTEGER {
none(1),
hmacMd5(2),
hmacSha1(0)
}
MAX-ACCESS read-create
STATUS current
DESCRIPTION
"The Hash algorithm employed by the Vpn Encrpytion.
This applies only when bsnDot11EssIpsecSecurity is in
enable state."
DEFVAL { hmacSha1 }
::= { bsnDot11EssEntry 20 }
bsnDot11EssVpnIkeAuthMode OBJECT-TYPE
SYNTAX INTEGER {
xauthEnablePsk(0),
certificate(2),
presharedKey(3)
}
MAX-ACCESS read-create
STATUS current
DESCRIPTION
"The authentication type of the SA. It could be a
certificate or a pre-shared key or xauthEnablePsk.
This applies only when bsnDot11EssIpsecSecurity is
in enable state."
DEFVAL { presharedKey }
::= { bsnDot11EssEntry 21 }
bsnDot11EssVpnSharedKey OBJECT-TYPE
SYNTAX OCTET STRING (SIZE (1..128))
MAX-ACCESS read-create
STATUS current
DESCRIPTION
"VPN Shared Key. This applies only when
bsnDot11EssVpnSharedKey is in enable state and
bsnDot11EssVpnIkeAuthMode is xauthEnablePsk or
presharedKey."
::= { bsnDot11EssEntry 22 }
bsnDot11EssVpnSharedKeySize OBJECT-TYPE
SYNTAX Unsigned32 (0..128)
MAX-ACCESS read-only
STATUS current
DESCRIPTION
"VPN Shared Key size. This applies only when
bsnDot11EssVpnSharedKey is in enable state
and bsnDot11EssVpnIkeAuthMode is xauthEnablePsk or
presharedKey."
::= { bsnDot11EssEntry 23 }
bsnDot11EssVpnIkePhase1Mode OBJECT-TYPE
SYNTAX INTEGER {
agressive(0),
main(1)
}
MAX-ACCESS read-create
STATUS current
DESCRIPTION
"VPN IKE Phase 1 Mode type as per the IpSec standards.
This applies only when bsnDot11EssIpsecSecurity is in
enable state."
DEFVAL { main }
::= { bsnDot11EssEntry 24 }
bsnDot11EssVpnIkeLifetime OBJECT-TYPE
SYNTAX Integer32 (1800..345600)
MAX-ACCESS read-create
STATUS current
DESCRIPTION
"Vpn IKE's Lifetime.
This applies only when bsnDot11EssIpsecSecurity is in
enable state."
DEFVAL { 57600 }
::= { bsnDot11EssEntry 25 }
bsnDot11EssVpnIkeDHGroup OBJECT-TYPE
SYNTAX INTEGER {
group2(0),
group1(1),
group5(4)
}
MAX-ACCESS read-create
STATUS current
DESCRIPTION
"IKE's Diffie-Hellman Group.
This applies only when bsnDot11EssIpsecSecurity is in
enable state."
DEFVAL { group2 }
::= { bsnDot11EssEntry 26 }
bsnDot11EssIpsecPassthruSecurity OBJECT-TYPE
SYNTAX INTEGER {
enable(1),
disable(0)
}
MAX-ACCESS read-create
STATUS current
DESCRIPTION
"Status of IpSec Passthru security policy."
DEFVAL { disable }
::= { bsnDot11EssEntry 27 }
bsnDot11EssVpnPassthruGateway OBJECT-TYPE
SYNTAX IpAddress
MAX-ACCESS read-create
STATUS current
DESCRIPTION
"Ip address of VpnPassthru Gateway.
This applies only when bsnDot11EssIpsecPassthruSecurity
is in enable state."
DEFVAL { '00000000'H }
::= { bsnDot11EssEntry 28 }
bsnDot11EssWebSecurity OBJECT-TYPE
SYNTAX INTEGER {
enable(1),
disable(0)
}
MAX-ACCESS read-create
STATUS current
DESCRIPTION
"Status of Web security policy. Note this policy cannot be
applied with IpSec security policy."
DEFVAL { disable }
::= { bsnDot11EssEntry 29 }
bsnDot11EssRadioPolicy OBJECT-TYPE
SYNTAX INTEGER {
all(0),
dot11aOnly(2),
dot11bOnly(1),
dot11gOnly(3),
dot11bgOnly(4),
dot11agOnly(5),
dot11abOnly(6)
}
MAX-ACCESS read-create
STATUS current
DESCRIPTION
"Radio Policy for a WLAN. It can either be All where it
will be applicable to ALL types of protocols or it can be
set to apply to combinations of 802.11a, 802.11b, 802.11g."
DEFVAL { all }
::= { bsnDot11EssEntry 30 }
bsnDot11EssQualityOfService OBJECT-TYPE
SYNTAX INTEGER {
bronze(0),
silver(1),
gold(2),
platinum(3)
}
MAX-ACCESS read-create
STATUS current
DESCRIPTION
"Quality of Service for a WLAN.Services such as VoIP should
be set to Gold while non-discriminating services such as
messaging can be set to Bronze."
DEFVAL { bronze }
::= { bsnDot11EssEntry 31 }
bsnDot11EssDhcpRequired OBJECT-TYPE
SYNTAX INTEGER {
disable(0),
enable(1)
}
MAX-ACCESS read-create
STATUS current
DESCRIPTION
"DHCP required for all clients on this WLAN"
DEFVAL { disable }
::= { bsnDot11EssEntry 32 }
bsnDot11EssDhcpServerIpAddress OBJECT-TYPE
SYNTAX IpAddress
MAX-ACCESS read-create
STATUS current
DESCRIPTION
"IP Address of the DHCP Server. Make it 0.0.0.0 to disable
DHCP Relay. Any value other than 0.0.0.0, it will be
assumed that DHCP Relay is turned on."
DEFVAL { '00000000'H }
::= { bsnDot11EssEntry 33 }
bsnDot11EssVpnContivityMode OBJECT-TYPE
SYNTAX INTEGER {
disable(0),
enable(1)
}
MAX-ACCESS read-create
STATUS current
DESCRIPTION
"Specifies if contivity mode for the IpSec is enabled.
If enabled, user needs to specify the Quote of the Day
Server's IPAddress in bsnDot11EssVpnQotdServerAddress."
DEFVAL { disable }
::= { bsnDot11EssEntry 34 }
bsnDot11EssVpnQotdServerAddress OBJECT-TYPE
SYNTAX IpAddress
MAX-ACCESS read-create
STATUS current
DESCRIPTION
"IP Address of the Quote of the Day Server."
DEFVAL { '00000000'H }
::= { bsnDot11EssEntry 35 }
bsnDot11EssBlacklistTimeout OBJECT-TYPE
SYNTAX Integer32 (0..2147483647)
MAX-ACCESS read-create
STATUS current
DESCRIPTION
"Set the timeout for blacklisted Mobile Stations after
which the mobile station will be automatically
de-authenticated. Mobile Station are blacklisted by MAC
address and their status can be obtained from
bsnMobileStationStatus.
A timeout setting of 0 indicates no blacklist timeout is
set and administrative control
(bsnMobileStationDeleteAction ) is required to
deauthenticate the station."
DEFVAL { 60 }
::= { bsnDot11EssEntry 37 }
bsnDot11EssNumberOfMobileStations OBJECT-TYPE
SYNTAX Counter32
MAX-ACCESS read-only
STATUS current
DESCRIPTION
"No of Mobile Stations currently associated with the
WLAN."
::= { bsnDot11EssEntry 38 }
bsnDot11EssWebPassthru OBJECT-TYPE
SYNTAX INTEGER {
enable(1),
disable(0)
}
MAX-ACCESS read-create
STATUS current
DESCRIPTION