Reference record for OID 1.3.6.1.4.1.9.9.518


parent
1.3.6.1.4.1.9.9 (ciscoMgmt)
node code
518
node name
ciscoLwappMfpMIB
dot oid
1.3.6.1.4.1.9.9.518
type
OBJECT IDENTIFIER
asn1 oid
  • {iso(1) identified-organization(3) dod(6) internet(1) private(4) enterprise(1) cisco(9) ciscoMgmt(9) ciscoLwappMfpMIB(518)}
  • {iso(1) identified-organization(3) dod(6) internet(1) private(4) enterprises(1) cisco(9) ciscoMgmt(9) ciscoLwappMfpMIB(518)}
  • {iso(1) org(3) dod(6) internet(1) private(4) enterprise(1) cisco(9) ciscoMgmt(9) ciscoLwappMfpMIB(518)}
  • {iso(1) org(3) dod(6) internet(1) private(4) enterprises(1) cisco(9) ciscoMgmt(9) ciscoLwappMfpMIB(518)}
  • {iso(1) iso-identified-organization(3) dod(6) internet(1) private(4) enterprise(1) cisco(9) ciscoMgmt(9) ciscoLwappMfpMIB(518)}
  • {iso(1) iso-identified-organization(3) dod(6) internet(1) private(4) enterprises(1) cisco(9) ciscoMgmt(9) ciscoLwappMfpMIB(518)}
  • iri oid
  • /iso/identified-organization/dod/internet/private/enterprise/cisco/ciscoMgmt/ciscoLwappMfpMIB
  • /iso/identified-organization/dod/internet/private/enterprises/cisco/ciscoMgmt/ciscoLwappMfpMIB
  • /iso/org/dod/internet/private/enterprise/cisco/ciscoMgmt/ciscoLwappMfpMIB
  • /iso/org/dod/internet/private/enterprises/cisco/ciscoMgmt/ciscoLwappMfpMIB
  • /iso/iso-identified-organization/dod/internet/private/enterprise/cisco/ciscoMgmt/ciscoLwappMfpMIB
  • /iso/iso-identified-organization/dod/internet/private/enterprises/cisco/ciscoMgmt/ciscoLwappMfpMIB
  • iri by oid_info
    /ISO/Identified-Organization/6/1/4/1/9/9/518

    Description by circitor

    This MIB is intended to be implemented on all those
    devices operating as Central Controllers (CC) that
    terminate the Light Weight Access Point Protocol
    tunnel from Light-weight LWAPP Access Points.

    This MIB instrumentation provides the parameters used
    by the controller to control and monitor the behavior
    of the associated Access Points when following the
    newly defined Management Frame Protocol. The
    controller would pass the MFP settings configured by
    the user through this MIB to the APs through LWAPP
    messages. The APs then begin to validate and verify
    the integrity of 802.11 Management frames and report
    the anomalies found, if any, to the controller.

    The relationship between CC and the LWAPP APs
    can be depicted as follows.

    +......+ +......+ +......+ +......+
    + + + + + + + +
    + CC + + CC + + CC + + CC +
    + + + + + + + +
    +......+ +......+ +......+ +......+
    .. . . .
    .. . . .
    . . . . .
    . . . . .
    . . . . .
    . . . . .
    +......+ +......+ +......+ +......+ +......+
    + + + + + + + + + +
    + AP + + AP + + AP + + AP + + AP +
    + + + + + + + + + +
    +......+ +......+ +......+ +......+ +......+
    . . . .
    . . . . .
    . . . . .
    . . . . .
    . . . . .
    +......+ +......+ +......+ +......+ +......+
    + + + + + + + + + +
    + MN + + MN + + MN + + MN + + MN +
    + + + + + + + + + +
    +......+ +......+ +......+ +......+ +......+

    The LWAPP tunnel exists between the controller and
    the APs. The MNs communicate with the APs through
    the protocol defined by the 802.11 standard.

    LWAPP APs, upon bootup, discover and join one of the
    controllers and the controller pushes the configuration,
    which includes the WLAN parameters, to the LWAPP APs.
    The APs then encapsulate all the 802.11 frames from
    wireless clients inside LWAPP frames and forward
    the LWAPP frames to the controller. Reference [2]
    explains in detail about the communication between
    the controller and APs, while Reference [1] explains
    the AP-MN communication.

    To secure the 802.11 management traffic, the controller
    and the APs perform specific roles. The controller
    acts as the central entity to generate and distribute
    signature keys using which the APs generate integrity
    check values, also known as signatures, for individual
    management frames. The APs append this signature in
    the form of an Information Element to the respective
    management frame to be transmitted. This is needed to
    isolate those potential rogue APs whose frames may not
    carry the frame signature.

    The APs use the signature keys, generated and pushed
    to them by the controller for each BSSID reported
    as heard by the APs, to validate the integrity of the
    the management traffic originating from various
    802.11 sources. Any anomalies observed by the APs
    are reported to the controller. The controller
    makes the information about such events available
    for a network management Station in the form of
    notifications.

    GLOSSARY

    Access Point ( AP )

    An entity that contains an 802.11 media access
    control ( MAC ) and physical layer ( PHY ) interface
    and provides access to the distribution services via
    the wireless medium for associated clients.

    LWAPP APs encapsulate all the 802.11 frames in
    LWAPP frames and sends them to the controller to which
    it is logically connected.

    AP-Authentication

    With this feature enabled, the Access Points sending
    radio resource management neighbor packets with
    different RF network names will be reported as rogues.

    Basic Service Set Identifier ( BSSID )

    The identifier of the Basic Service Set controlled by
    a single coordination function. The identifier is
    usually the MAC address of the radio interface that
    hosts the BSS.

    Central Controller ( CC )

    The central entity that terminates the LWAPP protocol
    tunnel from the LWAPP APs. Throughout this MIB,
    this entity is also referred to as 'controller'.

    Light Weight Access Point Protocol ( LWAPP )

    This is a generic protocol that defines the
    communication between the Access Points and the
    Central Controller.

    Management Frame Protection ( MFP )

    A proprietary mechanism devised to integrity protect
    the otherwise unprotected management frames of the
    802.11 protocol specification.

    Message Integrity Check ( MIC )

    A checksum computed on a sequence of bytes and made
    known to the receiving party in a data communication,
    to let the receiving party make sure the bytes
    received were not compromised enroute.

    Mobile Node ( MN )

    A roaming 802.11 wireless device in a wireless
    network associated with an access point.

    Network Management Station ( NMS )

    The system through which the network administrator
    manages the controller and the APs associated to
    it.

    REFERENCE

    [1] Wireless LAN Medium Access Control ( MAC ) and
    Physical Layer ( PHY ) Specifications, ANSI/IEEE
    Std 802.11, 1999 Edition.

    [2] Draft-obara-Capwap-lwapp-00.txt, IETF Light
    Weight Access Point Protocol

    Parsed from file CISCO-LWAPP-MFP-MIB.mib
    Module: CISCO-LWAPP-MFP-MIB

    Description by mibdepot

    This MIB is intended to be implemented on all those
    devices operating as Central Controllers (CC) that
    terminate the Light Weight Access Point Protocol
    tunnel from Light-weight LWAPP Access Points.

    This MIB instrumentation provides the parameters used
    by the controller to control and monitor the behavior
    of the associated Access Points when following the
    newly defined Management Frame Protocol. The
    controller would pass the MFP settings configured by
    the user through this MIB to the APs through LWAPP
    messages. The APs then begin to validate and verify
    the integrity of 802.11 Management frames and report
    the anomalies found, if any, to the controller.

    The relationship between CC and the LWAPP APs
    can be depicted as follows.

    +......+ +......+ +......+ +......+
    + + + + + + + +
    + CC + + CC + + CC + + CC +
    + + + + + + + +
    +......+ +......+ +......+ +......+
    .. . . .
    .. . . .
    . . . . .
    . . . . .
    . . . . .
    . . . . .
    +......+ +......+ +......+ +......+ +......+
    + + + + + + + + + +
    + AP + + AP + + AP + + AP + + AP +
    + + + + + + + + + +
    +......+ +......+ +......+ +......+ +......+
    . . . .
    . . . . .
    . . . . .
    . . . . .
    . . . . .
    +......+ +......+ +......+ +......+ +......+
    + + + + + + + + + +
    + MN + + MN + + MN + + MN + + MN +
    + + + + + + + + + +
    +......+ +......+ +......+ +......+ +......+

    The LWAPP tunnel exists between the controller and
    the APs. The MNs communicate with the APs through
    the protocol defined by the 802.11 standard.

    LWAPP APs, upon bootup, discover and join one of the
    controllers and the controller pushes the configuration,
    which includes the WLAN parameters, to the LWAPP APs.
    The APs then encapsulate all the 802.11 frames from
    wireless clients inside LWAPP frames and forward
    the LWAPP frames to the controller. Reference [2]
    explains in detail about the communication between
    the controller and APs, while Reference [1] explains
    the AP-MN communication.

    To secure the 802.11 management traffic, the controller
    and the APs perform specific roles. The controller
    acts as the central entity to generate and distribute
    signature keys using which the APs generate integrity
    check values, also known as signatures, for individual
    management frames. The APs append this signature in
    the form of an Information Element to the respective
    management frame to be transmitted. This is needed to
    isolate those potential rogue APs whose frames may not
    carry the frame signature.

    The APs use the signature keys, generated and pushed
    to them by the controller for each BSSID reported
    as heard by the APs, to validate the integrity of the
    the management traffic originating from various
    802.11 sources. Any anomalies observed by the APs
    are reported to the controller. The controller
    makes the information about such events available
    for a network management Station in the form of
    notifications.

    GLOSSARY

    Access Point ( AP )

    An entity that contains an 802.11 media access
    control ( MAC ) and physical layer ( PHY ) interface
    and provides access to the distribution services via
    the wireless medium for associated clients.

    LWAPP APs encapsulate all the 802.11 frames in
    LWAPP frames and sends them to the controller to which
    it is logically connected.

    AP-Authentication

    With this feature enabled, the Access Points sending
    radio resource management neighbor packets with
    different RF network names will be reported as rogues.

    Basic Service Set Identifier ( BSSID )

    The identifier of the Basic Service Set controlled by
    a single coordination function. The identifier is
    usually the MAC address of the radio interface that
    hosts the BSS.

    Central Controller ( CC )

    The central entity that terminates the LWAPP protocol
    tunnel from the LWAPP APs. Throughout this MIB,
    this entity is also referred to as 'controller'.

    Light Weight Access Point Protocol ( LWAPP )

    This is a generic protocol that defines the
    communication between the Access Points and the
    Central Controller.

    Management Frame Protection ( MFP )

    A proprietary mechanism devised to integrity protect
    the otherwise unprotected management frames of the
    802.11 protocol specification.

    Message Integrity Check ( MIC )

    A checksum computed on a sequence of bytes and made
    known to the receiving party in a data communication,
    to let the receiving party make sure the bytes
    received were not compromised enroute.

    Mobile Node ( MN )

    A roaming 802.11 wireless device in a wireless
    network associated with an access point.

    Network Management Station ( NMS )

    The system through which the network administrator
    manages the controller and the APs associated to
    it.

    REFERENCE

    [1] Wireless LAN Medium Access Control ( MAC ) and
    Physical Layer ( PHY ) Specifications, ANSI/IEEE
    Std 802.11, 1999 Edition.

    [2] Draft-obara-Capwap-lwapp-00.txt, IETF Light
    Weight Access Point Protocol

    Parsed from file CISCO-LWAPP-MFP-MIB.my.txt
    Company: None
    Module: CISCO-LWAPP-MFP-MIB

    Description by cisco

    This MIB is intended to be implemented on all those
    devices operating as Central Controllers (CC) that
    terminate the Light Weight Access Point Protocol
    tunnel from Light-weight LWAPP Access Points.

    This MIB instrumentation provides the parameters used
    by the controller to control and monitor the behavior
    of the associated Access Points when following the
    newly defined Management Frame Protocol. The
    controller would pass the MFP settings configured by
    the user through this MIB to the APs through LWAPP
    messages. The APs then begin to validate and verify
    the integrity of 802.11 Management frames and report
    the anomalies found, if any, to the controller.

    The relationship between CC and the LWAPP APs
    can be depicted as follows.

    +......+ +......+ +......+ +......+
    + + + + + + + +
    + CC + + CC + + CC + + CC +
    + + + + + + + +
    +......+ +......+ +......+ +......+
    .. . . .
    .. . . .
    . . . . .
    . . . . .
    . . . . .
    . . . . .
    +......+ +......+ +......+ +......+ +......+
    + + + + + + + + + +
    + AP + + AP + + AP + + AP + + AP +
    + + + + + + + + + +
    +......+ +......+ +......+ +......+ +......+
    . . . .
    . . . . .
    . . . . .
    . . . . .
    . . . . .
    +......+ +......+ +......+ +......+ +......+
    + + + + + + + + + +
    + MN + + MN + + MN + + MN + + MN +
    + + + + + + + + + +
    +......+ +......+ +......+ +......+ +......+

    The LWAPP tunnel exists between the controller and
    the APs. The MNs communicate with the APs through
    the protocol defined by the 802.11 standard.

    LWAPP APs, upon bootup, discover and join one of the
    controllers and the controller pushes the configuration,
    which includes the WLAN parameters, to the LWAPP APs.
    The APs then encapsulate all the 802.11 frames from
    wireless clients inside LWAPP frames and forward
    the LWAPP frames to the controller. Reference [2]
    explains in detail about the communication between
    the controller and APs, while Reference [1] explains
    the AP-MN communication.

    To secure the 802.11 management traffic, the controller
    and the APs perform specific roles. The controller
    acts as the central entity to generate and distribute
    signature keys using which the APs generate integrity
    check values, also known as signatures, for individual
    management frames. The APs append this signature in
    the form of an Information Element to the respective
    management frame to be transmitted. This is needed to
    isolate those potential rogue APs whose frames may not
    carry the frame signature.

    The APs use the signature keys, generated and pushed
    to them by the controller for each BSSID reported
    as heard by the APs, to validate the integrity of the
    the management traffic originating from various
    802.11 sources. Any anomalies observed by the APs
    are reported to the controller. The controller
    makes the information about such events available
    for a network management Station in the form of
    notifications.

    GLOSSARY

    Access Point ( AP )

    An entity that contains an 802.11 media access
    control ( MAC ) and physical layer ( PHY ) interface
    and provides access to the distribution services via
    the wireless medium for associated clients.

    LWAPP APs encapsulate all the 802.11 frames in
    LWAPP frames and sends them to the controller to which
    it is logically connected.

    AP-Authentication

    With this feature enabled, the Access Points sending
    radio resource management neighbor packets with
    different RF network names will be reported as rogues.

    Basic Service Set Identifier ( BSSID )

    The identifier of the Basic Service Set controlled by
    a single coordination function. The identifier is
    usually the MAC address of the radio interface that
    hosts the BSS.

    Central Controller ( CC )

    The central entity that terminates the LWAPP protocol
    tunnel from the LWAPP APs. Throughout this MIB,
    this entity is also referred to as 'controller'.

    Light Weight Access Point Protocol ( LWAPP )

    This is a generic protocol that defines the
    communication between the Access Points and the
    Central Controller.

    Management Frame Protection ( MFP )

    A proprietary mechanism devised to integrity protect
    the otherwise unprotected management frames of the
    802.11 protocol specification.

    Message Integrity Check ( MIC )

    A checksum computed on a sequence of bytes and made
    known to the receiving party in a data communication,
    to let the receiving party make sure the bytes
    received were not compromised enroute.

    Mobile Node ( MN )

    A roaming 802.11 wireless device in a wireless
    network associated with an access point.

    Network Management Station ( NMS )

    The system through which the network administrator
    manages the controller and the APs associated to
    it.

    REFERENCE

    [1] Wireless LAN Medium Access Control ( MAC ) and
    Physical Layer ( PHY ) Specifications, ANSI/IEEE
    Std 802.11, 1999 Edition.

    [2] Draft-obara-Capwap-lwapp-00.txt, IETF Light
    Weight Access Point Protocol

    Information by circitor

    ciscoLwappMfpMIB MODULE-IDENTITY LAST-UPDATED "200701201545Z" ORGANIZATION "Cisco Systems Inc." CONTACT-INFO "Cisco Systems, Customer Service Postal: 170 West Tasman Drive San Jose, CA 95134 USA Tel: +1 800 553-NETS Email: [email protected]" DESCRIPTION "This MIB is intended to be implemented on all those devices operating as Central Controllers (CC) that terminate the Light Weight Access Point Protocol tunnel from Light-weight LWAPP Access Points. This MIB instrumentation provides the parameters used by the controller to control and monitor the behavior of the associated Access Points when following the newly defined Management Frame Protocol. The controller would pass the MFP settings configured by the user through this MIB to the APs through LWAPP messages. The APs then begin to validate and verify the integrity of 802.11 Management frames and report the anomalies found, if any, to the controller. The relationship between CC and the LWAPP APs can be depicted as follows. +......+ +......+ +......+ +......+ + + + + + + + + + CC + + CC + + CC + + CC + + + + + + + + + +......+ +......+ +......+ +......+ .. . . . .. . . . . . . . . . . . . . . . . . . . . . . . +......+ +......+ +......+ +......+ +......+ + + + + + + + + + + + AP + + AP + + AP + + AP + + AP + + + + + + + + + + + +......+ +......+ +......+ +......+ +......+ . . . . . . . . . . . . . . . . . . . . . . . . +......+ +......+ +......+ +......+ +......+ + + + + + + + + + + + MN + + MN + + MN + + MN + + MN + + + + + + + + + + + +......+ +......+ +......+ +......+ +......+ The LWAPP tunnel exists between the controller and the APs. The MNs communicate with the APs through the protocol defined by the 802.11 standard. LWAPP APs, upon bootup, discover and join one of the controllers and the controller pushes the configuration, which includes the WLAN parameters, to the LWAPP APs. The APs then encapsulate all the 802.11 frames from wireless clients inside LWAPP frames and forward the LWAPP frames to the controller. Reference [2] explains in detail about the communication between the controller and APs, while Reference [1] explains the AP-MN communication. To secure the 802.11 management traffic, the controller and the APs perform specific roles. The controller acts as the central entity to generate and distribute signature keys using which the APs generate integrity check values, also known as signatures, for individual management frames. The APs append this signature in the form of an Information Element to the respective management frame to be transmitted. This is needed to isolate those potential rogue APs whose frames may not carry the frame signature. The APs use the signature keys, generated and pushed to them by the controller for each BSSID reported as heard by the APs, to validate the integrity of the the management traffic originating from various 802.11 sources. Any anomalies observed by the APs are reported to the controller. The controller makes the information about such events available for a network management Station in the form of notifications. GLOSSARY Access Point ( AP ) An entity that contains an 802.11 media access control ( MAC ) and physical layer ( PHY ) interface and provides access to the distribution services via the wireless medium for associated clients. LWAPP APs encapsulate all the 802.11 frames in LWAPP frames and sends them to the controller to which it is logically connected. AP-Authentication With this feature enabled, the Access Points sending radio resource management neighbor packets with different RF network names will be reported as rogues. Basic Service Set Identifier ( BSSID ) The identifier of the Basic Service Set controlled by a single coordination function. The identifier is usually the MAC address of the radio interface that hosts the BSS. Central Controller ( CC ) The central entity that terminates the LWAPP protocol tunnel from the LWAPP APs. Throughout this MIB, this entity is also referred to as 'controller'. Light Weight Access Point Protocol ( LWAPP ) This is a generic protocol that defines the communication between the Access Points and the Central Controller. Management Frame Protection ( MFP ) A proprietary mechanism devised to integrity protect the otherwise unprotected management frames of the 802.11 protocol specification. Message Integrity Check ( MIC ) A checksum computed on a sequence of bytes and made known to the receiving party in a data communication, to let the receiving party make sure the bytes received were not compromised enroute. Mobile Node ( MN ) A roaming 802.11 wireless device in a wireless network associated with an access point. Network Management Station ( NMS ) The system through which the network administrator manages the controller and the APs associated to it. REFERENCE [1] Wireless LAN Medium Access Control ( MAC ) and Physical Layer ( PHY ) Specifications, ANSI/IEEE Std 802.11, 1999 Edition. [2] Draft-obara-Capwap-lwapp-00.txt, IETF Light Weight Access Point Protocol" REVISION "200701201545Z" DESCRIPTION "The objects cLClientLastSourceMacAddress, cLMfpClientProtection and cLMfpClientMfpEnabled have been added." REVISION "200604101545Z" DESCRIPTION "Initial version of this MIB module." ::= { ciscoMgmt 518 }

    Information by cisco_v1

    ciscoLwappMfpMIB OBJECT IDENTIFIER ::= { ciscoMgmt 518 }

    Information by oid_info

    Vendor: Cisco
    Module: CISCO-LWAPP-MFP-MIB

    [Automatically extracted from oidview.com]

    Information by mibdepot

    ciscoLwappMfpMIB MODULE-IDENTITY LAST-UPDATED "200701201545Z" ORGANIZATION "Cisco Systems Inc." CONTACT-INFO "Cisco Systems, Customer Service Postal: 170 West Tasman Drive San Jose, CA 95134 USA Tel: +1 800 553-NETS Email: [email protected]" DESCRIPTION "This MIB is intended to be implemented on all those devices operating as Central Controllers (CC) that terminate the Light Weight Access Point Protocol tunnel from Light-weight LWAPP Access Points. This MIB instrumentation provides the parameters used by the controller to control and monitor the behavior of the associated Access Points when following the newly defined Management Frame Protocol. The controller would pass the MFP settings configured by the user through this MIB to the APs through LWAPP messages. The APs then begin to validate and verify the integrity of 802.11 Management frames and report the anomalies found, if any, to the controller. The relationship between CC and the LWAPP APs can be depicted as follows. +......+ +......+ +......+ +......+ + + + + + + + + + CC + + CC + + CC + + CC + + + + + + + + + +......+ +......+ +......+ +......+ .. . . . .. . . . . . . . . . . . . . . . . . . . . . . . +......+ +......+ +......+ +......+ +......+ + + + + + + + + + + + AP + + AP + + AP + + AP + + AP + + + + + + + + + + + +......+ +......+ +......+ +......+ +......+ . . . . . . . . . . . . . . . . . . . . . . . . +......+ +......+ +......+ +......+ +......+ + + + + + + + + + + + MN + + MN + + MN + + MN + + MN + + + + + + + + + + + +......+ +......+ +......+ +......+ +......+ The LWAPP tunnel exists between the controller and the APs. The MNs communicate with the APs through the protocol defined by the 802.11 standard. LWAPP APs, upon bootup, discover and join one of the controllers and the controller pushes the configuration, which includes the WLAN parameters, to the LWAPP APs. The APs then encapsulate all the 802.11 frames from wireless clients inside LWAPP frames and forward the LWAPP frames to the controller. Reference [2] explains in detail about the communication between the controller and APs, while Reference [1] explains the AP-MN communication. To secure the 802.11 management traffic, the controller and the APs perform specific roles. The controller acts as the central entity to generate and distribute signature keys using which the APs generate integrity check values, also known as signatures, for individual management frames. The APs append this signature in the form of an Information Element to the respective management frame to be transmitted. This is needed to isolate those potential rogue APs whose frames may not carry the frame signature. The APs use the signature keys, generated and pushed to them by the controller for each BSSID reported as heard by the APs, to validate the integrity of the the management traffic originating from various 802.11 sources. Any anomalies observed by the APs are reported to the controller. The controller makes the information about such events available for a network management Station in the form of notifications. GLOSSARY Access Point ( AP ) An entity that contains an 802.11 media access control ( MAC ) and physical layer ( PHY ) interface and provides access to the distribution services via the wireless medium for associated clients. LWAPP APs encapsulate all the 802.11 frames in LWAPP frames and sends them to the controller to which it is logically connected. AP-Authentication With this feature enabled, the Access Points sending radio resource management neighbor packets with different RF network names will be reported as rogues. Basic Service Set Identifier ( BSSID ) The identifier of the Basic Service Set controlled by a single coordination function. The identifier is usually the MAC address of the radio interface that hosts the BSS. Central Controller ( CC ) The central entity that terminates the LWAPP protocol tunnel from the LWAPP APs. Throughout this MIB, this entity is also referred to as 'controller'. Light Weight Access Point Protocol ( LWAPP ) This is a generic protocol that defines the communication between the Access Points and the Central Controller. Management Frame Protection ( MFP ) A proprietary mechanism devised to integrity protect the otherwise unprotected management frames of the 802.11 protocol specification. Message Integrity Check ( MIC ) A checksum computed on a sequence of bytes and made known to the receiving party in a data communication, to let the receiving party make sure the bytes received were not compromised enroute. Mobile Node ( MN ) A roaming 802.11 wireless device in a wireless network associated with an access point. Network Management Station ( NMS ) The system through which the network administrator manages the controller and the APs associated to it. REFERENCE [1] Wireless LAN Medium Access Control ( MAC ) and Physical Layer ( PHY ) Specifications, ANSI/IEEE Std 802.11, 1999 Edition. [2] Draft-obara-Capwap-lwapp-00.txt, IETF Light Weight Access Point Protocol" REVISION "200701201545Z" DESCRIPTION "The objects cLClientLastSourceMacAddress, cLMfpClientProtection and cLMfpClientMfpEnabled have been added." REVISION "200604101545Z" DESCRIPTION "Initial version of this MIB module." ::= { ciscoMgmt 518 }

    Information by cisco

    ciscoLwappMfpMIB MODULE-IDENTITY LAST-UPDATED "200701201545Z" ORGANIZATION "Cisco Systems Inc." CONTACT-INFO "Cisco Systems, Customer Service Postal: 170 West Tasman Drive San Jose, CA 95134 USA Tel: +1 800 553-NETS Email: [email protected]" DESCRIPTION "This MIB is intended to be implemented on all those devices operating as Central Controllers (CC) that terminate the Light Weight Access Point Protocol tunnel from Light-weight LWAPP Access Points. This MIB instrumentation provides the parameters used by the controller to control and monitor the behavior of the associated Access Points when following the newly defined Management Frame Protocol. The controller would pass the MFP settings configured by the user through this MIB to the APs through LWAPP messages. The APs then begin to validate and verify the integrity of 802.11 Management frames and report the anomalies found, if any, to the controller. The relationship between CC and the LWAPP APs can be depicted as follows. +......+ +......+ +......+ +......+ + + + + + + + + + CC + + CC + + CC + + CC + + + + + + + + + +......+ +......+ +......+ +......+ .. . . . .. . . . . . . . . . . . . . . . . . . . . . . . +......+ +......+ +......+ +......+ +......+ + + + + + + + + + + + AP + + AP + + AP + + AP + + AP + + + + + + + + + + + +......+ +......+ +......+ +......+ +......+ . . . . . . . . . . . . . . . . . . . . . . . . +......+ +......+ +......+ +......+ +......+ + + + + + + + + + + + MN + + MN + + MN + + MN + + MN + + + + + + + + + + + +......+ +......+ +......+ +......+ +......+ The LWAPP tunnel exists between the controller and the APs. The MNs communicate with the APs through the protocol defined by the 802.11 standard. LWAPP APs, upon bootup, discover and join one of the controllers and the controller pushes the configuration, which includes the WLAN parameters, to the LWAPP APs. The APs then encapsulate all the 802.11 frames from wireless clients inside LWAPP frames and forward the LWAPP frames to the controller. Reference [2] explains in detail about the communication between the controller and APs, while Reference [1] explains the AP-MN communication. To secure the 802.11 management traffic, the controller and the APs perform specific roles. The controller acts as the central entity to generate and distribute signature keys using which the APs generate integrity check values, also known as signatures, for individual management frames. The APs append this signature in the form of an Information Element to the respective management frame to be transmitted. This is needed to isolate those potential rogue APs whose frames may not carry the frame signature. The APs use the signature keys, generated and pushed to them by the controller for each BSSID reported as heard by the APs, to validate the integrity of the the management traffic originating from various 802.11 sources. Any anomalies observed by the APs are reported to the controller. The controller makes the information about such events available for a network management Station in the form of notifications. GLOSSARY Access Point ( AP ) An entity that contains an 802.11 media access control ( MAC ) and physical layer ( PHY ) interface and provides access to the distribution services via the wireless medium for associated clients. LWAPP APs encapsulate all the 802.11 frames in LWAPP frames and sends them to the controller to which it is logically connected. AP-Authentication With this feature enabled, the Access Points sending radio resource management neighbor packets with different RF network names will be reported as rogues. Basic Service Set Identifier ( BSSID ) The identifier of the Basic Service Set controlled by a single coordination function. The identifier is usually the MAC address of the radio interface that hosts the BSS. Central Controller ( CC ) The central entity that terminates the LWAPP protocol tunnel from the LWAPP APs. Throughout this MIB, this entity is also referred to as 'controller'. Light Weight Access Point Protocol ( LWAPP ) This is a generic protocol that defines the communication between the Access Points and the Central Controller. Management Frame Protection ( MFP ) A proprietary mechanism devised to integrity protect the otherwise unprotected management frames of the 802.11 protocol specification. Message Integrity Check ( MIC ) A checksum computed on a sequence of bytes and made known to the receiving party in a data communication, to let the receiving party make sure the bytes received were not compromised enroute. Mobile Node ( MN ) A roaming 802.11 wireless device in a wireless network associated with an access point. Network Management Station ( NMS ) The system through which the network administrator manages the controller and the APs associated to it. REFERENCE [1] Wireless LAN Medium Access Control ( MAC ) and Physical Layer ( PHY ) Specifications, ANSI/IEEE Std 802.11, 1999 Edition. [2] Draft-obara-Capwap-lwapp-00.txt, IETF Light Weight Access Point Protocol" REVISION "200701201545Z" DESCRIPTION "The objects cLClientLastSourceMacAddress, cLMfpClientProtection and cLMfpClientMfpEnabled have been added." REVISION "200604101545Z" DESCRIPTION "Initial version of this MIB module." ::= { ciscoMgmt 518 }

    First Registration Authority (recovered by parent 1.3.6.1.4.1.9)

    Greg Satz

    Current Registration Authority (recovered by parent 1.3.6.1.4.1.9)

    Cisco Systems, Inc.

    Children (4)

    OIDNameSub childrenSub Nodes TotalDescription
    1.3.6.1.4.1.9.9.518.0 ciscoLwappMfpMIBNotifs 5 5 None
    1.3.6.1.4.1.9.9.518.1 ciscoLwappMfpMIBNotifObjects 9 18 None
    1.3.6.1.4.1.9.9.518.2 ciscoLwappMfpMIBObjects 2 25 None
    1.3.6.1.4.1.9.9.518.3 ciscoLwappMfpMIBConform 2 12 None

    Brothers (645)

    To many brothers! Only 100 nearest brothers are shown.

    OIDNameSub childrenSub Nodes TotalDescription
    ...
    1.3.6.1.4.1.9.9.468 ciscoContextMappingMIB 2 35 A single SNMP agent sometimes needs to support multiple
    instances of the same MIB module, and does so through the
    use of multiple…
    1.3.6.1.4.1.9.9.470 ciscoEnhancedSlbMIB 3 106 The MIB for managing Server Load Balancing
    Manager(s), and products supporting Server
    Load Balancing(SLB) features.

    This MIB exten…
    1.3.6.1.4.1.9.9.471 ciscoFlexLinksMIB 3 36 This MIB module is for configuration and status query
    of Flex Links feature on the Cisco device.

    Flex Links are a pair of Layer 2…
    1.3.6.1.4.1.9.9.472 ciscoModuleVirtualizationMIB 3 35 This MIB provides a way to create virtual contexts,
    and managing them. A virtual context is logical
    partition of a physical devi…
    1.3.6.1.4.1.9.9.473 ciscoCcaMIB 3 200 The Cisco Contact Center Applications (CCCA) Management
    Information Base (MIB) module defines management
    instrumentation for appl…
    1.3.6.1.4.1.9.9.474 ciscoFilterGroupMIB 3 55 The MIB module is for creating and configuring
    object groups to support packet filtering and
    access control on IP and other proto…
    1.3.6.1.4.1.9.9.479 ciscoCableWidebandMIB 3 77 This is the MIB module for the support of Channel Bonding
    Protocol for the Cable Modem Termination System (CMTS).

    Wideband DOCSIS…
    1.3.6.1.4.1.9.9.480 ciscoL4L7moduleResourceLimitMIB 4 100 The MIB module for managing resource classes
    and configuring limits(max/min) to different
    resources. The resource referenced in …
    1.3.6.1.4.1.9.9.482 ciscoInterfaceTopNExtMIB 3 16 This MIB module is an extension to INTERFACETOPN-MIB.
    It provides additional management information for
    sorting device interfaces.
    1.3.6.1.4.1.9.9.483 ciscoIpRanBackHaulMIB 3 248 This MIB provides information on the IP-RAN traffic
    from cell site to aggregation site in the following
    situations. In an GSM en…
    1.3.6.1.4.1.9.9.484 ciscoNacNadMIB 3 157 This MIB module is for the configuration of a Network
    Access Device (NAD) on the Cisco Network Admission
    Control (NAC) system.

    End…
    1.3.6.1.4.1.9.9.485 ciscoRttMonTCMIB 0 0 This MIB contains textual conventions used by
    CISCO-RTTMON-MIB, CISCO-RTTMON-RTP-MIB and
    CISCO-RTTMON-ICMP-MIB, but they are not …
    1.3.6.1.4.1.9.9.486 ciscoRttMonIcmpMIB 3 7 An extension to the CISCO-RTTMON-MIB for ICMP
    operations. The ICMP Jitter operation provides capability
    to measure metrics such a…
    1.3.6.1.4.1.9.9.487 ciscoRttMonRtpMIB 3 8 An extension to the CISCO-RTTMON-MIB for Cisco IP SLA
    RTP operation, Real-Time Transport Protocol(RFC 1889). This
    operation provi…
    1.3.6.1.4.1.9.9.488 ciscoFirewallTc 0 0 This MIB module defines textual conventions that
    are commonly used in modeling management information
    pertaining to configuration…
    1.3.6.1.4.1.9.9.490 ciscoNetintMIB 3 11 This MIB module is for Network Interrupt information
    on Cisco device.
    1.3.6.1.4.1.9.9.491 ciscoUnifiedFirewallMIB 3 235 Overview of Cisco Firewall MIB
    ==============================
    This MIB Module models status and performance
    statistics pertaining …
    1.3.6.1.4.1.9.9.492 ciscoCefMIB 3 192 Cisco Express Forwarding (CEF) describes a high speed
    switching mechanism that a router uses to forward packets
    from the inbound …
    1.3.6.1.4.1.9.9.493 ciscoCefTextualConventions 0 0 ciscoCeftextualConventions
    1.3.6.1.4.1.9.9.494 ciscoEntityRedunTcMIB 0 0 This module defines the textual conventions used within
    Cisco Entity Redundancy MIBs.
    1.3.6.1.4.1.9.9.495 ciscoPsdClientMIB 3 44 This MIB module manages the client side
    functionality of the Persistent Storage Device(PSD).

    This MIB instrumentation is for conf…
    1.3.6.1.4.1.9.9.497 cGgsnSAMIB 3 247 This MIB module manages the service-aware feature of
    Gateway GPRS Support Node (GGSN).

    This MIB is an enhancement of the CISCO-GG…
    1.3.6.1.4.1.9.9.498 ciscoEntityRedunMIB 3 93 This management information module supports
    configuration, control and monitoring of redundancy
    protection for various kinds of c…
    1.3.6.1.4.1.9.9.500 ciscoStackWiseMIB 3 111 This MIB module contain a collection of managed objects
    that apply to network devices supporting the Cisco
    StackWise(TM) technolo…
    1.3.6.1.4.1.9.9.504 ciscoSwitchMulticastMIB 3 108 This MIB module defines management objects for the
    Multicast Switching features on Cisco Layer 2/3
    devices.

    Definition of some of …
    1.3.6.1.4.1.9.9.505 cpkiMIB 3 44 A networking device may provide several security services
    and protocols like SSL, SSH, IPSec/IKE etc. which need
    identities …
    1.3.6.1.4.1.9.9.507 ciscoPolicyGroupMIB 3 35 The MIB module is for configuration of policy and
    policy group. A policy group can be described as a set
    of entities identified b…
    1.3.6.1.4.1.9.9.508 ciscoSlbHealthMonMIB 3 62 An extension to the CISCO-SLB-EXT-MIB for SLB
    health monitoring probes.

    SLB: Server Load Balancing. Server load balancing
    provides…
    1.3.6.1.4.1.9.9.509 ciscoWdsInfoMIB 3 141 This MIB is intended to be implemented on all Cisco
    network entities that provide Wireless Domain Services
    (WDS). The WDS provide…
    1.3.6.1.4.1.9.9.510 ciscoErmMIB, ciscoVoiceLmrMIB 3 176 This MIB module provides management of voice tone
    signal as static injected tone for Land Mobile Radio
    The tone signal includes …
    1.3.6.1.4.1.9.9.511 ciscoCbpTargetTCMIB 0 0 This MIB module defines Textual Conventions for
    representing targets which have class based policy
    mappings. A target can be any …
    1.3.6.1.4.1.9.9.512 ciscoLwappWlanMIB 3 249 This MIB is intended to be implemented on all those
    devices operating as Central Controllers (CC) that
    terminate the Light Weigh…
    1.3.6.1.4.1.9.9.513 ciscoLwappApMIB 4 386 This MIB is intended to be implemented on all those
    devices operating as Central Controllers (CC) that
    terminate the Light Weight…
    1.3.6.1.4.1.9.9.514 ciscoLwappTextualConventions 0 0 This module defines textual conventions used
    throughout the Cisco enterprise MIBs
    designed for implementation on Central
    Controlle…
    1.3.6.1.4.1.9.9.515 ciscoLwappWebAuthMIB 4 43 This MIB is intended to be implemented on all those
    devices operating as Central controllers, that
    terminate the Light Weight Acc…
    1.3.6.1.4.1.9.9.516 ciscoLwappLinkTestMIB 3 57 This MIB is intended to be implemented on all those
    devices operating as Central controllers, that
    terminate the Light Weight Acc…
    1.3.6.1.4.1.9.9.517 ciscoLwappReapMIB 3 63 This MIB is intended to be implemented on all those
    devices operating as Central Controllers (CC) that
    terminate the Light Weight…
    1.3.6.1.4.1.9.9.519 ciscoLwappIdsMIB 3 28 This MIB is intended to be implemented on all those
    devices operating as Central Controllers (CC) that
    terminate the Light Weight…
    1.3.6.1.4.1.9.9.520 ciscoLwappCcxRmMIB 3 45 This MIB is intended to be implemented on all those
    devices operating as Central controllers, that
    terminate the Light Weight Acc…
    1.3.6.1.4.1.9.9.521 ciscoLwappWlanSecurityMIB 3 51 This MIB is intended to be implemented on all those
    devices operating as Central controllers, that
    terminate the Light Weight Acc…
    1.3.6.1.4.1.9.9.522 ciscoLwappDot11ClientCalibMIB 3 50 This MIB is intended to be implemented on all those
    devices operating as Central controllers, that
    terminate the Light Weight Acc…
    1.3.6.1.4.1.9.9.523 ciscoLwappClRoamMIB 3 61 This MIB is intended to be implemented on all those
    devices operating as Central controllers, that
    terminate the Light Weight Acc…
    1.3.6.1.4.1.9.9.524 ciscoLwappQosMIB 3 119 This MIB is intended to be implemented on all those
    devices operating as Central controllers, that
    terminate the Light Weight Acc…
    1.3.6.1.4.1.9.9.525 ciscoLwappTsmMIB 3 57 This MIB is intended to be implemented on all those
    devices operating as Central controllers, that
    terminate the Light Weight Acc…
    1.3.6.1.4.1.9.9.529 ciscoItpMsuRatesMIB 3 61 This MIB provides information used to manage the number
    of MTP3 MSUs transmitted and received per processor. Many
    of the higher …
    1.3.6.1.4.1.9.9.530 ciscoNacTcMIB 0 0 This module defines the textual conventions for
    Cisco Network Admission Control(NAC) system.

    The Cisco Network Admission Control …
    1.3.6.1.4.1.9.9.532 ciscoNATExtMIB 3 13 This MIB is an extension to the NAT-MIB.
    This MIB module includes objects for
    providing the NAT related statistics.

    Acronyms:

    NAT…
    1.3.6.1.4.1.9.9.533 ciscoCbpTargetMIB 3 25 This MIB module defines the managed objects for
    representing targets which have class-based policy
    mappings. A target can be any…
    1.3.6.1.4.1.9.9.543 ciscoLicenseMgmtMIB 3 131 The MIB module for managing licenses on the system.
    The licensing mechanism provides flexibility to
    enforce licensing for various…
    1.3.6.1.4.1.9.9.548 ciscoErrDisableMIB 3 43 This MIB module provides the ability for a Network
    Management Station (NMS) to configure and monitor the
    error-disable feature vi…
    ...