Home/Catalog/CISCO-ADMISSION-POLICY-MIB

CISCO-ADMISSION-POLICY-MIB

AI MIB Summary

The CISCO-ADMISSION-POLICY-MIB monitors Cisco network devices to track host admission sessions, including active session counts, host identifiers (IP/MAC), and the specific QoS, ACL, and SGT policies applied during RADIUS or 802.1X authorization. It provides visibility into downloadable ACL enforcement, URL redirection states, and session lifecycle data to verify that network access control and traffic classification policies are correctly enforced upon device connection.

This MIB module defines managed objects that facilitate the management of policies upon host(s) admission to a network. The information available through this MIB includes: o Statistics information such as number of total and active sessions. o Session information such as IP and MAC address of host, client type, and session state. o QoS and Security policy applied to host traffic upon host admission to a network. The following terms are used throughout this MIB: QoS (Quality of Service) is the method which attempts to ensure that the network requirements of different applications can be met by giving preferential forwarding treatment to some traffic. ACL (Access Control List) which contains filters used to identify traffic flows with certain characteristics. Downloadable ACL is a set of filters, configured on the RADIUS server which are downloaded during authorization phase of admission features like dot1x, authProxy, etc. SGT (Security Group Tag) is a unique 16 bits value assigned to every security group and used by network devices to enforce network policies. URL: Universal Resource Locator. URL-Redirect ACL is used for URL redirection feature. Any ingress HTTP from the host that matches the ACL content is subjected to redirection to the URL address specified by the URL-Redirect string. URL redirect string is the URL to which HTTP traffic to the host would be redirected.
Main OID:
ciscoAdmissionPolicyMIB.1.3.6.1.4.1.9.9.653
31
Objects
Active
Status
6
Dependencies

Imported Objects

Objects

31 total
Object Name
ciscoAdmissionPolicyMIBThis MIB module defines managed objects that facilitate the management of policies upon host(s) admission to a network. The information available through this MIB includes: o Statistics information such as number of total and active sessions. o Session information such as IP and MAC address of host, client type, and session state. o QoS and Security policy applied to host traffic upon host admission to a network. The following terms are used throughout this MIB: QoS (Quality of Service) is the method which attempts to ensure that the network requirements of different applications can be met by giving preferential forwarding treatment to some traffic. ACL (Access Control List) which contains filters used to identify traffic flows with certain characteristics. Downloadable ACL is a set of filters, configured on the RADIUS server which are downloaded during authorization phase of admission features like dot1x, authProxy, etc. SGT (Security Group Tag) is a unique 16 bits value assigned to every security group and used by network devices to enforce network policies. URL: Universal Resource Locator. URL-Redirect ACL is used for URL redirection feature. Any ingress HTTP from the host that matches the ACL content is subjected to redirection to the URL address specified by the URL-Redirect string. URL redirect string is the URL to which HTTP traffic to the host would be redirected.
MODULE-IDENTITY
.1.3.6.1.4.1.9.9.653
ciscoAdmissionPolicyMIBNotifs
OBJECT IDENTIFIER
.1.3.6.1.4.1.9.9.653.0
ciscoAdmissionPolicyMIBObjects
OBJECT IDENTIFIER
.1.3.6.1.4.1.9.9.653.1
capSessions
OBJECT IDENTIFIER
.1.3.6.1.4.1.9.9.653.1.1
capTotalSessionsThis object indicates the total numbers of sessions created in the device since the last system reset.ro
Counter32
.1.3.6.1.4.1.9.9.653.1.1.1
capActiveSessionsThis object indicates the currently active sessions in the device.ro
Gauge32
.1.3.6.1.4.1.9.9.653.1.1.2
capSidSessionInfoTableThis table lists admission policy sessions based on unique session identifier. An entry is created by the agent when an admission policy session has successfully registered to the system. An entry is deleted by the agent upon de-registration of the admission policy session with system.
SEQUENCE OF CapSidSessionInfoEntry
.1.3.6.1.4.1.9.9.653.1.1.3
capSidSessionInfoEntryEach row contains the management information of a particular active session based on unique session identifier.
CapSidSessionInfoEntry
.1.3.6.1.4.1.9.9.653.1.1.3.1
capSidSessionIndexThis object uniquely identifies a session.
CapSessionId
.1.3.6.1.4.1.9.9.653.1.1.3.1.1
capSidSessionIfIndexThis object indicates the ifIndex value of the interface on which the session is established.ro
InterfaceIndex (IF-MIB)
.1.3.6.1.4.1.9.9.653.1.1.3.1.2
capSidSessionMacAddressThis object indicates the MAC address of the host.ro
MacAddress (SNMPv2-TC)
.1.3.6.1.4.1.9.9.653.1.1.3.1.3
capSidSessionAddressTypeThis object indicates the type of Internet address assigned for the host.ro
InetAddressType (INET-ADDRESS-MIB)
.1.3.6.1.4.1.9.9.653.1.1.3.1.4
capSidSessionAddressThis object indicates the Internet address assigned for the host. The type of this address is determined by the value of capSidSessionAddressType object.ro
InetAddress (INET-ADDRESS-MIB)
.1.3.6.1.4.1.9.9.653.1.1.3.1.5
capSidSessionFeatureTypeThis object indicates the admission features associated with the session. 'dot1x' indicates that the admission feature is 802.1x feature. 'mab' indicates that the admission feature is Mac Authentication Bypass feature. 'eou' indicates that the admission feature is Extensible Authentication Protocol over UDP feature. 'authProxy' indicates that the admission feature is Authentication Proxy feature.ro
Bits
.1.3.6.1.4.1.9.9.653.1.1.3.1.6
capSidSessionPolicyTableThis table lists the policies that will be enforced per session per admission feature. The session in this table should have a corresponding entry in capSidSessionInfoTable.
SEQUENCE OF CapSidSessionPolicyEntry
.1.3.6.1.4.1.9.9.653.1.1.4
capSidSessionPolicyEntryEach row contains the management information of a particular admission feature of a session.
CapSidSessionPolicyEntry
.1.3.6.1.4.1.9.9.653.1.1.4.1
capSidSessionPolicyIndexThis object indicates the admission feature which a host is subjected to in a session. 'dot1x' indicates that the admission feature is 802.1x feature. 'mab' indicates that the admission feature is Mac Authentication Bypass feature. 'eou' indicates that the admission feature is Extensible Authentication Protocol over UDP feature. 'authProxy' indicates that the admission feature is Authentication Proxy feature.
Enumeration
.1.3.6.1.4.1.9.9.653.1.1.4.1.1
capSidIngressQosPolicyThis object indicates the name of an existing QoS policy which will be applied to incoming traffic in this session. An empty string indicates that no such policy is applied.ro
CapQosPolicy
.1.3.6.1.4.1.9.9.653.1.1.4.1.2
capSidIngressQosPolicyStateThis object indicates the current state of the QoS policy which will be applied to incoming traffic in this session.ro
CapPolicyState
.1.3.6.1.4.1.9.9.653.1.1.4.1.3
capSidEgressQosPolicyThis object indicates the name of an existing QoS policy which will be applied to outgoing traffic in this session. An empty string indicates that no such policy is applied.ro
CapQosPolicy
.1.3.6.1.4.1.9.9.653.1.1.4.1.4
capSidEgressQosPolicyStateThis object indicates the current state of the QoS policy which will be applied to outgoing traffic in this session.ro
CapPolicyState
.1.3.6.1.4.1.9.9.653.1.1.4.1.5
capSidDownloadableAclNameThis object indicates the name of a Downloadable ACL which will be applied to the host traffic. An empty string indicates that no such ACL is applied.ro
CapAclName
.1.3.6.1.4.1.9.9.653.1.1.4.1.6
capSidDownloadableAclStateThis object indicates the state of this session downloadable ACL policy.ro
CapPolicyState
.1.3.6.1.4.1.9.9.653.1.1.4.1.7
capSidUrlRedirectAclNameThis object indicates the ACL name that redirected traffic from the host will be subjected to. An empty string indicates that no such ACL is applied.ro
CapAclName
.1.3.6.1.4.1.9.9.653.1.1.4.1.8
capSidUrlRedirectAclStateThis object indicates the state of this session URL-Redirect ACL policy.ro
CapPolicyState
.1.3.6.1.4.1.9.9.653.1.1.4.1.9
capSidRedirectUrlStringThis object indicates the URL that traffic from the host will be redirected to. An empty string indicates that no such URL is applied.ro
CapURLString
.1.3.6.1.4.1.9.9.653.1.1.4.1.10
capSidRedirectUrlStringStateThis object indicates the state of this session URL-Redirect string policy.ro
CapPolicyState
.1.3.6.1.4.1.9.9.653.1.1.4.1.11
capSidSecurityGroupTagThis object indicates the SGT value assigned to the host that initiated this session. Value of -1 indicates that there is no SGT value assigned.ro
Integer32 (-1 | 0..65535)
.1.3.6.1.4.1.9.9.653.1.1.4.1.12
ciscoAdmissionPolicyMIBConformance
OBJECT IDENTIFIER
.1.3.6.1.4.1.9.9.653.2
ciscoAdmissionPolicyMIBCompliances
OBJECT IDENTIFIER
.1.3.6.1.4.1.9.9.653.2.1
ciscoAdmissionPolicyMIBGroups
OBJECT IDENTIFIER
.1.3.6.1.4.1.9.9.653.2.2
CISCO-ADMISSION-POLICY-MIB - SNMP MIB Reference | MIBs Explorer