CISCO-LWAPP-ACL-MIB
AI MIB Summary
The CISCO-LWAPP-ACL-MIB module manages CPU Access Control Lists (ACLs) on Cisco Wireless LAN Controllers acting as LWAPP Central Controllers, specifically defining ordered rule sets to filter and restrict traffic forwarded from the Network Processing Unit (NPU) to the controller's CPU. This MIB enables the configuration of permit or drop actions for control-plane packets, ensuring that only authorized LWAPP management and data traffic reaches the controller's processing unit while blocking unauthorized access.
This MIB is intended to be implemented on all those devices operating as Central Controllers (CC) that terminate the Light Weight Access Point Protocol tunnel from Light-weight LWAPP Access Points.
This MIB provides configuration and status information about the ACLs on the controller.
Particularly this mib covers the CPU ACLs for the wireless controllers.
Traffic to the controller CPU comes from the NPU (Network Processing Unit).
Using CPU ACLs, the user can place restrictions on type of traffic reaching the CPU of the controller from the NPU.
CPU ACLs introduce an ACL for the traffic to the CPU of controller. With this ACL the type of packets reaching the CPU can be controlled. The mode of operation is as follows.
The administrator designates one ACL for the traffic to the CPU. The ACL kicks in for packets from the NPU to the CPU. Each ACL is an ordered set of rules. If a rule matches then action for that rule is applied to the packet. The decision to send or drop the packet is taken based on the action parameter of the ACL.
There will be no ACL for the packets from the CPU to the NPU.
GLOSSARY
Access Control List ( ACL )
A list of rules used to restrict the traffic reaching an interface or the CPU. Each ACL is an ordered set of rules and actions. If a rule matches then the action for that rule is applied to the packet.
Access Point ( AP )
An entity that contains an 802.11 medium access control ( MAC ) and physical layer ( PHY ) interface and provides acess to the distribution services via the wireless medium for associated clients.
CPU ACL ( CPU ACL )
The ACL applied to the CPU. This controls the type of traffic reaching the CPU of the controller.
Network Processing Unit ( NPU )
This entity is responsible for forwarding traffic to the CPU. The only exceptions are data coming thorugh the console port and the Service port i.e. these communicate directly with the CPU and not via the NPU.
Light Weight Access Point Protocol ( LWAPP )
This is a generic protocol that defines the communciation between the Access Points and the Central Controller.
REFERENCE
[1] Part 11 Wireless LAN Medium Access Control ( MAC ) and Physical Layer ( PHY ) Specifications.
Main OID:
ciscoLwappAclMIB.1.3.6.1.4.1.9.9.577
23
Objects
Active
Status
4
Dependencies
Imported Objects
Objects
23 total| Object Name |
|---|
ciscoLwappAclMIBThis MIB is intended to be implemented on all those
devices operating as Central Controllers (CC) that
terminate the Light Weight Access Point Protocol
tunnel from Light-weight LWAPP Access Points.
This MIB provides configuration and status information
about the ACLs on the controller.
Particularly this mib covers the CPU ACLs for the wireless
controllers.
Traffic to the controller CPU comes from the NPU (Network
Processing Unit).
Using CPU ACLs, the user can place restrictions on type of
traffic reaching the CPU of the controller from the NPU.
CPU ACLs introduce an ACL for the traffic to the CPU of
controller. With this ACL the type of packets reaching the
CPU can be controlled. The mode of operation is as follows.
The administrator designates one ACL for the traffic to the
CPU. The ACL kicks in for packets from the NPU to the CPU.
Each ACL is an ordered set of rules. If a rule matches then
action for that rule is applied to the packet. The decision
to send or drop the packet is taken based on the action
parameter of the ACL.
There will be no ACL for the packets from the CPU to the
NPU.
GLOSSARY
Access Control List ( ACL )
A list of rules used to restrict the traffic reaching an
interface or the CPU. Each ACL is an ordered set of rules
and actions. If a rule matches then the action for that
rule is applied to the packet.
Access Point ( AP )
An entity that contains an 802.11 medium access control
( MAC ) and physical layer ( PHY ) interface and provides
acess to the distribution services via the wireless medium
for associated clients.
CPU ACL ( CPU ACL )
The ACL applied to the CPU. This controls the type of
traffic reaching the CPU of the controller.
Network Processing Unit ( NPU )
This entity is responsible for forwarding traffic to the
CPU. The only exceptions are data coming thorugh the
console port and the Service port i.e. these communicate
directly with the CPU and not via the NPU.
Light Weight Access Point Protocol ( LWAPP )
This is a generic protocol that defines the communciation
between the Access Points and the Central Controller.
REFERENCE
[1] Part 11 Wireless LAN Medium Access Control ( MAC ) and
Physical Layer ( PHY ) Specifications. MODULE-IDENTITY .1.3.6.1.4.1.9.9.577 |
ciscoLwappAclMIBNotifs OBJECT IDENTIFIER .1.3.6.1.4.1.9.9.577.0 |
ciscoLwappAclMIBObjects OBJECT IDENTIFIER .1.3.6.1.4.1.9.9.577.1 |
ciscoLwappCpuAcl OBJECT IDENTIFIER .1.3.6.1.4.1.9.9.577.1.1 |
claCpuAclTableThis table represents the ACL related parameters on the
CPU of the controller. SEQUENCE OF ClaCpuAclEntry .1.3.6.1.4.1.9.9.577.1.1.1 |
claCpuAclEntryEach entry represents a conceptual row in this table.
For each CPU of the controller, there will be a row. ClaCpuAclEntry .1.3.6.1.4.1.9.9.577.1.1.1.1 |
claCpuAclIndexThis object uniquely identifies one instance of
a CPU on the controller. Unsigned32 .1.3.6.1.4.1.9.9.577.1.1.1.1.1 |
claCpuAclNameName of the Access Control List applied to the CPU.
The access list to be applied should already exist
on the controller.
If it is required to remove the ACL for the CPU,
this field should be set to an empty string.rw DisplayString .1.3.6.1.4.1.9.9.577.1.1.1.1.2 |
claCpuAclPacketApplicabilityThis indicates whether the CPU ACL applies for only
wired(2) packets, only the wireless(3) packets
or both(4) types of packets.
If there is no ACL applied to the CPU, then
this field will be set to none(1) .
If earlier there was no ACL applied to the CPU and the
user just sets the claCpuAclName attribute, then
this field will be set to both(4).rw Enumeration .1.3.6.1.4.1.9.9.577.1.1.1.1.3 |
ciscoLwappControllerAcl OBJECT IDENTIFIER .1.3.6.1.4.1.9.9.577.1.2 |
claAclTableThe table listing ACLs (Access Control Lists)
and counter status on the Switch. SEQUENCE OF ClaAclEntry .1.3.6.1.4.1.9.9.577.1.2.1 |
claAclEntryEach entry represents a conceptual row in this table.
For each ACL on the controller, there will be a row. ClaAclEntry .1.3.6.1.4.1.9.9.577.1.2.1.1 |
claAclNameName of the Access Control List. OCTET STRING .1.3.6.1.4.1.9.9.577.1.2.1.1.1 |
claAclCounterClearThis object when set to 'true', will clear the
counter of the ACL represented by the
unique ACL name.rw TruthValue (SNMPv2-TC) .1.3.6.1.4.1.9.9.577.1.2.1.1.2 |
claAclRuleTableThe table listing rules and number of hits under ACL on the
Switch. SEQUENCE OF ClaAclRuleEntry .1.3.6.1.4.1.9.9.577.1.2.2 |
claAclRuleEntryEach entry represents a conceptual row in this table.
For each ACL rule of the controller, there will be a row. ClaAclRuleEntry .1.3.6.1.4.1.9.9.577.1.2.2.1 |
claAclRuleIndexIndex of the ACL rule. This can be updated to reset the
sequence of the rules of an ACL. Unsigned32 .1.3.6.1.4.1.9.9.577.1.2.2.1.2 |
claAclRuleHitsNumber of hits in the particular rule under the ACL.This object
is cleared by setting the claAclCounterClear object.ro Counter32 .1.3.6.1.4.1.9.9.577.1.2.2.1.3 |
ciscoLwappControllerAclGeneral OBJECT IDENTIFIER .1.3.6.1.4.1.9.9.577.1.3 |
claAclCounterEnableThis object represents the ACL Counters status
of the controller. Set this to 'true', if user
wants to see if packets are hitting any
of the ACLs that are configured on the controllerrw TruthValue (SNMPv2-TC) .1.3.6.1.4.1.9.9.577.1.3.1 |
ciscoLwappAclMIBConform OBJECT IDENTIFIER .1.3.6.1.4.1.9.9.577.2 |
ciscoLwappAclMIBCompliances OBJECT IDENTIFIER .1.3.6.1.4.1.9.9.577.2.1 |
ciscoLwappAclMIBGroups OBJECT IDENTIFIER .1.3.6.1.4.1.9.9.577.2.2 |