CISCO-WDS-INFO-MIB: View SNMP OID List / Download MIB

This MIB is intended to be implemented on all Cisco network entities that provide Wireless Domain Services (WDS). The WDS provides a control mechanism for wireless devices that roam between Access Points residing on different layer 3 subnets. When WDS is in the Wireless LAN Services Module(WLSM), the access points providing Layer 3 mobility must register with the WDS before wireless devices are given access to the mobility network. The location of the WDS is specified in each Access Point along with LEAP device credentials that are required for authentication with the WDS. Once the Access Point and the Mobile Node are authenticated with the WDS, those are considered registered. This MIB reports the information about the Wireless Domain Servers, Access Points, Mobile Nodes, and their roaming patterns. GLOSSARY AAA Authentication, Authorization, Accounting Access Point (AP) An entity that contains an 802.11 medium access control (MAC) and physical layer (PHY) interface and provides access to the distribution services via the wireless medium for associated devices. BSSID Basic Service Set Identification, where the basic service set is defined as the set of data transfer rates that all the stations in a BSS will be capable of using to receive frames from the wireless medium. CCKM Cisco Central Key Management. Context The mobility context for a Mobile Node includes its current mobility bindings with the Access Points, IP/802 address bindings, cached configuration parameters, QoS state, IP group membership, authentication state, accounting statistics, and other dynamically derived protocol state information. EAP Extensible Authentication Protocol. Hot Standby Router Protocol (HSRP) Cisco Hot Standby Router Protocol as defined in RFC2281 L3MM Layer-3 Mobility Manager (L3MM) is a new software entity residing on Central Switch (CS). L3MM maintains the mobility database and manages mGRE tunnels and tunnel paths to provide L3 Mobility for wireless clients. Layer 3 Mobility Control Protocol (LCP) A simple protocol to exchange control message between WDS and L3MM to achieve layer 3 seamless mobility for wireless devices. mGRE Tunnels Multipoint Generic Routing Encapsulation tunnels. This tunnel is used to tunnel wireless traffic and used to transfer wireless traffic between AP and CS. MIC Message Integrity Check. A MIC can, optionally, be added to WEP-encrypted 802.11 frames. Mobile Node (MN) A roaming 802.11 wireless device in a wireless network associated with an Access Point. SSID Service Set Identification, where the station service is defined as the set of services that support transport of medium access control (MAC) service data units (MSDUs) between stations within a basic service set. TKIP WPA Temporal Key encryption. Wireless Domain Services (WDS) The set of services being offered at a particular broadcast domain that may be an IP subnet or a particular VLAN, or across the L3 cloud. The services include the following. 1. Fast Secure Roaming with CCKM. 2. Layer 3 seamless mobility. 3. Radio Management aggregation for 802.11 wireless clients . WDS Entity The logical entity that resides in an infrastructure node and offers WDS to the descendants of that infrastructure node in the wireless services hierarchy. WEP Wired Equivalent Privacy. This is generally used to refer to 802.11 legacy encryption. WLSM Wireless LAN Services Module Wireless Network Manager (WNM) The network management system that manages the entire hierarchy of devices providing WDS. WPA WiFi Protected Access.

This notification will be sent when a LCP status changes from 'down' to 'up' or from 'up' to 'down'.

This notification will be sent when HSRP state changes from 'standby' to 'active' or from 'active' to 'standby'.

This table provides the information about the MAC addresses cached in the WDS for MAC authentication. MAC authentication caching reduces overhead because the WDS authenticates devices in its MAC-address cache without sending the request to the authentication server. An entry is added to this table when a Mobile Node completes MAC authentication to the authentication server. An entry is removed if the MAC address is not flushed before timeout.

Each entry is a set of a MAC address and age for fast MAC authentication.

This object specifies the MAC address of the device which is cached in the WDS for MAC authentication.

This object specifies the elapsed time since the MAC address has been cached. If the MAC address is not flushed within the specific time(default 30 minutes), the entry with cwdsiMacAuthCacheMacAddr is removed.

This table provides the information about the Access Points registered with WDS. An entry is added to this table when a Access Point register with WDS and the entry is removed after the lifetime of the Access Point expires.

Each entry is a set of attributes of an Access Point currently registered with WDS.

The MAC address of the Access Point.

Represents the type of Internet address stored in the corresponding instance of the cwdsiApAddr.

The Internet address of the Access Point.

This object specifies the hostname of the Access Point.

This object specifies the registration state of the Access Point with the WDS.

This object specifies the maximum time after which the registration of the Access Point with WDS expires. The Access Point must re-register before the lifetime is exhausted, otherwise it will be deleted from the table.

Represents the type of Internet address stored in the corresponding instance of the cwdsiApNeighborAddr.

The Internet address of the network entity with which the Ethernet port of the Access Point is directly connected.

This object specifies the hostname of the network entity with which the Ethernet port of the Access Point is directly connected.

This object specifies the port name of the network entity with which the Ethernet port of the Access Point is directly connected. This will typically be the value of the ifName object (e.g., 'Ethernet0').

This table provides the information about the Mobile Nodes registered with WDS. An entry is added to this table when a Mobile Node registers with WDS and the entry is removed after the lifetime of the Mobile Node expires.

Each entry is a set of attributes of a Mobile Node currently registered with WDS.

The MAC address of the Mobile Node.

Represents the type of Internet address stored in the corresponding instance of the cwdsiMnAddr.

The Internet address of the Mobile Node.

The MAC address of the Access Point with which the Mobile Node is associated.

Represents the type of Internet address stored in the corresponding instance of the cwdsiMnApAddr.

The Internet address of the Access Point with which the Mobile Node has associated.

This object specifies the mobility network-id of the Mobile Node.

This object specifies the registration state of the Mobile Node with WDS.

This object specifies the SSID with which the Mobile Node has associated with the Access Point.

This object specifies the BSSID used by the Mobile Node to communicate with the Access Point.

This object specifies the VLAN ID used by Access Point to bridge trunk that carries the traffic, when the Mobile Node associates with Access Point specified by cwdsiMnApAddr, using SSID specified by cwdsiMnSsid.

This object specifies the type of authenticated key management. If none of the bit is set, no key management is used.

This object specifies one of the pre-defined authentication algorithms and additional authentication procedures for the Mobile Node. When the cwdsiMnState is 'registered', the valid combination of the authentications are: - open(0), - shared(1), - leap(2), - eap(3), - mac(4), - open(0) and eap(3), - open(0) and mac(4), - open(0), eap(3) and mac(4), - open(0) and macOrEap(5), - shared(1) and eap(3), - shared(1) and mac(4), - shared(1), eap(3) and mac(4), - mac(4) and leap(2). Otherwise, the valid combination of the authentications are: - eap(3), - mac(4), - eap(3) and mac(4), - macOrEap(5), - leap(2), - mac(4) and leap(2), - macOrLeap(6), - eapOptional(7). If none of the bits are set, there is no run-time authentication.

This object specifies the value of sysUpTime at the time this Mobile Node registered with WDS.

This object specifies the maximum time after which the registration of the Mobile Node with its WDS expires. The Mobile Node must re-register before the time expires, otherwise it will be deleted from the table.

This table provides the information about the Wireless Network Managers configured on WDS. WDS provides an aggregation point of all radio management traffic from participating Access Points to the registered Wireless Network Manager. The entry also provides the statistics between WDS and Wireless Network Manager. An entry is added to this table when a Wireless Network Manager is configured on WDS. Currently WDS supports just one Wireless Network Manger.

Each entry is a set of attributes of a Wireless Network Manger and statistics. The statistics is gathered since the Wireless Network Manager has been registered with WDS.

Represents the type of Internet address stored in the corresponding instance of the cwdsiWnmAddr.

The Internet address of the Wireless Network Manager.

This object specifies the registration state of the Wireless Network Manger with WDS.

This object specifies the link status between WDS and Wireless Network Manager. Enumeration: 'down': 2, 'up': 1.

This object specifies the status of Client Tracking on WDS.

This object specifies the number of messages that are supposed to be sent to Wireless Network Manger. Discontinuities in the value of this counter can occur at re-initialization of the WDS, and at other times as indicated by the value of cwdsiWnmDiscontinuityTime.

This object specifies the number of sent messages by WDS to Network Manger. Discontinuities in the value of this counter can occur at re-initialization of the WDS, and at other times as indicated by the value of cwdsiWnmDiscontinuityTime.

This object specifies the number of transmitted messages by WDS to Network Manger after more than one retransmission. Discontinuities in the value of this counter can occur at re-initialization of the WDS, and at other times as indicated by the value of cwdsiWnmDiscontinuityTime.

This object specifies the number of sent messages by WDS and waiting for acknowledge response from Wireless Network Manger. Discontinuities in the value of this counter can occur at re-initialization of the WDS, and at other times as indicated by the value of cwdsiWnmDiscontinuityTime.

This object specifies the number of dropped messages by WDS because of Message Integrity Check (MIC) failure before sending the messages to Wireless Network Manger. Discontinuities in the value of this counter can occur at re-initialization of the WDS, and at other times as indicated by the value of cwdsiWnmDiscontinuityTime.

This object specifies the number of dropped messages by WDS because of the Unacknowledged Message Descriptor (UMD) allocation problem before sending the messages to Wireless Network Manger. Discontinuities in the value of this counter can occur at re-initialization of the WDS, and at other times as indicated by the value of cwdsiWnmDiscontinuityTime.

This object specifies the number of indicated messages to WDS before receiving the messages from Wireless Network Manager. Discontinuities in the value of this counter can occur at re-initialization of the WDS, and at other times as indicated by the value of cwdsiWnmDiscontinuityTime.

This object specifies the number of received messages by WDS after receiving the messages from Wireless Network Manager. Discontinuities in the value of this counter can occur at re-initialization of the WDS, and at other times as indicated by the value of cwdsiWnmDiscontinuityTime.

This object specifies the number of messages dropped by WDS received from Wireless Network Manager. Discontinuities in the value of this counter can occur at re-initialization of the WDS, and at other times as indicated by the value of cwdsiWnmDiscontinuityTime.

This object specifies the vaule of sysUpTime on the most recent occassion when the WNM is registered with WDS.

This object specifies the number of Access Points currently registered with this WDS.

This object specifies the number of Mobile Nodes currently registered with this WDS.

This object specifies the number of AAA authentication attempts (such as LEAP) made by WDS to authenticate Access Points and Mobile Nodes. Discontinuities in the value of this counter can occur at re-initialization of the WDS.

This object specifies the number of successful AAA authentication successes made by WDS to authenticate Access Points and Mobile Nodes. Discontinuities in the value of this counter can occur at re-initialization of the WDS.

This object specifies the number of failed AAA authentication attempts made by WDS to authenticate Access Points and Mobile Nodes. Discontinuities in the value of this counter can occur at re-initialization of the WDS.

This object specifies the number of MAC Spoofing attempts detected and blocked by WDS. Discontinuities in the value of this counter can occur at re-initialization of the WDS.

This object specifies the number of roams not involving AAA authentication. Discontinuities in the value of this counter can occur at re-initialization of the WDS.

This object specifies the number of roams involving full AAA authentication. Discontinuities in the value of this counter can occur at re-initialization of the WDS.

This object specifies the number of fast and secured roams with CCKM. Discontinuities in the value of this counter can occur at re-initialization of the WDS.

This object specifies the number of Message Sequence Counter (MSC) mismatches. Discontinuities in the value of this counter can occur at re-initialization of the WDS.

This object specifies the number of failures for Key Sequence (KSC) with which WDS authenticates the Mobile Node for Fast Secure Roaming. Discontinuities in the value of this counter can occur at re-initialization of the WDS.

This object specifies the number of Message Integrity Check (MIC) failures detected by WDS. Discontinuities in the value of this counter can occur at re-initialization of the WDS.

This object specifies the number of mismatches for ReKey Number (RN) with which WDS authenticates the Mobile Node for Fast Secure Roaming. Discontinuities in the value of this counter can occur at re-initialization of the WDS.

This object indicates the LCP link status. LCP is a communication protocol between WDS residing on WLSM and L3MM on RP to provide L3MM with up-to-date information about current location of Mobile Node and also to propagate tunnel end point and other configuration information from RP to WDS/AP. down(1) - The LCP link status is down, up(2) - The LCP link status is up, inTransition(3) - The LCP link status is in transition from up(2) to down(1) or from down(1) to up(2). Enumeration: 'down': 1, 'inTransition': 3, 'up': 2.

Represents the type of Internet address stored in the corresponding instance of the cwdsiCsMgmtAddr.

The Internet address of the Central Switch Management.

Represents the type of Internet address stored in the corresponding instance of the cwdsiWdsAddr.

The Internet address of the network device in which WDS resides.

Represents the type of Internet address stored in the corresponding instance of the cwdsiWdsHsrpVirtualAddr.

The vitrual Internet address of the WLSM when the HSRP is enabled.

This object indicates the state of HSRP. unknown(1) - The state is unknown. disabled(2) - The HSRP is disabled. initial(3) - This is the starting state and indicates that HSRP is not running. learn(4) - The router is still waiting to hear from the active router. backup(5) - The router monitors the availability and state of the Master Router. speak(6) - The router sends periodic Hello messages and is actively participating in the election of the active and/or standby router. standby(7) - The router is a candidate to become the next active router and sends periodic Hello messages. active(8) - The router is currently forwarding packets that are sent to the group's virtual MAC address. The router sends periodic Hello messages. Enumeration: 'standby': 7, 'unknown': 1, 'initial': 3, 'disabled': 2, 'learn': 4, 'active': 8, 'backup': 5, 'speak': 6.

This table provides the information about mobility network-id. When a Mobile Node associates with a mobility enabled SSID, the Mobile Node registers with the network and is assigned to a particular mobility group. At the system level, a mobility network-id internally defines this mobility group. The mobility network-id is the mechanism the system uses to associate the user with a particular Fast Secure Roaming Tunnel. As the Mobile Node roams, the system tracks user movement, making sure that the user maintains association with the same mobility group.

Each entry is a set of attributes of a Mobility network-id currently configured in WDS.

This objects specifies the mobility network-id which uniquely defines a mobility group.

Represents the type of Internet address stored in the corresponding instance of the cwdsiMobilityGrpTunnelAddr.

This object specifies the Internet address of the Mobility tunnel, which is the tunnel source address of the mGRE tunnel on RP. Access Point uses this address to tunnel Mobile Node traffic.

This object specifies the maximum transmission unit of IP packet for the Mobility tunnel.

This object specifies the attributes of the mobility tunnel. none(0) - The mobility network-id is not supported on L3MM. trusted(1) - By default, a mobility network is considered 'untrusted'. In an untrusted network, Mobile Nodes are required to use a DHCP-obtained IP address. In a 'trusted' network, Mobile Nodes are allowed to use static IP addresses. On an untrusted network, data forwarding path for a Mobile Node is established and updated by snooping DHCP packets between the Mobile Node and the DHCP server. On the other hand, a trusted network data path establishment and update is achieved by snooping IP packets generated by the Mobile Node. broadcast(2) - IP broadcast is allowed on the mobility network-id corresponding to this tunnel. tcpMssAdjust(3)- The Access Point should do a TCP Maximum Segment Size (MSS) adjustment for the tunnel corresponding to the mobility network-id. dynamic(4) - Wireless broadcast domain corresponding to mobility network-id is dynamically created on an Access Point. multicast(5) - IP multicast is allowed on the mobility network-id corresponding to this tunnel. ipDiscovery(6) - IP broadcast pings will be generated to discover the IP address of the wireless client. Bits: 'none': 0, 'dynamic': 4, 'broadcast': 2, 'multicast': 5, 'ipDiscovery': 6, 'tcpMssAdjust': 3, 'trusted': 1.

This object specifies the number of Mobile Nodes of which the mobility network-id is cwdsiMobilityGrpNetworkId.

This object specifies the start time and date since the statistics has been gathered.

This object specifies the system-wide average number of roams per second for the previous 5 seconds interval.

This object specifies the system-wide average number of roams per second for the previous 1 minute interval.

This object specifies the system-wide average number of roams per second for the previous 5 minutes interval.

This table provides the information about the roaming statistics per the mobility network-id. Roams per second statistics will have averages for 5 seconds, one minute and five minutes. These data will be separated by the mobility network-id and differentiated by roams with 'no AAA authentications', 'AAA authentications', and 'Fast Secured Authentications'.

Each entry is a set of roaming statistics.

This object specifies the mobility network-id of the roaming Mobile Nodes.

This object specifies the count of total roams within the mobility network-id. Discontinuities in the value of this counter can occur at re-initialization of the WDS, and at other times as indicated by the value of cwdsiRoamStatsStartTime.

This object specifies the count of roams without AAA authentications within the mobility network-id. Discontinuities in the value of this counter can occur at re-initialization of the WDS, and at other times as indicated by the value of cwdsiRoamStatsStartTime.

This object specifies the count of roams with AAA authentications within the mobility network-id. Discontinuities in the value of this counter can occur at re-initialization of the WDS, and at other times as indicated by the value of cwdsiRoamStatsStartTime.

This object specifies the count of roams with Fast Secured authentications within the mobility network-id. Discontinuities in the value of this counter can occur at re-initialization of the WDS, and at other times as indicated by the value of cwdsiRoamStatsStartTime.

This object specifies the average number of roams per second for the previous 5 seconds interval within the mobility network-id.

This object specifies the average number of roams per second for the previous 1 minute interval within the mobility network-id.

This object specifies the average number of roams per second for the previous 5 minutes interval within the mobility network-id.

The compliance statement for the SNMP entities that implement the cwdsiInformationMIB module.

This collection of objects provide the information about MAC addresses and ages for MAC authentication of the device station.

This collection of objects provide the information about entities of a Access Point registered with WDS.

This collection of objects provide the information about entities of Mobile Node registered with WDS.

This collection of objects provide the information about the configuration status and statistics data between WDS and Network Manager.

This collection of objects provide the information about the statistics of Access Points and Mobile Nodes registered with WDS.

This collection of objects provide the information about entities of the Mobility Network.

This collection of objects provide the information about the Roaming statistics.

This collection of objects provide the notifications about the LCP status and HSRP state.