This MIB is intended to be implemented on all those
devices operating as Central Controllers (CC) that
terminate the Light Weight Access Point Protocol
tunnel from Light-weight LWAPP Access Points.

This MIB provides configuration and status information
for 802.11 Access Points, LAN configuration, AAA,
Mobility, IpSec, Radio Rescouce Management and 802.11
global parameters.

The relationship between controller and the LWAPP
APs can be depicted as follows:

+......+     +......+     +......+           +......+
+      +     +      +     +      +           +      +
+  CC  +     +  CC  +     +  CC  +           +  CC  +
+      +     +      +     +      +           +      +
+......+     +......+     +......+           +......+
..            .             .                 .
..            .             .                 .
.  .            .             .                 .
.    .            .             .                 .
.      .            .             .                 .
.        .            .             .                 .
+......+ +......+     +......+      +......+          +......+
+      + +      +     +      +      +      +          +      +
+  AP  + +  AP  +     +  AP  +      +  AP  +          +  AP  +
+      + +      +     +      +      +      +          +      +
+......+ +......+     +......+      +......+          +......+
.              .             .                 .
.  .              .             .                 .
.    .              .             .                 .
.      .              .             .                 .
.        .              .             .                 .
+......+ +......+     +......+      +......+          +......+
+      + +      +     +      +      +      +          +      +
+  MN  + +  MN  +     +  MN  +      +  MN  +          +  MN  +
+      + +      +     +      +      +      +          +      +
+......+ +......+     +......+      +......+          +......+


The LWAPP tunnel exists between the controller and
the APs.  The MNs communicate with the APs through
the protocol defined by the 802.11 standard.

LWAPP APs, upon bootup, discover and join one of the
controllers and the controller pushes the configuration,
that includes the WLAN parameters, to the LWAPP APs.
The APs then encapsulate all the 802.11 frames from
wireless clients inside LWAPP frames and forward
the LWAPP frames to the controller.

GLOSSARY

Access Point ( AP )

An entity that contains an 802.11 medium access
control ( MAC ) and physical layer ( PHY ) interface
and provides access to the distribution services via
the wireless medium for associated clients.

LWAPP APs encapsulate all the 802.11 frames in
LWAPP frames and sends it to the controller to which
it is logically connected.

Basic Service Set Identifier (BSSID)

The identifier for the service set comprising of
all the 802.11 stations under the control of
one coordinating Access Point.  This identifier
happens to be the MAC address of the dot11 radio
interface of the Access Point.  The wireless
clients that associate with the Access Point
get the wired uplink through this particular
dot11 interface.

Central Controller ( CC )

The central entity that terminates the LWAPP protocol
tunnel from the LWAPP APs.  Throughout this MIB,
this entity also referred to as 'controller'.

Light Weight Access Point Protocol ( LWAPP )

This is a generic protocol that defines the
communication between the Access Points and the
Central Controller.

Mobile Node ( MN )

A roaming 802.11 wireless device in a wireless
network associated with an access point.

Station Management (SMT)

This term refers to the internal management of the
802.11 protocol operations by the AP to work
cooperatively with the other APs and 802.11
devices in the network.

REFERENCE

[1] Part 11 Wireless LAN Medium Access Control ( MAC )
and Physical Layer ( PHY ) Specifications.

[2] Draft-obara-capwap-lwapp-00.txt, IETF Light
Weight Access Point Protocol.     

Ess(WLAN) Configuration Table indexed by bsnDot11EssIndex.
Maximum of 17 WLANs can be created on Airespace Switch.
bsnDot11EssIndex of 17 is reserved for WLAN for Third Party
APs(non-Airespace APs).    

Index of the Ess(WLAN) within Airespace Switch.
Airespace Switch supports 17 ESS(Wlans) so index
will be from 1 to 17. 17 is to be used for ESS(WLAN)
created for support of Third Party APs(non-Airespace APs)    

Static WEP Default Key. For wep104 encryption either
26 bit hex key or 13 bit ascii key should be
specified.  For wep40 encryption 10 bit hex key or 5
bit ascii key should be specified. For wep128
encryption 32 bit hex key or 16 bit ascii key should
be specified.    

Tertiary Radius Accounting Server for this wlan.    

According to 802.11 standard 4 keys are supported.
So 802.11 Mobile Stations(Client) can have upto 4
keys.  This index is for informing Mobile Station
which key it should use for Static WEP Authentication    

Possible values are:


hex, ascii, default
                

This is not persistant.Reading this attribute will
always return default. The format of the key specified
in Airespace switch keeps record of the Index.    

Possible values are:


enable, disable
                

Possible values are:


wep104, wep40, wep128
                

Type of 802.1X Encryption. This applies if
bsnDot11Ess8021xSecurity is in enabled state.    

Possible values are:


enable, disable
                

DEPRECATED
Status of WPA security policy.
This has been deprecated for cLWSecDot11EssCckmTable.    

Possible values are:


wep104, wep40, wep128, tkipmic
                

DEPRECATED
Type of WPA Encryption. This applies when
bsnDot11EssWPASecurity is in enable state.
This has been deprecated for cLWSecDot11EssCckmTable.    

Possible values are:


enable, disable
                

Status of IpSec (VPN) security policy. Note that this
cannot be applied with Web security policy.    

Possible values are:


tripleDes, none, des, aesCbc
                

The Encryption algorithm employed by this Vpn(IpSec)
Encryption.  This applies only when
bsnDot11EssIpsecSecurity is in enable state.    

Possible values are:


none, hmacMd5, hmacSha1
                

The Hash algorithm employed by the Vpn Encrpytion.
This applies only when bsnDot11EssIpsecSecurity is in
enable state.    

Possible values are:


xauthEnablePsk, certificate, 
presharedKey
                

The authentication type of the SA. It could be a
certificate or a pre-shared key or xauthEnablePsk.
This applies only when bsnDot11EssIpsecSecurity is
in enable state.    

VPN Shared Key. This applies only when
bsnDot11EssVpnSharedKey is in enable state and
bsnDot11EssVpnIkeAuthMode is xauthEnablePsk or
presharedKey.    

VPN Shared Key size. This applies only when
bsnDot11EssVpnSharedKey is in enable state
and bsnDot11EssVpnIkeAuthMode is xauthEnablePsk or
presharedKey.    

Possible values are:


agressive, main
                

VPN IKE Phase 1 Mode type as per the IpSec standards.
This applies only when bsnDot11EssIpsecSecurity is in
enable state.    

Vpn IKE's Lifetime.
This applies only when bsnDot11EssIpsecSecurity is in
enable state.    

Possible values are:


group2, group1, group5
                

IKE's Diffie-Hellman Group.
This applies only when bsnDot11EssIpsecSecurity is in
enable state.    

Possible values are:


enable, disable
                

Ip address of VpnPassthru Gateway.
This applies only when bsnDot11EssIpsecPassthruSecurity
is in enable state.    

Possible values are:


enable, disable
                

Status of Web security policy. Note this policy cannot be
applied with IpSec security policy.    

Possible values are:


all, dot11aOnly, dot11bOnly, dot11gOnly, 
dot11bgOnly, dot11agOnly, dot11abOnly

Radio Policy for a WLAN. It can either be All where it
will be applicable to ALL types of protocols or it can be
set to apply to combinations of 802.11a, 802.11b, 802.11g.    

Possible values are:


bronze, silver, gold, platinum
                

Quality of Service for a WLAN.Services such as VoIP should
be set to Gold while non-discriminating services such as
messaging can be set to Bronze.    

Possible values are:


disable, enable
                

IP Address of the DHCP Server. Make it 0.0.0.0 to disable
DHCP Relay. Any value other than 0.0.0.0, it will be
assumed that DHCP Relay is turned on.    

Possible values are:


disable, enable
                

Specifies if contivity mode for the IpSec is enabled.
If enabled, user needs to specify the Quote of the Day
Server's IPAddress in bsnDot11EssVpnQotdServerAddress.    

Set the timeout for blacklisted Mobile Stations after
which the mobile station will be automatically
de-authenticated. Mobile Station are blacklisted by MAC
address and their status can be obtained from
bsnMobileStationStatus.
A timeout setting of 0 indicates no blacklist timeout is
set and administrative control
(bsnMobileStationDeleteAction ) is required to
deauthenticate the station.    

No of Mobile Stations currently associated with the
WLAN.    

Possible values are:


enable, disable
                

For switches with version before 2.0: This is applicable
only when the Web Security Type is enabled. When this
attribute is enabled, it allows a client's NetBIOS packets
to go through the switch before web auth is completed.

(This is obsolete for Switch versions 2.0 to 2.2).

For switch verions 3.0 and above: This is reintroduced as
the web policy where the client is connected
through the web without authentication that is there is no
username/password input required.  Moreover, if the
bsnDot11EssWebPassthroughEmail is enabled, the user will
be asked to enter an email address.    

Maximum time of a Mobile Station session.
Value of 0 means infinite time(no timeout set).    

Possible values are:


enable, disable
                

Status of Cranite Passthrough Security policy. If enabled,
no other security can be enabled.    

Possible values are:


disable, enable
                

This is the flag that can enable or disable the
client backlisting feature for a WLAN. If enabled,
the clients can be blacklisted by the Switch in case
of repetitive auth failure and other reasons like it.
If disabled, the clients cannot be blacklisted by
the switch. The blacklist timeout value will only
be effective if this feature is turned on.    

Name of the interface used by this WLAN. By default it
is set to be the management interface.    

Name of ACL for the WLAN. This is applicable only when
Web Authentication is enabled as a security.
An empty string value indicates that no ACL has been
set (which is a valid option)    

Possible values are:


disable, enable
                

Enable or Disable AAA override for the global WLAN
parameters.    

Possible values are:


disable, enable
                

DEPRECATED
Enable or Disable WPA Pre-shared Key Mode. If enabled, a
preshared key should be set for WPA authentication.
This has been deprecated for cLWSecDot11EssCckmTable.    

DEPRECATED
WPA Authentication Preshared Key. This applies only
when bsnDot11EssWPAAuthKeyMgmtMode is in enable state.
This has been deprecated for cLWSecDot11EssCckmTable.    

Possible values are:


enable, disable
                

Status of Fortress Passthrough Security policy. If
enabled, no other security can be enabled.    

Possible values are:


enable, disable
                

Enable this flag to allow Shared Key Authentication when
Static WEP is enabled.    

Possible values are:


enable, disable
                

Status of L2TP security policy. Note that this cannot be
applied with Web security policy, Cranite or Fortress
policy.    

Possible values are:


disable, enable
                

A type of security policy for Mobile Stations
(Clients). Select to filter clients by MAC address.
By selecting this Security, you need to create
MacFilters in bsnUsersTable or have MacFilters
configured on Radius Servers specified in
bsnRadiusAuthenticationTable    

DEPRECATED
WPA Authentication Preshared Key in the hex format.
This applies only when bsnDot11EssWPAAuthKeyMgmtMode
is in enable state.
This has been deprecated for cLWSecDot11EssCckmTable.    

Possible values are:


enable, disable
                

This attribute when enabled allows the switch to
broadcast this SSID.    

Possible values are:


enabled, disabled
                

This attribute specifies if external policy servers will
be used for validation. If no servers are configured in
bsnExternalPolicyServerTable then it cannot be enabled.    

Possible values are:


enable, disable
                

DEPRECATED
This attribute specifies status of RSN Security Policy.
This has been deprecated for cLWSecDot11EssCckmTable.    

Possible values are:


enable, disable
                

DEPRECATED
This attribute specifies RSN security's compatibility
mode with WPA.
This has been deprecated for cLWSecDot11EssCckmTable.    

Possible values are:


yes, no
                

DEPRECATED
This attribute specifies whether TKIP clients are allowed
by RSN Policy.
This has been deprecated for cLWSecDot11EssCckmTable.    

Possible values are:


enable, disable
                

DEPRECATED
This attribute specifies whether Preshared key is used or
not. If used user should specify a key between 8 and 63
characters in bsnDot11EssRSNAuthPresharedKey attribute.
This has been deprecated for cLWSecDot11EssCckmTable.    

DEPRECATED
RSN Authentication Preshared Key. This applies only
when bsnDot11EssRSNAuthKeyMgmtMode is in enable state.
This has been deprecated for cLWSecDot11EssCckmTable.    

DEPRECATED
RSN Authentication Preshared Key in the hex format.
This applies only when bsnDot11EssWPAAuthKeyMgmtMode
is in enable state.
This has been deprecated for cLWSecDot11EssCckmTable.    

Possible values are:


disable, enable
                

When enabled, IPv6 bridging is applied on the packets.    

Possible values are:


disable, enable
                

Administrative Status of ESS(WLAN). By disabling an
ESS the corresponding SSID is no longer broadcasted
in AP beacons.    

Possible values are:


disable, allowed, required, invalid
                

When enabled, WME Policy is applied on the packets.    

Possible values are:


disable, allowed, required, invalid
                

When enabled, 802.11e Policy is applied on the packets.    

Possible values are:


disable, enable
                

When enabled, along with the bsnDot11EssWebPassthru attribute,
the client is allowed to connect by entering his/her email
address on the web connection page. There is no further
authentication required.    

Possible values are:


disable, clientCacLimit, apCacLimit, 
both
                

When client cac limit is enabled, the 7920 Phones with old
software where the Call Admission Control (CAC) Limit is
Specified on the client will be supported on the WLAN. The
support for clientCacLimit (by setting to value 1 or 3) cannot
be enabled when the bsnDot11EssWmePolicySetting is set to
allowed or required. When ap cac limit is enabled, the 7920
Phones with new software where the Call Admission Control
(CAC) Limit is advertised by the AP, will be supported on the
WLAN.    

Possible values are:


authOpen, authSharedKey, authCiscoLeap
                

Possible values are:


enable, disable
                

Status of Static WEP Security policy. If enabled, WEP
Encryption WEP Default Key, Key Index and Key Format should
also be specified.    

Possible values are:


wep104, wep40, wep128
                

Type of Static WEP Encryption. Length of key specified in
Default Key depends on this attribute.    

Primary Radius Authentication Server for this wlan.    

Secondary Radius Authentication Server for this wlan.    

Tertiary Radius Authentication Server for this wlan.    

Primary Radius Accounting Server for this wlan.    

Secondary Radius Accounting Server for this wlan.    

Mobile Station Table indexed by bsnMobileStationByIpAddress.
NOTE: This is just to facilitate the search of mobile
stations based on IP Address. Doing a get without the index
doesn't return anything.  (Mobile Station is better referred
to as Client in the current releases.)    

Mobile Station RSSI data Table indexed by
bsnMobileStationMacAddress,
bsnMobileStationRssiDataApMacAddress,
bsnMobileStationRssiDataApIfSlotId.
(Mobile Station is better referred to as Client in the
current releases.)    

802.11 Mac Address of the AP on which
Mobile Station is associated.    

SlotId of APIf on which mobile station is
associated    

No of seconds ago when this RSSI data was recorded.    

Possible values are:


dot11bg, dot11a, unknown
                

The interface type of the radio that sensed the
rssi data.    

The Name of the AP that sensed the rssi data.    

RSSI seen by Airespace AP Interface for the Mobile Station    

Antenna which recived the probe request from client.
The antenna which reported the RSSI value for the client.
For now value will be 0 to 1, in future it may change.    

OBSOLETE
Table of watch listed clients. When clients are added to this
table by username or MAC address, ACS collects data for them
to show trend reports. The switch generates Client
Association and Client Authentication traps for the watch
listed clients.The watch list feature can be enbaled or
diabled by the bsnWatchListFeatureEnable flag on the switch.    

OBSOLETE
An entry in bsnWatchListClientTable.    

OBSOLETE
MAC Address or User Name of Client that is to be
added to the watch list.    

Possible values are:


byMac, byUserName
                

OBSOLETE
The type of the watch list client entry. The entry can
be created by Client MAC Address or by Username.    

OBSOLETE
A row status type for the bsnWatchListClientEntry    

Mobile Station Table indexed by the Mobile Station Username
and MAC Address. NOTE: This is just to facilitate the search
of mobile stations based on User Name. Doing a get without
the username doesn't return anything. (Mobile Station is
better referred to as Client in the current releases.)    

Rogue Client Table. This table lists all the Rogue Clients
detected by Airespace APs.    

Total number of Airespace APs that detected this
rogue.    

Possible values are:


initializing, pending, alert, contained, 
threat, containedpending

This attribute is use to specify the state in which
the Rogue AP is. User can set the Rogue Client in
alert,known or acknowledge state.
Alert state means Rogue Client can be a potential i
threat.Trap will be sent out to trap recipients.
Known state means its just internal Client which is
not on the same Switch.
Acknowledge state means an external Client whose
existence is acceptable and not a threat
(probably some other company's AP).
Contained means containement is initiated and
ongoing    

Time Stamp when this Rogue was First Detected.    

Time Stamp when this Rogue was Last Detected.    

This attribute specifies BSSID of the Rogue Client.    

Possible values are:


unassigned, level1, level2, level3, 
level4
                

If the state of the rogue is contained, this specifies
the level of containment.  Higher the level, more the
number of detecting APs that are used to contain it.
The value must be between 1 to 4 for 'contained'
state.    

Number of seconds ago this rogue client was detected.    

Rogue Station Table. This table lists all the Airespace AP
Interface that detected a particular Rogue.    

Mac Address of Airespace AP Interface that Detected
the Rogue.    

No of seconds ago when this Rogue was last heard by
this AP.     

The slotId of the Airespace AP Interface that detected the
Rogue.    

SNR seen by Airespace AP Interface from Rogue    

Possible values are:


dot11b, dot11a, unknown
                

The advertised SSID that the Airespace AP Interface
picked up from the Rogue.    

Name of Airespace AP Interface that detected the
Rogue.    

The advertised Channel Number of that the Airespace
AP Interface picked up from the Rogue.    

RSSI seen by Airespace AP Interface from the Rogue    

Rogue Clients for each rogue. This table lists all Rogue
Clients on a particular Rogue.    

QOS Profiles specified in bsnDot11EssTable can be customized
in this table. This is a lookup table for auto created
profiles    

QOS Profile Name. This will be one of bronze,gold,
platinum,silver,uranium.    

Specifies the type of wired QOS protocol for the
current profile. Value of 0 indicates the feature is
disabled.    

This is one of the per user bandwidth contracts(k).
Specifies Average Data Rate per user. Value of 0
indicates the feature is disabled.    

This is one of the per user bandwidth contracts(k).
Specifies Average Burst Data Rate per user. Value of
0 indicates the feature is disabled.    

Possible values are:


reset, default
                

Set this attribute to reset to restore the factory default
value for the profile.    

This is one of the per user bandwidth contracts(k).
Specifies Average Real Time Data Rate per user.
Value of 0 indicates the feature is disabled.    

This is one of the per user bandwidth contracts(k).
Specifies Burst Real Time Data Rate per user. Value
of 0 indicates the feature is disabled.    

This is one of the over the Air QOS parameter.
Specifies maximum RF Usage per AP in percentage.    

This is one of the over the Air QOS parameter.
Specifies Queue depth for the current profile.    

Possible values are:


none, dot1p
                

This is one of the over the Air QOS parameter.
Specifies Queue depth for the current profile.    

RF ID Tag Table indexed by bsnTagDot11MacAddress.    

Possible values are:


unknown, type1
                

No of seconds ago when this tag was heard by any AP.    

Time Interval after which the tag transmits data.    

Possible values are:


unknown, low, normal, medium
                

RF ID Tag Detecting AP Table indexed by bsnTagDot11MacAddress,
bsnTagRssiDataApMacAddress and bsnTagRssiDataApIfSlotId.    

802.11 MAC Address of the AP detecting the RF ID Tag.    

Slot Id of the radio on AP detecting the RF ID Tag.    

SNR of the RF ID tag as seen by the radio on this
detecting AP.    

Possible values are:


dot11b, dot11a, uwb
                

Interface Type of the radio on AP detecting the RF ID Tag.    

No of seconds ago when this tag was heard by this detecting
AP.    

RSSI of the RF ID Tag as seen by the radio on this
detecting AP.    

Mobile Station Extended Statistics Table.
(Mobile Station is better referred to as Client in the
current releases.)    

Time stats were sampled as seconds since the epoch.    

Mobile Station Table indexed by bsnMobileStationMacAddress.
(Mobile Station is better referred to as Client in the current
releases.)    

Possible values are:


unspecified, previousAuthNotValid, 
deauthenticationLeaving, 
disassociationDueToInactivity, 
disassociationAPBusy, 
class2FrameFromNonAuthStation, 
class2FrameFromNonAssStation, 
disassociationStaHasLeft, 
staReqAssociationWithoutAuth, 
missingReasonCode

Possible values are:


unassociated, local, anchor, foreign, 
handoff, unknown, exportanchor, 
exportforeign

If the Mobility Status of the Mobile Station is
Anchor then it will have Peer Ip Address and will
have Anchor IP if the Role is Foreign    

Possible values are:


notimplemented, implemented
                

When this attribute is true, it shall indicate that the
Mobile Station is able to respond to a CF-Poll with a
data frame within a SIFS time. This attribute shall be
false if the Mobile Station is not able to respond to a
CF-Poll with a data frame within a SIFS time.    

Possible values are:


notimplemented, implemented
                

Specifies whether CFP is requested by Mobile
Station or not    

Possible values are:


notimplemented, implemented
                

This attribute indicates that the PHY channel agility
functionality is enabled.    

Possible values are:


notimplemented, implemented
                

This attribute, when true, shall indicate that the PBCC
modulation option as defined in subclause 18.4.6.6 is
implemented.  The default value of this attribute shall
be false.    

Possible values are:


notimplemented, implemented
                

This attribute, when true, shall indicate that the
short preamble option as defined in subclause 18.2.2.2
is implemented.  The default value of this attribute
shall be false.    

Possible values are:


openSystem, sharedKey, unknown, 
openAndEap
                

Possible values are:


enable, disable
                

The Port Number of this Airespace Switch on which the
traffic of the Mobile Station is coming through.    

Possible values are:


default, delete
                

Action to Deauthenticate the Mobile Station. Set the
State to delete.    

Possible values are:


completed, notcompleted
                

When this attribute has value completed, it shall
indicate that the Mobile Station has completed the
security policy checks. Otherwise the checks are yet
to be completed.    

Possible values are:


dot11a, dot11b, dot11g, unknown, mobile
                

The 802.11 protocol type of the client. The protocol
is mobile when this client detail is seen on the
anchor i.e it's mobility status is anchor.    

Possible values are:


disable, enable
                

If enabled, then mirroring for this client will be statically
configured irrespective of the AP and the port this client
is on.    

Name of the Interface of the mobile client to the switch.    

Possible values are:


local, monitor, remote, roguedetector
                

Mode of the AP to which the Mobile Station is associated.    

Vlan ID of the Interface to which the client is
associated.    

User Name,if any, of the Mobile Station. This would
be non empty in case of Web Authentication and IPSec.    

Possible values are:


dot1x, wpa1, wpa2, wpa2vff, 
notavailable, unknown

Mode of the AP to which the Mobile Station is associated.    

Possible values are:


ccmpAes, tkipMic, wep40, wep104, wep128, 
none, notavailable, unknown

Mode of the AP to which the Mobile Station is associated.    

Possible values are:


eapTls, ttls, peap, leap, speke, 
eapFast, notavailable, unknown

Mode of the AP to which the Mobile Station is associated.    

Possible values are:


notSupported, ccxv1, ccxv2, ccxv3, 
ccxv4, ccxv5

Represents the Cisco Compatible Extensions (CCX)
Version the client is using for communication
with the AP.    

Possible values are:


notSupported, e2ev1, e2ev2
                

Represents the End-2-End Version the client is
using for communication with the AP.    

802.11 Mac Address of the AP to which the
Mobile Station is associated.    

Slot ID of AP Interface to which the mobile station
is associated. The value 15 is used to indicate that
the slot Id is invalid.    

Ess Index of the Wlan(SSID) that is being used by Mobile
Station to connect to AP    

Possible values are:


idle, aaaPending, authenticated, 
associated, powersave, disassociated, 
tobedeleted, probing, blacklisted

Mobile Station Per Radio Per VAP(WLAN) Table. This table
lists all Mobile Stations on a particular Airespace AP
Interface for a particular ESS(Wlan). It only lists MAC
Addresses. Further details for a Mobile Station can be found
from bsnMobileStationTable once the MAC Address is knonwn.
(Mobile Station is better referred to as Client in the
current releases.)    

An entry in MobileStationPerRadioPerVapTable.    

The index of  Mobile Station. The index starts from
1 and goes upto the total number of Mobile Stations
on Airespace Radio Interface for a specific
ESS (Wlan).    

Mobile Station Statistics Table.
(Mobile Station is better referred to as Client in the current
releases.)    

Rogue Table. This table lists all the Rogue APs detected by
Airespace APs.    

This is the max RSSI value of all the detctecting APs,
which have detected this rogue.     

This is the SSID of the rogue detected by Access
Point, which has max RSSI value of all the
detectecting APs of this rogue.    

Total number of Airespace APs that detected this rogue.    

Possible values are:


initializing, pending, alert, 
detectedLrad, known, acknowledge, 
contained, threat, containedPending, 
knownContained, trustedMissing

This attribute is use to specify the state in which
the Rogue AP is user can set the Rogue AP in alert,
known or acknowledge state.
Alert state means Rogue AP can be a potential threat.
Trap will be sent out to trap recipients.
Known state means its just internal AP which is not
on the same Switch.
Acknowledge state means an external AP whose
existence is acceptable and not a threat (probably
some other company's AP).
Contained means containement is initiated and ongoing.
Threat is usually the state when the rogue is found
on wired network.
known(4), knownContained(9) and trustedMissing(10)
will appear in known rogue list.
known rogues can be pre provisioned and known rogues
state can be changed to alert(2)    

Time Stamp when this Rogue was First Detected.    

Time Stamp when this Rogue was Last Detected.    

Possible values are:


unassigned, level1, level2, level3, 
level4
                

If the state of the rogue is contained, this specifies
the level of containment. Higher the level, more the
number of detecting APs that are used to contain it.
The value must be between 1 to 4 for 'contained' state.    

Possible values are:


ap, adhoc
                

This attribute specifies if the Rogue is of ad-hoc type
or is an AP.    

Possible values are:


no, yes
                

This attribute specifies if the Rogue is on Wired
Network or not.    

Total number of Clients detected on this rogue.    

Rogue Station Table. This table lists all the Airespace AP
Interfaces that detected a particular Rogue.    

MAC Address of Airespace AP Interface that Detected
the Rogue.    

This is the comma separated string of channels used for
rogue containment.    

No of seconds ago when this Rogue was last heard by
this AP.     

Possible values are:


disabled, enabled
                

Possible values are:


long, short
                

Possible values are:


disabled, enabled
                

The slot ID of the Airespace AP Interface that detected the
Rogue.    

SNR seen by Airespace AP Interface from Rogue    

Possible values are:


dot11b, dot11a, unknown
                

The Airespace AP Interface type that detected the Rogue.    

Name of Airespace AP Interface that detected the Rogue.    

The advertised Channel Number of the Airespace AP
Interface picked up from the Rogue.    

Rogue RSSI as seen by Airespace AP Interface.    

Possible values are:


invalid, deauthBroadcast, cfp, max, 
unknown
                

If the rogue is in 'contained' state, this attribute
shows the containment mode used by the AP.    

The number of channels used for rogue containment.    

OBSOLETE
Third Party Access Point Table. An entry needs to be
configured in this table for a third party access point
that needs to be supported by the Switch. Note: A third
party ESS (Wlan) with ID 17 should be created in
bsnDot11EssTable before adding entries here.
Please also note that ACS currently supports only
Aironet 350, 1200 and Orinoco 2000 Access Points as
third party APs.    

OBSOLETE
MAC Address of Third Party Access Point which is
connected directly to this Airespace Switch.    

OBSOLETE
Interface(Port Number) to which the Third Party AP is
connected.    

OBSOLETE
Row Status in the ThirdPartyAPEntry.    

OBSOLETE
Static IP address of the 3rd Party AP, 0.0.0.0 indicating
x its using DHCP    

Possible values are:


disable, enable
                

OBSOLETE
If 802.1X is required for the 3rd Party AP    

Possible values are:


disable, enable
                

OBSOLETE
If enabled, then data from all the foreign AP users and all
the foreign APs on this APs port will be mirrored. These
clients are dynamically added to the switch's mirrored MAC
list.    

Possible values are:


disable, enable
                

When enabled, Site Specific WLAN feature is enforced.    

The string is an unique identifier/name assigned to a site.    

Row Status for creation/deletion of entries in
bsnAPGroupsVlanTable    

A table for the WLAN-interace-mappings allowed for each
configured site. Each site can have a set of WLANs associated
with it.    

When an AP is associated with a site, and the site
has an associated set of WLANs, then only those WLANs are
beamed by the AP. Here 'bsnAPGroupsVlanMappingSsid'
is the wlan to be used when a client connects on this AP.    

When an AP is associated with a site, and the site
has an associated set of WLANs, then only those WLANs are
beamed by the AP. Here 'bsnAPGroupsVlanMappingInterfaceName'
is the interface to be used when a client connects to the
'bsnAPGroupsVlanMappingSsid' WLAN on this AP.    

Row Status for creation/deletion of WLAN-interface-mappings
asscoiated with sites.    

Table of Airespace APs managed by this Airespace Switch.    

sysName of the Airespace Switch which is suppose to be the
Primary MWAR(switch) of the AP with which AP should associate.
This work when AP is not directly connected to Airespace Switch,
it tries to find Primary Switch and associates with it. If
this attribute is left empty or AP is not able to find the
Airespace Switch with this name, then it will associate with
Secondary Switch.    

Possible values are:


reset, default
                

Set this attribute to reset the AP.
When it comes up it will try to associate with the
Primary Switch if that is set, else it will associate with the
Master Switch. Reading this attribute will always return 0    

Configures the time interval in secs after which
bsnAPDot11Counters Stats is sent from AP to Switch. If not
configured this value is 0 which means never send the stats.    

Port on the Switch on which this APs traffic is coming
through.    

Possible values are:


clear, default
                

Set this attribute to clear AP configuration
and reset it to factory defaults.
Reading this attribute will always return 0    

IP address of the AP. This will not be available when
the switch is operating in the Layer2 mode. In this case,
the attribute will return 0 as value.    

Number of Radio Interfaces on the Airespace AP.
Currently maximum two interfaces are supported.
One would be of type 802.11a and other of type
802.11b/g.    

Possible values are:


disable, enable
                

If enabled, then this AP's Client's Data is mirrored and this
AP's clients are dynamically added to the switch's mirrored
MAC list.    

Possible values are:


disable, enable
                

This specifies if the the Remote Mode is supported on this
AP or not. If supported user can set bsnAPMonitorOnlyMode to
remote. Otherwise not.    

Possible values are:


ap1000, ap1030, mimo, unknown, ap1100, 
ap1130, ap1240, ap1200, ap1310, ap1500, 
ap1250, ap1505

sysName of the Airespace Switch which is suppose to be the
Secondary MWAR(switch) of the AP with which AP should associate
if Primary Switch(configured through bsnAPPrimaryMwarName)
is not available. If primary and secondary switches are not
available then AP will associate with the tertiary switch.    

sysName of the Airespace Switch which is suppose to be the
Tertiary MWAR(switch) of the AP with which AP should associate.
If primary,secondary and tertiary switch are not available
then it will associate with Master Switch.    

Possible values are:


disable, enable
                

This flag when disabled implies that  AP will use DHCP to get
the IP address.  However, if it is enabled, then user should
enter the IPAddress, Netmask and Gateway.    

The Static IP-Address configuration for the AP.
This can only be changed when the LWAPP mode is in Layer-3.    

Possible values are:


disable, enable
                

This specifies if this AP is a Bridging AP. Bridging APs
can be used in Bridging or Mesh network configurations.    

Name assigned to this AP. If an AP is not configured its
factory default name will be ap: eg. ap:af:12:be    

The AP Group to which this AP has been associated with.
If it is empty, then no AP Group overriding has been set.    

IOS Version of IOS Cisco AP. Zero length string will be
returned for other APs    

Possible values are:


unknown, manufactureinstalled, 
selfsigned, localsignificance

Enum values denoting AP Certificate Type.
1 : manufactureinstalled : Manufacture Installed Certificate
type (MIC).
2 : selfsigned : Self Signed Certificate type (SSC).
3 : localsignificance : Local Significance.    

Possible values are:


enable, disable
                

User specified location of this AP.
While configuring AP, user should specify a location for
the AP so that its easy to figure out for some one where
the AP is located.    

Possible values are:


local, monitor, remote, roguedetector, 
sniffer, bridge

Possible values are:


associated, disassociating, downloading
                

Operation State of the AP. When AP associates with the
Airespace Switch its state will be associated. When Airespace
AP is disassociated from the Switch, its state will be
disassociating. The state is downloading when the AP is
downloading its firmware.    

Table of attributes for various thresholds to be
set on each Airespace AP Interface for Load
performance profile , interference performance
profile and Noise performance profile.    

An entry (conceptual row) in the Phy Thresholds
Table. Entries in this MIB are indexed by
bsnAPDot3MacAddress and bsnAPIfSlotId    

Possible values are:


automatic, customized
                

If this value is automatic then Profile Parameters in
bsnRrmDot11aAPProfile at the global level will be used.
If this value is customized then Profile Parameters in
bsnAPIfProfileThresholdConfig
Table will be used and user can customize them per AP.    

foreign interference threshold between 0 and 100 percent.    

Airespace AP coverage exception level between 0 and 100 percent.    

foreign noise threshold between -100 and -50 dBm.    

RF utlization threshold between 0 and 100 percent.    

Airespace AP data-rate threshold between 1000 and 100000    

Airespace AP mobiles threshold between 1 and 75    

Airespace AP coverage threshold between 3 and 50    

Airespace AP mobile minimum exception level between 1 and 1000    

These are RRM performance related read only parameters
per Airespace AP    

An entry (conceptual row) in the Table.
Entries in this MIB are indexed by
bsnAPDot3MacAddress and bsnAPIfSlotId    

This is the percentage of time the Airespace AP
receiver is busy operating on packets. It is a number
from 0-100 representing a load from 0 to 1.    

This is the percentage of time the Airespace AP
transmitter is busy operating on packets. It is a
number from 0-100 representing a load from 0 to 1.    

This is the number of clients with poor SNR attached to
this Airespace AP at the last measurement interval
( This comes from APF ).    

This is the number of clients attached to this Airespace
AP at the last measurement interval(This comes from
APF)    

This is a table of channel information like interference
and noise from other 802.11 networks on each channel.    

An entry (conceptual row) in the Table.
Entries in this MIB are indexed by
bsnAPDot3MacAddress, bsnAPIfSlotId    

Power of Interference from other 802.11 networks on
this channel    

Interference from other 802.11 networks on this
channel    

This is a table of channel information like
interference and noise from other 802.11 networks on
each channel.    

An entry (conceptual row) in the Table.
Entries in this MIB are indexed by bsnAPDot3MacAddress,
bsnAPIfSlotId    

This is the average noise power in dBm on
each channel that is available to Airespace AP    

This is a table of state of interference monitor
on each Airespace AP    

An entry (conceptual row) in the Table.
Entries in this MIB are indexed by bsnAPDot3MacAddress,
bsnAPIfSlotId    

This field represents the current state of the LOAD
monitor. This is a total measurement of the business of
this Airespace AP. PASS indicates that this Airespace
AP is performing adequately compared to the Airespace
AP profile. FAIL indicates the Airespace AP is not
performing adequately against the LOAD profile.    

This field represents the current state of Interference
monitor. This is a total measurement of the interference
present at this Airespace AP. PASS indicates that this
Airespace AP is performing adequately compared to the
Interference profile.  FAIL indicates the Airespace AP
is not performing adequately against the Interference
profile.    

This field represents the current state of coverage
monitor. This is a total measurement of the client
coverage at this Airespace AP. PASS indicates that
this  Airespace AP is performing adequately compared
to the  coverage profile. FAIL indicates the Airespace
AP is not performing adequately against the coverage
profile.    

This field represents the current state of Noise
monitor. This is a total measurement of the noise
present at this Airespace AP. PASS indicates that this
Airespace AP is performing adequately compared to the
noise profile.
FAIL indicates the Airespace AP is not performing
adequately against the noise profile.    

This is a table of Rx Neighbors for each Airespace AP
with their RSSI value.    

An entry (conceptual row) in the Table.
Entries in this MIB are indexed by bsnAPDot3MacAddress
bsnAPIfSlotId, bsnAPIfRxNeighborMacAddress    

MAC Address of Rx Neighbor of the Airespace AP    

IP Address of Rx Neighbor of the Airespace AP    

This is a table of channel information like interference
and noise from other 802.11 networks on each channel.    

An entry (conceptual row) in the Table.
Entries in this MIB are indexed by bsnAPDot3MacAddress,
bsnAPIfSlotId    

This is a table of Signal to Noise ratio Coverage
information on an AP Interface.    

An entry (conceptual row) in the Table.
Entries in this MIB are indexed by bsnAPDot3MacAddress,
bsnAPIfSlotId    

Each entry represents an 802.11 interface in an Airespace
AP.    

In a cell site configuration, this would be the cell Id of
this AP Interface    

Number of WLANs currently active on this AP Interface.    

Possible values are:


down, up
                

Port number on Airespace Switch on which the traffic from this AP
interface is received.    

Possible values are:


internalAndExternal, internal, siacAp, 
external, ext11bInt11a

This attribute specifies the Antenna types supported by the AP
Radio whether it is internal or external or both.
internalAndExternal(0)- internal and external antenna for both
11a and 11b
internal(1) - only internal antenna is allowed.
siacAp- 11b internal and 11a external
external - only external antenna is allowed for 11a and 11b
ext11bInt11a - external antenna for 11b and internal antenna for
11a.    

Possible values are:


disable, enable
                

This flag when disabled implies that all WLANs are available
from this radio.
However, if this is enabled, then only those WLANs that appear
in the bsnApIfWlanOverrideTable will be available from this
radio.    

Possible values are:


disable, enable
                

This flag when enabled implies that  AP will sniff the 802.11a/bg
packets.  However, if it is enabled, then user should enter the
server-ip-address on which Airopeek is running and the
802.11a/bg-channel-number to be sniffed.
The above feature will work only when AP is in 'Sniffer' mode.    

Possible values are:


ch0, ch1, ch2, ch3, ch4, ch5, ch6, ch7, 
ch8, ch9, ch10, ch11, ch12, ch13, ch14, 
ch34, ch36, ch38, ch40, ch42, ch44, 
ch46, ch48, ch52, ch56, ch60, ch64, 
ch100, ch104, ch108, ch112, ch116, 
ch120, ch124, ch128,