WS-SW-ROLE-FIREWALL-MIB

File: WS-SW-ROLE-FIREWALL-MIB.mib (16022 bytes)

Imported modules

SNMPv2-CONF SNMPv2-SMI SNMPv2-TC
WS-SMI WS-TYPE-MIB

Imported symbols

OBJECT-GROUP MODULE-COMPLIANCE OBJECT-TYPE
MODULE-IDENTITY DisplayString RowStatus
PhysAddress TruthValue wsSw
AbbrevRowStatus DoActionNow

Defined Types

RoleAuthType  
BITS noneOrPreSharedKey(0), eap(1), kerberos(2), hotspot(3), macAuthentication(4), any(5)    

RoleEncryptType  
BITS none(0), wep64(1), wep128(2), tkip(3), ccmp(4), tkipccmp(5), keyGuard(6), wep128Keyguard(7), any(8)    

StringMatchExpression  
INTEGER exact(1), contains(2), notContains(3), any(4)    

ValueCmpExpression  
INTEGER equal(1), notequal(2), any(3)    

WsSwRoleEntry  
SEQUENCE    
  wsSwRoleSequenceNumber INTEGER
  wsSwRoleName DisplayString
  wsSwRoleAuthType RoleAuthType
  wsSwRoleAuthMatchExpression ValueCmpExpression
  wsSwRoleEncType RoleEncryptType
  wsSwRoleEncMatchExpression ValueCmpExpression
  wsSwRoleApLocation DisplayString
  wsSwRoleApLocationExpression StringMatchExpression
  wsSwRoleLocation DisplayString
  wsSwRoleLocationMatchExpression StringMatchExpression
  wsSwRoleEssid DisplayString
  wsSwRoleEssidMatchExpression StringMatchExpression
  wsSwRoleMuMac PhysAddress
  wsSwRoleMuMacMask PhysAddress
  wsSwRoleMuMacAny TruthValue
  wsSwRoleGroupName DisplayString
  wsSwRoleRadioGroupMatchExpression StringMatchExpression
  wsSwRoleRowStatus AbbrevRowStatus

WsSwRoleFirewallPolicyEntry  
SEQUENCE    
  wsSwRoleFirewallPolicyRolePriority INTEGER
  wsSwRoleFirewallPolicyRoleName DisplayString
  wsSwRoleFirewallPolicyDirection INTEGER
  wsSwRoleFirewallPolicyAclPrecedence INTEGER
  wsSwRoleFirewallPolicyAclName DisplayString
  wsSwRoleFirewallPolicyRowStatus AbbrevRowStatus

WsSwRoleMuEntry  
SEQUENCE    
  wsSwRolePriority INTEGER
  wsSwRoleMuTableRoleName DisplayString
  wsSwRoleMuTableMUMac PhysAddress

Defined Values

wsSwRoleFirewallMibModule 1.3.6.1.4.1.388.14.2.20.1
Description.
MODULE-IDENTITY    

wsSwRoleFirewall 1.3.6.1.4.1.388.14.2.20
OBJECT IDENTIFIER    

wsSwRoleFirewallMib 1.3.6.1.4.1.388.14.2.20.1.1
OBJECT IDENTIFIER    

wsSwRoleTable 1.3.6.1.4.1.388.14.2.20.1.1.1
Each MU will be assigned a role defined in this table
Status: current Access: not-accessible
OBJECT-TYPE    
  SEQUENCE OF  
    WsSwRoleEntry

wsSwRoleEntry 1.3.6.1.4.1.388.14.2.20.1.1.1.1
An entry in the role table
Status: current Access: not-accessible
OBJECT-TYPE    
  WsSwRoleEntry  

wsSwRoleSequenceNumber 1.3.6.1.4.1.388.14.2.20.1.1.1.1.1
If there are multiple role match, then the lowest sequence number match will be considered. This should be typically specified in multiples of 10 like 10, 20, 30 etc., so that new role can be inserted in between. For e.g. to insert another role between 10 and 20, one has to specify a match-seq-no value of 15.
Status: current Access: read-only
OBJECT-TYPE    
  INTEGER 1..10000  

wsSwRoleName 1.3.6.1.4.1.388.14.2.20.1.1.1.1.2
Name of the Role
Status: current Access: read-only
OBJECT-TYPE    
  DisplayString Size(1..20)  

wsSwRoleAuthType 1.3.6.1.4.1.388.14.2.20.1.1.1.1.3
Specifies MU authentication type
Status: current Access: read-create
OBJECT-TYPE    
  RoleAuthType  

wsSwRoleAuthMatchExpression 1.3.6.1.4.1.388.14.2.20.1.1.1.1.4
Specifies MU authentication to match
Status: current Access: read-create
OBJECT-TYPE    
  ValueCmpExpression  

wsSwRoleEncType 1.3.6.1.4.1.388.14.2.20.1.1.1.1.5
Specifies MU encryption type
Status: current Access: read-create
OBJECT-TYPE    
  RoleEncryptType  

wsSwRoleEncMatchExpression 1.3.6.1.4.1.388.14.2.20.1.1.1.1.6
Specifies MU encryption type to match
Status: current Access: read-create
OBJECT-TYPE    
  ValueCmpExpression  

wsSwRoleApLocation 1.3.6.1.4.1.388.14.2.20.1.1.1.1.7
Radio name configuration
Status: current Access: read-create
OBJECT-TYPE    
  DisplayString  

wsSwRoleApLocationExpression 1.3.6.1.4.1.388.14.2.20.1.1.1.1.8
Matching expression which matches the radio name wsSwRoleRadioDescr with the radio name configured in wireless
Status: current Access: read-create
OBJECT-TYPE    
  StringMatchExpression  

wsSwRoleLocation 1.3.6.1.4.1.388.14.2.20.1.1.1.1.9
Specifies MU zone
Status: current Access: read-create
OBJECT-TYPE    
  DisplayString Size(1..40)  

wsSwRoleLocationMatchExpression 1.3.6.1.4.1.388.14.2.20.1.1.1.1.10
Zone-name - this should match any one the zones present in SOLE
Status: current Access: read-create
OBJECT-TYPE    
  StringMatchExpression  

wsSwRoleEssid 1.3.6.1.4.1.388.14.2.20.1.1.1.1.11
Specifies MU essid
Status: current Access: read-create
OBJECT-TYPE    
  DisplayString Size(1..32)  

wsSwRoleEssidMatchExpression 1.3.6.1.4.1.388.14.2.20.1.1.1.1.12
this should match the essid specified in wlan ssid command in wireless context
Status: current Access: read-create
OBJECT-TYPE    
  StringMatchExpression  

wsSwRoleMuMac 1.3.6.1.4.1.388.14.2.20.1.1.1.1.13
Specifies MU MAC address
Status: current Access: read-create
OBJECT-TYPE    
  PhysAddress  

wsSwRoleMuMacMask 1.3.6.1.4.1.388.14.2.20.1.1.1.1.14
Specifies MU MAC mask
Status: current Access: read-create
OBJECT-TYPE    
  PhysAddress  

wsSwRoleMuMacAny 1.3.6.1.4.1.388.14.2.20.1.1.1.1.15
The user does not want to set mac or mask
Status: current Access: read-create
OBJECT-TYPE    
  TruthValue  

wsSwRoleGroupName 1.3.6.1.4.1.388.14.2.20.1.1.1.1.16
Radio name configuration
Status: current Access: read-create
OBJECT-TYPE    
  DisplayString Size(1..50)  

wsSwRoleRadioGroupMatchExpression 1.3.6.1.4.1.388.14.2.20.1.1.1.1.17
Matching expression which matches the radio name wsSwRoleRadioDescr with the radio name configured in wireless
Status: current Access: read-create
OBJECT-TYPE    
  StringMatchExpression  

wsSwRoleRowStatus 1.3.6.1.4.1.388.14.2.20.1.1.1.1.18
Create or delete an entry from role table
Status: current Access: read-create
OBJECT-TYPE    
  AbbrevRowStatus  

wsSwRoleFirewallPolicyTable 1.3.6.1.4.1.388.14.2.20.1.1.2
This table will assign firewall policy in inbound and outbound direction for a role
Status: current Access: not-accessible
OBJECT-TYPE    
  SEQUENCE OF  
    WsSwRoleFirewallPolicyEntry

wsSwRoleFirewallPolicyEntry 1.3.6.1.4.1.388.14.2.20.1.1.2.1
An entry in the RoleFirewallPolicy Table.
Status: current Access: not-accessible
OBJECT-TYPE    
  WsSwRoleFirewallPolicyEntry  

wsSwRoleFirewallPolicyRolePriority 1.3.6.1.4.1.388.14.2.20.1.1.2.1.1
Role Priority needed for returning roles in a sorted order
Status: current Access: read-only
OBJECT-TYPE    
  INTEGER 1..10001  

wsSwRoleFirewallPolicyRoleName 1.3.6.1.4.1.388.14.2.20.1.1.2.1.2
Name of Role
Status: current Access: read-only
OBJECT-TYPE    
  DisplayString Size(1..20)  

wsSwRoleFirewallPolicyDirection 1.3.6.1.4.1.388.14.2.20.1.1.2.1.3
This Firewall policy can be applied for which direction ( inbound or outbound)
Status: current Access: read-only
OBJECT-TYPE    
  INTEGER inbound(1), outbound(2)  

wsSwRoleFirewallPolicyAclPrecedence 1.3.6.1.4.1.388.14.2.20.1.1.2.1.4
ACL precedence - Each Role can have 2 Acls attached in either direction (IN and OUT). The precedences of Acls attached in same direction have to be different.
Status: current Access: read-only
OBJECT-TYPE    
  INTEGER 1..100  

wsSwRoleFirewallPolicyAclName 1.3.6.1.4.1.388.14.2.20.1.1.2.1.5
This either an IP Acl or a Mac ACL configured as apart of global Acl configuration which we are attaching to the role
Status: current Access: read-only
OBJECT-TYPE    
  DisplayString Size(1..64)  

wsSwRoleFirewallPolicyRowStatus 1.3.6.1.4.1.388.14.2.20.1.1.2.1.6
Row Status - supports create and delete
Status: current Access: read-write
OBJECT-TYPE    
  AbbrevRowStatus  

wsSwRoleMuTable 1.3.6.1.4.1.388.14.2.20.1.1.3
Description.
Status: current Access: not-accessible
OBJECT-TYPE    
  SEQUENCE OF  
    WsSwRoleMuEntry

wsSwRoleMuEntry 1.3.6.1.4.1.388.14.2.20.1.1.3.1
Table Of MU mac addresses belonging to a role
Status: current Access: not-accessible
OBJECT-TYPE    
  WsSwRoleMuEntry  

wsSwRolePriority 1.3.6.1.4.1.388.14.2.20.1.1.3.1.1
Role Priority
Status: current Access: read-only
OBJECT-TYPE    
  INTEGER 1..10000  

wsSwRoleMuTableRoleName 1.3.6.1.4.1.388.14.2.20.1.1.3.1.2
Role Name
Status: current Access: read-only
OBJECT-TYPE    
  DisplayString  

wsSwRoleMuTableMUMac 1.3.6.1.4.1.388.14.2.20.1.1.3.1.3
Mac address of MU belonging to the role
Status: current Access: read-only
OBJECT-TYPE    
  PhysAddress  

wsSwRoleAssignmentImmediateEnable 1.3.6.1.4.1.388.14.2.20.1.1.4
Enable/Disable role assignment action immediate. When a new role is created send De-Auth to all MU's if this configuration is enabled. No de-auth will be sent if this flag is off, so Mu's will get applied with this new role when it connects next time.
Status: current Access: read-write
OBJECT-TYPE    
  TruthValue  

wsSwRoleConfigLastError 1.3.6.1.4.1.388.14.2.20.1.1.5
For displaying last error encountered during configuration
Status: current Access: read-only
OBJECT-TYPE    
  DisplayString Size(0..128)  

wsSwRoleFirewallConformance 1.3.6.1.4.1.388.14.2.20.1.1.100
OBJECT IDENTIFIER    

wsSwRoleFirewallCompliances 1.3.6.1.4.1.388.14.2.20.1.1.100.1
OBJECT IDENTIFIER    

wsCcRfCompliance 1.3.6.1.4.1.388.14.2.20.1.1.100.1.1
Status: current Access: read-only
MODULE-COMPLIANCE    

wsSwRoleFirewallGroups 1.3.6.1.4.1.388.14.2.20.1.1.100.2
OBJECT IDENTIFIER    

wsSwRoleFirewallGroup 1.3.6.1.4.1.388.14.2.20.1.1.100.2.1
Status: current Access: read-only
OBJECT-GROUP