MIBs Depot

GB15629dot11-WAPI-MIB

Registered at
1.2.156
Last updated
2007-05-21 17:57
Organization
China Broadband Wireless IP Standard Group.
Namespace
3com
Source file
GB15629dot11-WAPI-MIB
Digest
sha256:ce8ace996dbad1eea04ecdb76285c04e5128b8980799cc3605ba9096c808dec6

Description

Manage WAPI module.

Contact

Contact: E-mail: bwips@chinabwips.org P.O.BOX 88, West High-tech Development Center, Xi'an, China. 710075 Tel: +86 29 8838 6220 Fax: +86 29 8838 6218

Imports

FromSymbols
IF-MIBifIndex
SNMPv2-CONFMODULE-COMPLIANCE, NOTIFICATION-GROUP, OBJECT-GROUP
SNMPv2-SMICounter32, Integer32, MODULE-IDENTITY, NOTIFICATION-TYPE, OBJECT-IDENTITY, OBJECT-TYPE, Unsigned32, iso
SNMPv2-TCDisplayString, MacAddress, TEXTUAL-CONVENTION, TruthValue

Imported by

Nothing in this corpus imports this module.

Load order

Every file a consumer needs in order to load this module, dependencies first.

GB15629dot11-WAPI-MIB
IANAifType-MIB
IF-MIB
SNMPv2-CONF
SNMPv2-MIB
SNMPv2-SMI
SNMPv2-TC

Objects

NameOIDSyntaxAccessStatus
member_body
OBJECT-IDENTITY
1.2
cn
OBJECT-IDENTITY
1.2.156
bwips
OBJECT-IDENTITY
1.2.156.11235
gb15629
OBJECT-IDENTITY
1.2.156.11235.15629
gb15629_11
OBJECT-IDENTITY
1.2.156.11235.15629.11
gb15629_11_mibs
OBJECT-IDENTITY
1.2.156.11235.15629.11.1
wapiMIBObjects
OBJECT-IDENTITY
1.2.156.11235.15629.11.1.1.1
gb15629dot11wapiConfigTable
OBJECT-TYPE
The table containing WAPI configuration objects.
1.2.156.11235.15629.11.1.1.1.1not-accessiblecurrent
gb15629dot11wapiConfigEntry
OBJECT-TYPE
An entry in the gb15629dot11wapiConfigTable.
1.2.156.11235.15629.11.1.1.1.1.1not-accessiblecurrent
gb15629dot11wapiConfigVersion
OBJECT-TYPE
The highest WAPI version this entity supports.
1.2.156.11235.15629.11.1.1.1.1.1.1Integer32read-onlycurrent
gb15629dot11wapiControlledAuthControl
OBJECT-TYPE
This object indicates whether the entity enables authentication. When the value is FALSE, it shall indicate that authentication is not enabled on this entity, and the status of the controlled port is 'authenticated'. When the value is TURE, it shall indicate that authentication is enabled, and the status of controlled port is decided by gb15629dot11wapiControlledPortControl.
1.2.156.11235.15629.11.1.1.1.1.1.2TruthValueread-onlycurrent
gb15629dot11wapiControlledPortControl
OBJECT-TYPE
This object indicates the controlling type of the entity's port. This object is available when gb15629dot11wapiControlledAuthControl is TURE. When the value is zero, it means 'automatic', and the status of the controlled port is decided by authentication result. When the value is one, it means 'forcible unauthenticated', and the status of the controlled port is 'unauthenticated'.
1.2.156.11235.15629.11.1.1.1.1.1.3INTEGERread-onlycurrent
gb15629dot11wapiOptionImplemented
OBJECT-TYPE
This object indicates whether the entity support WAPI. When the value is TURE, it shall indicate that the entity support WAPI. Otherwise, it shall indicate that the entity doesn't support WAPI.
1.2.156.11235.15629.11.1.1.1.1.1.4TruthValueread-onlycurrent
gb15629dot11wapiPreauthenticationImplemented
OBJECT-TYPE
This object indicates whether the entity support WAPI preauthentication. This object can't be set to TURE, unless gb15629dot11wapiOptionImplemented is TURE.
1.2.156.11235.15629.11.1.1.1.1.1.5TruthValueread-onlycurrent
gb15629dot11wapiEnabled
OBJECT-TYPE
When this object is set to TRUE, it shall indicate that WAPI is enabled on this entity. The entity will advertise the WAPI information element in its beacon and probe response frames.
1.2.156.11235.15629.11.1.1.1.1.1.6TruthValueread-writecurrent
gb15629dot11wapiPreauthenticationEnabled
OBJECT-TYPE
When this object is set to TRUE, it shall indicate that WAPI preauthentication is enabled on this entity. Otherwise, it shall indicate that WAPI preauthentication is disabled on this entity. This object requires that gb15629dot11WAPIEnabled also be set to TRUE.
1.2.156.11235.15629.11.1.1.1.1.1.7TruthValueread-writecurrent
gb15629dot11wapiConfigUnicastKeysSupported
OBJECT-TYPE
This object indicates how many unicast keys the entity supports for WAPI.
1.2.156.11235.15629.11.1.1.1.1.1.8Unsigned32read-onlycurrent
gb15629dot11wapiConfigUnicastRekeyMethod
OBJECT-TYPE
This object selects a mechanism for rekeying the WAPI USK. The default is time-based, once per day. Rekeying the USK is only applicable to an entity acting as a role of AE or ASUE.
1.2.156.11235.15629.11.1.1.1.1.1.9INTEGER {disabled(1), timeBased(2), packetBased(3), timepacket-Based(4)}read-writecurrent
gb15629dot11wapiConfigUnicastRekeyTime
OBJECT-TYPE
The time in seconds after which the WAPI USK shall be refreshed. The timer shall start at the moment the USK was set using the MLME-SETWPIKEYS request primitive.
1.2.156.11235.15629.11.1.1.1.1.1.10Unsigned32 (1..4294967295)read-writecurrent
gb15629dot11wapiConfigUnicastRekeyPackets
OBJECT-TYPE
A packet count (in 1000s of packets) after which the WAPI USK shall be refreshed. The packet counter shall start at the moment the USK was set using the MLME-SETKEYS request primitive and it shall count all packets encrypted using the current USK.
1.2.156.11235.15629.11.1.1.1.1.1.11Unsigned32 (1..4294967295)read-writecurrent
gb15629dot11wapiConfigMulticastCipher
OBJECT-TYPE
This object indicates the multicast cipher suite selector the entity must use. The multicast cipher suite in the WAPI information element shall take its value from this variable. It consists of an OUI (the first 3 octets) and a cipher suite identifier (the last octet).
1.2.156.11235.15629.11.1.1.1.1.1.12OCTET STRING (SIZE(4))read-writecurrent
gb15629dot11wapiConfigMulticastRekeyMethod
OBJECT-TYPE
This object selects a mechanism for rekeying the WAPI MSK. The default is time-based, once per day. Rekeying the MSK is only applicable to an entity acting as a role of AE or ASUE.
1.2.156.11235.15629.11.1.1.1.1.1.13INTEGER {disabled(1), timeBased(2), packetBased(3), timepacket-Based(4)}read-writecurrent
gb15629dot11wapiConfigMulticastRekeyTime
OBJECT-TYPE
The time in seconds after which the WAPI MSK shall be refreshed. The timer shall start at the moment the MSK was set using the MLME-SETWPIKEYS request primitive.
1.2.156.11235.15629.11.1.1.1.1.1.14Unsigned32 (1..4294967295)read-writecurrent
gb15629dot11wapiConfigMulticastRekeyPackets
OBJECT-TYPE
A packet count (in 1000s of packets) after which the WAPI MSK shall be refreshed. The packet counter shall start at the moment the MSK was set using the MLME-SETKEYS request primitive and it shall count all packets encrypted using the current MSK.
1.2.156.11235.15629.11.1.1.1.1.1.15Unsigned32 (1..4294967295)read-writecurrent
gb15629dot11wapiConfigMulticastRekeyStrict
OBJECT-TYPE
This object signals that the MSK shall be refreshed whenever a STA leaves the BSS that possesses the MSK.
1.2.156.11235.15629.11.1.1.1.1.1.16TruthValueread-writecurrent
gb15629dot11wapiConfigPSKValue
OBJECT-TYPE
The PSK value when WAPI in PSK mode is the selected AKM suite. In that case, the BK will obtain its value from this object. This object is logically write-only. Reading this variable shall return unsuccessful status or null or zero.
1.2.156.11235.15629.11.1.1.1.1.1.17OCTET STRING (SIZE(32))read-writecurrent
gb15629dot11wapiConfigPSKPassPhrase
OBJECT-TYPE
The PSK value when WAPI in PSK mode is the selected AKM suite, is configured by gb15629dot11wapiConfigPSKValue. An alternative manner of setting the PSK uses the password-to-key algorithm. This variable provides a means to enter a pass-phrase. When this object is written, the WAPI entity shall use the password-to-key algorithm to derive a preshared and populate gb15629dot11wapiConfigPSKValue with this key. This object is logically write-only. Reading this variable shall return unsuccessful status or null or zero.
1.2.156.11235.15629.11.1.1.1.1.1.18DisplayStringread-writecurrent
gb15629dot11wapiConfigCertificateUpdateCount
OBJECT-TYPE
The number of times message in the WAPI certificate authenticating handshake will be retried per certificate authenticating handshake attempt.
1.2.156.11235.15629.11.1.1.1.1.1.19Unsigned32 (1..4294967295)read-writecurrent
gb15629dot11wapiConfigMulticastUpdateCount
OBJECT-TYPE
The number of times message in the WAPI multicast key handshake will be retried per MSK handshake attempt.
1.2.156.11235.15629.11.1.1.1.1.1.20Unsigned32 (1..4294967295)read-writecurrent
gb15629dot11wapiConfigUnicastUpdateCount
OBJECT-TYPE
The number of times message in the WAPI unicast key handshake will be retried per 3-way handshake attempt.
1.2.156.11235.15629.11.1.1.1.1.1.21Unsigned32 (1..4294967295)read-writecurrent
gb15629dot11wapiConfigMulticastCipherSize
OBJECT-TYPE
This object indicates the length in bits of the multicast cipher key. This should be 256 for SMS4. first 128 bits for encrypting, last 128 bits for integrity checking.
1.2.156.11235.15629.11.1.1.1.1.1.22Unsigned32 (0..4294967295)read-onlycurrent
gb15629dot11wapiConfigBKLifetime
OBJECT-TYPE
The maximum lifetime of a BK in the BK cache.
1.2.156.11235.15629.11.1.1.1.1.1.23Unsigned32 (1..4294967295)read-writecurrent
gb15629dot11wapiConfigBKReauthThreshold
OBJECT-TYPE
The percentage of the BK lifetime that should expire before an reauthentication occurs.
1.2.156.11235.15629.11.1.1.1.1.1.24Unsigned32 (1..100)read-writecurrent
gb15629dot11wapiConfigSATimeout
OBJECT-TYPE
The maximum time a security association shall take to set up.
1.2.156.11235.15629.11.1.1.1.1.1.25Unsigned32 (1..4294967295)read-writecurrent
gb15629dot11wapiAuthenticationSuiteSelected
OBJECT-TYPE
The selector of the last AKM suite negotiated.
1.2.156.11235.15629.11.1.1.1.1.1.26OCTET STRING (SIZE(4))read-onlycurrent
gb15629dot11wapiUnicastCipherSelected
OBJECT-TYPE
The selector of the last unicast cipher negotiated.
1.2.156.11235.15629.11.1.1.1.1.1.27OCTET STRING (SIZE(4))read-onlycurrent
gb15629dot11wapiMulticastCipherSelected
OBJECT-TYPE
The selector of the last multicast cipher negotiated.
1.2.156.11235.15629.11.1.1.1.1.1.28OCTET STRING (SIZE(4))read-onlycurrent
gb15629dot11wapiBKIDUsed
OBJECT-TYPE
The selector of the last BKID used in the last unicast cipher key handshake.
1.2.156.11235.15629.11.1.1.1.1.1.29OCTET STRING (SIZE(16))read-onlycurrent
gb15629dot11wapiAuthenticationSuiteRequested
OBJECT-TYPE
The selector of the last AKM suite requested.
1.2.156.11235.15629.11.1.1.1.1.1.30OCTET STRING (SIZE(4))read-onlycurrent
gb15629dot11wapiUnicastCipherRequested
OBJECT-TYPE
The selector of the last unicast cipher requested.
1.2.156.11235.15629.11.1.1.1.1.1.31OCTET STRING (SIZE(4))read-onlycurrent
gb15629dot11wapiMulticastCipherRequested
OBJECT-TYPE
The selector of the last multicast cipher requested.
1.2.156.11235.15629.11.1.1.1.1.1.32OCTET STRING (SIZE(4))read-onlycurrent
gb15629dot11wapiConfigUnicastCiphersTable
OBJECT-TYPE
This table lists the unicast ciphers supported by this entity. It allows enabling and disabling of each unicast cipher by network management. The unicast cipher suite list in the WAPI information element is formed using the information in this table.
1.2.156.11235.15629.11.1.1.1.2not-accessiblecurrent
gb15629dot11wapiConfigUnicastCiphersEntry
OBJECT-TYPE
The table entry, indexed by the interface index (or all interfaces) and the unicast cipher.
1.2.156.11235.15629.11.1.1.1.2.1not-accessiblecurrent
gb15629dot11wapiConfigUnicastCipherIndex
OBJECT-TYPE
The auxiliary index into the gb15629dot11wapiConfigUnicastCiphersTable.
1.2.156.11235.15629.11.1.1.1.2.1.1Unsigned32 (1..4294967295)not-accessiblecurrent
gb15629dot11wapiConfigUnicastCipher
OBJECT-TYPE
The selector of a supported unicast cipher. It consists of an OUI(the first 3 octets) and a cipher suite identifier (the last octet).
1.2.156.11235.15629.11.1.1.1.2.1.2OCTET STRING (SIZE(4))read-onlycurrent
gb15629dot11wapiConfigUnicastCipherEnabled
OBJECT-TYPE
This object enables or disables the unicast cipher.
1.2.156.11235.15629.11.1.1.1.2.1.3TruthValueread-writecurrent
gb15629dot11wapiConfigUnicastCipherSize
OBJECT-TYPE
This object indicates the length in bits of the unicast cipher key. This should be 256 for SMS4, first 128 bits for encrypting, last 128 bits for integrity checking.
1.2.156.11235.15629.11.1.1.1.2.1.4Unsigned32 (0..4294967295)read-onlycurrent
gb15629dot11wapiConfigAuthenticationSuitesTable
OBJECT-TYPE
This table lists the AKM suites supported by this entity. Each AKM suite can be individually enabled and disabled. The AKM suite list in the WAPI information element is formed using the information in this table.
1.2.156.11235.15629.11.1.1.1.3not-accessiblecurrent
gb15629dot11wapiConfigAuthenticationSuitesEntry
OBJECT-TYPE
An entry (row) in the gb15629dot11wapiConfigAuthenticationSuitesTable.
1.2.156.11235.15629.11.1.1.1.3.1not-accessiblecurrent
gb15629dot11wapiConfigAuthenticationSuiteIndex
OBJECT-TYPE
The auxiliary variable used as an index into the gb15629dot11wapiConfigAuthenticationSuitesTable.
1.2.156.11235.15629.11.1.1.1.3.1.1Unsigned32 (1..4294967295)not-accessiblecurrent
gb15629dot11wapiConfigAuthenticationSuite
OBJECT-TYPE
The selector of an AKM suite. It consists of an OUI (the first 3 octets) and a cipher suite identifier (the last octet).
1.2.156.11235.15629.11.1.1.1.3.1.2OCTET STRING (SIZE(4))read-onlycurrent
gb15629dot11wapiConfigAuthenticationSuiteEnabled
OBJECT-TYPE
This variable indicates the corresponding AKM suite is enabled or disabled.
1.2.156.11235.15629.11.1.1.1.3.1.3TruthValueread-writecurrent
gb15629dot11wapiStatsTable
OBJECT-TYPE
This table maintains per-STA statistics in an WAPI. The entry with gb15629dot11wapiStatsSTAAddress set to FF-FF-FF-FF-FF-FF shall contain statistics for broadcast/multicast traffic.
1.2.156.11235.15629.11.1.1.1.4not-accessiblecurrent
gb15629dot11wapiStatsEntry
OBJECT-TYPE
An entry in the gb15629dot11wapiStatsTable.
1.2.156.11235.15629.11.1.1.1.4.1not-accessiblecurrent
gb15629dot11wapiStatsIndex
OBJECT-TYPE
An auxiliary index into the gb15629dot11wapiStatsTable.
1.2.156.11235.15629.11.1.1.1.4.1.1Unsigned32 (1..4294967295)not-accessiblecurrent
gb15629dot11wapiStatsSTAAddress
OBJECT-TYPE
The MAC address of the STA to which the statistics in this conceptual row belong.
1.2.156.11235.15629.11.1.1.1.4.1.2MacAddressread-onlycurrent
gb15629dot11wapiStatsVersion
OBJECT-TYPE
The WAPI version with which the STA associated.
1.2.156.11235.15629.11.1.1.1.4.1.3Unsigned32 (1..4294967295)read-onlycurrent
gb15629dot11wapiStatsControlledPortStatus
OBJECT-TYPE
This object indicates the status of the authentication entity's controlled port. When the value is TURE, it means 'authenticated'. Otherwise, it means 'unauthenticated'.
1.2.156.11235.15629.11.1.1.1.4.1.4TruthValueread-onlycurrent
gb15629dot11wapiStatsSelectedUnicastCipher
OBJECT-TYPE
The unicast cipher suite selector used during association.
1.2.156.11235.15629.11.1.1.1.4.1.5OCTET STRING (SIZE(4))read-onlycurrent
gb15629dot11wapiStatsWPIReplayCounters
OBJECT-TYPE
The number of WPI MPDUs discarded by the replay mechanism.
1.2.156.11235.15629.11.1.1.1.4.1.6Counter32read-onlycurrent
gb15629dot11wapiStatsWPIDecryptableErrors
OBJECT-TYPE
The number of WPI MPDUs discarded because of unavailable cipher key when WPI-SMS4 decrypting.
1.2.156.11235.15629.11.1.1.1.4.1.7Counter32read-onlycurrent
gb15629dot11wapiStatsWPIMICErrors
OBJECT-TYPE
The number of WPI MPDUs discarded because of MIC checking failure when WPI-SMS4 decrypting.
1.2.156.11235.15629.11.1.1.1.4.1.8Counter32read-onlycurrent
gb15629dot11wapiStatsWAISignatureErrors
OBJECT-TYPE
This counter increases when the received WAI packets' signature is wrong.
1.2.156.11235.15629.11.1.1.1.4.1.9Counter32read-onlycurrent
gb15629dot11wapiStatsWAIHMACErrors
OBJECT-TYPE
This counter increases when the received WAI packets' message authentication key checking error occurs.
1.2.156.11235.15629.11.1.1.1.4.1.10Counter32read-onlycurrent
gb15629dot11wapiStatsWAIAuthenticationResultFailures
OBJECT-TYPE
This counter increases when the WAI authentication result is unsuccessful.
1.2.156.11235.15629.11.1.1.1.4.1.11Counter32read-onlycurrent
gb15629dot11wapiStatsWAIDiscardCounters
OBJECT-TYPE
This counter increases when the received WAI packet is discarded.
1.2.156.11235.15629.11.1.1.1.4.1.12Counter32read-onlycurrent
gb15629dot11wapiStatsWAITimeoutCounters
OBJECT-TYPE
This counter increases when the WAI packet overtime is detected.
1.2.156.11235.15629.11.1.1.1.4.1.13Counter32read-onlycurrent
gb15629dot11wapiStatsWAIFormatErrors
OBJECT-TYPE
This counter increases when the WAI packets' format error occurs
1.2.156.11235.15629.11.1.1.1.4.1.14Counter32read-onlycurrent
gb15629dot11wapiStatsWAICertificateHandshakeFailures
OBJECT-TYPE
This counter increases when the WAI certificate authenticates unsuccessfully.
1.2.156.11235.15629.11.1.1.1.4.1.15Counter32read-onlycurrent
gb15629dot11wapiStatsWAIUnicastHandshakeFailures
OBJECT-TYPE
This counter increases when the WAI unicast cipher key negotiates unsuccessfully.
1.2.156.11235.15629.11.1.1.1.4.1.16Counter32read-onlycurrent
gb15629dot11wapiStatsWAIMulticastHandshakeFailures
OBJECT-TYPE
This counter increases when the WAI multicast cipher key announces unsuccessfully.
1.2.156.11235.15629.11.1.1.1.4.1.17Counter32read-onlycurrent
wapiMIBConformance
OBJECT-IDENTITY
1.2.156.11235.15629.11.1.1.2
gb15629dot11wapiGroups
OBJECT-IDENTITY
1.2.156.11235.15629.11.1.1.2.1
gb15629wapiCompliances
OBJECT-IDENTITY
1.2.156.11235.15629.11.1.1.2.2

Conformance

NameOIDStatus
gb15629dot11wapiBase
OBJECT-GROUP
The gb15629dot11wapiBase object class provides the necessary support for managing WAPI functionality in the STA.
1.2.156.11235.15629.11.1.1.2.1.1current
gb15629dot11wapiBKcachingGroup
OBJECT-GROUP
The gb15629dot11wapiBKcachingGroup object class provides the necessary support for managing BK caching functionality in the STA
1.2.156.11235.15629.11.1.1.2.1.2current
gb15629dot11wapiCompliance
MODULE-COMPLIANCE
The compliance statement for SNMPv2 entities that implement the WAPI MIB.
1.2.156.11235.15629.11.1.1.2.2.1current