MIBs Depot

HUAWEI-WLAN-SECURITY-MIB

Registered at
1.3.6.1.4.1.2011.6.139.6
Last updated
2014-02-13 10:00
Organization
Huawei Technologies Co.,Ltd.
Revisions
2014-02-13 10:00, 2013-08-12 10:00, 2010-06-01 10:00
Namespace
huawei
Source file
HUAWEI-WLAN-SECURITY-MIB
Digest
sha256:28ba46a1377d1da3e0b11c6229bfade965f0767750f808020addbf817d8d6c2c

Description

huawei HUAWEI-WLAN-SECURITY-MIB.

Contact

Huawei Industrial Base Bantian, Longgang Shenzhen 518129 People's Republic of China Website: http://www.huawei.com Email: support@huawei.com

Imports

FromSymbols
HUAWEI-WLAN-DEVICE-MIBhwApIndex, hwApMac, hwApRegionIndex
HUAWEI-WLAN-MIBhwWlan
HUAWEI-WLAN-RADIO-MIBhwRadioID
HUAWEI-WLAN-SERVICE-MIBhwWlanServiceEssSsid, hwWlanServiceStaMac
SNMPv2-CONFMODULE-COMPLIANCE, NOTIFICATION-GROUP, OBJECT-GROUP
SNMPv2-SMICounter32, Integer32, IpAddress, MODULE-IDENTITY, NOTIFICATION-TYPE, OBJECT-IDENTITY, OBJECT-TYPE, Unsigned32, iso
SNMPv2-TCDisplayString, MacAddress, RowStatus, TEXTUAL-CONVENTION, TruthValue

Imported by

Nothing in this corpus imports this module.

Load order

Every file a consumer needs in order to load this module, dependencies first.

HUAWEI-MIB
HUAWEI-WLAN-DEVICE-MIB
HUAWEI-WLAN-MIB
HUAWEI-WLAN-RADIO-MIB
HUAWEI-WLAN-SECURITY-MIB
HUAWEI-WLAN-SERVICE-MIB
SNMPv2-CONF
SNMPv2-SMI
SNMPv2-TC

Objects

NameOIDSyntaxAccessStatus
hwWsecProfileTable
OBJECT-TYPE
WLAN access security profile table.
1.3.6.1.4.1.2011.6.139.6.1not-accessiblecurrent
hwWsecProfileEntry
OBJECT-TYPE
WLAN access security profile entry.
1.3.6.1.4.1.2011.6.139.6.1.1not-accessiblecurrent
hwWsecProfileName
OBJECT-TYPE
WLAN access security profile Name.
1.3.6.1.4.1.2011.6.139.6.1.1.1OCTET STRING (SIZE(1..31))read-writecurrent
hwWsecProfileWEPDataEncrypt
OBJECT-TYPE
When this attribute is TRUE, WEP data will be encrypted. When this attribute is FALSE, WEP data will not be encrypted. The default value of this attribute is FALSE.
1.3.6.1.4.1.2011.6.139.6.1.1.2TruthValueread-writecurrent
hwWsecProfileWEPDefaultKeyID
OBJECT-TYPE
This attribute shall indicate the use of the first, second, third, or fourth element of the WEPDefaultKeys array when set to values of zero, one, two, or three. The default value of this attribute shall be 0.
1.3.6.1.4.1.2011.6.139.6.1.1.3Integer32 (0..3)read-writecurrent
hwWsecProfileWEPKeyMappingLength
OBJECT-TYPE
The maximum number of tuples that hwWsecWEPKeyMappings can hold.
1.3.6.1.4.1.2011.6.139.6.1.1.4Integer32read-writecurrent
hwWsecProfileAsuIpAddr
OBJECT-TYPE
ASU IP address for WAPI certification authentication
1.3.6.1.4.1.2011.6.139.6.1.1.5IpAddressread-writecurrent
hwWsecProfileCaCertFileName
OBJECT-TYPE
CA certification file name
1.3.6.1.4.1.2011.6.139.6.1.1.6OCTET STRINGread-writecurrent
hwWsecProfileAsuCertFileName
OBJECT-TYPE
ASU certification file name
1.3.6.1.4.1.2011.6.139.6.1.1.7OCTET STRINGread-writecurrent
hwWsecProfileAcCertFileName
OBJECT-TYPE
AC certification file name
1.3.6.1.4.1.2011.6.139.6.1.1.8OCTET STRINGread-writecurrent
hwWsecProfileAcPrvKeyFileName
OBJECT-TYPE
AC private key file name
1.3.6.1.4.1.2011.6.139.6.1.1.9OCTET STRINGread-writecurrent
hwWsecProfileRsnaVersion
OBJECT-TYPE
The highest WAPI/RSNA version this entity supports. See 7.3.2.9.
1.3.6.1.4.1.2011.6.139.6.1.1.10Integer32read-onlycurrent
hwWsecProfileWapiVersion
OBJECT-TYPE
This object indicates the highest WAPI version that this entity supports.
1.3.6.1.4.1.2011.6.139.6.1.1.11Integer32read-onlycurrent
hwWsecProfileRowStatus
OBJECT-TYPE
Row status
1.3.6.1.4.1.2011.6.139.6.1.1.12RowStatusread-createcurrent
hwWsecProfileCaPfxPassword
OBJECT-TYPE
Description.
1.3.6.1.4.1.2011.6.139.6.1.1.13OCTET STRING (SIZE(0..32))read-writecurrent
hwWsecProfileCaCertState
OBJECT-TYPE
Description.
1.3.6.1.4.1.2011.6.139.6.1.1.14INTEGER {valid(1), invalid(2)}read-onlycurrent
hwWsecProfileAsuPfxPassword
OBJECT-TYPE
Description.
1.3.6.1.4.1.2011.6.139.6.1.1.15OCTET STRING (SIZE(0..32))read-writecurrent
hwWsecProfileAsuCertState
OBJECT-TYPE
Description.
1.3.6.1.4.1.2011.6.139.6.1.1.16INTEGER {valid(1), invalid(2)}read-onlycurrent
hwWsecProfileAcPfxPassword
OBJECT-TYPE
Description.
1.3.6.1.4.1.2011.6.139.6.1.1.17OCTET STRING (SIZE(0..32))read-writecurrent
hwWsecProfileAcCertState
OBJECT-TYPE
Description.
1.3.6.1.4.1.2011.6.139.6.1.1.18INTEGER {valid(1), invalid(2)}read-onlycurrent
hwWsecProfileKeyPfxPassword
OBJECT-TYPE
Description.
1.3.6.1.4.1.2011.6.139.6.1.1.19OCTET STRING (SIZE(0..32))read-writecurrent
hwWsecProfileAsuType
OBJECT-TYPE
Description.
1.3.6.1.4.1.2011.6.139.6.1.1.20INTEGER {remote(1), local(2)}read-writecurrent
hwWsecProfileWpaPtkRekeySwitch
OBJECT-TYPE
Description.
1.3.6.1.4.1.2011.6.139.6.1.1.21INTEGER {disable(1), enable(2)}read-writecurrent
hwWsecProfileWpa2PtkRekeySwitch
OBJECT-TYPE
Description.
1.3.6.1.4.1.2011.6.139.6.1.1.22INTEGER {disable(1), enable(2)}read-writecurrent
hwWsecProfileWpaWpa2PtkRekeySwitch
OBJECT-TYPE
Description.
1.3.6.1.4.1.2011.6.139.6.1.1.23INTEGER {disable(1), enable(2)}read-writecurrent
hwWsecProfileWpaPtkRekeyInterval
OBJECT-TYPE
Description.
1.3.6.1.4.1.2011.6.139.6.1.1.24Integer32 (30..86400)read-writecurrent
hwWsecProfileWpa2PtkRekeyInterval
OBJECT-TYPE
Description.
1.3.6.1.4.1.2011.6.139.6.1.1.25Integer32 (30..86400)read-writecurrent
hwWsecProfileWpaWpa2PtkRekeyInterval
OBJECT-TYPE
Description.
1.3.6.1.4.1.2011.6.139.6.1.1.26Integer32 (30..86400)read-writecurrent
hwWsecWEPDefaultKeysTable
OBJECT-TYPE
Conceptual table for WEP default keys. This table shall contain the four WEP default secret key values corresponding to the four possible KeyID values. The WEP default secret keys are logically WRITE-ONLY. Attempts to read the entries in this table shall return unsuccessful status and values of null or zero. The default value of each WEP default key shall be null.
1.3.6.1.4.1.2011.6.139.6.2not-accessiblecurrent
hwWsecWEPDefaultKeysEntry
OBJECT-TYPE
An Entry (conceptual row) in the WEP Default Keys Table.
1.3.6.1.4.1.2011.6.139.6.2.1not-accessiblecurrent
hwWsecWEPDefaultKeyIndex
OBJECT-TYPE
The auxiliary variable used to identify instances of the columnar objects in the WEP Default Keys Table. The value of this variable is equal to the WEPDefaultKeyID + 1
1.3.6.1.4.1.2011.6.139.6.2.1.1Integer32 (1..4)not-accessiblecurrent
hwWsecWEPDefaultKeyValue
OBJECT-TYPE
A WEP default secret hexadecimal key value. 10 byte for WEP-40, 26 byte for WEP-104, 32 byte for WEP-128. Reading this variable shall return unsuccessful status or null or zero.
1.3.6.1.4.1.2011.6.139.6.2.1.2OCTET STRINGread-writecurrent
hwWsecWEPPassPhrase
OBJECT-TYPE
A WEP default secret ASCII key value. 5 byte for WEP-40, 13 byte for WEP-104, 16 byte for WEP-128. Reading this variable shall return unsuccessful status or null or zero.
1.3.6.1.4.1.2011.6.139.6.2.1.4DisplayStringread-writecurrent
hwWsecWEPKeyMappingsTable
OBJECT-TYPE
Conceptual table for WEP Key Mappings. The MIB supports the ability to share a separate WEP key for each RA/TA pair. The Key Mappings Table contains zero or one entry for each MAC address and contains two fields for each entry: WEPOn and the corresponding WEP key. The WEP key mappings are logically WRITE-ONLY. Attempts to read the entries in this table shall return unsuccessful status and values of null or zero. The default value for all WEPOn fields is FALSE.
1.3.6.1.4.1.2011.6.139.6.3not-accessiblecurrent
hwWsecWEPKeyMappingsEntry
OBJECT-TYPE
An Entry (conceptual row) in the WEP Key Mappings Table.
1.3.6.1.4.1.2011.6.139.6.3.1not-accessiblecurrent
hwWsecWEPKeyMappingIndex
OBJECT-TYPE
The auxiliary variable used to identify instances of the columnar objects in the WEP Key Mappings Table.
1.3.6.1.4.1.2011.6.139.6.3.1.1Integer32not-accessiblecurrent
hwWsecWEPKeyMappingAddress
OBJECT-TYPE
The MAC address of the STA for which the values from this key mapping entry are to be used.
1.3.6.1.4.1.2011.6.139.6.3.1.2MacAddressread-createcurrent
hwWsecWEPKeyMappingWEPOn
OBJECT-TYPE
Boolean as to whether WEP is to be used when communicating with the hwWsecWEPKeyMappingAddress STA.
1.3.6.1.4.1.2011.6.139.6.3.1.3TruthValueread-createcurrent
hwWsecWEPKeyMappingValue
OBJECT-TYPE
A WEP secret key value.
1.3.6.1.4.1.2011.6.139.6.3.1.4OCTET STRINGread-createcurrent
hwWsecWEPKeyMappingStatus
OBJECT-TYPE
The status column used for creating, modifying, and deleting instances of the columnar objects in the WEP key mapping Table.
1.3.6.1.4.1.2011.6.139.6.3.1.5RowStatusread-createcurrent
hwWsecAuthSuitesTable
OBJECT-TYPE
This table lists the AKM suites supported by this entity. Each AKM suite can be individually enabled and disabled. The AKM suite list in the RSN information element is formed using the information in this table.
1.3.6.1.4.1.2011.6.139.6.4not-accessiblecurrent
hwWsecAuthSuitesEntry
OBJECT-TYPE
An entry (row) in the hwWsecAuthSuitesTable.
1.3.6.1.4.1.2011.6.139.6.4.1not-accessiblecurrent
hwWsecAuthSuiteIndex
OBJECT-TYPE
The auxiliary variable used as an index into the hwWsecAuthSuitesTable.
1.3.6.1.4.1.2011.6.139.6.4.1.1INTEGER {wapiCertification(1), wapiPreShareKey(2), wpa18021x(3), wpa1PreShareKey(4), wpa28021x(5), wpa2PreShareKey(6), shareKey(7), openSystem(8), wpa1wpa2PreShareKey(9), wpa1wpa28021x(10)}not-accessiblecurrent
hwWsecAuthSuite
OBJECT-TYPE
The selector of an AKM suite. It consists of an OUI (the first 3 octets) and a cipher suite identifier (the last octet). 0x00147201 : WAPI certification authentication 0x00147202 : WAPI preShare key authentication 0x000FAC01 : WPA1(WPA version 1) 802.1X authentication 0x000FAC02 : WPA1(WPA version 1) preShare key authentication 0x00E0FC01 : WPA2(WPA version 2) 802.1X authentication 0x00E0FC02 : WPA2(WPA version 2) preShare key authentication 0x00E0FC03 : share key (for WEP) 0x00E0FC04 : open system (no authentication) 0x00E0FC05 : wpa-wpa2-preShareKey 0x00E0FC06 : wpa-wpa2-8021x
1.3.6.1.4.1.2011.6.139.6.4.1.2OCTET STRING (SIZE(4))read-onlycurrent
hwWsecAuthSuiteEnabled
OBJECT-TYPE
This variable indicates whether the corresponding AKM suite is enabled/disabled.
1.3.6.1.4.1.2011.6.139.6.4.1.3TruthValueread-writecurrent
hwWsecAuthPreauthenticationImplemented
OBJECT-TYPE
This variable indicates whether the entity supports WAPI pre-authentication. This cannot be TRUE unless hwWsecAuthOptionImplemented is TRUE.
1.3.6.1.4.1.2011.6.139.6.4.1.4TruthValueread-onlycurrent
hwWsecAuthPreauthenticationEnabled
OBJECT-TYPE
When this object is set to TRUE, this shall indicate that WAPI pre-authentication is enabled on this entity. This object requires that WAPI authentication of this profile Enabled.
1.3.6.1.4.1.2011.6.139.6.4.1.5TruthValueread-writecurrent
hwWsecAuthUnicastKeysSupported
OBJECT-TYPE
This object indicates the number of the unicast keys that a WAPI/RSNA of this entity supports.
1.3.6.1.4.1.2011.6.139.6.4.1.6Integer32read-onlycurrent
hwWsecAuthPairwiseCipher
OBJECT-TYPE
The selector of a supported pairwise cipher. It consists of an OUI (the first 3 octets) and a cipher suite identifier (the last octet). 0x00147201 : WPI-SMS4 0x000FAC00 : Use group cipher suite 0x000FAC01 : WEP-40 0x000FAC02 : TKIP 0x000FAC04 : CCMP-default in an RSNA 0x000FAC05 : WEP-104 0x000FAC06 : wep-128 0x000FAC07 : tkip-ccmp 0x00E0FC01 : null (no encryption), only for open system authentication The cipher suite selector 00-0F-AC:4 (CCMP) shall be the default cipher suite value. The cipher suite selectors 00-0F-AC:1 (WEP-40) and 00-0F-AC:5 (WEP-104) are only valid as a group cipher suite in a transition security network (TSN) to allow pre-RSNA devices to join the BSS. Use of CCMP as the group cipher suite with TKIP as the pairwise cipher suite shall not be supported. NOTE?If the STAs can support CCMP, then there is no need for a weaker data confidentiality protocol. The cipher suite selector 00-0F-AC:0 (Use group cipher suite) is only valid as the pairwise cipher suite. An AP may specify the selector 00-0F-AC:0 (Use group cipher suite) for a pairwise cipher suite if it does not cipher selection, this shall be the only pairwise cipher selection the AP advertises. If CCMP is enabled, then the AP supports pairwise keys, and thus the suite selector 00-0F-AC:0 (Use group cipher suite) shall not be a valid option.
1.3.6.1.4.1.2011.6.139.6.4.1.7INTEGER {wpiSms4(1), wep40(2), wep104(3), tkip(4), ccmp(5), null(6), tkipCcmp(7), wep128(8)}read-writecurrent
hwWsecAuthPairwiseCipherSize
OBJECT-TYPE
This object indicates the length in bits of the pairwise cipher key. This should be 256 for TKIP and 128 for CCMP.
1.3.6.1.4.1.2011.6.139.6.4.1.8Integer32read-onlycurrent
hwWsecAuthUnicastRekeyMethod
OBJECT-TYPE
This object selects a mechanism for rekeying the WAPI/RSNA USK. The default is time-based, once per day. Rekeying the USK is only applicable to an entity acting in the AE or ASUE role.
1.3.6.1.4.1.2011.6.139.6.4.1.9INTEGER {disabled(1), timeBased(2), packetBased(3), timepacketBased(4)}read-writecurrent
hwWsecAuthUnicastRekeyTime
OBJECT-TYPE
The time in seconds after which the WAPI/RSNA USK shall be refreshed. The timer shall start at the moment the USK was set using the MLME-SETWPIKEYS.request primitive.
1.3.6.1.4.1.2011.6.139.6.4.1.10Unsigned32read-writecurrent
hwWsecAuthUnicastRekeyPackets
OBJECT-TYPE
A packet count (in 1000s of packets) after which the WAPI/RSNA USK shall be refreshed. The packet counter shall start at the moment the USK was set using the MLME-SETWPIKEYS.request primitive and it shall count all packets encrypted using the current USK.
1.3.6.1.4.1.2011.6.139.6.4.1.11Unsigned32read-writecurrent
hwWsecAuthMulticastCipher
OBJECT-TYPE
This object indicates the multicast cipher suite that this entity must adopt. The WAPI/RSNA information element shall adopt the value of this variable, which contains a 3-octet OUI and a one-octet cipher suite identifier. 0x00147201 : WPI-SMS4 0x000FAC01 : WEP-40 0x000FAC02 : TKIP 0x000FAC04 : CCMP-default in an RSNA 0x000FAC05 : WEP-104 0x000FAC06 : wep-128 0x000FAC07 : tkip-ccmp 0x00E0FC01 : null (no encryption), only for open system authentication
1.3.6.1.4.1.2011.6.139.6.4.1.12INTEGER {wpiSms4(1), wep40(2), wep104(3), tkip(4), ccmp(5), null(6), tkipCcmp(7), wep128(8)}read-writecurrent
hwWsecAuthMulticastCipherSize
OBJECT-TYPE
This object indicates the length in bit of the multicast cipher key. This should be 256 for in SMS4. The former 128bits is the encryption key and the latter 128bits is the message integrity check key. This should be 256 for in TKIP. The former 128bits is the encryption key and the latter 128bits is the message integrity check key. This should be 128 for in CCMP. The 128bits is the encryption key and the message integrity check key. This should be 40 for in WEP-40. The 40bits is the encryption key. This should be 40 for in WEP-104. The 104bits is the encryption key. This should be 40 for in WEP-128. The 128bits is the encryption key.
1.3.6.1.4.1.2011.6.139.6.4.1.13Integer32read-onlycurrent
hwWsecAuthMulticastRekeyMethod
OBJECT-TYPE
This object selects a mechanism for rekeying the WAPI/RSNA MSK. The default is time-based, once per day. Rekeying the MSK is only applicable to an entity acting in the Authenticator role.
1.3.6.1.4.1.2011.6.139.6.4.1.14INTEGER {disabled(1), timeBased(2), packetBased(3), timepacketBased(4)}read-writecurrent
hwWsecAuthMulticastRekeyTime
OBJECT-TYPE
The time in seconds after which the WAPI/RSNA MSK shall be refreshed. The timer shall start at the moment the MSK was set using the MLME-SETWPIKEYS.request primitive.
1.3.6.1.4.1.2011.6.139.6.4.1.15Unsigned32read-writecurrent
hwWsecAuthMulticastRekeyPackets
OBJECT-TYPE
A packet count (in 1000s of packets) after which the WAPI/RSNA MSK shall be refreshed. The packet counter shall start at the moment the MSK was set using the MLME-SETWPIKEYS.request primitive and it shall count all packets encrypted using the current MSK.
1.3.6.1.4.1.2011.6.139.6.4.1.16Unsigned32read-writecurrent
hwWsecAuthMulticastRekeyStrict
OBJECT-TYPE
This object signals that the MSK shall be refreshed whenever a STA leaves the BSS that possesses the MSK.
1.3.6.1.4.1.2011.6.139.6.4.1.17TruthValueread-writecurrent
hwWsecAuthPSKValue
OBJECT-TYPE
The PSK for when WAPI/RSNA in PSK mode is the selected AKM suite. In that case, the BK/PMK will obtain its value from this object. This object is logically write-only. Reading this variable shall return unsuccessful status or null or zero. WAPI need 16 byte Hex, RSNA need 32 byte Hex. User should input Hex data for this node.
1.3.6.1.4.1.2011.6.139.6.4.1.18OCTET STRINGread-writecurrent
hwWsecAuthPSKPassPhrase
OBJECT-TYPE
The PSK, for when WAPI/RSNA in PSK mode is the selected AKM suite, is configured by hwWsecAuthPSKValue. An alternative manner of setting the PSK uses the password-to-key algorithm. This variable provides a means to enter a pass-phrase. When this object is written, the WAPI/RSNA entity shall use the password-to-key algorithm to derive a pre-shared and populate hwWsecAuthPSKValue with this key. This object is logically write-only. Reading this variable shall return unsuccessful status or null or zero.
1.3.6.1.4.1.2011.6.139.6.4.1.19DisplayStringread-writecurrent
hwWsecAuthCertificateUpdateCount
OBJECT-TYPE
The number of times messages in the WAPI Certificate Authentication Handshake protocol will be retried per Certificate Authentication Handshake attempt.
1.3.6.1.4.1.2011.6.139.6.4.1.20Unsigned32read-writecurrent
hwWsecAuthMulticastUpdateCount
OBJECT-TYPE
The number of times Message 1 in the WAPI Multicast Key Announcement Handshake will be retried per MSK Handshake attempt. The number of times Message 1 in the RSNA Group Key Handshake will be retried per GTK Handshake attempt.
1.3.6.1.4.1.2011.6.139.6.4.1.21Unsigned32read-writecurrent
hwWsecAuthUnicastUpdateCount
OBJECT-TYPE
The number of times Message 1 and Message 3 in the WAPI Unicast Key Negotiation Handshake will be retried per USK Handshake attempt. The number of times Message 1 and Message 3 in the RSNA 4-Way Handshake will be retried per 4-Way Handshake attempt.
1.3.6.1.4.1.2011.6.139.6.4.1.22Unsigned32read-writecurrent
hwWsecAuthBKLifetime
OBJECT-TYPE
The maximum lifetime of a BK in the BK cache.
1.3.6.1.4.1.2011.6.139.6.4.1.23Unsigned32read-writecurrent
hwWsecAuthBKReauthThreshold
OBJECT-TYPE
The percentage of the BK lifetime that should expire before a WAI/RSNA re-authentication occurs.
1.3.6.1.4.1.2011.6.139.6.4.1.24Unsigned32read-writecurrent
hwWsecAuthSATimeout
OBJECT-TYPE
The maximum time a security association shall take to set up.
1.3.6.1.4.1.2011.6.139.6.4.1.25Unsigned32read-writecurrent
hwWsecAuthExcludeUnencrypted
OBJECT-TYPE
When this attribute is TRUE, the STA shall not indicate at the MAC service interface received MSDUs that have the Protected Frame subfield of the Frame Control field equal to zero. When this attribute is FALSE, the STA may accept MSDUs that have the Protected Frame subfield of the Frame Control field equal to zero. The default value of this attribute shall be FALSE.
1.3.6.1.4.1.2011.6.139.6.4.1.26TruthValueread-writecurrent
hwWsecAuthDot1XMethod
OBJECT-TYPE
Leaf don't sustain for V2R3 on 2012/11/26.
1.3.6.1.4.1.2011.6.139.6.4.1.27Integer32read-writecurrent
hwWsecAuthControlledAuthControl
OBJECT-TYPE
This attribute indicates whether the entity enable the authentication. If the value is '0' which means 'authentication disabled', the state of the controlled port shall be set to 'authenticated'; else the value is '1' which means 'authentication enabled', the state of the controlled port shall be based on the hwWsecAuthControlledPortControl.
1.3.6.1.4.1.2011.6.139.6.4.1.28TruthValueread-onlycurrent
hwWsecAuthControlledPortControl
OBJECT-TYPE
This attribute, when the hwWsecAuthControlledAuthControl is set to true, shall be effective and indicate the methods by which the port is controlled. If the value is '0' which means 'auto', the state of the controlled port shall be based on the result of the authentication; else the value is '1' which means 'force unauthenticated', the state of the controlled port shall be unconditionally set to 'unauthenticated'.
1.3.6.1.4.1.2011.6.139.6.4.1.29Integer32read-onlycurrent
hwWsecAuthOptionalImplemented
OBJECT-TYPE
This attribute, when true, shall indicate that the WAPI, WPA, RSNA option is implemented; else, this attribute shall be false.
1.3.6.1.4.1.2011.6.139.6.4.1.30TruthValueread-onlycurrent
hwWsecStatsTable
OBJECT-TYPE
This table maintains per-STA statistics in an RSN. The entry with hwWsecStatsSTAAddress set to FF-FF-FF-FF-FF-FF shall contain statistics for broadcast/multicast traffic.
1.3.6.1.4.1.2011.6.139.6.5not-accessiblecurrent
hwWsecStatsEntry
OBJECT-TYPE
An entry in the hwWsecStatsTable.
1.3.6.1.4.1.2011.6.139.6.5.1not-accessiblecurrent
hwWsecStatsSTAAddress
OBJECT-TYPE
The MAC address of the STA to which the statistics in this conceptual row belong.
1.3.6.1.4.1.2011.6.139.6.5.1.1MacAddressread-onlycurrent
hwWsecStatsVersion
OBJECT-TYPE
The RSNA version with which the STA associated.
1.3.6.1.4.1.2011.6.139.6.5.1.2Integer32read-onlycurrent
hwWsecStatsBKIDUsed
OBJECT-TYPE
The selector of the last BKID of WAPI used in the last Unicast Key Negotiation Handshake. The selector of the last PMKID of RSNA used in the last 4-Way Handshake.
1.3.6.1.4.1.2011.6.139.6.5.1.3OCTET STRINGread-onlycurrent
hwWsecStatsAuthenticationSuiteSelected
OBJECT-TYPE
The selector of the last AKM suite negotiated.
1.3.6.1.4.1.2011.6.139.6.5.1.4INTEGER {wapiCertification(1), wapiPreShareKey(2), wpa18021x(3), wpa1PreShareKey(4), wpa28021x(5), wpa2PreShareKey(6), shareKey(7), openSystem(8), wpa1wpa2PreShareKey(9), wpa1wpa28021x(10)}read-onlycurrent
hwWsecStatsUnicastCipherSelected
OBJECT-TYPE
The selector of the last unicast cipher suite negotiated.
1.3.6.1.4.1.2011.6.139.6.5.1.5INTEGER {wpiSms4(1), wep40(2), wep104(3), tkip(4), ccmp(5), null(6), tkipCcmp(7), wep128(8)}read-onlycurrent
hwWsecStatsMulticastCipherSelected
OBJECT-TYPE
The selector of the last multicast cipher suite negotiated
1.3.6.1.4.1.2011.6.139.6.5.1.6INTEGER {wpiSms4(1), wep40(2), wep104(3), tkip(4), ccmp(5), null(6), tkipCcmp(7), wep128(8)}read-onlycurrent
hwWsecStatsAuthenticationSuiteRequested
OBJECT-TYPE
The selector of the last AKM suite requested.
1.3.6.1.4.1.2011.6.139.6.5.1.7INTEGER {wapiCertification(1), wapiPreShareKey(2), wpa18021x(3), wpa1PreShareKey(4), wpa28021x(5), wpa2PreShareKey(6), shareKey(7), openSystem(8), wpa1wpa2PreShareKey(9), wpa1wpa28021x(10)}read-onlycurrent
hwWsecStatsUnicastCipherRequested
OBJECT-TYPE
The selector of the last unicast cipher suite requested
1.3.6.1.4.1.2011.6.139.6.5.1.8INTEGER {wpiSms4(1), wep40(2), wep104(3), tkip(4), ccmp(5), null(6), tkipCcmp(7), wep128(8)}read-onlycurrent
hwWsecStatsMulticastCipherRequested
OBJECT-TYPE
The selector of the last multicast cipher suite requested.
1.3.6.1.4.1.2011.6.139.6.5.1.9INTEGER {wpiSms4(1), wep40(2), wep104(3), tkip(4), ccmp(5), null(6), tkipCcmp(7), wep128(8)}read-onlycurrent
hwWsecStatsWEPICVErrorCount
OBJECT-TYPE
This counter shall increment when a frame is received with the Protected Frame subfield of the Frame Control field set to one and the value of the ICV as received in the frame does not match the ICV value that is calculated for the contents of the received frame. ICV errors for TKIP are not counted in this variable but in hwWsecStatsTKIPICVErrors.
1.3.6.1.4.1.2011.6.139.6.5.1.10Counter32read-onlycurrent
hwWsecStatsWEPExcludedCount
OBJECT-TYPE
This counter shall increment when a frame is received with the Protected Frame subfield of the Frame Control field set to zero and the value of hwWsecProfileExcludeUnencrypted causes that frame to be discarded.
1.3.6.1.4.1.2011.6.139.6.5.1.11Counter32read-onlycurrent
hwWsecStatsWEPUndecryptableCount
OBJECT-TYPE
This counter shall increment when a frame is received with the Protected Frame subfield of the Frame Control field set to one and the WEPOn value for the key mapped to the transmitter's MAC address indicates that the frame should not have been encrypted or that frame is discarded due to the receiving STA not implementing the privacy option.
1.3.6.1.4.1.2011.6.139.6.5.1.12Counter32read-onlycurrent
hwWsecStatsTKIPICVErrors
OBJECT-TYPE
Counts the number of TKIP ICV errors encountered when decrypting packets for the STA.
1.3.6.1.4.1.2011.6.139.6.5.1.13Counter32read-onlycurrent
hwWsecStatsTKIPLocalMICFailures
OBJECT-TYPE
Counts the number of MIC failures encountered when checking the integrity of packets received from the STA at this entity.
1.3.6.1.4.1.2011.6.139.6.5.1.14Counter32read-onlycurrent
hwWsecStatsTKIPRemoteMICFailures
OBJECT-TYPE
Counts the number of MIC failures encountered by the STA identified by dot11StatsSTAAddress and reported back to this entity.
1.3.6.1.4.1.2011.6.139.6.5.1.15Counter32read-onlycurrent
hwWsecStatsTKIPReplays
OBJECT-TYPE
Counts the number of TKIP replay errors detected.
1.3.6.1.4.1.2011.6.139.6.5.1.16Counter32read-onlycurrent
hwWsecStatsCCMPReplays
OBJECT-TYPE
The number of received CCMP MPDUs discarded by the replay mechanism.
1.3.6.1.4.1.2011.6.139.6.5.1.17Counter32read-onlycurrent
hwWsecStatsCCMPDecryptErrors
OBJECT-TYPE
The number of received MPDUs discarded by the CCMP decryption algorithm.
1.3.6.1.4.1.2011.6.139.6.5.1.18Counter32read-onlycurrent
hwWsecStatsWAISignatureErrors
OBJECT-TYPE
This counter shall increment when the signature in the received WAI packet is wrong.
1.3.6.1.4.1.2011.6.139.6.5.1.19Counter32read-onlycurrent
hwWsecStatsWAIHMACErrors
OBJECT-TYPE
This counter shall increment when the message authentication code in the received WAI packet is wrong.
1.3.6.1.4.1.2011.6.139.6.5.1.20Counter32read-onlycurrent
hwWsecStatsWAIAuthenticationResultFailures
OBJECT-TYPE
This counter shall increment when the WAI authentication is unsuccessful.
1.3.6.1.4.1.2011.6.139.6.5.1.21Counter32read-onlycurrent
hwWsecStatsWAIDiscardCounters
OBJECT-TYPE
This counter shall increment when the received WAI packet is discarded.
1.3.6.1.4.1.2011.6.139.6.5.1.22Counter32read-onlycurrent
hwWsecStatsWAITimeoutCounters
OBJECT-TYPE
This counter shall increment when the WAI packet is timeout.
1.3.6.1.4.1.2011.6.139.6.5.1.23Counter32read-onlycurrent
hwWsecStatsWAIFormatErrors
OBJECT-TYPE
This counter shall increment when there exists format error in the WAI packet.
1.3.6.1.4.1.2011.6.139.6.5.1.24Counter32read-onlycurrent
hwWsecStatsWAICertificateHandshakeFailures
OBJECT-TYPE
This counter shall increment when the WAI certificate authentication is unsuccessful.
1.3.6.1.4.1.2011.6.139.6.5.1.25Counter32read-onlycurrent
hwWsecStatsWAIUnicastHandshakeFailures
OBJECT-TYPE
This counter shall increment when the WAI unicast key negotiation process is unsuccessful.
1.3.6.1.4.1.2011.6.139.6.5.1.26Counter32read-onlycurrent
hwWsecStatsWAIMulticastHandshakeFailures
OBJECT-TYPE
This counter shall increment when the WAI multicast key announcement process is unsuccessful.
1.3.6.1.4.1.2011.6.139.6.5.1.27Counter32read-onlycurrent
hwWsecStatsWPIReplayCounter
OBJECT-TYPE
The number of received WPI MPDUs discarded by the replay mechanism.
1.3.6.1.4.1.2011.6.139.6.5.1.28Counter32read-onlycurrent
hwWsecStatsWPIDecryptableErrors
OBJECT-TYPE
The number of received MPDUs discarded by the WPI decryption algorithm because of no valid key.
1.3.6.1.4.1.2011.6.139.6.5.1.29Counter32read-onlycurrent
hwWsecStatsWPIMICErrors
OBJECT-TYPE
The number of received MPDUs discarded because of the MIC check error during the WPI decryption.
1.3.6.1.4.1.2011.6.139.6.5.1.30Counter32read-onlycurrent
hwWsecStatsControlledPortStatus
OBJECT-TYPE
This attribute indicates the state of the controlled port in a authenticator subsystem. If value is '1', the state is set to'authenticated'; else, the state is set to 'unauthenticated'.
1.3.6.1.4.1.2011.6.139.6.5.1.31TruthValueread-onlycurrent
hwWsecStatsNumberOfPTKSAReplayCounters
OBJECT-TYPE
Specifies the number of PTKSA replay counters per association: 0 ?> 1 replay counter, 1 ?> 2 replay counters, 2 ?> 4 replay counters, 3 ?> 16 replay counters
1.3.6.1.4.1.2011.6.139.6.5.1.32Integer32read-onlycurrent
hwWsecStatsNumberOfGTKSAReplayCounters
OBJECT-TYPE
Specifies the number of GTKSA replay counters per association: 0 ?> 1 replay counter, 1 ?> 2 replay counters, 2 ?> 4 replay counters, 3 ?> 16 replay counters
1.3.6.1.4.1.2011.6.139.6.5.1.33Integer32read-onlycurrent
hwWsecStatsTKIPCounterMeasuresInvoked
OBJECT-TYPE
Counts the number of times that a TKIP MIC failure occurred two times within 60 s and TKIP countermeasures were invoked. This attribute counts both local and remote MIC failure events reported to this STA. It increments every time TKIP countermeasures are invoked
1.3.6.1.4.1.2011.6.139.6.5.1.34Integer32read-onlycurrent
hwWsecStatsWpa4WayHandshakeFailures
OBJECT-TYPE
Counts the number of 4-Way Handshake failures.
1.3.6.1.4.1.2011.6.139.6.5.1.35Integer32read-onlycurrent
hwWsecBatchProfileInfo
OBJECT-IDENTITY
1.3.6.1.4.1.2011.6.139.6.6
hwWsecBatchProfileStartNumber
OBJECT-TYPE
The security profile start number in batch operation. This node is used with node hwWsecBatchProfileWantNumber, for example, hwWsecBatchProfileStartNumber is set to one, and hwWsecBatchProfileWantNumber is set to three, then get the node hwWsecBatchProfileReturnNumber,hwWsecBatchProfileName, that means start from the first security profile, get three security profile's name list. if it dose not exist three security profile, the hwWsecBatchProfileReturnNumber will be the real security profile number, otherwise, it is equal to hwWsecBatchProfileWantNumber.
1.3.6.1.4.1.2011.6.139.6.6.1Integer32read-writecurrent
hwWsecBatchProfileWantNumber
OBJECT-TYPE
The security profile number that want to get in batch operation.This node is used with node hwWsecBatchProfileWantNumber, for example, hwWsecBatchProfileStartNumber is set to one, and hwWsecBatchProfileWantNumber is set to three, then get the node hwWsecBatchProfileReturnNumber,hwWsecBatchProfileName, that means start from the first security profile, get three security profile's name list. if it dose not exist three security profile, the hwWsecBatchProfileReturnNumber will be the real security profile number, otherwise, it is equal to hwWsecBatchProfileWantNumber.
1.3.6.1.4.1.2011.6.139.6.6.2Integer32read-writecurrent
hwWsecBatchProfileReturnNumber
OBJECT-TYPE
The ess number get in batch operation.
1.3.6.1.4.1.2011.6.139.6.6.3Integer32read-onlycurrent
hwWsecBatchProfileName
OBJECT-TYPE
The names of security profile which are determined by node hwWsecBatchProfileStratNumber and node hwWsecBatchProfileWantNumber. each hwWsecProfileName name is divided by '?'.
1.3.6.1.4.1.2011.6.139.6.6.4OCTET STRINGread-onlycurrent
hwWsecNotifications
OBJECT-IDENTITY
1.3.6.1.4.1.2011.6.139.6.9
hwWsecNotify
OBJECT-IDENTITY
1.3.6.1.4.1.2011.6.139.6.9.1
hwWsecNotifyObjects
OBJECT-IDENTITY
1.3.6.1.4.1.2011.6.139.6.9.2
hwStaAuthenticationMode
OBJECT-TYPE
Description.
1.3.6.1.4.1.2011.6.139.6.9.2.1Integer32read-onlycurrent
hwStaAuthenticationFailCause
OBJECT-TYPE
Description.
1.3.6.1.4.1.2011.6.139.6.9.2.2Integer32read-onlycurrent
hwStaAssociationFailCause
OBJECT-TYPE
Description.
1.3.6.1.4.1.2011.6.139.6.9.2.3Integer32read-onlycurrent
hwStaAssocBssid
OBJECT-TYPE
Description.
1.3.6.1.4.1.2011.6.139.6.9.2.4MacAddressread-onlycurrent
hwStaFailCodeType
OBJECT-TYPE
Description.
1.3.6.1.4.1.2011.6.139.6.9.2.5INTEGER {reasonCode(1), statusCode(2)}read-onlycurrent
hwWepIDConflictTrapAPMAC
OBJECT-TYPE
Description.
1.3.6.1.4.1.2011.6.139.6.9.2.6MacAddressread-onlycurrent
hwWepIDConflictTrapAPID
OBJECT-TYPE
Description.
1.3.6.1.4.1.2011.6.139.6.9.2.7Integer32read-onlycurrent
hwWepIDConflictTrapRadioId
OBJECT-TYPE
Description.
1.3.6.1.4.1.2011.6.139.6.9.2.8Integer32read-onlycurrent
hwWepIDConflictTrapPreSSID
OBJECT-TYPE
Description.
1.3.6.1.4.1.2011.6.139.6.9.2.9OCTET STRING (SIZE(0..32))read-onlycurrent
hwWepIDConflictTrapCurrSSID
OBJECT-TYPE
Description.
1.3.6.1.4.1.2011.6.139.6.9.2.10OCTET STRING (SIZE(0..32))read-onlycurrent
hwWepIDConflictTrapCipherIdx
OBJECT-TYPE
Description.
1.3.6.1.4.1.2011.6.139.6.9.2.11Integer32read-onlycurrent
hwWlanStaAuthEncryptMode
OBJECT-TYPE
Description.
1.3.6.1.4.1.2011.6.139.6.9.2.12Integer32read-onlycurrent
hwWlanVapAuthEncryptMode
OBJECT-TYPE
Description.
1.3.6.1.4.1.2011.6.139.6.9.2.13Integer32read-onlycurrent
hwStaAuthenticationFailCauseStr
OBJECT-TYPE
Description.
1.3.6.1.4.1.2011.6.139.6.9.2.14OCTET STRINGread-onlycurrent
hwStaAssociationFailCauseStr
OBJECT-TYPE
Description.
1.3.6.1.4.1.2011.6.139.6.9.2.15OCTET STRINGread-onlycurrent
hwWlanSecurityObject
OBJECT-IDENTITY
1.3.6.1.4.1.2011.6.139.6.10
hwWlanSecurityConformance
OBJECT-IDENTITY
1.3.6.1.4.1.2011.6.139.6.11
hwWlanSecurityCompliances
OBJECT-IDENTITY
1.3.6.1.4.1.2011.6.139.6.11.1
hwWlanSecurityObjectGroups
OBJECT-IDENTITY
1.3.6.1.4.1.2011.6.139.6.11.2

Notifications

NameOIDStatus
hwStaAuthErrorNotify
NOTIFICATION-TYPE
Description.
1.3.6.1.4.1.2011.6.139.6.9.1.1current
hwStaAssociationFailNotify
NOTIFICATION-TYPE
Description.
1.3.6.1.4.1.2011.6.139.6.9.1.2current
hwUserWithInvalidCerficationInbreakNetworkNotify
NOTIFICATION-TYPE
Description.
1.3.6.1.4.1.2011.6.139.6.9.1.3current
hwStationRepititiveAttackNotify
NOTIFICATION-TYPE
Description.
1.3.6.1.4.1.2011.6.139.6.9.1.4current
hwTamperAttackNotify
NOTIFICATION-TYPE
Description.
1.3.6.1.4.1.2011.6.139.6.9.1.5current
hwLowSafeLevelAttackNotify
NOTIFICATION-TYPE
Description.
1.3.6.1.4.1.2011.6.139.6.9.1.6current
hwAddressRedirectionAttackNotify
NOTIFICATION-TYPE
Description.
1.3.6.1.4.1.2011.6.139.6.9.1.7current
hwWepIDConflictNotify
NOTIFICATION-TYPE
Description.
1.3.6.1.4.1.2011.6.139.6.9.1.8current
hwStaAuthEncryptModeNotMatchNotify
NOTIFICATION-TYPE
Description.
1.3.6.1.4.1.2011.6.139.6.9.1.9current

Conformance

NameOIDStatus
hwWlanSecurityCompliance
MODULE-COMPLIANCE
Description.
1.3.6.1.4.1.2011.6.139.6.11.1.1current
hwWsecProfileGroup
OBJECT-GROUP
Description.
1.3.6.1.4.1.2011.6.139.6.11.2.1current
hwWsecWEPDefaultKeysGroup
OBJECT-GROUP
Description.
1.3.6.1.4.1.2011.6.139.6.11.2.2current
hwWsecWEPKeyMappingsGroup
OBJECT-GROUP
Description.
1.3.6.1.4.1.2011.6.139.6.11.2.3current
hwWsecAuthSuitesGroup
OBJECT-GROUP
Description.
1.3.6.1.4.1.2011.6.139.6.11.2.4current
hwWsecStatsGroup
OBJECT-GROUP
Description.
1.3.6.1.4.1.2011.6.139.6.11.2.5current
hwWsecBatchProfileInfoGroup
OBJECT-GROUP
Description.
1.3.6.1.4.1.2011.6.139.6.11.2.6current
hwWsecNotifyGroup
NOTIFICATION-GROUP
Description.
1.3.6.1.4.1.2011.6.139.6.11.2.7current
hwWsecNotifyObjectsGroup
OBJECT-GROUP
Description.
1.3.6.1.4.1.2011.6.139.6.11.2.8current