HH3C-WAPI-MIB
103 objects
HH3C-WAPI-MIB is an extension of MIB in WAPI protocol. This MIB contains objects to manage configuration and monitor running state for WAPI feature.
Imported Objects
| HH3C-OID-MIB | hh3cCommon |
| IF-MIB | ifDescr ifIndex |
| INET-ADDRESS-MIB | InetAddress InetAddressType |
| SNMPv2-SMI | Counter32 Integer32 MODULE-IDENTITY NOTIFICATION-TYPE OBJECT-TYPE Unsigned32 |
| SNMPv2-TC | MacAddress TruthValue |
| OID | Name | Access | Status | Description |
|---|---|---|---|---|
| 1.3.6.1.4.1.25506.2.77 | Identityhh3cwapiMIB | HH3C-WAPI-MIB is an extension of MIB in WAPI protocol. This MIB contains objects to manage configuration and monitor running state for WAPI feature. | ||
| 1.3.6.1.4.1.25506.2.77.1 | Nodehh3cwapiMIBObjects | |||
| 1.3.6.1.4.1.25506.2.77.1.1 | Scalarhh3cwapiModeEnabled | read-write | current | When this object is set to TRUE, it shall indicate that WAPI is enabled. Otherwise, it shall indicate that WAPI is disabled. |
| 1.3.6.1.4.1.25506.2.77.1.2 | Scalarhh3cwapiASIPAddressType | read-write | current | This object is used to set global IP addresses type (IPv4 or IPv6) of AS. |
| 1.3.6.1.4.1.25506.2.77.1.3 | Scalarhh3cwapiASIPAddress | read-write | current | This object is used to set the global IP address of AS. |
| 1.3.6.1.4.1.25506.2.77.1.4 | Scalarhh3cwapiCertificateInstalled | read-only | current | This object indicates whether the entity has installed certificate. When the value is TRUE, it shall indicate that the entity has installed certificate. Otherw… |
| 1.3.6.1.4.1.25506.2.77.2 | Nodehh3cwapiMIBStatsObjects | |||
| 1.3.6.1.4.1.25506.2.77.2.1 | Scalarhh3cwapiStatsWAISignatureErrors | read-only | current | This counter increases when the received packet of WAI signature is wrong. |
| 1.3.6.1.4.1.25506.2.77.2.2 | Scalarhh3cwapiStatsWAIHMACErrors | read-only | current | This counter increases when the received packet of WAI message authentication key checking error occurs. |
| 1.3.6.1.4.1.25506.2.77.2.3 | Scalarhh3cwapiStatsWAIAuthRsltFailures | read-only | current | This counter increases when the WAI authentication result is unsuccessful. |
| 1.3.6.1.4.1.25506.2.77.2.4 | Scalarhh3cwapiStatsWAIDiscardCounters | read-only | current | This counter increases when the received packet of WAI are discarded. |
| 1.3.6.1.4.1.25506.2.77.2.5 | Scalarhh3cwapiStatsWAITimeoutCounters | read-only | current | This counter increases when the packet of WAI overtime are detected. |
| 1.3.6.1.4.1.25506.2.77.2.6 | Scalarhh3cwapiStatsWAIFormatErrors | read-only | current | This counter increases when the WAI packet of WAI format error is detected. |
| 1.3.6.1.4.1.25506.2.77.2.7 | Scalarhh3cwapiStatsWAICtfHskFailures | read-only | current | This counter increases when the WAI certificate authenticates unsuccessfully. |
| 1.3.6.1.4.1.25506.2.77.2.8 | Scalarhh3cwapiStatsWAIUniHskFailures | read-only | current | This counter increases when the WAI unicast cipher key negotiates unsuccessfully. |
| 1.3.6.1.4.1.25506.2.77.2.9 | Scalarhh3cwapiStatsWAIMulHskFailures | read-only | current | This counter increases when the WAI multicast cipher key announces unsuccessfully. |
| 1.3.6.1.4.1.25506.2.77.3 | Nodehh3cwapiMIBTableObjects | |||
| 1.3.6.1.4.1.25506.2.77.3.1 | Tablehh3cwapiConfigTable | not-accessible | current | The table containing WAPI configuration objects. |
| 1.3.6.1.4.1.25506.2.77.3.1.1 | Rowhh3cwapiConfigEntry | not-accessible | current | An entry in the hh3cwapiConfigTable. |
| 1.3.6.1.4.1.25506.2.77.3.1.1.1 | Columnhh3cwapiConfigASIPAddressType | read-write | current | This object is used to set IP addresses type of AS. |
| 1.3.6.1.4.1.25506.2.77.3.1.1.2 | Columnhh3cwapiConfigASIPAddress | read-write | current | This object is used to set the IP address of AS. |
| 1.3.6.1.4.1.25506.2.77.3.1.1.3 | Columnhh3cwapiConfigAuthMethod | read-write | current | This object selects a mechanism for WAPI authentication. The default is certificate. |
| 1.3.6.1.4.1.25506.2.77.3.1.1.4 | Columnhh3cwapiConfigAuthMode | read-write | current | This object selects a mechanism for WAPI authentication. When the value is standard, it shall indicate that the entity acts based on the official definition. O… |
| 1.3.6.1.4.1.25506.2.77.3.1.1.5 | Columnhh3cwapiConfigISPDomain | read-write | current | The ISP domain name. |
| 1.3.6.1.4.1.25506.2.77.3.1.1.6 | Columnhh3cwapiConfigCertificateDomain | read-write | current | The PKI domain name. |
| 1.3.6.1.4.1.25506.2.77.3.1.1.7 | Columnhh3cwapiConfigASName | read-write | current | The name of AS. |
| 1.3.6.1.4.1.25506.2.77.3.1.1.8 | Columnhh3cwapiConfigBKRekeyEnabled | read-write | current | This object indicates whether the BK rekey function is supported. When the value is TRUE, it shall indicate that the BK rekey function is supported. Otherwise,… |
| 1.3.6.1.4.1.25506.2.77.3.2 | Tablehh3cwapiConfigExtTable | not-accessible | current | The table containing WAPI configuration objects for SSID. |
| 1.3.6.1.4.1.25506.2.77.3.2.1 | Rowhh3cwapiConfigExtEntry | not-accessible | current | An extend entry in the hh3cwapiConfigExtTable. |
| 1.3.6.1.4.1.25506.2.77.3.2.1.1 | Columnhh3cwapiConfigServicePolicyID | not-accessible | current | Represents the ID of each service policy. |
| 1.3.6.1.4.1.25506.2.77.3.2.1.2 | Columnhh3cwapiConfigUnicastCipherEnabled | read-write | current | This object enables or disables the unicast cipher. |
| 1.3.6.1.4.1.25506.2.77.3.2.1.3 | Columnhh3cwapiConfigUnicastCipherSize | read-only | current | This object indicates the length in bits of the unicast cipher key. This should be 256 for SMS4, first 128 bits for encrypting, last 128 bits for integrity che… |
| 1.3.6.1.4.1.25506.2.77.3.2.1.4 | Columnhh3cwapiConfigAuthenticationSuiteEnabled | read-write | current | This variable indicates the corresponding AKM suite is enabled or disabled. |
| 1.3.6.1.4.1.25506.2.77.3.2.1.5 | Columnhh3cwapiConfigAuthenticationSuite | read-only | current | The selector of an AKM suite. It consists of an OUI (the first 3 octets) and a cipher suite identifier (the last octet). |
| 1.3.6.1.4.1.25506.2.77.3.2.1.6 | Columnhh3cwapiCfgExtASIPAddressType | read-write | current | This object is used to set IP addresses type of AS. |
| 1.3.6.1.4.1.25506.2.77.3.2.1.7 | Columnhh3cwapiCfgExtASIPAddress | read-write | current | This object is used to set the IP address of AS. |
| 1.3.6.1.4.1.25506.2.77.3.2.1.8 | Columnhh3cwapiCfgExtASName | read-write | current | This object is used to set the name of AS. |
| 1.3.6.1.4.1.25506.2.77.3.2.1.9 | Columnhh3cwapiCfgExtCertDomain | read-write | current | This object is used to set the PKI domain name. |
| 1.3.6.1.4.1.25506.2.77.3.2.1.10 | Columnhh3cwapiCfgExtCertInstalled | read-only | current | This object indicates whether the entity has installed certificate. When the value is TRUE, it shall indicate that the SSID has installed certificate. Otherwis… |
| 1.3.6.1.4.1.25506.2.77.3.2.1.11 | Columnhh3cwapiConfigVersion | read-only | current | The highest WAPI version this entity supports. |
| 1.3.6.1.4.1.25506.2.77.3.2.1.12 | Columnhh3cwapiControlledAuthControl | read-only | current | This object indicates whether the entity is enabled with authentication. When the value is FALSE, it shall indicate that authentication is not enabled on this … |
| 1.3.6.1.4.1.25506.2.77.3.2.1.13 | Columnhh3cwapiControlledPortControl | read-only | current | This object indicates the controlling type of the entity's port. This object is available when hh3cwapiControlledAuthControl is TRUE. When the value is zero, i… |
| 1.3.6.1.4.1.25506.2.77.3.2.1.14 | Columnhh3cwapiOptionImplemented | read-only | current | This object indicates whether the entity supports WAPI. When the value is TRUE, it shall indicate that the entity supports WAPI. Otherwise, it shall indicate t… |
| 1.3.6.1.4.1.25506.2.77.3.2.1.15 | Columnhh3cwapiPreauthImplemented | read-only | current | This object indicates whether the entity supports WAPI preauthentication. This object can't be set to TRUE, unless hh3cwapiOptionImplemented is TRUE. |
| 1.3.6.1.4.1.25506.2.77.3.2.1.16 | Columnhh3cwapiEnabled | read-write | current | When this object is set to TRUE, it shall indicate that WAPI is enabled on this entity. The entity will advertise the WAPI information element in its beacon an… |
| 1.3.6.1.4.1.25506.2.77.3.2.1.17 | Columnhh3cwapiPreauthEnabled | read-write | current | When this object is set to TRUE, it shall indicate that WAPI preauthentication is enabled on this entity. Otherwise, it shall indicate that WAPI preauthenticat… |
| 1.3.6.1.4.1.25506.2.77.3.2.1.18 | Columnhh3cwapiCfgUniKeysSupported | read-only | current | This object indicates how many unicast keys the entity supports for WAPI. |
| 1.3.6.1.4.1.25506.2.77.3.2.1.19 | Columnhh3cwapiCfgUniRekeyMethod | read-write | current | This object selects a mechanism for rekeying the WAPI USK. The default is time-based, once per day. Rekeying the USK is only applicable to an entity acting as … |
| 1.3.6.1.4.1.25506.2.77.3.2.1.20 | Columnhh3cwapiCfgUniRekeyTime | read-write | current | Time in seconds after which the WAPI USK shall be refreshed. The timer shall start at the moment the USK was set using the MLME-SETWPIKEYS request primitive. |
| 1.3.6.1.4.1.25506.2.77.3.2.1.21 | Columnhh3cwapiCfgUniRekeyPackets | read-write | current | A packet count (a multiple of 1000) after which the WAPI USK shall be refreshed. The packet counter shall start at the moment the USK was set using the MLME-SE… |
| 1.3.6.1.4.1.25506.2.77.3.2.1.22 | Columnhh3cwapiCfgMultiCipher | read-write | current | This object indicates the multicast cipher suite selector the entity must use. The multicast cipher suite in the WAPI information element shall take its value … |
| 1.3.6.1.4.1.25506.2.77.3.2.1.23 | Columnhh3cwapiCfgMultiRekeyMethod | read-write | current | This object selects a mechanism for rekeying the WAPI MSK. The default is time-based, once per day. Rekeying the MSK is only applicable to an entity acting as … |
| 1.3.6.1.4.1.25506.2.77.3.2.1.24 | Columnhh3cwapiCfgMultiRekeyTime | read-write | current | Time in seconds after which the WAPI MSK shall be refreshed. The timer shall start at the moment the MSK was set using the MLME-SETWPIKEYS request primitive. |
| 1.3.6.1.4.1.25506.2.77.3.2.1.25 | Columnhh3cwapiCfgMultiRekeyPackets | read-write | current | A packet count (a multiple of 1000) after which the WAPI MSK shall be refreshed. The packet counter shall start at the moment the MSK was set using the MLME-SE… |
| 1.3.6.1.4.1.25506.2.77.3.2.1.26 | Columnhh3cwapiCfgMultiRekeyStrict | read-write | current | This object indicates that the MSK shall be refreshed whenever an STA leaves the BSS that has the MSK. |
| 1.3.6.1.4.1.25506.2.77.3.2.1.27 | Columnhh3cwapiCfgPSKValue | read-write | current | The PSK value when WAPI in PSK mode is the selected AKM suite. In that case, the BK will obtain its value from this object. This object is logically write-only… |
| 1.3.6.1.4.1.25506.2.77.3.2.1.28 | Columnhh3cwapiCfgPSKPassPhrase | read-write | current | The PSK value when WAPI in PSK mode is the selected AKM suite, which is configured by hh3cwapiCfgPSKValue. An alternative method of setting the PSK is to use t… |
| 1.3.6.1.4.1.25506.2.77.3.2.1.29 | Columnhh3cwapiCfgCertUpdateCount | read-write | current | The number of times message in the WAPI certificate authentication handshake will be retried per certificate authentication handshake attempt. |
| 1.3.6.1.4.1.25506.2.77.3.2.1.30 | Columnhh3cwapiCfgMultiUpdateCount | read-write | current | The number of times message in the WAPI multicast key handshake will be retried per MSK handshake attempt. |
| 1.3.6.1.4.1.25506.2.77.3.2.1.31 | Columnhh3cwapiCfgUniUpdateCount | read-write | current | The number of times message in the WAPI unicast key handshake will be retried per 3-way handshake attempt. |
| 1.3.6.1.4.1.25506.2.77.3.2.1.32 | Columnhh3cwapiCfgMultiCipherSize | read-only | current | This object indicates the length in bits of the multicast cipher key. This should be 256 for SMS4, where the first 128 bits are for encryption, and the last 12… |
| 1.3.6.1.4.1.25506.2.77.3.2.1.33 | Columnhh3cwapiCfgBKLifetime | read-write | current | The maximum lifetime of a BK in the BK cache. |
| 1.3.6.1.4.1.25506.2.77.3.2.1.34 | Columnhh3cwapiCfgBKReauthThreshold | read-write | current | The percentage of the BK lifetime that should expire before a reauthentication occurs. |
| 1.3.6.1.4.1.25506.2.77.3.2.1.35 | Columnhh3cwapiCfgSATimeout | read-write | current | The maximum time a security association shall take to set up. |
| 1.3.6.1.4.1.25506.2.77.3.2.1.36 | Columnhh3cwapiAuthenSuiteSelected | read-only | current | The selector of the last negotiated AKM suite. |
| 1.3.6.1.4.1.25506.2.77.3.2.1.37 | Columnhh3cwapiUniCipherSelected | read-only | current | The selector of the last negotiated unicast cipher. |
| 1.3.6.1.4.1.25506.2.77.3.2.1.38 | Columnhh3cwapiMultiCipherSelected | read-only | current | The selector of the last negotiated multicast cipher. |
| 1.3.6.1.4.1.25506.2.77.3.2.1.39 | Columnhh3cwapiBKIDUsed | read-only | current | The selector of the last BKID used in the last unicast cipher key handshake. |
| 1.3.6.1.4.1.25506.2.77.3.2.1.40 | Columnhh3cwapiAuthenSuiteRequested | read-only | current | The selector of the last requested AKM suite. |
| 1.3.6.1.4.1.25506.2.77.3.2.1.41 | Columnhh3cwapiUniCipherRequested | read-only | current | The selector of the last requested unicast cipher. |
| 1.3.6.1.4.1.25506.2.77.3.2.1.42 | Columnhh3cwapiMultiCipherRequested | read-only | current | The selector of the last requested multicast cipher. |
| 1.3.6.1.4.1.25506.2.77.3.3 | Tablehh3cwapiStatsTable | not-accessible | current | This table maintains per-STA statistics in a WAPI. The entry with hh3cwapiStatsSTAAddress set to FF-FF-FF-FF-FF-FF shall contain statistics for broadcast/multi… |
| 1.3.6.1.4.1.25506.2.77.3.3.1 | Rowhh3cwapiStatsEntry | not-accessible | current | An entry in the hh3cwapiStatsTable. |
| 1.3.6.1.4.1.25506.2.77.3.3.1.1 | Columnhh3cwapiStationMAC | not-accessible | current | Represents the unique MAC Address of station. |
| 1.3.6.1.4.1.25506.2.77.3.3.1.2 | Columnhh3cwapiStatsSTAAddress | read-only | current | The MAC address of the STA to which the statistics in this conceptual row belong. |
| 1.3.6.1.4.1.25506.2.77.3.3.1.3 | Columnhh3cwapiStatsVersion | read-only | current | The WAPI version with which the STA is associated. |
| 1.3.6.1.4.1.25506.2.77.3.3.1.4 | Columnhh3cwapiStatsCtrlPortStatus | read-only | current | This object indicates the status of the authentication entity's controlled port. When the value is TRUE, it means 'authenticated'. Otherwise, it means 'unauthe… |
| 1.3.6.1.4.1.25506.2.77.3.3.1.5 | Columnhh3cwapiStatsSelectedUniCipher | read-only | current | The unicast cipher suite selector used during association. |
| 1.3.6.1.4.1.25506.2.77.3.3.1.6 | Columnhh3cwapiStatsWPIReplayCnt | read-only | current | The number of WPI MPDUs discarded by the replay mechanism. |
| 1.3.6.1.4.1.25506.2.77.3.3.1.7 | Columnhh3cwapiStatsWPIDecryptErr | read-only | current | The number of WPI MPDUs discarded because of unavailable cipher key during WPI-SMS4 decryption. |
| 1.3.6.1.4.1.25506.2.77.3.3.1.8 | Columnhh3cwapiStatsWPIMICErr | read-only | current | The number of WPI MPDUs discarded because of MIC checking failure during WPI-SMS4 decryption. |
| 1.3.6.1.4.1.25506.2.77.3.3.1.9 | Columnhh3cwapiStatsWAISignatureErr | read-only | current | This counter increases when the received WAI packets' signature is wrong. |
| 1.3.6.1.4.1.25506.2.77.3.3.1.10 | Columnhh3cwapiStatsWAIHMACErr | read-only | current | This counter increases when message authentication key checking error occurs on the received WAI packets. |
| 1.3.6.1.4.1.25506.2.77.3.3.1.11 | Columnhh3cwapiStatsWAIAuthenFail | read-only | current | This counter increases when the WAI authentication result is unsuccessful. |
| 1.3.6.1.4.1.25506.2.77.3.3.1.12 | Columnhh3cwapiStatsWAIDiscardCnt | read-only | current | This counter increases when the received WAI packet is discarded. |
| 1.3.6.1.4.1.25506.2.77.3.3.1.13 | Columnhh3cwapiStatsWAITimeoutCnt | read-only | current | This counter increases when a WAI packet timeout is detected. |
| 1.3.6.1.4.1.25506.2.77.3.3.1.14 | Columnhh3cwapiStatsWAIFormatErr | read-only | current | This counter increases when WAI packet format error occurs |
| 1.3.6.1.4.1.25506.2.77.3.3.1.15 | Columnhh3cwapiStatsWAICertFail | read-only | current | This counter increases when WAI certificate authentication fails. |
| 1.3.6.1.4.1.25506.2.77.3.3.1.16 | Columnhh3cwapiStatsWAIUniFail | read-only | current | This counter increases when WAI unicast cipher key negotiation succeeds. |
| 1.3.6.1.4.1.25506.2.77.3.3.1.17 | Columnhh3cwapiStatsWAIMultiFail | read-only | current | This counter increases when the WAI multicast cipher key announcement failure occurs. |
| 1.3.6.1.4.1.25506.2.77.4 | Nodehh3cwapiTrap | |||
| 1.3.6.1.4.1.25506.2.77.4.0 | Nodehh3cwapiTrapPrefix | |||
| 1.3.6.1.4.1.25506.2.77.4.0.1 | Notificationhh3cwapiUserwithInvalidCertificate | current | This trap is sent when a user intrudes upon network with invalid certificate. | |
| 1.3.6.1.4.1.25506.2.77.4.0.2 | Notificationhh3cwapiStationReplayAttack | current | This trap is sent when an attacker records and replays network transactions. | |
| 1.3.6.1.4.1.25506.2.77.4.0.3 | Notificationhh3cwapiTamperAttack | current | This trap is sent when an attacker monitors network traffic and maliciously changes data in transit(for example, an attacker may modify the contents of a WAI m… | |
| 1.3.6.1.4.1.25506.2.77.4.0.4 | Notificationhh3cwapiLowSafeLevelAttack | current | This trap is sent when a station associates AP(Access Point), creates packet of Unicast Key Negotiation Response with wrong WIE(WAPI Information Element) of AS… | |
| 1.3.6.1.4.1.25506.2.77.4.0.5 | Notificationhh3cwapiAddressRedirectionAttack | current | This trap is sent when an attacker maliciously changes destination MAC address of WPI(WLAN Privacy Infrastructure) frame. | |
| 1.3.6.1.4.1.25506.2.77.4.1 | Nodehh3cwapiTrapInfo | |||
| 1.3.6.1.4.1.25506.2.77.4.1.1 | Scalarhh3cwapiTrapInfoMacAddr | accessible-for-notify | current | The MAC address of the WAPI user. |
| 1.3.6.1.4.1.25506.2.77.4.1.2 | Scalarhh3cwapiTrapInfoAPId | accessible-for-notify | current | To uniquely identify each AP. |
| 1.3.6.1.4.1.25506.2.77.4.1.3 | Scalarhh3cwapiTrapInfoRadioId | accessible-for-notify | current | Represents each radio. |
| 1.3.6.1.4.1.25506.2.77.4.1.4 | Scalarhh3cwapiTrapInfoBSSId | accessible-for-notify | current | As MAC Address format, it is to identify BSS. |
| 1.3.6.1.4.1.25506.2.77.4.1.5 | Scalarhh3cwapiTrapInfoAPMacAddr | accessible-for-notify | current | As MAC Address format, it is to identify AP |