H3C-WAPI-MIB

File: H3C-WAPI-MIB.mib (19628 bytes)

Imported modules

SNMPv2-SMI SNMPv2-TC RFC1213-MIB
INET-ADDRESS-MIB HUAWEI-3COM-OID-MIB

Imported symbols

Counter32 Integer32 Unsigned32
MODULE-IDENTITY OBJECT-TYPE NOTIFICATION-TYPE
TruthValue MacAddress ifIndex
ifDescr InetAddressType InetAddress
h3cCommon

Defined Types

H3cwapiConfigEntry  
SEQUENCE    
  h3cwapiConfigASIPAddressType InetAddressType
  h3cwapiConfigASIPAddress InetAddress
  h3cwapiConfigAuthMethod INTEGER
  h3cwapiConfigAuthMode INTEGER
  h3cwapiConfigISPDomain OCTET STRING
  h3cwapiConfigCertificateDomain OCTET STRING
  h3cwapiConfigASName OCTET STRING
  h3cwapiConfigBKRekeyEnabled TruthValue

H3cwapiConfigExtEntry  
SEQUENCE    
  h3cwapiConfigServicePolicyID Integer32
  h3cwapiConfigUnicastCipherEnabled TruthValue
  h3cwapiConfigUnicastCipherSize Unsigned32
  h3cwapiConfigAuthenticationSuiteEnabled TruthValue
  h3cwapiConfigAuthenticationSuite OCTET STRING
  h3cwapiCfgExtASIPAddressType InetAddressType
  h3cwapiCfgExtASIPAddress InetAddress
  h3cwapiCfgExtASName OCTET STRING
  h3cwapiCfgExtCertDomain OCTET STRING
  h3cwapiCfgExtCertInstalled TruthValue

Defined Values

h3cwapiMIB 1.3.6.1.4.1.2011.10.2.77
H3C-WAPI-MIB is an extension of MIB in WAPI protocol. This MIB contains objects to manage configuration and monitor running state for WAPI feature.
MODULE-IDENTITY    

h3cwapiMIBObjects 1.3.6.1.4.1.2011.10.2.77.1
OBJECT IDENTIFIER    

h3cwapiMIBStatsObjects 1.3.6.1.4.1.2011.10.2.77.2
OBJECT IDENTIFIER    

h3cwapiMIBTableObjects 1.3.6.1.4.1.2011.10.2.77.3
OBJECT IDENTIFIER    

h3cwapiTrap 1.3.6.1.4.1.2011.10.2.77.4
OBJECT IDENTIFIER    

h3cwapiModeEnabled 1.3.6.1.4.1.2011.10.2.77.1.1
When this object is set to TRUE, it shall indicate that WAPI is enabled. Otherwise, it shall indicate that WAPI is disabled.
OBJECT-TYPE    
  TruthValue  

h3cwapiASIPAddressType 1.3.6.1.4.1.2011.10.2.77.1.2
This object is used to set global IP addresses type (IPv4 or IPv6) of AS.
OBJECT-TYPE    
  InetAddressType  

h3cwapiASIPAddress 1.3.6.1.4.1.2011.10.2.77.1.3
This object is used to set the global IP address of AS.
OBJECT-TYPE    
  InetAddress  

h3cwapiCertificateInstalled 1.3.6.1.4.1.2011.10.2.77.1.4
This object indicates whether the entity has installed certificate. When the value is TURE, it shall indicate that the entity has installed certificate. Otherwise, it shall indicate that the entity hasn't installed certificate.
OBJECT-TYPE    
  TruthValue  

h3cwapiStatsWAISignatureErrors 1.3.6.1.4.1.2011.10.2.77.2.1
This counter increases when the received packet of WAI signature is wrong.
OBJECT-TYPE    
  Counter32  

h3cwapiStatsWAIHMACErrors 1.3.6.1.4.1.2011.10.2.77.2.2
This counter increases when the received packet of WAI message authentication key checking error occurs.
OBJECT-TYPE    
  Counter32  

h3cwapiStatsWAIAuthRsltFailures 1.3.6.1.4.1.2011.10.2.77.2.3
This counter increases when the WAI authentication result is unsuccessful.
OBJECT-TYPE    
  Counter32  

h3cwapiStatsWAIDiscardCounters 1.3.6.1.4.1.2011.10.2.77.2.4
This counter increases when the received packet of WAI are discarded.
OBJECT-TYPE    
  Counter32  

h3cwapiStatsWAITimeoutCounters 1.3.6.1.4.1.2011.10.2.77.2.5
This counter increases when the packet of WAI overtime are detected.
OBJECT-TYPE    
  Counter32  

h3cwapiStatsWAIFormatErrors 1.3.6.1.4.1.2011.10.2.77.2.6
This counter increases when the WAI packet of WAI format error is detected.
OBJECT-TYPE    
  Counter32  

h3cwapiStatsWAICtfHskFailures 1.3.6.1.4.1.2011.10.2.77.2.7
This counter increases when the WAI certificate authenticates unsuccessfully.
OBJECT-TYPE    
  Counter32  

h3cwapiStatsWAIUniHskFailures 1.3.6.1.4.1.2011.10.2.77.2.8
This counter increases when the WAI unicast cipher key negotiates unsuccessfully.
OBJECT-TYPE    
  Counter32  

h3cwapiStatsWAIMulHskFailures 1.3.6.1.4.1.2011.10.2.77.2.9
This counter increases when the WAI multicast cipher key announces unsuccessfully.
OBJECT-TYPE    
  Counter32  

h3cwapiConfigTable 1.3.6.1.4.1.2011.10.2.77.3.1
The table containing WAPI configuration objects.
OBJECT-TYPE    
  SEQUENCE OF  
    H3cwapiConfigEntry

h3cwapiConfigEntry 1.3.6.1.4.1.2011.10.2.77.3.1.1
An entry in the h3cwapiConfigTable.
OBJECT-TYPE    
  H3cwapiConfigEntry  

h3cwapiConfigASIPAddressType 1.3.6.1.4.1.2011.10.2.77.3.1.1.1
This object is used to set IP addresses type of AS.
OBJECT-TYPE    
  InetAddressType  

h3cwapiConfigASIPAddress 1.3.6.1.4.1.2011.10.2.77.3.1.1.2
This object is used to set the IP address of AS.
OBJECT-TYPE    
  InetAddress  

h3cwapiConfigAuthMethod 1.3.6.1.4.1.2011.10.2.77.3.1.1.3
This object selects a mechanism for WAPI authentication method. The default is certificate.
OBJECT-TYPE    
  INTEGER certificate(1), psk(2), certificatePsk(3)  

h3cwapiConfigAuthMode 1.3.6.1.4.1.2011.10.2.77.3.1.1.4
This object selects a mechanism for WAPI authentication mode. When the value is standard, it shall indicate that the entity acts accord with the official definition. Otherwise, it shall indicate that the entity finishs authentication by means of RADIUS. The default is standard.
OBJECT-TYPE    
  INTEGER standard(1), radiusExtension(2)  

h3cwapiConfigISPDomain 1.3.6.1.4.1.2011.10.2.77.3.1.1.5
The ISP domain name.
OBJECT-TYPE    
  OCTET STRING Size(0..24)  

h3cwapiConfigCertificateDomain 1.3.6.1.4.1.2011.10.2.77.3.1.1.6
The PKI domain name.
OBJECT-TYPE    
  OCTET STRING Size(1..15)  

h3cwapiConfigASName 1.3.6.1.4.1.2011.10.2.77.3.1.1.7
The name of AS.
OBJECT-TYPE    
  OCTET STRING Size(1..15)  

h3cwapiConfigBKRekeyEnabled 1.3.6.1.4.1.2011.10.2.77.3.1.1.8
This object indicates whether the BK rekey function is supported. When the value is TURE, it shall indicate that the BK rekey function is supported. Otherwise, it shall indicate that the BK rekey function is not supported.
OBJECT-TYPE    
  TruthValue  

h3cwapiConfigExtTable 1.3.6.1.4.1.2011.10.2.77.3.2
The table containing WAPI configuration objects for SSID.
OBJECT-TYPE    
  SEQUENCE OF  
    H3cwapiConfigExtEntry

h3cwapiConfigExtEntry 1.3.6.1.4.1.2011.10.2.77.3.2.1
An extend entry in the h3cwapiConfigExtTable.
OBJECT-TYPE    
  H3cwapiConfigExtEntry  

h3cwapiConfigServicePolicyID 1.3.6.1.4.1.2011.10.2.77.3.2.1.1
Represents the ID of each service policy.
OBJECT-TYPE    
  Integer32  

h3cwapiConfigUnicastCipherEnabled 1.3.6.1.4.1.2011.10.2.77.3.2.1.2
This object enables or disables the unicast cipher.
OBJECT-TYPE    
  TruthValue  

h3cwapiConfigUnicastCipherSize 1.3.6.1.4.1.2011.10.2.77.3.2.1.3
This object indicates the length in bits of the unicast cipher key. This should be 256 for SMS4, first 128 bits for encrypting, last 128 bits for integrity checking.
OBJECT-TYPE    
  Unsigned32 0..4294967295  

h3cwapiConfigAuthenticationSuiteEnabled 1.3.6.1.4.1.2011.10.2.77.3.2.1.4
This variable indicates the corresponding AKM suite is enabled or disabled.
OBJECT-TYPE    
  TruthValue  

h3cwapiConfigAuthenticationSuite 1.3.6.1.4.1.2011.10.2.77.3.2.1.5
The selector of an AKM suite. It consists of an OUI (the first 3 octets) and a cipher suite identifier (the last octet).
OBJECT-TYPE    
  OCTET STRING Size(4)  

h3cwapiCfgExtASIPAddressType 1.3.6.1.4.1.2011.10.2.77.3.2.1.6
This object is used to set IP addresses type of AS.
OBJECT-TYPE    
  InetAddressType  

h3cwapiCfgExtASIPAddress 1.3.6.1.4.1.2011.10.2.77.3.2.1.7
This object is used to set the IP address of AS.
OBJECT-TYPE    
  InetAddress  

h3cwapiCfgExtASName 1.3.6.1.4.1.2011.10.2.77.3.2.1.8
This object is used to set the name of AS.
OBJECT-TYPE    
  OCTET STRING Size(1..15)  

h3cwapiCfgExtCertDomain 1.3.6.1.4.1.2011.10.2.77.3.2.1.9
This object is used to set the PKI domain name.
OBJECT-TYPE    
  OCTET STRING Size(1..15)  

h3cwapiCfgExtCertInstalled 1.3.6.1.4.1.2011.10.2.77.3.2.1.10
This object indicates whether the entity has installed certificate. When the value is TURE, it shall indicate that the SSID has installed certificate. Otherwise, it shall indicate that the SSID hasn't installed certificate.
OBJECT-TYPE    
  TruthValue  

h3cwapiTrapPrefix 1.3.6.1.4.1.2011.10.2.77.4.0
OBJECT IDENTIFIER    

h3cwapiUserwithInvalidCertificate 1.3.6.1.4.1.2011.10.2.77.4.0.1
This trap is sent when a user intrudes upon network with invalid certificate.
NOTIFICATION-TYPE    

h3cwapiStationReplayAttack 1.3.6.1.4.1.2011.10.2.77.4.0.2
This trap is sent when an attacker records and replays network transactions.
NOTIFICATION-TYPE    

h3cwapiTamperAttack 1.3.6.1.4.1.2011.10.2.77.4.0.3
This trap is sent when an attacker monitors network traffic and maliciously changes data in transit(for example, an attacker may modify the contents of a WAI message).
NOTIFICATION-TYPE    

h3cwapiLowSafeLevelAttack 1.3.6.1.4.1.2011.10.2.77.4.0.4
This trap is sent when a station associates AP(Access Point), creates packet of Unicast Key Negotiation Response with wrong WIE(WAPI Information Element) of ASUE(Authentication Supplicant Entity).
NOTIFICATION-TYPE    

h3cwapiAddressRedirectionAttack 1.3.6.1.4.1.2011.10.2.77.4.0.5
This trap is sent when an attacker maliciously changes destination MAC address of WPI(WLAN Privacy Infrastructure) frame.
NOTIFICATION-TYPE    

h3cwapiTrapInfo 1.3.6.1.4.1.2011.10.2.77.4.1
OBJECT IDENTIFIER    

h3cwapiTrapInfoMacAddr 1.3.6.1.4.1.2011.10.2.77.4.1.1
The MAC address of the WAPI user.
OBJECT-TYPE    
  MacAddress  

h3cwapiTrapInfoAPId 1.3.6.1.4.1.2011.10.2.77.4.1.2
To uniquely identify each AP.
OBJECT-TYPE    
  Integer32  

h3cwapiTrapInfoRadioId 1.3.6.1.4.1.2011.10.2.77.4.1.3
Represents each radio.
OBJECT-TYPE    
  Integer32  

h3cwapiTrapInfoBSSId 1.3.6.1.4.1.2011.10.2.77.4.1.4
As MAC Address format, it is to identify BSS.
OBJECT-TYPE    
  MacAddress