HH3C-WAPI-MIB

File: HH3C-WAPI-MIB.mib (19799 bytes)

Imported modules

SNMPv2-SMI SNMPv2-TC RFC1213-MIB
INET-ADDRESS-MIB HH3C-OID-MIB

Imported symbols

Counter32 Integer32 Unsigned32
MODULE-IDENTITY OBJECT-TYPE NOTIFICATION-TYPE
TruthValue MacAddress ifIndex
ifDescr InetAddressType InetAddress
hh3cCommon

Defined Types

Hh3cwapiConfigEntry  
SEQUENCE    
  hh3cwapiConfigASIPAddressType InetAddressType
  hh3cwapiConfigASIPAddress InetAddress
  hh3cwapiConfigAuthMethod INTEGER
  hh3cwapiConfigAuthMode INTEGER
  hh3cwapiConfigISPDomain OCTET STRING
  hh3cwapiConfigCertificateDomain OCTET STRING
  hh3cwapiConfigASName OCTET STRING
  hh3cwapiConfigBKRekeyEnabled TruthValue

Hh3cwapiConfigExtEntry  
SEQUENCE    
  hh3cwapiConfigServicePolicyID Integer32
  hh3cwapiConfigUnicastCipherEnabled TruthValue
  hh3cwapiConfigUnicastCipherSize Unsigned32
  hh3cwapiConfigAuthenticationSuiteEnabled TruthValue
  hh3cwapiConfigAuthenticationSuite OCTET STRING
  hh3cwapiCfgExtASIPAddressType InetAddressType
  hh3cwapiCfgExtASIPAddress InetAddress
  hh3cwapiCfgExtASName OCTET STRING
  hh3cwapiCfgExtCertDomain OCTET STRING
  hh3cwapiCfgExtCertInstalled TruthValue

Defined Values

hh3cwapiMIB 1.3.6.1.4.1.25506.2.77
HH3C-WAPI-MIB is an extension of MIB in WAPI protocol. This MIB contains objects to manage configuration and monitor running state for WAPI feature.
MODULE-IDENTITY    

hh3cwapiMIBObjects 1.3.6.1.4.1.25506.2.77.1
OBJECT IDENTIFIER    

hh3cwapiMIBStatsObjects 1.3.6.1.4.1.25506.2.77.2
OBJECT IDENTIFIER    

hh3cwapiMIBTableObjects 1.3.6.1.4.1.25506.2.77.3
OBJECT IDENTIFIER    

hh3cwapiTrap 1.3.6.1.4.1.25506.2.77.4
OBJECT IDENTIFIER    

hh3cwapiModeEnabled 1.3.6.1.4.1.25506.2.77.1.1
When this object is set to TRUE, it shall indicate that WAPI is enabled. Otherwise, it shall indicate that WAPI is disabled.
Status: current Access: read-write
OBJECT-TYPE    
  TruthValue  

hh3cwapiASIPAddressType 1.3.6.1.4.1.25506.2.77.1.2
This object is used to set global IP addresses type (IPv4 or IPv6) of AS.
Status: current Access: read-write
OBJECT-TYPE    
  InetAddressType  

hh3cwapiASIPAddress 1.3.6.1.4.1.25506.2.77.1.3
This object is used to set the global IP address of AS.
Status: current Access: read-write
OBJECT-TYPE    
  InetAddress  

hh3cwapiCertificateInstalled 1.3.6.1.4.1.25506.2.77.1.4
This object indicates whether the entity has installed certificate. When the value is TURE, it shall indicate that the entity has installed certificate. Otherwise, it shall indicate that the entity hasn't installed certificate.
Status: current Access: read-only
OBJECT-TYPE    
  TruthValue  

hh3cwapiStatsWAISignatureErrors 1.3.6.1.4.1.25506.2.77.2.1
This counter increases when the received packet of WAI signature is wrong.
Status: current Access: read-only
OBJECT-TYPE    
  Counter32  

hh3cwapiStatsWAIHMACErrors 1.3.6.1.4.1.25506.2.77.2.2
This counter increases when the received packet of WAI message authentication key checking error occurs.
Status: current Access: read-only
OBJECT-TYPE    
  Counter32  

hh3cwapiStatsWAIAuthRsltFailures 1.3.6.1.4.1.25506.2.77.2.3
This counter increases when the WAI authentication result is unsuccessful.
Status: current Access: read-only
OBJECT-TYPE    
  Counter32  

hh3cwapiStatsWAIDiscardCounters 1.3.6.1.4.1.25506.2.77.2.4
This counter increases when the received packet of WAI are discarded.
Status: current Access: read-only
OBJECT-TYPE    
  Counter32  

hh3cwapiStatsWAITimeoutCounters 1.3.6.1.4.1.25506.2.77.2.5
This counter increases when the packet of WAI overtime are detected.
Status: current Access: read-only
OBJECT-TYPE    
  Counter32  

hh3cwapiStatsWAIFormatErrors 1.3.6.1.4.1.25506.2.77.2.6
This counter increases when the WAI packet of WAI format error is detected.
Status: current Access: read-only
OBJECT-TYPE    
  Counter32  

hh3cwapiStatsWAICtfHskFailures 1.3.6.1.4.1.25506.2.77.2.7
This counter increases when the WAI certificate authenticates unsuccessfully.
Status: current Access: read-only
OBJECT-TYPE    
  Counter32  

hh3cwapiStatsWAIUniHskFailures 1.3.6.1.4.1.25506.2.77.2.8
This counter increases when the WAI unicast cipher key negotiates unsuccessfully.
Status: current Access: read-only
OBJECT-TYPE    
  Counter32  

hh3cwapiStatsWAIMulHskFailures 1.3.6.1.4.1.25506.2.77.2.9
This counter increases when the WAI multicast cipher key announces unsuccessfully.
Status: current Access: read-only
OBJECT-TYPE    
  Counter32  

hh3cwapiConfigTable 1.3.6.1.4.1.25506.2.77.3.1
The table containing WAPI configuration objects.
Status: current Access: not-accessible
OBJECT-TYPE    
  SEQUENCE OF  
    Hh3cwapiConfigEntry

hh3cwapiConfigEntry 1.3.6.1.4.1.25506.2.77.3.1.1
An entry in the hh3cwapiConfigTable.
Status: current Access: not-accessible
OBJECT-TYPE    
  Hh3cwapiConfigEntry  

hh3cwapiConfigASIPAddressType 1.3.6.1.4.1.25506.2.77.3.1.1.1
This object is used to set IP addresses type of AS.
Status: current Access: read-write
OBJECT-TYPE    
  InetAddressType  

hh3cwapiConfigASIPAddress 1.3.6.1.4.1.25506.2.77.3.1.1.2
This object is used to set the IP address of AS.
Status: current Access: read-write
OBJECT-TYPE    
  InetAddress  

hh3cwapiConfigAuthMethod 1.3.6.1.4.1.25506.2.77.3.1.1.3
This object selects a mechanism for WAPI authentication method. The default is certificate.
Status: current Access: read-write
OBJECT-TYPE    
  INTEGER certificate(1), psk(2), certificatePsk(3)  

hh3cwapiConfigAuthMode 1.3.6.1.4.1.25506.2.77.3.1.1.4
This object selects a mechanism for WAPI authentication mode. When the value is standard, it shall indicate that the entity acts accord with the official definition. Otherwise, it shall indicate that the entity finishs authentication by means of RADIUS. The default is standard.
Status: current Access: read-write
OBJECT-TYPE    
  INTEGER standard(1), radiusExtension(2)  

hh3cwapiConfigISPDomain 1.3.6.1.4.1.25506.2.77.3.1.1.5
The ISP domain name.
Status: current Access: read-write
OBJECT-TYPE    
  OCTET STRING Size(0..24)  

hh3cwapiConfigCertificateDomain 1.3.6.1.4.1.25506.2.77.3.1.1.6
The PKI domain name.
Status: current Access: read-write
OBJECT-TYPE    
  OCTET STRING Size(1..15)  

hh3cwapiConfigASName 1.3.6.1.4.1.25506.2.77.3.1.1.7
The name of AS.
Status: current Access: read-write
OBJECT-TYPE    
  OCTET STRING Size(1..15)  

hh3cwapiConfigBKRekeyEnabled 1.3.6.1.4.1.25506.2.77.3.1.1.8
This object indicates whether the BK rekey function is supported. When the value is TURE, it shall indicate that the BK rekey function is supported. Otherwise, it shall indicate that the BK rekey function is not supported.
Status: current Access: read-write
OBJECT-TYPE    
  TruthValue  

hh3cwapiConfigExtTable 1.3.6.1.4.1.25506.2.77.3.2
The table containing WAPI configuration objects for SSID.
Status: current Access: not-accessible
OBJECT-TYPE    
  SEQUENCE OF  
    Hh3cwapiConfigExtEntry

hh3cwapiConfigExtEntry 1.3.6.1.4.1.25506.2.77.3.2.1
An extend entry in the hh3cwapiConfigExtTable.
Status: current Access: not-accessible
OBJECT-TYPE    
  Hh3cwapiConfigExtEntry  

hh3cwapiConfigServicePolicyID 1.3.6.1.4.1.25506.2.77.3.2.1.1
Represents the ID of each service policy.
Status: current Access: not-accessible
OBJECT-TYPE    
  Integer32  

hh3cwapiConfigUnicastCipherEnabled 1.3.6.1.4.1.25506.2.77.3.2.1.2
This object enables or disables the unicast cipher.
Status: current Access: read-write
OBJECT-TYPE    
  TruthValue  

hh3cwapiConfigUnicastCipherSize 1.3.6.1.4.1.25506.2.77.3.2.1.3
This object indicates the length in bits of the unicast cipher key. This should be 256 for SMS4, first 128 bits for encrypting, last 128 bits for integrity checking.
Status: current Access: read-only
OBJECT-TYPE    
  Unsigned32 0..4294967295  

hh3cwapiConfigAuthenticationSuiteEnabled 1.3.6.1.4.1.25506.2.77.3.2.1.4
This variable indicates the corresponding AKM suite is enabled or disabled.
Status: current Access: read-write
OBJECT-TYPE    
  TruthValue  

hh3cwapiConfigAuthenticationSuite 1.3.6.1.4.1.25506.2.77.3.2.1.5
The selector of an AKM suite. It consists of an OUI (the first 3 octets) and a cipher suite identifier (the last octet).
Status: current Access: read-only
OBJECT-TYPE    
  OCTET STRING Size(4)  

hh3cwapiCfgExtASIPAddressType 1.3.6.1.4.1.25506.2.77.3.2.1.6
This object is used to set IP addresses type of AS.
Status: current Access: read-write
OBJECT-TYPE    
  InetAddressType  

hh3cwapiCfgExtASIPAddress 1.3.6.1.4.1.25506.2.77.3.2.1.7
This object is used to set the IP address of AS.
Status: current Access: read-write
OBJECT-TYPE    
  InetAddress  

hh3cwapiCfgExtASName 1.3.6.1.4.1.25506.2.77.3.2.1.8
This object is used to set the name of AS.
Status: current Access: read-write
OBJECT-TYPE    
  OCTET STRING Size(1..15)  

hh3cwapiCfgExtCertDomain 1.3.6.1.4.1.25506.2.77.3.2.1.9
This object is used to set the PKI domain name.
Status: current Access: read-write
OBJECT-TYPE    
  OCTET STRING Size(1..15)  

hh3cwapiCfgExtCertInstalled 1.3.6.1.4.1.25506.2.77.3.2.1.10
This object indicates whether the entity has installed certificate. When the value is TURE, it shall indicate that the SSID has installed certificate. Otherwise, it shall indicate that the SSID hasn't installed certificate.
Status: current Access: read-only
OBJECT-TYPE    
  TruthValue  

hh3cwapiTrapPrefix 1.3.6.1.4.1.25506.2.77.4.0
OBJECT IDENTIFIER    

hh3cwapiUserwithInvalidCertificate 1.3.6.1.4.1.25506.2.77.4.0.1
This trap is sent when a user intrudes upon network with invalid certificate.
Status: current Access: read-only
NOTIFICATION-TYPE    

hh3cwapiStationReplayAttack 1.3.6.1.4.1.25506.2.77.4.0.2
This trap is sent when an attacker records and replays network transactions.
Status: current Access: read-only
NOTIFICATION-TYPE    

hh3cwapiTamperAttack 1.3.6.1.4.1.25506.2.77.4.0.3
This trap is sent when an attacker monitors network traffic and maliciously changes data in transit(for example, an attacker may modify the contents of a WAI message).
Status: current Access: read-only
NOTIFICATION-TYPE    

hh3cwapiLowSafeLevelAttack 1.3.6.1.4.1.25506.2.77.4.0.4
This trap is sent when a station associates AP(Access Point), creates packet of Unicast Key Negotiation Response with wrong WIE(WAPI Information Element) of ASUE(Authentication Supplicant Entity).
Status: current Access: read-only
NOTIFICATION-TYPE    

hh3cwapiAddressRedirectionAttack 1.3.6.1.4.1.25506.2.77.4.0.5
This trap is sent when an attacker maliciously changes destination MAC address of WPI(WLAN Privacy Infrastructure) frame.
Status: current Access: read-only
NOTIFICATION-TYPE    

hh3cwapiTrapInfo 1.3.6.1.4.1.25506.2.77.4.1
OBJECT IDENTIFIER    

hh3cwapiTrapInfoMacAddr 1.3.6.1.4.1.25506.2.77.4.1.1
The MAC address of the WAPI user.
Status: current Access: accessible-for-notify
OBJECT-TYPE    
  MacAddress  

hh3cwapiTrapInfoAPId 1.3.6.1.4.1.25506.2.77.4.1.2
To uniquely identify each AP.
Status: current Access: accessible-for-notify
OBJECT-TYPE    
  Integer32  

hh3cwapiTrapInfoRadioId 1.3.6.1.4.1.25506.2.77.4.1.3
Represents each radio.
Status: current Access: accessible-for-notify
OBJECT-TYPE    
  Integer32  

hh3cwapiTrapInfoBSSId 1.3.6.1.4.1.25506.2.77.4.1.4
As MAC Address format, it is to identify BSS.
Status: current Access: accessible-for-notify
OBJECT-TYPE    
  MacAddress  

Generation date: July 28, 2023, 16:18:13, Copyright © 2007 - 2022 - Circitor