HH3C-WAPI-MIB

File: HH3C-WAPI-MIB.mib (19799 bytes)

Imported modules

SNMPv2-SMI SNMPv2-TC RFC1213-MIB
INET-ADDRESS-MIB HH3C-OID-MIB

Imported symbols

Counter32 Integer32 Unsigned32
MODULE-IDENTITY OBJECT-TYPE NOTIFICATION-TYPE
TruthValue MacAddress ifIndex
ifDescr InetAddressType InetAddress
hh3cCommon

Defined Types

Hh3cwapiConfigEntry  
SEQUENCE    
  hh3cwapiConfigASIPAddressType InetAddressType
  hh3cwapiConfigASIPAddress InetAddress
  hh3cwapiConfigAuthMethod INTEGER
  hh3cwapiConfigAuthMode INTEGER
  hh3cwapiConfigISPDomain OCTET STRING
  hh3cwapiConfigCertificateDomain OCTET STRING
  hh3cwapiConfigASName OCTET STRING
  hh3cwapiConfigBKRekeyEnabled TruthValue

Hh3cwapiConfigExtEntry  
SEQUENCE    
  hh3cwapiConfigServicePolicyID Integer32
  hh3cwapiConfigUnicastCipherEnabled TruthValue
  hh3cwapiConfigUnicastCipherSize Unsigned32
  hh3cwapiConfigAuthenticationSuiteEnabled TruthValue
  hh3cwapiConfigAuthenticationSuite OCTET STRING
  hh3cwapiCfgExtASIPAddressType InetAddressType
  hh3cwapiCfgExtASIPAddress InetAddress
  hh3cwapiCfgExtASName OCTET STRING
  hh3cwapiCfgExtCertDomain OCTET STRING
  hh3cwapiCfgExtCertInstalled TruthValue

Defined Values

hh3cwapiMIB 1.3.6.1.4.1.25506.2.77
HH3C-WAPI-MIB is an extension of MIB in WAPI protocol. This MIB contains objects to manage configuration and monitor running state for WAPI feature.
MODULE-IDENTITY    

hh3cwapiMIBObjects 1.3.6.1.4.1.25506.2.77.1
OBJECT IDENTIFIER    

hh3cwapiMIBStatsObjects 1.3.6.1.4.1.25506.2.77.2
OBJECT IDENTIFIER    

hh3cwapiMIBTableObjects 1.3.6.1.4.1.25506.2.77.3
OBJECT IDENTIFIER    

hh3cwapiTrap 1.3.6.1.4.1.25506.2.77.4
OBJECT IDENTIFIER    

hh3cwapiModeEnabled 1.3.6.1.4.1.25506.2.77.1.1
When this object is set to TRUE, it shall indicate that WAPI is enabled. Otherwise, it shall indicate that WAPI is disabled.
OBJECT-TYPE    
  TruthValue  

hh3cwapiASIPAddressType 1.3.6.1.4.1.25506.2.77.1.2
This object is used to set global IP addresses type (IPv4 or IPv6) of AS.
OBJECT-TYPE    
  InetAddressType  

hh3cwapiASIPAddress 1.3.6.1.4.1.25506.2.77.1.3
This object is used to set the global IP address of AS.
OBJECT-TYPE    
  InetAddress  

hh3cwapiCertificateInstalled 1.3.6.1.4.1.25506.2.77.1.4
This object indicates whether the entity has installed certificate. When the value is TURE, it shall indicate that the entity has installed certificate. Otherwise, it shall indicate that the entity hasn't installed certificate.
OBJECT-TYPE    
  TruthValue  

hh3cwapiStatsWAISignatureErrors 1.3.6.1.4.1.25506.2.77.2.1
This counter increases when the received packet of WAI signature is wrong.
OBJECT-TYPE    
  Counter32  

hh3cwapiStatsWAIHMACErrors 1.3.6.1.4.1.25506.2.77.2.2
This counter increases when the received packet of WAI message authentication key checking error occurs.
OBJECT-TYPE    
  Counter32  

hh3cwapiStatsWAIAuthRsltFailures 1.3.6.1.4.1.25506.2.77.2.3
This counter increases when the WAI authentication result is unsuccessful.
OBJECT-TYPE    
  Counter32  

hh3cwapiStatsWAIDiscardCounters 1.3.6.1.4.1.25506.2.77.2.4
This counter increases when the received packet of WAI are discarded.
OBJECT-TYPE    
  Counter32  

hh3cwapiStatsWAITimeoutCounters 1.3.6.1.4.1.25506.2.77.2.5
This counter increases when the packet of WAI overtime are detected.
OBJECT-TYPE    
  Counter32  

hh3cwapiStatsWAIFormatErrors 1.3.6.1.4.1.25506.2.77.2.6
This counter increases when the WAI packet of WAI format error is detected.
OBJECT-TYPE    
  Counter32  

hh3cwapiStatsWAICtfHskFailures 1.3.6.1.4.1.25506.2.77.2.7
This counter increases when the WAI certificate authenticates unsuccessfully.
OBJECT-TYPE    
  Counter32  

hh3cwapiStatsWAIUniHskFailures 1.3.6.1.4.1.25506.2.77.2.8
This counter increases when the WAI unicast cipher key negotiates unsuccessfully.
OBJECT-TYPE    
  Counter32  

hh3cwapiStatsWAIMulHskFailures 1.3.6.1.4.1.25506.2.77.2.9
This counter increases when the WAI multicast cipher key announces unsuccessfully.
OBJECT-TYPE    
  Counter32  

hh3cwapiConfigTable 1.3.6.1.4.1.25506.2.77.3.1
The table containing WAPI configuration objects.
OBJECT-TYPE    
  SEQUENCE OF  
    Hh3cwapiConfigEntry

hh3cwapiConfigEntry 1.3.6.1.4.1.25506.2.77.3.1.1
An entry in the hh3cwapiConfigTable.
OBJECT-TYPE    
  Hh3cwapiConfigEntry  

hh3cwapiConfigASIPAddressType 1.3.6.1.4.1.25506.2.77.3.1.1.1
This object is used to set IP addresses type of AS.
OBJECT-TYPE    
  InetAddressType  

hh3cwapiConfigASIPAddress 1.3.6.1.4.1.25506.2.77.3.1.1.2
This object is used to set the IP address of AS.
OBJECT-TYPE    
  InetAddress  

hh3cwapiConfigAuthMethod 1.3.6.1.4.1.25506.2.77.3.1.1.3
This object selects a mechanism for WAPI authentication method. The default is certificate.
OBJECT-TYPE    
  INTEGER certificate(1), psk(2), certificatePsk(3)  

hh3cwapiConfigAuthMode 1.3.6.1.4.1.25506.2.77.3.1.1.4
This object selects a mechanism for WAPI authentication mode. When the value is standard, it shall indicate that the entity acts accord with the official definition. Otherwise, it shall indicate that the entity finishs authentication by means of RADIUS. The default is standard.
OBJECT-TYPE    
  INTEGER standard(1), radiusExtension(2)  

hh3cwapiConfigISPDomain 1.3.6.1.4.1.25506.2.77.3.1.1.5
The ISP domain name.
OBJECT-TYPE    
  OCTET STRING Size(0..24)  

hh3cwapiConfigCertificateDomain 1.3.6.1.4.1.25506.2.77.3.1.1.6
The PKI domain name.
OBJECT-TYPE    
  OCTET STRING Size(1..15)  

hh3cwapiConfigASName 1.3.6.1.4.1.25506.2.77.3.1.1.7
The name of AS.
OBJECT-TYPE    
  OCTET STRING Size(1..15)  

hh3cwapiConfigBKRekeyEnabled 1.3.6.1.4.1.25506.2.77.3.1.1.8
This object indicates whether the BK rekey function is supported. When the value is TURE, it shall indicate that the BK rekey function is supported. Otherwise, it shall indicate that the BK rekey function is not supported.
OBJECT-TYPE    
  TruthValue  

hh3cwapiConfigExtTable 1.3.6.1.4.1.25506.2.77.3.2
The table containing WAPI configuration objects for SSID.
OBJECT-TYPE    
  SEQUENCE OF  
    Hh3cwapiConfigExtEntry

hh3cwapiConfigExtEntry 1.3.6.1.4.1.25506.2.77.3.2.1
An extend entry in the hh3cwapiConfigExtTable.
OBJECT-TYPE    
  Hh3cwapiConfigExtEntry  

hh3cwapiConfigServicePolicyID 1.3.6.1.4.1.25506.2.77.3.2.1.1
Represents the ID of each service policy.
OBJECT-TYPE    
  Integer32  

hh3cwapiConfigUnicastCipherEnabled 1.3.6.1.4.1.25506.2.77.3.2.1.2
This object enables or disables the unicast cipher.
OBJECT-TYPE    
  TruthValue  

hh3cwapiConfigUnicastCipherSize 1.3.6.1.4.1.25506.2.77.3.2.1.3
This object indicates the length in bits of the unicast cipher key. This should be 256 for SMS4, first 128 bits for encrypting, last 128 bits for integrity checking.
OBJECT-TYPE    
  Unsigned32 0..4294967295  

hh3cwapiConfigAuthenticationSuiteEnabled 1.3.6.1.4.1.25506.2.77.3.2.1.4
This variable indicates the corresponding AKM suite is enabled or disabled.
OBJECT-TYPE    
  TruthValue  

hh3cwapiConfigAuthenticationSuite 1.3.6.1.4.1.25506.2.77.3.2.1.5
The selector of an AKM suite. It consists of an OUI (the first 3 octets) and a cipher suite identifier (the last octet).
OBJECT-TYPE    
  OCTET STRING Size(4)  

hh3cwapiCfgExtASIPAddressType 1.3.6.1.4.1.25506.2.77.3.2.1.6
This object is used to set IP addresses type of AS.
OBJECT-TYPE    
  InetAddressType  

hh3cwapiCfgExtASIPAddress 1.3.6.1.4.1.25506.2.77.3.2.1.7
This object is used to set the IP address of AS.
OBJECT-TYPE    
  InetAddress  

hh3cwapiCfgExtASName 1.3.6.1.4.1.25506.2.77.3.2.1.8
This object is used to set the name of AS.
OBJECT-TYPE    
  OCTET STRING Size(1..15)  

hh3cwapiCfgExtCertDomain 1.3.6.1.4.1.25506.2.77.3.2.1.9
This object is used to set the PKI domain name.
OBJECT-TYPE    
  OCTET STRING Size(1..15)  

hh3cwapiCfgExtCertInstalled 1.3.6.1.4.1.25506.2.77.3.2.1.10
This object indicates whether the entity has installed certificate. When the value is TURE, it shall indicate that the SSID has installed certificate. Otherwise, it shall indicate that the SSID hasn't installed certificate.
OBJECT-TYPE    
  TruthValue  

hh3cwapiTrapPrefix 1.3.6.1.4.1.25506.2.77.4.0
OBJECT IDENTIFIER    

hh3cwapiUserwithInvalidCertificate 1.3.6.1.4.1.25506.2.77.4.0.1
This trap is sent when a user intrudes upon network with invalid certificate.
NOTIFICATION-TYPE    

hh3cwapiStationReplayAttack 1.3.6.1.4.1.25506.2.77.4.0.2
This trap is sent when an attacker records and replays network transactions.
NOTIFICATION-TYPE    

hh3cwapiTamperAttack 1.3.6.1.4.1.25506.2.77.4.0.3
This trap is sent when an attacker monitors network traffic and maliciously changes data in transit(for example, an attacker may modify the contents of a WAI message).
NOTIFICATION-TYPE    

hh3cwapiLowSafeLevelAttack 1.3.6.1.4.1.25506.2.77.4.0.4
This trap is sent when a station associates AP(Access Point), creates packet of Unicast Key Negotiation Response with wrong WIE(WAPI Information Element) of ASUE(Authentication Supplicant Entity).
NOTIFICATION-TYPE    

hh3cwapiAddressRedirectionAttack 1.3.6.1.4.1.25506.2.77.4.0.5
This trap is sent when an attacker maliciously changes destination MAC address of WPI(WLAN Privacy Infrastructure) frame.
NOTIFICATION-TYPE    

hh3cwapiTrapInfo 1.3.6.1.4.1.25506.2.77.4.1
OBJECT IDENTIFIER    

hh3cwapiTrapInfoMacAddr 1.3.6.1.4.1.25506.2.77.4.1.1
The MAC address of the WAPI user.
OBJECT-TYPE    
  MacAddress  

hh3cwapiTrapInfoAPId 1.3.6.1.4.1.25506.2.77.4.1.2
To uniquely identify each AP.
OBJECT-TYPE    
  Integer32  

hh3cwapiTrapInfoRadioId 1.3.6.1.4.1.25506.2.77.4.1.3
Represents each radio.
OBJECT-TYPE    
  Integer32  

hh3cwapiTrapInfoBSSId 1.3.6.1.4.1.25506.2.77.4.1.4
As MAC Address format, it is to identify BSS.
OBJECT-TYPE    
  MacAddress