HUAWEI-WLAN-SECURITY-MIB

File: HUAWEI-WLAN-SECURITY-MIB.mib (67111 bytes)

Imported modules

HUAWEI-WLAN-DEVICE-MIB HUAWEI-WLAN-MIB HUAWEI-WLAN-RADIO-MIB
HUAWEI-WLAN-SERVICE-MIB SNMPv2-CONF SNMPv2-SMI
SNMPv2-TC

Imported symbols

hwApRegionIndex hwApIndex hwApMac
hwWlan hwRadioID hwWlanServiceEssSsid
hwWlanServiceStaMac OBJECT-GROUP MODULE-COMPLIANCE
NOTIFICATION-GROUP IpAddress Integer32
Unsigned32 Counter32 OBJECT-TYPE
MODULE-IDENTITY NOTIFICATION-TYPE MacAddress
TruthValue RowStatus DisplayString

Defined Types

HwWsecProfileEntry  
SEQUENCE    
  hwWsecProfileName STRING
  hwWsecProfileWEPDataEncrypt TruthValue
  hwWsecProfileWEPDefaultKeyID Integer32
  hwWsecProfileWEPKeyMappingLength Integer32
  hwWsecProfileAsuIpAddr IpAddress
  hwWsecProfileCaCertFileName STRING
  hwWsecProfileAsuCertFileName STRING
  hwWsecProfileAcCertFileName STRING
  hwWsecProfileAcPrvKeyFileName STRING
  hwWsecProfileRsnaVersion Integer32
  hwWsecProfileWapiVersion Integer32
  hwWsecProfileRowStatus RowStatus
  hwWsecProfileCaPfxPassword STRING
  hwWsecProfileCaCertState INTEGER
  hwWsecProfileAsuPfxPassword STRING
  hwWsecProfileAsuCertState INTEGER
  hwWsecProfileAcPfxPassword STRING
  hwWsecProfileAcCertState INTEGER
  hwWsecProfileKeyPfxPassword STRING
  hwWsecProfileAsuType INTEGER
  hwWsecProfileWpaPtkRekeySwitch INTEGER
  hwWsecProfileWpa2PtkRekeySwitch INTEGER
  hwWsecProfileWpaWpa2PtkRekeySwitch INTEGER
  hwWsecProfileWpaPtkRekeyInterval Integer32
  hwWsecProfileWpa2PtkRekeyInterval Integer32
  hwWsecProfileWpaWpa2PtkRekeyInterval Integer32

HwWsecWEPDefaultKeysEntry  
SEQUENCE    
  hwWsecWEPDefaultKeyIndex Integer32
  hwWsecWEPDefaultKeyValue STRING
  hwWsecWEPPassPhrase DisplayString

HwWsecWEPKeyMappingsEntry  
SEQUENCE    
  hwWsecWEPKeyMappingIndex Integer32
  hwWsecWEPKeyMappingAddress MacAddress
  hwWsecWEPKeyMappingWEPOn TruthValue
  hwWsecWEPKeyMappingValue STRING
  hwWsecWEPKeyMappingStatus RowStatus

HwWsecAuthSuitesEntry  
SEQUENCE    
  hwWsecAuthSuiteIndex INTEGER
  hwWsecAuthSuite STRING
  hwWsecAuthSuiteEnabled TruthValue
  hwWsecAuthPreauthenticationImplemented TruthValue
  hwWsecAuthPreauthenticationEnabled TruthValue
  hwWsecAuthUnicastKeysSupported Integer32
  hwWsecAuthPairwiseCipher INTEGER
  hwWsecAuthPairwiseCipherSize Integer32
  hwWsecAuthUnicastRekeyMethod INTEGER
  hwWsecAuthUnicastRekeyTime Unsigned32
  hwWsecAuthUnicastRekeyPackets Unsigned32
  hwWsecAuthMulticastCipher INTEGER
  hwWsecAuthMulticastCipherSize Integer32
  hwWsecAuthMulticastRekeyMethod INTEGER
  hwWsecAuthMulticastRekeyTime Unsigned32
  hwWsecAuthMulticastRekeyPackets Unsigned32
  hwWsecAuthMulticastRekeyStrict TruthValue
  hwWsecAuthPSKValue STRING
  hwWsecAuthPSKPassPhrase DisplayString
  hwWsecAuthCertificateUpdateCount Unsigned32
  hwWsecAuthMulticastUpdateCount Unsigned32
  hwWsecAuthUnicastUpdateCount Unsigned32
  hwWsecAuthBKLifetime Unsigned32
  hwWsecAuthBKReauthThreshold Unsigned32
  hwWsecAuthSATimeout Unsigned32
  hwWsecAuthExcludeUnencrypted TruthValue
  hwWsecAuthDot1XMethod Integer32
  hwWsecAuthControlledAuthControl TruthValue
  hwWsecAuthControlledPortControl Integer32
  hwWsecAuthOptionalImplemented TruthValue

HwWsecStatsEntry  
SEQUENCE    
  hwWsecStatsSTAAddress MacAddress
  hwWsecStatsVersion Integer32
  hwWsecStatsBKIDUsed STRING
  hwWsecStatsAuthenticationSuiteSelected INTEGER
  hwWsecStatsUnicastCipherSelected INTEGER
  hwWsecStatsMulticastCipherSelected INTEGER
  hwWsecStatsAuthenticationSuiteRequested INTEGER
  hwWsecStatsUnicastCipherRequested INTEGER
  hwWsecStatsMulticastCipherRequested INTEGER
  hwWsecStatsWEPICVErrorCount Counter32
  hwWsecStatsWEPExcludedCount Counter32
  hwWsecStatsWEPUndecryptableCount Counter32
  hwWsecStatsTKIPICVErrors Counter32
  hwWsecStatsTKIPLocalMICFailures Counter32
  hwWsecStatsTKIPRemoteMICFailures Counter32
  hwWsecStatsTKIPReplays Counter32
  hwWsecStatsCCMPReplays Counter32
  hwWsecStatsCCMPDecryptErrors Counter32
  hwWsecStatsWAISignatureErrors Counter32
  hwWsecStatsWAIHMACErrors Counter32
  hwWsecStatsWAIAuthenticationResultFailures Counter32
  hwWsecStatsWAIDiscardCounters Counter32
  hwWsecStatsWAITimeoutCounters Counter32
  hwWsecStatsWAIFormatErrors Counter32
  hwWsecStatsWAICertificateHandshakeFailures Counter32
  hwWsecStatsWAIUnicastHandshakeFailures Counter32
  hwWsecStatsWAIMulticastHandshakeFailures Counter32
  hwWsecStatsWPIReplayCounter Counter32
  hwWsecStatsWPIDecryptableErrors Counter32
  hwWsecStatsWPIMICErrors Counter32
  hwWsecStatsControlledPortStatus TruthValue
  hwWsecStatsNumberOfPTKSAReplayCounters Integer32
  hwWsecStatsNumberOfGTKSAReplayCounters Integer32
  hwWsecStatsTKIPCounterMeasuresInvoked Integer32
  hwWsecStatsWpa4WayHandshakeFailures Integer32

Defined Values

hwWlanSecurity 1.3.6.1.4.1.2011.6.139.6
huawei HUAWEI-WLAN-SECURITY-MIB.
MODULE-IDENTITY    

hwWsecProfileTable 1.3.6.1.4.1.2011.6.139.6.1
WLAN access security profile table.
OBJECT-TYPE    
  SEQUENCE OF  
    HwWsecProfileEntry

hwWsecProfileEntry 1.3.6.1.4.1.2011.6.139.6.1.1
WLAN access security profile entry.
OBJECT-TYPE    
  HwWsecProfileEntry  

hwWsecProfileName 1.3.6.1.4.1.2011.6.139.6.1.1.1
WLAN access security profile Name.
OBJECT-TYPE    
  STRING Size(1..31)  

hwWsecProfileWEPDataEncrypt 1.3.6.1.4.1.2011.6.139.6.1.1.2
When this attribute is TRUE, WEP data will be encrypted. When this attribute is FALSE, WEP data will not be encrypted. The default value of this attribute is FALSE.
OBJECT-TYPE    
  TruthValue  

hwWsecProfileWEPDefaultKeyID 1.3.6.1.4.1.2011.6.139.6.1.1.3
This attribute shall indicate the use of the first, second, third, or fourth element of the WEPDefaultKeys array when set to values of zero, one, two, or three. The default value of this attribute shall be 0.
OBJECT-TYPE    
  Integer32 0..3  

hwWsecProfileWEPKeyMappingLength 1.3.6.1.4.1.2011.6.139.6.1.1.4
The maximum number of tuples that hwWsecWEPKeyMappings can hold.
OBJECT-TYPE    
  Integer32  

hwWsecProfileAsuIpAddr 1.3.6.1.4.1.2011.6.139.6.1.1.5
ASU IP address for WAPI certification authentication
OBJECT-TYPE    
  IpAddress  

hwWsecProfileCaCertFileName 1.3.6.1.4.1.2011.6.139.6.1.1.6
CA certification file name
OBJECT-TYPE    
  STRING  

hwWsecProfileAsuCertFileName 1.3.6.1.4.1.2011.6.139.6.1.1.7
ASU certification file name
OBJECT-TYPE    
  STRING  

hwWsecProfileAcCertFileName 1.3.6.1.4.1.2011.6.139.6.1.1.8
AC certification file name
OBJECT-TYPE    
  STRING  

hwWsecProfileAcPrvKeyFileName 1.3.6.1.4.1.2011.6.139.6.1.1.9
AC private key file name
OBJECT-TYPE    
  STRING  

hwWsecProfileRsnaVersion 1.3.6.1.4.1.2011.6.139.6.1.1.10
The highest WAPI/RSNA version this entity supports. See 7.3.2.9.
OBJECT-TYPE    
  Integer32  

hwWsecProfileWapiVersion 1.3.6.1.4.1.2011.6.139.6.1.1.11
This object indicates the highest WAPI version that this entity supports.
OBJECT-TYPE    
  Integer32  

hwWsecProfileRowStatus 1.3.6.1.4.1.2011.6.139.6.1.1.12
Row status
OBJECT-TYPE    
  RowStatus  

hwWsecProfileCaPfxPassword 1.3.6.1.4.1.2011.6.139.6.1.1.13
Description.
OBJECT-TYPE    
  STRING Size(0..32)  

hwWsecProfileCaCertState 1.3.6.1.4.1.2011.6.139.6.1.1.14
Description.
OBJECT-TYPE    
  INTEGER valid(1), invalid(2)  

hwWsecProfileAsuPfxPassword 1.3.6.1.4.1.2011.6.139.6.1.1.15
Description.
OBJECT-TYPE    
  STRING Size(0..32)  

hwWsecProfileAsuCertState 1.3.6.1.4.1.2011.6.139.6.1.1.16
Description.
OBJECT-TYPE    
  INTEGER valid(1), invalid(2)  

hwWsecProfileAcPfxPassword 1.3.6.1.4.1.2011.6.139.6.1.1.17
Description.
OBJECT-TYPE    
  STRING Size(0..32)  

hwWsecProfileAcCertState 1.3.6.1.4.1.2011.6.139.6.1.1.18
Description.
OBJECT-TYPE    
  INTEGER valid(1), invalid(2)  

hwWsecProfileKeyPfxPassword 1.3.6.1.4.1.2011.6.139.6.1.1.19
Description.
OBJECT-TYPE    
  STRING Size(0..32)  

hwWsecProfileAsuType 1.3.6.1.4.1.2011.6.139.6.1.1.20
Description.
OBJECT-TYPE    
  INTEGER remote(1), local(2)  

hwWsecProfileWpaPtkRekeySwitch 1.3.6.1.4.1.2011.6.139.6.1.1.21
Description.
OBJECT-TYPE    
  INTEGER disable(1), enable(2)  

hwWsecProfileWpa2PtkRekeySwitch 1.3.6.1.4.1.2011.6.139.6.1.1.22
Description.
OBJECT-TYPE    
  INTEGER disable(1), enable(2)  

hwWsecProfileWpaWpa2PtkRekeySwitch 1.3.6.1.4.1.2011.6.139.6.1.1.23
Description.
OBJECT-TYPE    
  INTEGER disable(1), enable(2)  

hwWsecProfileWpaPtkRekeyInterval 1.3.6.1.4.1.2011.6.139.6.1.1.24
Description.
OBJECT-TYPE    
  Integer32 30..86400  

hwWsecProfileWpa2PtkRekeyInterval 1.3.6.1.4.1.2011.6.139.6.1.1.25
Description.
OBJECT-TYPE    
  Integer32 30..86400  

hwWsecProfileWpaWpa2PtkRekeyInterval 1.3.6.1.4.1.2011.6.139.6.1.1.26
Description.
OBJECT-TYPE    
  Integer32 30..86400  

hwWsecWEPDefaultKeysTable 1.3.6.1.4.1.2011.6.139.6.2
Conceptual table for WEP default keys. This table shall contain the four WEP default secret key values corresponding to the four possible KeyID values. The WEP default secret keys are logically WRITE-ONLY. Attempts to read the entries in this table shall return unsuccessful status and values of null or zero. The default value of each WEP default key shall be null.
OBJECT-TYPE    
  SEQUENCE OF  
    HwWsecWEPDefaultKeysEntry

hwWsecWEPDefaultKeysEntry 1.3.6.1.4.1.2011.6.139.6.2.1
An Entry (conceptual row) in the WEP Default Keys Table.
OBJECT-TYPE    
  HwWsecWEPDefaultKeysEntry  

hwWsecWEPDefaultKeyIndex 1.3.6.1.4.1.2011.6.139.6.2.1.1
The auxiliary variable used to identify instances of the columnar objects in the WEP Default Keys Table. The value of this variable is equal to the WEPDefaultKeyID + 1
OBJECT-TYPE    
  Integer32 1..4  

hwWsecWEPDefaultKeyValue 1.3.6.1.4.1.2011.6.139.6.2.1.2
A WEP default secret hexadecimal key value. 10 byte for WEP-40, 26 byte for WEP-104, 32 byte for WEP-128. Reading this variable shall return unsuccessful status or null or zero.
OBJECT-TYPE    
  STRING  

hwWsecWEPPassPhrase 1.3.6.1.4.1.2011.6.139.6.2.1.4
A WEP default secret ASCII key value. 5 byte for WEP-40, 13 byte for WEP-104, 16 byte for WEP-128. Reading this variable shall return unsuccessful status or null or zero.
OBJECT-TYPE    
  DisplayString  

hwWsecWEPKeyMappingsTable 1.3.6.1.4.1.2011.6.139.6.3
Conceptual table for WEP Key Mappings. The MIB supports the ability to share a separate WEP key for each RA/TA pair. The Key Mappings Table contains zero or one entry for each MAC address and contains two fields for each entry: WEPOn and the corresponding WEP key. The WEP key mappings are logically WRITE-ONLY. Attempts to read the entries in this table shall return unsuccessful status and values of null or zero. The default value for all WEPOn fields is FALSE.
OBJECT-TYPE    
  SEQUENCE OF  
    HwWsecWEPKeyMappingsEntry

hwWsecWEPKeyMappingsEntry 1.3.6.1.4.1.2011.6.139.6.3.1
An Entry (conceptual row) in the WEP Key Mappings Table.
OBJECT-TYPE    
  HwWsecWEPKeyMappingsEntry  

hwWsecWEPKeyMappingIndex 1.3.6.1.4.1.2011.6.139.6.3.1.1
The auxiliary variable used to identify instances of the columnar objects in the WEP Key Mappings Table.
OBJECT-TYPE    
  Integer32  

hwWsecWEPKeyMappingAddress 1.3.6.1.4.1.2011.6.139.6.3.1.2
The MAC address of the STA for which the values from this key mapping entry are to be used.
OBJECT-TYPE    
  MacAddress  

hwWsecWEPKeyMappingWEPOn 1.3.6.1.4.1.2011.6.139.6.3.1.3
Boolean as to whether WEP is to be used when communicating with the hwWsecWEPKeyMappingAddress STA.
OBJECT-TYPE    
  TruthValue  

hwWsecWEPKeyMappingValue 1.3.6.1.4.1.2011.6.139.6.3.1.4
A WEP secret key value.
OBJECT-TYPE    
  STRING  

hwWsecWEPKeyMappingStatus 1.3.6.1.4.1.2011.6.139.6.3.1.5
The status column used for creating, modifying, and deleting instances of the columnar objects in the WEP key mapping Table.
OBJECT-TYPE    
  RowStatus  

hwWsecAuthSuitesTable 1.3.6.1.4.1.2011.6.139.6.4
This table lists the AKM suites supported by this entity. Each AKM suite can be individually enabled and disabled. The AKM suite list in the RSN information element is formed using the information in this table.
OBJECT-TYPE    
  SEQUENCE OF  
    HwWsecAuthSuitesEntry

hwWsecAuthSuitesEntry 1.3.6.1.4.1.2011.6.139.6.4.1
An entry (row) in the hwWsecAuthSuitesTable.
OBJECT-TYPE    
  HwWsecAuthSuitesEntry  

hwWsecAuthSuiteIndex 1.3.6.1.4.1.2011.6.139.6.4.1.1
The auxiliary variable used as an index into the hwWsecAuthSuitesTable.
OBJECT-TYPE    
  INTEGER wapiCertification(1), wapiPreShareKey(2), wpa18021x(3), wpa1PreShareKey(4), wpa28021x(5), wpa2PreShareKey(6), shareKey(7), openSystem(8), wpa1wpa2PreShareKey(9), wpa1wpa28021x(10)  

hwWsecAuthSuite 1.3.6.1.4.1.2011.6.139.6.4.1.2
The selector of an AKM suite. It consists of an OUI (the first 3 octets) and a cipher suite identifier (the last octet). 0x00147201 : WAPI certification authentication 0x00147202 : WAPI preShare key authentication 0x000FAC01 : WPA1(WPA version 1) 802.1X authentication 0x000FAC02 : WPA1(WPA version 1) preShare key authentication 0x00E0FC01 : WPA2(WPA version 2) 802.1X authentication 0x00E0FC02 : WPA2(WPA version 2) preShare key authentication 0x00E0FC03 : share key (for WEP) 0x00E0FC04 : open system (no authentication) 0x00E0FC05 : wpa-wpa2-preShareKey 0x00E0FC06 : wpa-wpa2-8021x
OBJECT-TYPE    
  STRING Size(4)  

hwWsecAuthSuiteEnabled 1.3.6.1.4.1.2011.6.139.6.4.1.3
This variable indicates whether the corresponding AKM suite is enabled/disabled.
OBJECT-TYPE    
  TruthValue  

hwWsecAuthPreauthenticationImplemented 1.3.6.1.4.1.2011.6.139.6.4.1.4
This variable indicates whether the entity supports WAPI pre-authentication. This cannot be TRUE unless hwWsecAuthOptionImplemented is TRUE.
OBJECT-TYPE    
  TruthValue  

hwWsecAuthPreauthenticationEnabled 1.3.6.1.4.1.2011.6.139.6.4.1.5
When this object is set to TRUE, this shall indicate that WAPI pre-authentication is enabled on this entity. This object requires that WAPI authentication of this profile Enabled.
OBJECT-TYPE    
  TruthValue  

hwWsecAuthUnicastKeysSupported 1.3.6.1.4.1.2011.6.139.6.4.1.6
This object indicates the number of the unicast keys that a WAPI/RSNA of this entity supports.
OBJECT-TYPE    
  Integer32  

hwWsecAuthPairwiseCipher 1.3.6.1.4.1.2011.6.139.6.4.1.7
The selector of a supported pairwise cipher. It consists of an OUI (the first 3 octets) and a cipher suite identifier (the last octet). 0x00147201 : WPI-SMS4 0x000FAC00 : Use group cipher suite 0x000FAC01 : WEP-40 0x000FAC02 : TKIP 0x000FAC04 : CCMP-default in an RSNA 0x000FAC05 : WEP-104 0x000FAC06 : wep-128 0x000FAC07 : tkip-ccmp 0x00E0FC01 : null (no encryption), only for open system authentication The cipher suite selector 00-0F-AC:4 (CCMP) shall be the default cipher suite value. The cipher suite selectors 00-0F-AC:1 (WEP-40) and 00-0F-AC:5 (WEP-104) are only valid as a group cipher suite in a transition security network (TSN) to allow pre-RSNA devices to join the BSS. Use of CCMP as the group cipher suite with TKIP as the pairwise cipher suite shall not be supported. NOTE?If the STAs can support CCMP, then there is no need for a weaker data confidentiality protocol. The cipher suite selector 00-0F-AC:0 (Use group cipher suite) is only valid as the pairwise cipher suite. An AP may specify the selector 00-0F-AC:0 (Use group cipher suite) for a pairwise cipher suite if it does not cipher selection, this shall be the only pairwise cipher selection the AP advertises. If CCMP is enabled, then the AP supports pairwise keys, and thus the suite selector 00-0F-AC:0 (Use group cipher suite) shall not be a valid option.
OBJECT-TYPE    
  INTEGER wpiSms4(1), wep40(2), wep104(3), tkip(4), ccmp(5), null(6), tkipCcmp(7), wep128(8)  

hwWsecAuthPairwiseCipherSize 1.3.6.1.4.1.2011.6.139.6.4.1.8
This object indicates the length in bits of the pairwise cipher key. This should be 256 for TKIP and 128 for CCMP.
OBJECT-TYPE    
  Integer32  

hwWsecAuthUnicastRekeyMethod 1.3.6.1.4.1.2011.6.139.6.4.1.9
This object selects a mechanism for rekeying the WAPI/RSNA USK. The default is time-based, once per day. Rekeying the USK is only applicable to an entity acting in the AE or ASUE role.
OBJECT-TYPE    
  INTEGER disabled(1), timeBased(2), packetBased(3), timepacketBased(4)  

hwWsecAuthUnicastRekeyTime 1.3.6.1.4.1.2011.6.139.6.4.1.10
The time in seconds after which the WAPI/RSNA USK shall be refreshed. The timer shall start at the moment the USK was set using the MLME-SETWPIKEYS.request primitive.
OBJECT-TYPE    
  Unsigned32  

hwWsecAuthUnicastRekeyPackets 1.3.6.1.4.1.2011.6.139.6.4.1.11
A packet count (in 1000s of packets) after which the WAPI/RSNA USK shall be refreshed. The packet counter shall start at the moment the USK was set using the MLME-SETWPIKEYS.request primitive and it shall count all packets encrypted using the current USK.
OBJECT-TYPE    
  Unsigned32  

hwWsecAuthMulticastCipher 1.3.6.1.4.1.2011.6.139.6.4.1.12
This object indicates the multicast cipher suite that this entity must adopt. The WAPI/RSNA information element shall adopt the value of this variable, which contains a 3-octet OUI and a one-octet cipher suite identifier. 0x00147201 : WPI-SMS4 0x000FAC01 : WEP-40 0x000FAC02 : TKIP 0x000FAC04 : CCMP-default in an RSNA 0x000FAC05 : WEP-104 0x000FAC06 : wep-128 0x000FAC07 : tkip-ccmp 0x00E0FC01 : null (no encryption), only for open system authentication
OBJECT-TYPE    
  INTEGER wpiSms4(1), wep40(2), wep104(3), tkip(4), ccmp(5), null(6), tkipCcmp(7), wep128(8)  

hwWsecAuthMulticastCipherSize 1.3.6.1.4.1.2011.6.139.6.4.1.13
This object indicates the length in bit of the multicast cipher key. This should be 256 for in SMS4. The former 128bits is the encryption key and the latter 128bits is the message integrity check key. This should be 256 for in TKIP. The former 128bits is the encryption key and the latter 128bits is the message integrity check key. This should be 128 for in CCMP. The 128bits is the encryption key and the message integrity check key. This should be 40 for in WEP-40. The 40bits is the encryption key. This should be 40 for in WEP-104. The 104bits is the encryption key. This should be 40 for in WEP-128. The 128bits is the encryption key.
OBJECT-TYPE    
  Integer32  

hwWsecAuthMulticastRekeyMethod 1.3.6.1.4.1.2011.6.139.6.4.1.14
This object selects a mechanism for rekeying the WAPI/RSNA MSK. The default is time-based, once per day. Rekeying the MSK is only applicable to an entity acting in the Authenticator role.
OBJECT-TYPE    
  INTEGER disabled(1), timeBased(2), packetBased(3), timepacketBased(4)  

hwWsecAuthMulticastRekeyTime 1.3.6.1.4.1.2011.6.139.6.4.1.15
The time in seconds after which the WAPI/RSNA MSK shall be refreshed. The timer shall start at the moment the MSK was set using the MLME-SETWPIKEYS.request primitive.
OBJECT-TYPE    
  Unsigned32  

hwWsecAuthMulticastRekeyPackets 1.3.6.1.4.1.2011.6.139.6.4.1.16
A packet count (in 1000s of packets) after which the WAPI/RSNA MSK shall be refreshed. The packet counter shall start at the moment the MSK was set using the MLME-SETWPIKEYS.request primitive and it shall count all packets encrypted using the current MSK.
OBJECT-TYPE    
  Unsigned32  

hwWsecAuthMulticastRekeyStrict 1.3.6.1.4.1.2011.6.139.6.4.1.17
This object signals that the MSK shall be refreshed whenever a STA leaves the BSS that possesses the MSK.
OBJECT-TYPE    
  TruthValue  

hwWsecAuthPSKValue 1.3.6.1.4.1.2011.6.139.6.4.1.18
The PSK for when WAPI/RSNA in PSK mode is the selected AKM suite. In that case, the BK/PMK will obtain its value from this object. This object is logically write-only. Reading this variable shall return unsuccessful status or null or zero. WAPI need 16 byte Hex, RSNA need 32 byte Hex. User should input Hex data for this node.
OBJECT-TYPE    
  STRING  

hwWsecAuthPSKPassPhrase 1.3.6.1.4.1.2011.6.139.6.4.1.19
The PSK, for when WAPI/RSNA in PSK mode is the selected AKM suite, is configured by hwWsecAuthPSKValue. An alternative manner of setting the PSK uses the password-to-key algorithm. This variable provides a means to enter a pass-phrase. When this object is written, the WAPI/RSNA entity shall use the password-to-key algorithm to derive a pre-shared and populate hwWsecAuthPSKValue with this key. This object is logically write-only. Reading this variable shall return unsuccessful status or null or zero.
OBJECT-TYPE    
  DisplayString  

hwWsecAuthCertificateUpdateCount 1.3.6.1.4.1.2011.6.139.6.4.1.20
The number of times messages in the WAPI Certificate Authentication Handshake protocol will be retried per Certificate Authentication Handshake attempt.
OBJECT-TYPE    
  Unsigned32  

hwWsecAuthMulticastUpdateCount 1.3.6.1.4.1.2011.6.139.6.4.1.21
The number of times Message 1 in the WAPI Multicast Key Announcement Handshake will be retried per MSK Handshake attempt. The number of times Message 1 in the RSNA Group Key Handshake will be retried per GTK Handshake attempt.
OBJECT-TYPE    
  Unsigned32  

hwWsecAuthUnicastUpdateCount 1.3.6.1.4.1.2011.6.139.6.4.1.22
The number of times Message 1 and Message 3 in the WAPI Unicast Key Negotiation Handshake will be retried per USK Handshake attempt. The number of times Message 1 and Message 3 in the RSNA 4-Way Handshake will be retried per 4-Way Handshake attempt.
OBJECT-TYPE    
  Unsigned32  

hwWsecAuthBKLifetime 1.3.6.1.4.1.2011.6.139.6.4.1.23
The maximum lifetime of a BK in the BK cache.
OBJECT-TYPE    
  Unsigned32  

hwWsecAuthBKReauthThreshold 1.3.6.1.4.1.2011.6.139.6.4.1.24
The percentage of the BK lifetime that should expire before a WAI/RSNA re-authentication occurs.
OBJECT-TYPE    
  Unsigned32  

hwWsecAuthSATimeout 1.3.6.1.4.1.2011.6.139.6.4.1.25
The maximum time a security association shall take to set up.
OBJECT-TYPE    
  Unsigned32  

hwWsecAuthExcludeUnencrypted 1.3.6.1.4.1.2011.6.139.6.4.1.26
When this attribute is TRUE, the STA shall not indicate at the MAC service interface received MSDUs that have the Protected Frame subfield of the Frame Control field equal to zero. When this attribute is FALSE, the STA may accept MSDUs that have the Protected Frame subfield of the Frame Control field equal to zero. The default value of this attribute shall be FALSE.
OBJECT-TYPE    
  TruthValue  

hwWsecAuthDot1XMethod 1.3.6.1.4.1.2011.6.139.6.4.1.27
Leaf don't sustain for V2R3 on 2012/11/26.
OBJECT-TYPE    
  Integer32  

hwWsecAuthControlledAuthControl 1.3.6.1.4.1.2011.6.139.6.4.1.28
This attribute indicates whether the entity enable the authentication. If the value is '0' which means 'authentication disabled', the state of the controlled port shall be set to 'authenticated'; else the value is '1' which means 'authentication enabled', the state of the controlled port shall be based on the hwWsecAuthControlledPortControl.
OBJECT-TYPE    
  TruthValue  

hwWsecAuthControlledPortControl 1.3.6.1.4.1.2011.6.139.6.4.1.29
This attribute, when the hwWsecAuthControlledAuthControl is set to true, shall be effective and indicate the methods by which the port is controlled. If the value is '0' which means 'auto', the state of the controlled port shall be based on the result of the authentication; else the value is '1' which means 'force unauthenticated', the state of the controlled port shall be unconditionally set to 'unauthenticated'.
OBJECT-TYPE    
  Integer32  

hwWsecAuthOptionalImplemented 1.3.6.1.4.1.2011.6.139.6.4.1.30
This attribute, when true, shall indicate that the WAPI, WPA, RSNA option is implemented; else, this attribute shall be false.
OBJECT-TYPE    
  TruthValue  

hwWsecStatsTable 1.3.6.1.4.1.2011.6.139.6.5
This table maintains per-STA statistics in an RSN. The entry with hwWsecStatsSTAAddress set to FF-FF-FF-FF-FF-FF shall contain statistics for broadcast/multicast traffic.
OBJECT-TYPE    
  SEQUENCE OF  
    HwWsecStatsEntry

hwWsecStatsEntry 1.3.6.1.4.1.2011.6.139.6.5.1
An entry in the hwWsecStatsTable.
OBJECT-TYPE    
  HwWsecStatsEntry  

hwWsecStatsSTAAddress 1.3.6.1.4.1.2011.6.139.6.5.1.1
The MAC address of the STA to which the statistics in this conceptual row belong.
OBJECT-TYPE    
  MacAddress  

hwWsecStatsVersion 1.3.6.1.4.1.2011.6.139.6.5.1.2
The RSNA version with which the STA associated.
OBJECT-TYPE    
  Integer32  

hwWsecStatsBKIDUsed 1.3.6.1.4.1.2011.6.139.6.5.1.3
The selector of the last BKID of WAPI used in the last Unicast Key Negotiation Handshake. The selector of the last PMKID of RSNA used in the last 4-Way Handshake.
OBJECT-TYPE    
  STRING  

hwWsecStatsAuthenticationSuiteSelected 1.3.6.1.4.1.2011.6.139.6.5.1.4
The selector of the last AKM suite negotiated.
OBJECT-TYPE    
  INTEGER wapiCertification(1), wapiPreShareKey(2), wpa18021x(3), wpa1PreShareKey(4), wpa28021x(5), wpa2PreShareKey(6), shareKey(7), openSystem(8), wpa1wpa2PreShareKey(9), wpa1wpa28021x(10)  

hwWsecStatsUnicastCipherSelected 1.3.6.1.4.1.2011.6.139.6.5.1.5
The selector of the last unicast cipher suite negotiated.
OBJECT-TYPE    
  INTEGER wpiSms4(1), wep40(2), wep104(3), tkip(4), ccmp(5), null(6), tkipCcmp(7), wep128(8)  

hwWsecStatsMulticastCipherSelected 1.3.6.1.4.1.2011.6.139.6.5.1.6
The selector of the last multicast cipher suite negotiated
OBJECT-TYPE    
  INTEGER wpiSms4(1), wep40(2), wep104(3), tkip(4), ccmp(5), null(6), tkipCcmp(7), wep128(8)  

hwWsecStatsAuthenticationSuiteRequested 1.3.6.1.4.1.2011.6.139.6.5.1.7
The selector of the last AKM suite requested.
OBJECT-TYPE    
  INTEGER wapiCertification(1), wapiPreShareKey(2), wpa18021x(3), wpa1PreShareKey(4), wpa28021x(5), wpa2PreShareKey(6), shareKey(7), openSystem(8), wpa1wpa2PreShareKey(9), wpa1wpa28021x(10)  

hwWsecStatsUnicastCipherRequested 1.3.6.1.4.1.2011.6.139.6.5.1.8
The selector of the last unicast cipher suite requested
OBJECT-TYPE    
  INTEGER wpiSms4(1), wep40(2), wep104(3), tkip(4), ccmp(5), null(6), tkipCcmp(7), wep128(8)  

hwWsecStatsMulticastCipherRequested 1.3.6.1.4.1.2011.6.139.6.5.1.9
The selector of the last multicast cipher suite requested.
OBJECT-TYPE    
  INTEGER wpiSms4(1), wep40(2), wep104(3), tkip(4), ccmp(5), null(6), tkipCcmp(7), wep128(8)  

hwWsecStatsWEPICVErrorCount 1.3.6.1.4.1.2011.6.139.6.5.1.10
This counter shall increment when a frame is received with the Protected Frame subfield of the Frame Control field set to one and the value of the ICV as received in the frame does not match the ICV value that is calculated for the contents of the received frame. ICV errors for TKIP are not counted in this variable but in hwWsecStatsTKIPICVErrors.
OBJECT-TYPE    
  Counter32  

hwWsecStatsWEPExcludedCount 1.3.6.1.4.1.2011.6.139.6.5.1.11
This counter shall increment when a frame is received with the Protected Frame subfield of the Frame Control field set to zero and the value of hwWsecProfileExcludeUnencrypted causes that frame to be discarded.
OBJECT-TYPE    
  Counter32  

hwWsecStatsWEPUndecryptableCount 1.3.6.1.4.1.2011.6.139.6.5.1.12
This counter shall increment when a frame is received with the Protected Frame subfield of the Frame Control field set to one and the WEPOn value for the key mapped to the transmitter's MAC address indicates that the frame should not have been encrypted or that frame is discarded due to the receiving STA not implementing the privacy option.
OBJECT-TYPE    
  Counter32  

hwWsecStatsTKIPICVErrors 1.3.6.1.4.1.2011.6.139.6.5.1.13
Counts the number of TKIP ICV errors encountered when decrypting packets for the STA.
OBJECT-TYPE    
  Counter32  

hwWsecStatsTKIPLocalMICFailures 1.3.6.1.4.1.2011.6.139.6.5.1.14
Counts the number of MIC failures encountered when checking the integrity of packets received from the STA at this entity.
OBJECT-TYPE    
  Counter32  

hwWsecStatsTKIPRemoteMICFailures 1.3.6.1.4.1.2011.6.139.6.5.1.15
Counts the number of MIC failures encountered by the STA identified by dot11StatsSTAAddress and reported back to this entity.
OBJECT-TYPE    
  Counter32  

hwWsecStatsTKIPReplays 1.3.6.1.4.1.2011.6.139.6.5.1.16
Counts the number of TKIP replay errors detected.
OBJECT-TYPE    
  Counter32  

hwWsecStatsCCMPReplays 1.3.6.1.4.1.2011.6.139.6.5.1.17
The number of received CCMP MPDUs discarded by the replay mechanism.
OBJECT-TYPE    
  Counter32  

hwWsecStatsCCMPDecryptErrors 1.3.6.1.4.1.2011.6.139.6.5.1.18
The number of received MPDUs discarded by the CCMP decryption algorithm.
OBJECT-TYPE    
  Counter32  

hwWsecStatsWAISignatureErrors 1.3.6.1.4.1.2011.6.139.6.5.1.19
This counter shall increment when the signature in the received WAI packet is wrong.
OBJECT-TYPE    
  Counter32  

hwWsecStatsWAIHMACErrors 1.3.6.1.4.1.2011.6.139.6.5.1.20
This counter shall increment when the message authentication code in the received WAI packet is wrong.
OBJECT-TYPE    
  Counter32  

hwWsecStatsWAIAuthenticationResultFailures 1.3.6.1.4.1.2011.6.139.6.5.1.21
This counter shall increment when the WAI authentication is unsuccessful.
OBJECT-TYPE    
  Counter32  

hwWsecStatsWAIDiscardCounters 1.3.6.1.4.1.2011.6.139.6.5.1.22
This counter shall increment when the received WAI packet is discarded.
OBJECT-TYPE    
  Counter32  

hwWsecStatsWAITimeoutCounters 1.3.6.1.4.1.2011.6.139.6.5.1.23
This counter shall increment when the WAI packet is timeout.
OBJECT-TYPE    
  Counter32  

hwWsecStatsWAIFormatErrors 1.3.6.1.4.1.2011.6.139.6.5.1.24
This counter shall increment when there exists format error in the WAI packet.
OBJECT-TYPE    
  Counter32  

hwWsecStatsWAICertificateHandshakeFailures 1.3.6.1.4.1.2011.6.139.6.5.1.25
This counter shall increment when the WAI certificate authentication is unsuccessful.
OBJECT-TYPE    
  Counter32  

hwWsecStatsWAIUnicastHandshakeFailures 1.3.6.1.4.1.2011.6.139.6.5.1.26
This counter shall increment when the WAI unicast key negotiation process is unsuccessful.
OBJECT-TYPE    
  Counter32  

hwWsecStatsWAIMulticastHandshakeFailures 1.3.6.1.4.1.2011.6.139.6.5.1.27
This counter shall increment when the WAI multicast key announcement process is unsuccessful.
OBJECT-TYPE    
  Counter32  

hwWsecStatsWPIReplayCounter 1.3.6.1.4.1.2011.6.139.6.5.1.28
The number of received WPI MPDUs discarded by the replay mechanism.
OBJECT-TYPE    
  Counter32  

hwWsecStatsWPIDecryptableErrors 1.3.6.1.4.1.2011.6.139.6.5.1.29
The number of received MPDUs discarded by the WPI decryption algorithm because of no valid key.
OBJECT-TYPE    
  Counter32  

hwWsecStatsWPIMICErrors 1.3.6.1.4.1.2011.6.139.6.5.1.30
The number of received MPDUs discarded because of the MIC check error during the WPI decryption.
OBJECT-TYPE    
  Counter32  

hwWsecStatsControlledPortStatus 1.3.6.1.4.1.2011.6.139.6.5.1.31
This attribute indicates the state of the controlled port in a authenticator subsystem. If value is '1', the state is set to'authenticated'; else, the state is set to 'unauthenticated'.
OBJECT-TYPE    
  TruthValue  

hwWsecStatsNumberOfPTKSAReplayCounters 1.3.6.1.4.1.2011.6.139.6.5.1.32
Specifies the number of PTKSA replay counters per association: 0 ?> 1 replay counter, 1 ?> 2 replay counters, 2 ?> 4 replay counters, 3 ?> 16 replay counters
OBJECT-TYPE    
  Integer32  

hwWsecStatsNumberOfGTKSAReplayCounters 1.3.6.1.4.1.2011.6.139.6.5.1.33
Specifies the number of GTKSA replay counters per association: 0 ?> 1 replay counter, 1 ?> 2 replay counters, 2 ?> 4 replay counters, 3 ?> 16 replay counters
OBJECT-TYPE    
  Integer32  

hwWsecStatsTKIPCounterMeasuresInvoked 1.3.6.1.4.1.2011.6.139.6.5.1.34
Counts the number of times that a TKIP MIC failure occurred two times within 60 s and TKIP countermeasures were invoked. This attribute counts both local and remote MIC failure events reported to this STA. It increments every time TKIP countermeasures are invoked
OBJECT-TYPE    
  Integer32  

hwWsecStatsWpa4WayHandshakeFailures 1.3.6.1.4.1.2011.6.139.6.5.1.35
Counts the number of 4-Way Handshake failures.
OBJECT-TYPE    
  Integer32  

hwWsecBatchProfileInfo 1.3.6.1.4.1.2011.6.139.6.6
OBJECT IDENTIFIER    

hwWsecBatchProfileStartNumber 1.3.6.1.4.1.2011.6.139.6.6.1
The security profile start number in batch operation. This node is used with node hwWsecBatchProfileWantNumber, for example, hwWsecBatchProfileStartNumber is set to one, and hwWsecBatchProfileWantNumber is set to three, then get the node hwWsecBatchProfileReturnNumber,hwWsecBatchProfileName, that means start from the first security profile, get three security profile's name list. if it dose not exist three security profile, the hwWsecBatchProfileReturnNumber will be the real security profile number, otherwise, it is equal to hwWsecBatchProfileWantNumber.
OBJECT-TYPE    
  Integer32  

hwWsecBatchProfileWantNumber 1.3.6.1.4.1.2011.6.139.6.6.2
The security profile number that want to get in batch operation.This node is used with node hwWsecBatchProfileWantNumber, for example, hwWsecBatchProfileStartNumber is set to one, and hwWsecBatchProfileWantNumber is set to three, then get the node hwWsecBatchProfileReturnNumber,hwWsecBatchProfileName, that means start from the first security profile, get three security profile's name list. if it dose not exist three security profile, the hwWsecBatchProfileReturnNumber will be the real security profile number, otherwise, it is equal to hwWsecBatchProfileWantNumber.
OBJECT-TYPE    
  Integer32  

hwWsecBatchProfileReturnNumber 1.3.6.1.4.1.2011.6.139.6.6.3
The ess number get in batch operation.
OBJECT-TYPE    
  Integer32  

hwWsecBatchProfileName 1.3.6.1.4.1.2011.6.139.6.6.4
The names of security profile which are determined by node hwWsecBatchProfileStratNumber and node hwWsecBatchProfileWantNumber. each hwWsecProfileName name is divided by '?'.
OBJECT-TYPE    
  STRING  

hwWsecNotifications 1.3.6.1.4.1.2011.6.139.6.9
OBJECT IDENTIFIER    

hwWsecNotify 1.3.6.1.4.1.2011.6.139.6.9.1
OBJECT IDENTIFIER    

hwStaAuthErrorNotify 1.3.6.1.4.1.2011.6.139.6.9.1.1
Description.
NOTIFICATION-TYPE    

hwStaAssociationFailNotify 1.3.6.1.4.1.2011.6.139.6.9.1.2
Description.
NOTIFICATION-TYPE    

hwUserWithInvalidCerficationInbreakNetworkNotify 1.3.6.1.4.1.2011.6.139.6.9.1.3
Description.
NOTIFICATION-TYPE    

hwStationRepititiveAttackNotify 1.3.6.1.4.1.2011.6.139.6.9.1.4
Description.
NOTIFICATION-TYPE    

hwTamperAttackNotify 1.3.6.1.4.1.2011.6.139.6.9.1.5
Description.
NOTIFICATION-TYPE    

hwLowSafeLevelAttackNotify 1.3.6.1.4.1.2011.6.139.6.9.1.6
Description.
NOTIFICATION-TYPE    

hwAddressRedirectionAttackNotify 1.3.6.1.4.1.2011.6.139.6.9.1.7
Description.
NOTIFICATION-TYPE    

hwWepIDConflictNotify 1.3.6.1.4.1.2011.6.139.6.9.1.8
Description.
NOTIFICATION-TYPE    

hwStaAuthEncryptModeNotMatchNotify 1.3.6.1.4.1.2011.6.139.6.9.1.9
Description.
NOTIFICATION-TYPE    

hwWsecNotifyObjects 1.3.6.1.4.1.2011.6.139.6.9.2
OBJECT IDENTIFIER    

hwStaAuthenticationMode 1.3.6.1.4.1.2011.6.139.6.9.2.1
Description.
OBJECT-TYPE    
  Integer32  

hwStaAuthenticationFailCause 1.3.6.1.4.1.2011.6.139.6.9.2.2
Description.
OBJECT-TYPE    
  Integer32  

hwStaAssociationFailCause 1.3.6.1.4.1.2011.6.139.6.9.2.3
Description.
OBJECT-TYPE    
  Integer32  

hwStaAssocBssid 1.3.6.1.4.1.2011.6.139.6.9.2.4
Description.
OBJECT-TYPE    
  MacAddress  

hwStaFailCodeType 1.3.6.1.4.1.2011.6.139.6.9.2.5
Description.
OBJECT-TYPE    
  INTEGER reasonCode(1), statusCode(2)  

hwWepIDConflictTrapAPMAC 1.3.6.1.4.1.2011.6.139.6.9.2.6
Description.
OBJECT-TYPE    
  MacAddress  

hwWepIDConflictTrapAPID 1.3.6.1.4.1.2011.6.139.6.9.2.7
Description.
OBJECT-TYPE    
  Integer32  

hwWepIDConflictTrapRadioId 1.3.6.1.4.1.2011.6.139.6.9.2.8
Description.
OBJECT-TYPE    
  Integer32  

hwWepIDConflictTrapPreSSID 1.3.6.1.4.1.2011.6.139.6.9.2.9
Description.
OBJECT-TYPE    
  STRING Size(0..32)  

hwWepIDConflictTrapCurrSSID 1.3.6.1.4.1.2011.6.139.6.9.2.10
Description.
OBJECT-TYPE    
  STRING Size(0..32)  

hwWepIDConflictTrapCipherIdx 1.3.6.1.4.1.2011.6.139.6.9.2.11
Description.
OBJECT-TYPE    
  Integer32  

hwWlanStaAuthEncryptMode 1.3.6.1.4.1.2011.6.139.6.9.2.12
Description.
OBJECT-TYPE    
  Integer32  

hwWlanVapAuthEncryptMode 1.3.6.1.4.1.2011.6.139.6.9.2.13
Description.
OBJECT-TYPE    
  Integer32  

hwStaAuthenticationFailCauseStr 1.3.6.1.4.1.2011.6.139.6.9.2.14
Description.
OBJECT-TYPE    
  STRING  

hwStaAssociationFailCauseStr 1.3.6.1.4.1.2011.6.139.6.9.2.15
Description.
OBJECT-TYPE    
  STRING  

hwWlanSecurityObject 1.3.6.1.4.1.2011.6.139.6.10
OBJECT IDENTIFIER    

hwWlanSecurityConformance 1.3.6.1.4.1.2011.6.139.6.11
OBJECT IDENTIFIER    

hwWlanSecurityCompliances 1.3.6.1.4.1.2011.6.139.6.11.1
OBJECT IDENTIFIER    

hwWlanSecurityCompliance 1.3.6.1.4.1.2011.6.139.6.11.1.1
Description.
MODULE-COMPLIANCE    

hwWlanSecurityObjectGroups 1.3.6.1.4.1.2011.6.139.6.11.2
OBJECT IDENTIFIER    

hwWsecProfileGroup 1.3.6.1.4.1.2011.6.139.6.11.2.1
Description.
OBJECT-GROUP    

hwWsecWEPDefaultKeysGroup 1.3.6.1.4.1.2011.6.139.6.11.2.2
Description.
OBJECT-GROUP    

hwWsecWEPKeyMappingsGroup 1.3.6.1.4.1.2011.6.139.6.11.2.3
Description.
OBJECT-GROUP    

hwWsecAuthSuitesGroup 1.3.6.1.4.1.2011.6.139.6.11.2.4
Description.
OBJECT-GROUP    

hwWsecStatsGroup 1.3.6.1.4.1.2011.6.139.6.11.2.5
Description.
OBJECT-GROUP    

hwWsecBatchProfileInfoGroup 1.3.6.1.4.1.2011.6.139.6.11.2.6
Description.
OBJECT-GROUP    

hwWsecNotifyGroup 1.3.6.1.4.1.2011.6.139.6.11.2.7
Description.
NOTIFICATION-GROUP    

hwWsecNotifyObjectsGroup 1.3.6.1.4.1.2011.6.139.6.11.2.8
Description.
OBJECT-GROUP