Login
- Table of Contents
-
- 11-WLAN
- 01-HH3C-DOT11-ROAM-MIB
- 02-HH3C-DOT11-ACMT-MIB
- 03-HH3C-DOT11-APMT-MIB
- 04-HH3C-DOT11-CFG-MIB
- 05-HH3C-DOT11-CFGEXT-MIB
- 06-HH3C-WAPI-MIB
- 07-HH3C-WLAN-FLEXAPP-CFG-MIB
- 08-HH3C-DOT11-WLANEXT-MIB
- 09-HH3C-DOT11-WIPS-MIB
- 10-HH3C-DOT11-STATION-MIB
- 11-HH3C-DOT11-QOS-MIB
- 12-HH3C-DOT11-SA-MIB
- 13-HH3C-DOT11-RRM-MIB
- 14-HH3C-DOT11-SAVI-MIB
- 15-HH3C-DOT11-WM2U-MIB
- 16-HH3C-DOT11-PROBE-MIB
- 17-HH3C-DOT11S-MESH-MIB
- Related Documents
-
| Title | Size | Download |
|---|---|---|
| 06-HH3C-WAPI-MIB | 195.12 KB |
Contents
hh3cwapiTrapInfoMacAddr (1.3.6.1.4.1.25506.2.77.4.1.1)
hh3cwapiTrapInfoAPId (1.3.6.1.4.1.25506.2.77.4.1.2)
hh3cwapiTrapInfoRadioId (1.3.6.1.4.1.25506.2.77.4.1.3)
hh3cwapiTrapInfoBSSId (1.3.6.1.4.1.25506.2.77.4.1.4)
hh3cwapiTrapInfoBSSId (1.3.6.1.4.1.25506.2.77.4.1.4)
hh3cwapiUserwithInvalidCertificate
hh3cwapiAddressRedirectionAttack
HH3C-WAPI-MIB
About this MIB
Use this MIB to manage WLAN Authentication and Privacy Infrastructure (WAPI) configuration and operating state monitoring objects.
MIB file name
hh3c-wapi.mib
Root object
iso(1).org(3).dod(6).internet(1).private(4).enterprises(1).hh3c(25506).hh3cCommon(2).hh3cwapiMIB(77)
Scalar objects
hh3cwapiTrapInfoMacAddr (1.3.6.1.4.1.25506.2.77.4.1.1)
|
Object (OID) |
Access |
Syntax |
Value range |
Description |
Implementation |
|
hh3cwapiTrapInfoMacAddr (1.3.6.1.4.1.25506.2.77.4.1.1) |
accessible-for-notify |
MacAddress |
OCTET STRING (6) |
MAC address of a WAPI user. |
As per the MIB. |
hh3cwapiTrapInfoAPId (1.3.6.1.4.1.25506.2.77.4.1.2)
|
Object (OID) |
Access |
Syntax |
Value range |
Description |
Implementation |
|
hh3cwapiTrapInfoAPId (1.3.6.1.4.1.25506.2.77.4.1.2) |
accessible-for-notify |
Integer32 |
Standard MIB values. |
Unique identifier of an AP. |
As per the MIB. |
hh3cwapiTrapInfoRadioId (1.3.6.1.4.1.25506.2.77.4.1.3)
|
Object (OID) |
Access |
Syntax |
Value range |
Description |
Implementation |
|
hh3cwapiTrapInfoRadioId (1.3.6.1.4.1.25506.2.77.4.1.3) |
accessible-for-notify |
Integer32 |
Standard MIB values. |
Radio ID. |
As per the MIB. |
hh3cwapiTrapInfoBSSId (1.3.6.1.4.1.25506.2.77.4.1.4)
|
Object (OID) |
Access |
Syntax |
Value range |
Description |
Implementation |
|
hh3cwapiTrapInfoBSSId (1.3.6.1.4.1.25506.2.77.4.1.4) |
accessible-for-notify |
MacAddress |
OCTET STRING (6) |
BSSID. |
As per the MIB. |
hh3cwapiTrapInfoBSSId (1.3.6.1.4.1.25506.2.77.4.1.4)
|
Object (OID) |
Access |
Syntax |
Value range |
Description |
Implementation |
|
hh3cwapiTrapInfoBSSId (1.3.6.1.4.1.25506.2.77.4.1.4) |
accessible-for-notify |
MacAddress |
OCTET STRING (6) |
MAC address of an AP. |
As per the MIB. |
Tabular objects
hh3cwapiConfigExtTable
About this table
Use this table to implement service set identifier (SSID)-based WAPI configuration.
Support for operations
Create：Not supported.
Edit/Modify：Supported
Delete：Not supported.
Read：Supported
Columns
The table index is hh3cwapiConfigServicePolicyID.
|
Object (OID) |
Access |
Syntax |
Value range |
Description |
Implementation |
|
hh3cwapiConfigServicePolicyID (1.3.6.1.4.1.25506.2.77.3.2.1.1) |
not-accessible |
Integer32 |
Standard MIB values. |
ID of a service policy. |
As per the MIB. |
|
hh3cwapiConfigUnicastCipherEnabled (1.3.6.1.4.1.25506.2.77.3.2.1.2) |
read-write |
TruthValue |
true(1), false(2) |
This object enables or disables the USK. |
As per the MIB. |
|
hh3cwapiConfigUnicastCipherSize (1.3.6.1.4.1.25506.2.77.3.2.1.3) |
read-only |
Unsigned32 |
Unsigned32 (0..4294967295) |
This object sets the USK length in bits. SMS4 should use a 256-bit key, with the first 128 bits for encryption and the last 128 bits for integrity checks. |
As per the MIB. |
|
hh3cwapiConfigAuthenticationSuiteEnabled (1.3.6.1.4.1.25506.2.77.3.2.1.4) |
read-write |
TruthValue |
true(1), false(2) |
This variable indicates whether the corresponding Authentication and Key Management (AKM) suite is enabled or disabled. |
As per the MIB. |
|
hh3cwapiConfigAuthenticationSuite (1.3.6.1.4.1.25506.2.77.3.2.1.5) |
read-only |
OCTET STRING |
OCTET STRING (4) |
AKM suite selector. It contains an organizationally unique identifier (OUI) (the first three bytes) and a suite type (the last byte). |
As per the MIB. |
|
hh3cwapiCfgExtASIPAddress (1.3.6.1.4.1.25506.2.77.3.2.1.7) |
read-write |
InetAddress |
Standard MIB values. |
Use this object to set the IP address for an AS. |
As per the MIB. |
|
hh3cwapiCfgExtCertInstalled (1.3.6.1.4.1.25506.2.77.3.2.1.10) |
read-only |
TruthValue |
true(1), false(2) |
This object indicates whether this entity has a certificate installed.
If this value is TRUE, it indicates that the SSID has a certificate installed. If not, it indicates that the SSID does not have a certificate installed. |
As per the MIB. |
|
hh3cwapiConfigVersion (1.3.6.1.4.1.25506.2.77.3.2.1.11) |
read-only |
Integer32 |
Standard MIB values. |
Highest WAPI version supported by this entity. |
As per the MIB. |
|
hh3cwapiControlledAuthControl (1.3.6.1.4.1.25506.2.77.3.2.1.12) |
read-only |
TruthValue |
true(1), false(2) |
This object indicates whether this entity has identity authentication enabled. If this value is FALSE, it indicates that identity authentication is not enabled on the entity, and the state of the controlled port is authenticated. If this value is TRUE, it indicates that identity authentication is enabled and the state of the controlled port is determined by hh3cwapiControlledPortControl. |
As per the MIB. |
|
hh3cwapiControlledPortControl (1.3.6.1.4.1.25506.2.77.3.2.1.13) |
read-only |
Integer32 |
Standard MIB values. |
This object indicates the control type of the entity port. When hh3cwapiControlledAuthControl is TRUE, this object is available. If this value is 0, it indicates "automatic," and the state of the controlled port is determined by the authentication result. If this value is 1, it indicates "force unauthenticated," and the state of the controlled port is "unauthenticated." |
As per the MIB. |
|
hh3cwapiOptionImplemented (1.3.6.1.4.1.25506.2.77.3.2.1.14) |
read-only |
TruthValue |
true(1), false(2) |
This object indicates whether this entity supports WAPI. If this value is TRUE, it indicates that the entity supports WAPI. If not, it indicates that the entity does not support WAPI. |
As per the MIB. |
|
hh3cwapiPreauthImplemented (1.3.6.1.4.1.25506.2.77.3.2.1.15) |
read-only |
TruthValue |
true(1), false(2) |
This object indicates whether this entity supports WAPI preauthentication. You cannot set this object to TRUE unless hh3cwapiOptionImplemented is TRUE. |
As per the MIB. |
|
hh3cwapiEnabled (1.3.6.1.4.1.25506.2.77.3.2.1.16) |
Read-write |
TruthValue |
true(1), false(2) |
When this object is set to TRUE, it indicates that WAPI is enabled on this entity. The entity will advertise the WAPI information element in its beacons and probe responses. |
As per the MIB. |
|
hh3cwapiPreauthEnabled (1.3.6.1.4.1.25506.2.77.3.2.1.17) |
Read-write |
TruthValue |
true(1), false(2) |
If this object is set to TRUE, it indicates that WAPI preauthentication has been enabled on this entity. If not, it indicates that WAPI preauthentication is disabled on this entity. This object requires setting hh3cWAPIEnabled to TRUE. |
As per the MIB. |
|
hh3cwapiCfgUniKeysSupported (1.3.6.1.4.1.25506.2.77.3.2.1.18) |
read-only |
Unsigned32 |
Standard MIB values. |
This object indicates the number of WAPI USKs that the entity supports. |
As per the MIB. |
|
hh3cwapiCfgUniRekeyMethod (1.3.6.1.4.1.25506.2.77.3.2.1.19) |
read-write |
INTEGER |
disabled(1), timeBased(2), packetBased(3), timepacketBased(4) |
This object specifies a WAPI USK update mode. By default, the value is timeBased and USK update occurs once a day. USK update is only applicable to entities acting as Authentication Entity (AE) or Authentication Supplicant Entity (ASUE). |
As per the MIB. |
|
hh3cwapiCfgUniRekeyTime (1.3.6.1.4.1.25506.2.77.3.2.1.20) |
read-write |
Unsigned32 |
Unsigned32 (1..4294967295) |
WAPI USK update interval (in seconds).
The timer starts when the MLME-SETVPIKEYS request primitive is used to set the USK. |
As per the MIB. |
|
hh3cwapiCfgUniRekeyPackets (1.3.6.1.4.1.25506.2.77.3.2.1.21) |
read-write |
Unsigned32 |
Unsigned32 (1..4294967295) |
Packet count (a multiple of 1000) that triggers a WAPI USK update. The packet counter starts when the MLME-SETKEYS request primitive is used to set the USK and counts all packets encrypted by using the current USK. |
As per the MIB. |
|
hh3cwapiCfgMultiCipher (1.3.6.1.4.1.25506.2.77.3.2.1.22) |
read-write |
OCTET STRING |
OCTET STRING (4) |
This object specifies the MSK suite selector that the entity must use. The MSK suite in the WAPI information should get its value from this variable. It contains an OUI (the first three bytes) and a suite type (the last byte). |
As per the MIB. |
|
hh3cwapiCfgMultiRekeyMethod (1.3.6.1.4.1.25506.2.77.3.2.1.23) |
read-write |
INTEGER |
disabled(1), timeBased(2), packetBased(3), timepacketBased(4) |
This object specifies a WAPI MSK update mode.
By default, the value is timeBased and MSK update occurs once a day.
MSK update is only applicable to entities acting as Authentication Entity (AE) or Authentication Supplicant Entity (ASUE). |
As per the MIB. |
|
hh3cwapiCfgMultiRekeyTime (1.3.6.1.4.1.25506.2.77.3.2.1.24) |
read-write |
Unsigned32 |
Unsigned32 (1..4294967295) |
WAPI MSK update interval (in seconds). The timer starts when the MLME-SETVPIKEYS request primitive is used to set the MSK. |
As per the MIB. |
|
hh3cwapiCfgMultiRekeyPackets (1.3.6.1.4.1.25506.2.77.3.2.1.25) |
read-write |
Unsigned32 |
Unsigned32 (1..4294967295) |
Packet count (a multiple of 1000) that triggers a WAPI MSK update. The packet counter should start when the MLME-SETKEYS request primitive is used to set the MSK and counts all packets encrypted with the current MSK. |
As per the MIB. |
|
hh3cwapiCfgMultiRekeyStrict (1.3.6.1.4.1.25506.2.77.3.2.1.26) |
read-write |
TruthValue |
true(1), false(2) |
This object indicates that the MSK should be updated whenever the station (STA) leaves a basic service set (BSS) with an MSK. |
As per the MIB. |
|
hh3cwapiCfgPSKValue (1.3.6.1.4.1.25506.2.77.3.2.1.27) |
read-write |
OCTET STRING |
OCTET STRING (2..32) |
When WAPI is in preshared key (PSK) mode, the PSK value is the selected AKM suite. In this case, the BK will obtain its value from this object. This object is logically read-only. When this variable is read, it should return a failure state, null, or zero. |
As per the MIB. |
|
hh3cwapiCfgPSKPassPhrase (1.3.6.1.4.1.25506.2.77.3.2.1.28) |
read-write |
OCTET STRING |
OCTET STRING (1..16) |
When WAPI is in PSK mode, the PSK value is the selected AKM suite and is configured by hh3cwapiCfgPSKValue. Another way to set the PSK is to use a password-to-key algorithm. This variable provides a method for entering a pass phrase. When this object is written, the WAPI entity should use a password-to-key algorithm to export a PSK and use this key for padding hh3cwapiCfgPSKValue. This object is logically read-only. When this variable is read, it should return a failure state, null, or zero. |
As per the MIB. |
|
hh3cwapiCfgCertUpdateCount (1.3.6.1.4.1.25506.2.77.3.2.1.29) |
read-write |
Unsigned32 |
Unsigned32 (1..4294967295) |
Number of times WAPI certificate authentication messages will be retried for each certificate authentication handshake attempt. |
As per the MIB. |
|
hh3cwapiCfgMultiUpdateCount (1.3.6.1.4.1.25506.2.77.3.2.1.30) |
read-write |
Unsigned32 |
Unsigned32 (1..4294967295) |
Number of times WAPI MSK handshake messages will be retried for each MSK handshake attempt. |
As per the MIB. |
|
hh3cwapiCfgUniUpdateCount (1.3.6.1.4.1.25506.2.77.3.2.1.31) |
read-write |
Unsigned32 |
Unsigned32 (1..4294967295) |
Number of times WAPI USK handshake messages will be retried for every three handshake attempts. |
As per the MIB. |
|
hh3cwapiCfgMultiCipherSize (1.3.6.1.4.1.25506.2.77.3.2.1.32) |
read-write |
Unsigned32 |
Unsigned32 (0..4294967295) |
This object sets the MSK length in bits. SMS4 should use a 256-bit key, with the first 128 bits for encryption and the last 128 bits for integrity checks. |
As per the MIB. |
|
hh3cwapiCfgBKLifetime (1.3.6.1.4.1.25506.2.77.3.2.1.33) |
read-write |
Unsigned32 |
Unsigned32 (1..4294967295) |
Maximum BK lifetime in the BK cache, in seconds. |
As per the MIB. |
|
hh3cwapiCfgBKReauthThreshold (1.3.6.1.4.1.25506.2.77.3.2.1.34) |
read-write |
Unsigned32 |
Unsigned32 (1..100) |
Percentage of the BK lifetime that should expire before re-authentication occurs. |
As per the MIB. |
|
hh3cwapiCfgSATimeout (1.3.6.1.4.1.25506.2.77.3.2.1.35) |
read-write |
Unsigned32 |
Unsigned32 (1..4294967295) |
Maximum time required to establish a security association (SA), in seconds. |
As per the MIB. |
|
hh3cwapiAuthenSuiteSelected (1.3.6.1.4.1.25506.2.77.3.2.1.36) |
read-only |
OCTET STRING |
OCTET STRING (4) |
Final AKM suite selector negotiated. |
As per the MIB. |
|
hh3cwapiUniCipherSelected (1.3.6.1.4.1.25506.2.77.3.2.1.37) |
read-only |
OCTET STRING |
OCTET STRING (4) |
Previous USK selector negotiated. |
As per the MIB. |
|
hh3cwapiMultiCipherSelected (1.3.6.1.4.1.25506.2.77.3.2.1.38) |
read-only |
OCTET STRING |
OCTET STRING (4) |
Previous MSK selector negotiated. |
As per the MIB. |
|
hh3cwapiBKIDUsed (1.3.6.1.4.1.25506.2.77.3.2.1.39) |
read-only |
OCTET STRING |
OCTET STRING (16) |
Last BKID selector used in the previous USK handshake. |
As per the MIB. |
|
hh3cwapiAuthenSuiteRequested (1.3.6.1.4.1.25506.2.77.3.2.1.40) |
read-only |
OCTET STRING |
OCTET STRING (4) |
Final AKM suite selector requested. |
As per the MIB. |
|
hh3cwapiUniCipherRequested (1.3.6.1.4.1.25506.2.77.3.2.1.41) |
read-only |
OCTET STRING |
OCTET STRING (4) |
Previous USK selector requested. |
As per the MIB. |
|
hh3cwapiMultiCipherRequested (1.3.6.1.4.1.25506.2.77.3.2.1.42) |
read-only |
OCTET STRING |
OCTET STRING (4) |
Previous MSK selector requested. |
As per the MIB. |
hh3cwapiStatsTable
About this table
Use this table to track statistical information for each STA in WAPI.
Support for operations
Create：Not supported.
Edit/Modify：Not supported.
Delete：Not supported.
Read：Supported.
Columns
The table index is hh3cwapiStationMAC.
|
Object (OID) |
Access |
Syntax |
Value range |
Description |
Implementation |
|
hh3cwapiStationMAC (1.3.6.1.4.1.25506.2.77.3.3.1.1) |
not-accessible |
MacAddress |
OCTET STRING (6) |
MAC address of a station. |
As per the MIB. |
|
hh3cwapiStatsSTAAddress (1.3.6.1.4.1.25506.2.77.3.3.1.2) |
read-only |
MacAddress |
OCTET STRING (6) |
MAC address of the STA for the statistics information. |
As per the MIB. |
|
hh3cwapiStatsVersion (1.3.6.1.4.1.25506.2.77.3.3.1.3) |
read-only |
Unsigned32 |
Unsigned32 (1..4294967295) |
WAPI version associated with the STA. |
As per the MIB. |
|
hh3cwapiStatsCtrlPortStatus (1.3.6.1.4.1.25506.2.77.3.3.1.4) |
read-only |
TruthValue |
true(1), false(2) |
This object represents the state of the controlled port of the identity authentication entity. If the value is TRUE, it means "authenticated". If not, it means "unauthenticated." |
As per the MIB. |
|
hh3cwapiStatsSelectedUniCipher (1.3.6.1.4.1.25506.2.77.3.3.1.5) |
read-only |
OCTET STRING |
OCTET STRING (4) |
USK suite selector used during the association period. |
As per the MIB. |
|
hh3cwapiStatsWPIReplayCnt (1.3.6.1.4.1.25506.2.77.3.3.1.6) |
read-only |
Counter32 |
Standard MIB values. |
Number of WPI MAC Protocol Data Units (MPDUs) discarded by the replay mechanism. |
As per the MIB. |
|
hh3cwapiStatsWPIDecryptErr (1.3.6.1.4.1.25506.2.77.3.3.1.7) |
read-only |
Counter32 |
Standard MIB values. |
Number of WPI MPDUs discarded due to key unavailability during the WPI-SMS4 decryption process. |
As per the MIB. |
|
hh3cwapiStatsWPIMICErr (1.3.6.1.4.1.25506.2.77.3.3.1.8) |
read-only |
Counter32 |
Standard MIB values. |
Number of WPI MPDUs discarded due to Message Integrity Code (MIC) check failure during the WPI-SMS4 decryption process. |
As per the MIB. |
|
hh3cwapiStatsWAISignatureErr (1.3.6.1.4.1.25506.2.77.3.3.1.9) |
read-only |
Counter32 |
Standard MIB values. |
This counter increments when the system receives a WAI packet with an incorrect signature. |
As per the MIB. |
|
hh3cwapiStatsWAIHMACErr (1.3.6.1.4.1.25506.2.77.3.3.1.10) |
read-only |
Counter32 |
Standard MIB values. |
This counter increments when a received WAI packet fails the message verification key check. |
As per the MIB. |
|
hh3cwapiStatsWAIAuthenFail (1.3.6.1.4.1.25506.2.77.3.3.1.11) |
read-only |
Counter32 |
Standard MIB values. |
This counter increments when WAI identity authentication fails. |
As per the MIB. |
|
hh3cwapiStatsWAIDiscardCnt (1.3.6.1.4.1.25506.2.77.3.3.1.12) |
read-only |
Counter32 |
Standard MIB values. |
This counter increments when a received WAI packet is dropped. |
As per the MIB. |
|
hh3cwapiStatsWAITimeoutCnt (1.3.6.1.4.1.25506.2.77.3.3.1.13) |
read-only |
Counter32 |
Standard MIB values. |
This counter increments when a WAI packet timeout is detected. |
As per the MIB. |
|
hh3cwapiStatsWAIFormatErr (1.3.6.1.4.1.25506.2.77.3.3.1.14) |
read-only |
Counter32 |
Standard MIB values. |
This counter increments when a WAI packet format error occurs. |
As per the MIB. |
|
hh3cwapiStatsWAICertFail (1.3.6.1.4.1.25506.2.77.3.3.1.15) |
read-only |
Counter32 |
Standard MIB values. |
This counter increments when WAI certificate identity authentication fails. |
As per the MIB. |
|
hh3cwapiStatsWAIUniFail (1.3.6.1.4.1.25506.2.77.3.3.1.16) |
read-only |
Counter32 |
Standard MIB values. |
This counter increments when the WAI USK negotiation succeeds. |
As per the MIB. |
|
hh3cwapiStatsWAIMultiFail (1.3.6.1.4.1.25506.2.77.3.3.1.17) |
read-only |
Counter32 |
Standard MIB values. |
This counter increments when the WAI MSK announcement fails. |
As per the MIB. |
Notifications
hh3cwapiUserwithInvalidCertificate
Basic information
|
OID |
Event |
Type |
Severity |
Recovery notification |
Default status |
|
1.3.6.1.4.1.25506.2.77.4.0.1 |
A user uses invalid certificates to breach the network. |
Informational |
Warning |
_ (_) |
Off |
Notification triggers
This notification is generated when a user uses invalid certificates to breach the network.
System impact
A user cannot successfully access the network.
Status control
ON
CLI: snmp-agent trap enable wlan usersec
Off
CLI: undo snmp-agent trap enable wlan usersec
Object
|
OID (object name) |
Description |
Index |
Type |
Value range |
|
1.3.6.1.2.1.2.2.1.1 (ifIndex) |
Interface index. |
ifIndex |
InterfaceIndex |
Integer32 (1..2147483647) |
|
1.3.6.1.2.1.2.2.1.2 (ifDescr) |
Interface description. |
ifIndex |
DisplayString |
OCTET STRING (0..255) |
|
1.3.6.1.4.1.25506.2.77.4.1.1 (hh3cwapiTrapInfoMacAddr) |
MAC address of a WAPI user. |
N/A |
MacAddress |
OCTET STRING (6) |
|
1.3.6.1.4.1.25506.2.77.4.1.2 (hh3cwapiTrapInfoAPId) |
Unique identifier of an AP. |
N/A |
Integer32 |
Standard MIB values. |
|
1.3.6.1.4.1.25506.2.77.4.1.3 (hh3cwapiTrapInfoRadioId) |
Radio ID. |
N/A |
Integer32 |
Standard MIB values. |
|
1.3.6.1.4.1.25506.2.77.4.1.4 (hh3cwapiTrapInfoBSSId) |
BSSID. |
N/A |
MacAddress |
OCTET STRING (6) |
|
1.3.6.1.4.1.25506.2.77.4.1.4 (hh3cwapiTrapInfoAPMacAddr) |
MAC address of an AP. |
N/A |
MacAddress |
OCTET STRING (6) |
Recommended action
No action is required.
hh3cwapiStationReplayAttack
Basic information
|
OID |
Event |
Type |
Severity |
Recovery notification |
Default status |
|
1.3.6.1.4.1.25506.2.77.4.0.2 |
Client replay attack. |
Informational |
Warning |
_ (_) |
Off |
Notification triggers
This notification is generated when the AP receives an illegal AE inquiry.
System impact
A user cannot successfully access the network.
Status control
ON
CLI: snmp-agent trap enable wlan usersec
Off
CLI: undo snmp-agent trap enable wlan usersec
Object
|
OID (object name) |
Description |
Index |
Type |
Value range |
|
1.3.6.1.2.1.2.2.1.1 (ifIndex) |
Interface index. |
ifIndex |
InterfaceIndex |
Integer32 (1..2147483647) |
|
1.3.6.1.2.1.2.2.1.2 (ifDescr) |
Interface description. |
ifIndex |
DisplayString |
OCTET STRING (0..255) |
|
1.3.6.1.4.1.25506.2.77.4.1.1 (hh3cwapiTrapInfoMacAddr) |
MAC address of a WAPI user. |
N/A |
MacAddress |
OCTET STRING (6) |
|
1.3.6.1.4.1.25506.2.77.4.1.2 (hh3cwapiTrapInfoAPId) |
Unique identifier of an AP. |
N/A |
Integer32 |
Standard MIB values. |
|
1.3.6.1.4.1.25506.2.77.4.1.3 (hh3cwapiTrapInfoRadioId) |
Radio ID. |
N/A |
Integer32 |
Standard MIB values. |
|
1.3.6.1.4.1.25506.2.77.4.1.4 (hh3cwapiTrapInfoBSSId) |
BSSID. |
N/A |
MacAddress |
OCTET STRING (6) |
|
1.3.6.1.4.1.25506.2.77.4.1.4 (hh3cwapiTrapInfoAPMacAddr) |
MAC address of an AP. |
N/A |
MacAddress |
OCTET STRING (6) |
Recommended action
No action is required.
hh3cwapiTamperAttack
Basic information
|
OID |
Event |
Type |
Severity |
Recovery notification |
Default status |
|
1.3.6.1.4.1.25506.2.77.4.0.3 |
WAPI tampering attack. |
Informational |
Warning |
_ (_) |
Off |
Notification triggers
This notification is generated when the AP receives an incorrect message authentication code.
System impact
A user cannot successfully access the network.
Status control
ON
CLI: snmp-agent trap enable wlan usersec
Off
CLI: undo snmp-agent trap enable wlan usersec
Object
|
OID (object name) |
Description |
Index |
Type |
Value range |
|
1.3.6.1.2.1.2.2.1.1 (ifIndex) |
Interface index. |
ifIndex |
InterfaceIndex |
Integer32 (1..2147483647) |
|
1.3.6.1.2.1.2.2.1.2 (ifDescr) |
Interface description. |
ifIndex |
DisplayString |
OCTET STRING (0..255) |
|
1.3.6.1.4.1.25506.2.77.4.1.1 (hh3cwapiTrapInfoMacAddr) |
MAC address of a WAPI user. |
N/A |
MacAddress |
OCTET STRING (6) |
|
1.3.6.1.4.1.25506.2.77.4.1.2 (hh3cwapiTrapInfoAPId) |
Unique identifier of an AP. |
N/A |
Integer32 |
Standard MIB values. |
|
1.3.6.1.4.1.25506.2.77.4.1.3 (hh3cwapiTrapInfoRadioId) |
Radio ID. |
N/A |
Integer32 |
Standard MIB values. |
|
1.3.6.1.4.1.25506.2.77.4.1.4 (hh3cwapiTrapInfoBSSId) |
BSSID. |
N/A |
MacAddress |
OCTET STRING (6) |
|
1.3.6.1.4.1.25506.2.77.4.1.4 (hh3cwapiTrapInfoAPMacAddr) |
MAC address of an AP. |
N/A |
MacAddress |
OCTET STRING (6) |
Recommended action
No action is required.
hh3cwapiLowSafeLevelAttack
Basic information
|
OID |
Event |
Type |
Severity |
Recovery notification |
Default status |
|
1.3.6.1.4.1.25506.2.77.4.0.3 |
WAPI security level downgrade attack. |
Informational |
Warning |
_ (_) |
Off |
Notification triggers
This notification is generated when the AP receives a key negotiation response packet with an incorrect WIEASUE.
System impact
A user cannot successfully access the network.
Status control
ON
CLI: snmp-agent trap enable wlan usersec
Off
CLI: undo snmp-agent trap enable wlan usersec
Object
|
OID (object name) |
Description |
Index |
Type |
Value range |
|
1.3.6.1.2.1.2.2.1.1 (ifIndex) |
Interface index. |
ifIndex |
InterfaceIndex |
Integer32 (1..2147483647) |
|
1.3.6.1.2.1.2.2.1.2 (ifDescr) |
Interface description. |
ifIndex |
DisplayString |
OCTET STRING (0..255) |
|
1.3.6.1.4.1.25506.2.77.4.1.1 (hh3cwapiTrapInfoMacAddr) |
MAC address of a WAPI user. |
N/A |
MacAddress |
OCTET STRING (6) |
|
1.3.6.1.4.1.25506.2.77.4.1.2 (hh3cwapiTrapInfoAPId) |
Unique identifier of an AP. |
N/A |
Integer32 |
Standard MIB values. |
|
1.3.6.1.4.1.25506.2.77.4.1.3 (hh3cwapiTrapInfoRadioId) |
Radio ID. |
N/A |
Integer32 |
Standard MIB values. |
|
1.3.6.1.4.1.25506.2.77.4.1.4 (hh3cwapiTrapInfoBSSId) |
BSSID. |
N/A |
MacAddress |
OCTET STRING (6) |
|
1.3.6.1.4.1.25506.2.77.4.1.4 (hh3cwapiTrapInfoAPMacAddr) |
MAC address of an AP. |
N/A |
MacAddress |
OCTET STRING (6) |
Recommended action
No action is required.
hh3cwapiAddressRedirectionAttack
Basic information
|
OID |
Event |
Type |
Severity |
Recovery notification |
Default status |
|
1.3.6.1.4.1.25506.2.77.4.0.5 |
WAPI address redirect attack. |
Informational |
Warning |
_ (_) |
Off |
Notification triggers
This notification is generated when the AP receives an invalid WPI frame.
System impact
A user cannot successfully access the network.
Status control
ON
CLI: snmp-agent trap enable wlan usersec
Off
CLI: undo snmp-agent trap enable wlan usersec
Object
|
OID (object name) |
Description |
Index |
Type |
Value range |
|
1.3.6.1.2.1.2.2.1.1 (ifIndex) |
Interface index. |
ifIndex |
InterfaceIndex |
Integer32 (1..2147483647) |
|
1.3.6.1.2.1.2.2.1.2 (ifDescr) |
Interface description. |
ifIndex |
DisplayString |
OCTET STRING (0..255) |
|
1.3.6.1.4.1.25506.2.77.4.1.1 (hh3cwapiTrapInfoMacAddr) |
MAC address of a WAPI user. |
N/A |
MacAddress |
OCTET STRING (6) |
|
1.3.6.1.4.1.25506.2.77.4.1.2 (hh3cwapiTrapInfoAPId) |
Unique identifier of an AP. |
N/A |
Integer32 |
Standard MIB values. |
|
1.3.6.1.4.1.25506.2.77.4.1.3 (hh3cwapiTrapInfoRadioId) |
Radio ID. |
N/A |
Integer32 |
Standard MIB values. |
|
1.3.6.1.4.1.25506.2.77.4.1.4 (hh3cwapiTrapInfoBSSId) |
BSSID. |
N/A |
MacAddress |
OCTET STRING (6) |
|
1.3.6.1.4.1.25506.2.77.4.1.4 (hh3cwapiTrapInfoAPMacAddr) |
MAC address of an AP. |
N/A |
MacAddress |
OCTET STRING (6) |
Recommended action
No action is required.
