Commit version 24.12.13800
This commit is contained in:
@ -1,9 +1,9 @@
|
||||
-- ************************************************************************
|
||||
-- Copyright (c) 2004-2013 New H3C Tech. Co., Ltd. All rights reserved.
|
||||
-- Copyright (c) 2004-2018 New H3C Tech. Co., Ltd. All rights reserved.
|
||||
--
|
||||
-- Description: WAPI extension mib
|
||||
-- Reference:
|
||||
-- Version: V1.4
|
||||
-- Version: V1.5
|
||||
-- History:
|
||||
-- V1.0 created by zhanglianglun
|
||||
-- Initial version 2007-5-20
|
||||
@ -24,6 +24,40 @@
|
||||
-- Add hh3cwapiCfgExtCertInstalled
|
||||
-- V1.4 2013-01-10 modified by xuyonggang
|
||||
-- Add hh3cwapiTrapInfoAPMacAddr
|
||||
-- V1.5 2018-05-07 modified by muzhuqing
|
||||
-- Add node hh3cwapiConfigVersion to hh3cwapiConfigExtTable.
|
||||
-- Add node hh3cwapiControlledAuthControl to hh3cwapiConfigExtTable.
|
||||
-- Add node hh3cwapiControlledPortControl to hh3cwapiConfigExtTable.
|
||||
-- Add node hh3cwapiOptionImplemented to hh3cwapiConfigExtTable.
|
||||
-- Add node hh3cwapiPreauthImplemented to hh3cwapiConfigExtTable.
|
||||
-- Add node hh3cwapiEnabled to hh3cwapiConfigExtTable.
|
||||
-- Add node hh3cwapiPreauthEnabled to hh3cwapiConfigExtTable.
|
||||
-- Add node hh3cwapiCfgUniKeysSupported to hh3cwapiConfigExtTable.
|
||||
-- Add node hh3cwapiCfgUniRekeyMethod to hh3cwapiConfigExtTable.
|
||||
-- Add node hh3cwapiCfgUniRekeyTime to hh3cwapiConfigExtTable.
|
||||
-- Add node hh3cwapiCfgUniRekeyPackets to hh3cwapiConfigExtTable.
|
||||
-- Add node hh3cwapiCfgMultiCipher to hh3cwapiConfigExtTable.
|
||||
-- Add node hh3cwapiCfgMultiRekeyMethod to hh3cwapiConfigExtTable.
|
||||
-- Add node hh3cwapiCfgMultiRekeyTime to hh3cwapiConfigExtTable.
|
||||
-- Add node hh3cwapiCfgMultiRekeyPackets to hh3cwapiConfigExtTable.
|
||||
-- Add node hh3cwapiCfgMultiRekeyStrict to hh3cwapiConfigExtTable.
|
||||
-- Add node hh3cwapiCfgPSKValue to hh3cwapiConfigExtTable.
|
||||
-- Add node hh3cwapiCfgPSKPassPhrase to hh3cwapiConfigExtTable.
|
||||
-- Add node hh3cwapiCfgCertUpdateCount to hh3cwapiConfigExtTable.
|
||||
-- Add node hh3cwapiCfgMultiUpdateCount to hh3cwapiConfigExtTable.
|
||||
-- Add node hh3cwapiCfgUniUpdateCount to hh3cwapiConfigExtTable.
|
||||
-- Add node hh3cwapiCfgMultiCipherSize to hh3cwapiConfigExtTable.
|
||||
-- Add node hh3cwapiCfgBKLifetime to hh3cwapiConfigExtTable.
|
||||
-- Add node hh3cwapiCfgBKReauthThreshold to hh3cwapiConfigExtTable.
|
||||
-- Add node hh3cwapiCfgSATimeout to hh3cwapiConfigExtTable.
|
||||
-- Add node hh3cwapiAuthenSuiteSelected to hh3cwapiConfigExtTable.
|
||||
-- Add node hh3cwapiUniCipherSelected to hh3cwapiConfigExtTable.
|
||||
-- Add node hh3cwapiMultiCipherSelected to hh3cwapiConfigExtTable.
|
||||
-- Add node hh3cwapiBKIDUsed to hh3cwapiConfigExtTable.
|
||||
-- Add node hh3cwapiAuthenSuiteRequested to hh3cwapiConfigExtTable.
|
||||
-- Add node hh3cwapiUniCipherRequested to hh3cwapiConfigExtTable.
|
||||
-- Add node hh3cwapiMultiCipherRequested to hh3cwapiConfigExtTable.
|
||||
-- Add table hh3cwapiStatsTable.
|
||||
-- ************************************************************************
|
||||
HH3C-WAPI-MIB DEFINITIONS ::= BEGIN
|
||||
|
||||
@ -34,7 +68,7 @@ HH3C-WAPI-MIB DEFINITIONS ::= BEGIN
|
||||
TruthValue, MacAddress
|
||||
FROM SNMPv2-TC
|
||||
ifIndex, ifDescr
|
||||
FROM RFC1213-MIB
|
||||
FROM IF-MIB
|
||||
InetAddressType, InetAddress
|
||||
FROM INET-ADDRESS-MIB
|
||||
hh3cCommon
|
||||
@ -43,9 +77,9 @@ HH3C-WAPI-MIB DEFINITIONS ::= BEGIN
|
||||
hh3cwapiMIB MODULE-IDENTITY
|
||||
LAST-UPDATED "201012011757Z"
|
||||
ORGANIZATION
|
||||
"New H3C Tech. Co., Ltd."
|
||||
"New H3C Technologies Co., Ltd."
|
||||
CONTACT-INFO
|
||||
"Platform Team New H3C Tech. Co., Ltd.
|
||||
"Platform Team New H3C Technologies Co., Ltd.
|
||||
Hai-Dian District Beijing P.R. China
|
||||
http://www.h3c.com
|
||||
Zip:100085
|
||||
@ -55,6 +89,41 @@ HH3C-WAPI-MIB DEFINITIONS ::= BEGIN
|
||||
protocol. This MIB contains objects to
|
||||
manage configuration and monitor running state
|
||||
for WAPI feature."
|
||||
REVISION "201012011757Z"
|
||||
DESCRIPTION
|
||||
"Add node hh3cwapiConfigVersion to hh3cwapiConfigExtTable.
|
||||
Add node hh3cwapiControlledAuthControl to hh3cwapiConfigExtTable.
|
||||
Add node hh3cwapiControlledPortControl to hh3cwapiConfigExtTable.
|
||||
Add node hh3cwapiOptionImplemented to hh3cwapiConfigExtTable.
|
||||
Add node hh3cwapiPreauthImplemented to hh3cwapiConfigExtTable.
|
||||
Add node hh3cwapiEnabled to hh3cwapiConfigExtTable.
|
||||
Add node hh3cwapiPreauthEnabled to hh3cwapiConfigExtTable.
|
||||
Add node hh3cwapiCfgUniKeysSupported to hh3cwapiConfigExtTable.
|
||||
Add node hh3cwapiCfgUniRekeyMethod to hh3cwapiConfigExtTable.
|
||||
Add node hh3cwapiCfgUniRekeyTime to hh3cwapiConfigExtTable.
|
||||
Add node hh3cwapiCfgUniRekeyPackets to hh3cwapiConfigExtTable.
|
||||
Add node hh3cwapiCfgMultiCipher to hh3cwapiConfigExtTable.
|
||||
Add node hh3cwapiCfgMultiRekeyMethod to hh3cwapiConfigExtTable.
|
||||
Add node hh3cwapiCfgMultiRekeyTime to hh3cwapiConfigExtTable.
|
||||
Add node hh3cwapiCfgMultiRekeyPackets to hh3cwapiConfigExtTable.
|
||||
Add node hh3cwapiCfgMultiRekeyStrict to hh3cwapiConfigExtTable.
|
||||
Add node hh3cwapiCfgPSKValue to hh3cwapiConfigExtTable.
|
||||
Add node hh3cwapiCfgPSKPassPhrase to hh3cwapiConfigExtTable.
|
||||
Add node hh3cwapiCfgCertUpdateCount to hh3cwapiConfigExtTable.
|
||||
Add node hh3cwapiCfgMultiUpdateCount to hh3cwapiConfigExtTable.
|
||||
Add node hh3cwapiCfgUniUpdateCount to hh3cwapiConfigExtTable.
|
||||
Add node hh3cwapiCfgMultiCipherSize to hh3cwapiConfigExtTable.
|
||||
Add node hh3cwapiCfgBKLifetime to hh3cwapiConfigExtTable.
|
||||
Add node hh3cwapiCfgBKReauthThreshold to hh3cwapiConfigExtTable.
|
||||
Add node hh3cwapiCfgSATimeout to hh3cwapiConfigExtTable.
|
||||
Add node hh3cwapiAuthenSuiteSelected to hh3cwapiConfigExtTable.
|
||||
Add node hh3cwapiUniCipherSelected to hh3cwapiConfigExtTable.
|
||||
Add node hh3cwapiMultiCipherSelected to hh3cwapiConfigExtTable.
|
||||
Add node hh3cwapiBKIDUsed to hh3cwapiConfigExtTable.
|
||||
Add node hh3cwapiAuthenSuiteRequested to hh3cwapiConfigExtTable.
|
||||
Add node hh3cwapiUniCipherRequested to hh3cwapiConfigExtTable.
|
||||
Add node hh3cwapiMultiCipherRequested to hh3cwapiConfigExtTable.
|
||||
Add table hh3cwapiStatsTable."
|
||||
::= { hh3cCommon 77 }
|
||||
|
||||
hh3cwapiMIBObjects OBJECT IDENTIFIER ::= { hh3cwapiMIB 1 }
|
||||
@ -104,7 +173,7 @@ HH3C-WAPI-MIB DEFINITIONS ::= BEGIN
|
||||
STATUS current
|
||||
DESCRIPTION
|
||||
"This object indicates whether the entity has installed
|
||||
certificate. When the value is TURE, it shall indicate that
|
||||
certificate. When the value is TRUE, it shall indicate that
|
||||
the entity has installed certificate. Otherwise, it shall
|
||||
indicate that the entity hasn't installed certificate."
|
||||
::= { hh3cwapiMIBObjects 4 }
|
||||
@ -250,8 +319,8 @@ HH3C-WAPI-MIB DEFINITIONS ::= BEGIN
|
||||
MAX-ACCESS read-write
|
||||
STATUS current
|
||||
DESCRIPTION
|
||||
"This object selects a mechanism for WAPI authentication method. The
|
||||
default is certificate."
|
||||
"This object selects a mechanism for WAPI authentication.
|
||||
The default is certificate."
|
||||
DEFVAL { certificate }
|
||||
::= { hh3cwapiConfigEntry 3 }
|
||||
|
||||
@ -263,10 +332,11 @@ HH3C-WAPI-MIB DEFINITIONS ::= BEGIN
|
||||
MAX-ACCESS read-write
|
||||
STATUS current
|
||||
DESCRIPTION
|
||||
"This object selects a mechanism for WAPI authentication mode. When
|
||||
the value is standard, it shall indicate that the entity acts accord
|
||||
with the official definition. Otherwise, it shall indicate that the
|
||||
entity finishs authentication by means of RADIUS. The default is standard."
|
||||
"This object selects a mechanism for WAPI authentication.
|
||||
When the value is standard, it shall indicate that the entity
|
||||
acts based on the official definition. Otherwise, it shall
|
||||
indicate that the entity finishes authentication by means of RADIUS.
|
||||
The default is standard."
|
||||
DEFVAL { standard }
|
||||
::= { hh3cwapiConfigEntry 4 }
|
||||
|
||||
@ -299,9 +369,10 @@ HH3C-WAPI-MIB DEFINITIONS ::= BEGIN
|
||||
MAX-ACCESS read-write
|
||||
STATUS current
|
||||
DESCRIPTION
|
||||
"This object indicates whether the BK rekey function is supported. When the
|
||||
value is TURE, it shall indicate that the BK rekey function is supported.
|
||||
Otherwise, it shall indicate that the BK rekey function is not supported."
|
||||
"This object indicates whether the BK rekey function is
|
||||
supported. When the value is TRUE, it shall indicate that
|
||||
the BK rekey function is supported. Otherwise, it shall
|
||||
indicate that the BK rekey function is not supported."
|
||||
::= { hh3cwapiConfigEntry 8 }
|
||||
|
||||
-- *************************************************************************
|
||||
@ -336,7 +407,39 @@ HH3C-WAPI-MIB DEFINITIONS ::= BEGIN
|
||||
hh3cwapiCfgExtASIPAddress InetAddress,
|
||||
hh3cwapiCfgExtASName OCTET STRING,
|
||||
hh3cwapiCfgExtCertDomain OCTET STRING,
|
||||
hh3cwapiCfgExtCertInstalled TruthValue
|
||||
hh3cwapiCfgExtCertInstalled TruthValue,
|
||||
hh3cwapiConfigVersion Integer32,
|
||||
hh3cwapiControlledAuthControl TruthValue,
|
||||
hh3cwapiControlledPortControl Integer32,
|
||||
hh3cwapiOptionImplemented TruthValue,
|
||||
hh3cwapiPreauthImplemented TruthValue,
|
||||
hh3cwapiEnabled TruthValue,
|
||||
hh3cwapiPreauthEnabled TruthValue,
|
||||
hh3cwapiCfgUniKeysSupported Unsigned32,
|
||||
hh3cwapiCfgUniRekeyMethod INTEGER,
|
||||
hh3cwapiCfgUniRekeyTime Unsigned32,
|
||||
hh3cwapiCfgUniRekeyPackets Unsigned32,
|
||||
hh3cwapiCfgMultiCipher OCTET STRING,
|
||||
hh3cwapiCfgMultiRekeyMethod INTEGER,
|
||||
hh3cwapiCfgMultiRekeyTime Unsigned32,
|
||||
hh3cwapiCfgMultiRekeyPackets Unsigned32,
|
||||
hh3cwapiCfgMultiRekeyStrict TruthValue,
|
||||
hh3cwapiCfgPSKValue OCTET STRING,
|
||||
hh3cwapiCfgPSKPassPhrase OCTET STRING,
|
||||
hh3cwapiCfgCertUpdateCount Unsigned32,
|
||||
hh3cwapiCfgMultiUpdateCount Unsigned32,
|
||||
hh3cwapiCfgUniUpdateCount Unsigned32,
|
||||
hh3cwapiCfgMultiCipherSize Unsigned32,
|
||||
hh3cwapiCfgBKLifetime Unsigned32,
|
||||
hh3cwapiCfgBKReauthThreshold Unsigned32,
|
||||
hh3cwapiCfgSATimeout Unsigned32,
|
||||
hh3cwapiAuthenSuiteSelected OCTET STRING,
|
||||
hh3cwapiUniCipherSelected OCTET STRING,
|
||||
hh3cwapiMultiCipherSelected OCTET STRING,
|
||||
hh3cwapiBKIDUsed OCTET STRING,
|
||||
hh3cwapiAuthenSuiteRequested OCTET STRING,
|
||||
hh3cwapiUniCipherRequested OCTET STRING,
|
||||
hh3cwapiMultiCipherRequested OCTET STRING
|
||||
}
|
||||
|
||||
hh3cwapiConfigServicePolicyID OBJECT-TYPE
|
||||
@ -375,13 +478,13 @@ HH3C-WAPI-MIB DEFINITIONS ::= BEGIN
|
||||
::= { hh3cwapiConfigExtEntry 4 }
|
||||
|
||||
hh3cwapiConfigAuthenticationSuite OBJECT-TYPE
|
||||
SYNTAX OCTET STRING (SIZE(4))
|
||||
MAX-ACCESS read-only
|
||||
STATUS current
|
||||
DESCRIPTION
|
||||
"The selector of an AKM suite. It consists of an OUI (the first 3
|
||||
octets) and a cipher suite identifier (the last octet)."
|
||||
::= { hh3cwapiConfigExtEntry 5 }
|
||||
SYNTAX OCTET STRING (SIZE(4))
|
||||
MAX-ACCESS read-only
|
||||
STATUS current
|
||||
DESCRIPTION
|
||||
"The selector of an AKM suite. It consists of an OUI (the first 3
|
||||
octets) and a cipher suite identifier (the last octet)."
|
||||
::= { hh3cwapiConfigExtEntry 5 }
|
||||
|
||||
hh3cwapiCfgExtASIPAddressType OBJECT-TYPE
|
||||
SYNTAX InetAddressType
|
||||
@ -421,11 +524,545 @@ HH3C-WAPI-MIB DEFINITIONS ::= BEGIN
|
||||
STATUS current
|
||||
DESCRIPTION
|
||||
"This object indicates whether the entity has installed
|
||||
certificate. When the value is TURE, it shall indicate that
|
||||
the SSID has installed certificate. Otherwise, it shall
|
||||
certificate. When the value is TRUE, it shall indicate that
|
||||
the SSID has installed certificate. Otherwise, it shall
|
||||
indicate that the SSID hasn't installed certificate."
|
||||
::= { hh3cwapiConfigExtEntry 10 }
|
||||
|
||||
hh3cwapiConfigVersion OBJECT-TYPE
|
||||
SYNTAX Integer32
|
||||
MAX-ACCESS read-only
|
||||
STATUS current
|
||||
DESCRIPTION
|
||||
"The highest WAPI version this entity supports."
|
||||
::= { hh3cwapiConfigExtEntry 11 }
|
||||
|
||||
hh3cwapiControlledAuthControl OBJECT-TYPE
|
||||
SYNTAX TruthValue
|
||||
MAX-ACCESS read-only
|
||||
STATUS current
|
||||
DESCRIPTION
|
||||
"This object indicates whether the entity is enabled with
|
||||
authentication. When the value is FALSE, it shall indicate that
|
||||
authentication is not enabled on this entity, and the status of
|
||||
the controlled port is 'authenticated'. When the value is TRUE,
|
||||
it shall indicate that authentication is enabled, and the status
|
||||
of controlled port is decided by
|
||||
hh3cwapiControlledPortControl."
|
||||
::= { hh3cwapiConfigExtEntry 12 }
|
||||
|
||||
hh3cwapiControlledPortControl OBJECT-TYPE
|
||||
SYNTAX Integer32
|
||||
MAX-ACCESS read-only
|
||||
STATUS current
|
||||
DESCRIPTION
|
||||
"This object indicates the controlling type of the entity's port.
|
||||
This object is available when
|
||||
hh3cwapiControlledAuthControl is TRUE. When the value is
|
||||
zero, it means 'automatic', and the status of the controlled port
|
||||
is decided by authentication result. When the value is one,
|
||||
it means 'forcibly unauthenticated', and the status of the
|
||||
controlled port is 'unauthenticated'."
|
||||
::= { hh3cwapiConfigExtEntry 13 }
|
||||
|
||||
hh3cwapiOptionImplemented OBJECT-TYPE
|
||||
SYNTAX TruthValue
|
||||
MAX-ACCESS read-only
|
||||
STATUS current
|
||||
DESCRIPTION
|
||||
"This object indicates whether the entity supports WAPI. When the
|
||||
value is TRUE, it shall indicate that the entity supports WAPI.
|
||||
Otherwise, it shall indicate that the entity does not support WAPI."
|
||||
::= { hh3cwapiConfigExtEntry 14 }
|
||||
|
||||
hh3cwapiPreauthImplemented OBJECT-TYPE
|
||||
SYNTAX TruthValue
|
||||
MAX-ACCESS read-only
|
||||
STATUS current
|
||||
DESCRIPTION
|
||||
"This object indicates whether the entity supports WAPI
|
||||
preauthentication. This object can't be set to TRUE, unless
|
||||
hh3cwapiOptionImplemented is TRUE."
|
||||
::= { hh3cwapiConfigExtEntry 15 }
|
||||
|
||||
hh3cwapiEnabled OBJECT-TYPE
|
||||
SYNTAX TruthValue
|
||||
MAX-ACCESS read-write
|
||||
STATUS current
|
||||
DESCRIPTION
|
||||
"When this object is set to TRUE, it shall indicate that WAPI is
|
||||
enabled on this entity. The entity will advertise the WAPI
|
||||
information element in its beacon and probe response frames."
|
||||
::= { hh3cwapiConfigExtEntry 16 }
|
||||
|
||||
hh3cwapiPreauthEnabled OBJECT-TYPE
|
||||
SYNTAX TruthValue
|
||||
MAX-ACCESS read-write
|
||||
STATUS current
|
||||
DESCRIPTION
|
||||
"When this object is set to TRUE, it shall indicate that WAPI
|
||||
preauthentication is enabled on this entity. Otherwise, it shall
|
||||
indicate that WAPI preauthentication is disabled on this entity.
|
||||
This object requires that hh3cWAPIEnabled also be set to
|
||||
TRUE."
|
||||
::= { hh3cwapiConfigExtEntry 17 }
|
||||
|
||||
hh3cwapiCfgUniKeysSupported OBJECT-TYPE
|
||||
SYNTAX Unsigned32
|
||||
MAX-ACCESS read-only
|
||||
STATUS current
|
||||
DESCRIPTION
|
||||
"This object indicates how many unicast keys the entity supports
|
||||
for WAPI."
|
||||
::= { hh3cwapiConfigExtEntry 18 }
|
||||
|
||||
hh3cwapiCfgUniRekeyMethod OBJECT-TYPE
|
||||
SYNTAX INTEGER {
|
||||
disabled(1),
|
||||
timeBased(2),
|
||||
packetBased(3),
|
||||
timepacketBased(4)
|
||||
}
|
||||
MAX-ACCESS read-write
|
||||
STATUS current
|
||||
DESCRIPTION
|
||||
"This object selects a mechanism for rekeying the WAPI USK. The
|
||||
default is time-based, once per day. Rekeying the USK is only
|
||||
applicable to an entity acting as an AE or ASUE."
|
||||
DEFVAL { timeBased }
|
||||
::= { hh3cwapiConfigExtEntry 19 }
|
||||
|
||||
hh3cwapiCfgUniRekeyTime OBJECT-TYPE
|
||||
SYNTAX Unsigned32 (1..4294967295)
|
||||
UNITS "seconds"
|
||||
MAX-ACCESS read-write
|
||||
STATUS current
|
||||
DESCRIPTION
|
||||
"Time in seconds after which the WAPI USK shall be refreshed.
|
||||
The timer shall start at the moment the USK was set using the
|
||||
MLME-SETWPIKEYS request primitive."
|
||||
DEFVAL { 86400 }
|
||||
::= { hh3cwapiConfigExtEntry 20 }
|
||||
|
||||
hh3cwapiCfgUniRekeyPackets OBJECT-TYPE
|
||||
SYNTAX Unsigned32 (1..4294967295)
|
||||
UNITS "1000 packets"
|
||||
MAX-ACCESS read-write
|
||||
STATUS current
|
||||
DESCRIPTION
|
||||
"A packet count (a multiple of 1000) after which the WAPI USK
|
||||
shall be refreshed. The packet counter shall start at the moment
|
||||
the USK was set using the MLME-SETKEYS request primitive and it
|
||||
shall count all packets encrypted using the current USK."
|
||||
::= { hh3cwapiConfigExtEntry 21 }
|
||||
|
||||
hh3cwapiCfgMultiCipher OBJECT-TYPE
|
||||
SYNTAX OCTET STRING (SIZE(4))
|
||||
MAX-ACCESS read-write
|
||||
STATUS current
|
||||
DESCRIPTION
|
||||
"This object indicates the multicast cipher suite selector the
|
||||
entity must use. The multicast cipher suite in the WAPI
|
||||
information element shall take its value from this variable.
|
||||
It contains an OUI (the first 3 octets) and a cipher suite
|
||||
identifier (the last octet)."
|
||||
::= { hh3cwapiConfigExtEntry 22 }
|
||||
|
||||
hh3cwapiCfgMultiRekeyMethod OBJECT-TYPE
|
||||
SYNTAX INTEGER {
|
||||
disabled(1),
|
||||
timeBased(2),
|
||||
packetBased(3),
|
||||
timepacketBased(4)
|
||||
}
|
||||
MAX-ACCESS read-write
|
||||
STATUS current
|
||||
DESCRIPTION
|
||||
"This object selects a mechanism for rekeying the WAPI MSK. The
|
||||
default is time-based, once per day. Rekeying the MSK is only
|
||||
applicable to an entity acting as an AE or ASUE."
|
||||
DEFVAL { timeBased }
|
||||
::= { hh3cwapiConfigExtEntry 23 }
|
||||
|
||||
hh3cwapiCfgMultiRekeyTime OBJECT-TYPE
|
||||
SYNTAX Unsigned32 (1..4294967295)
|
||||
UNITS "seconds"
|
||||
MAX-ACCESS read-write
|
||||
STATUS current
|
||||
DESCRIPTION
|
||||
"Time in seconds after which the WAPI MSK shall be refreshed.
|
||||
The timer shall start at the moment the MSK was set using the
|
||||
MLME-SETWPIKEYS request primitive."
|
||||
DEFVAL { 86400 }
|
||||
::= { hh3cwapiConfigExtEntry 24 }
|
||||
|
||||
hh3cwapiCfgMultiRekeyPackets OBJECT-TYPE
|
||||
SYNTAX Unsigned32 (1..4294967295)
|
||||
UNITS "1000 packets"
|
||||
MAX-ACCESS read-write
|
||||
STATUS current
|
||||
DESCRIPTION
|
||||
"A packet count (a multiple of 1000) after which the WAPI MSK
|
||||
shall be refreshed. The packet counter shall start at the moment
|
||||
the MSK was set using the MLME-SETKEYS request primitive and it
|
||||
shall count all packets encrypted using the current MSK."
|
||||
::= { hh3cwapiConfigExtEntry 25 }
|
||||
|
||||
hh3cwapiCfgMultiRekeyStrict OBJECT-TYPE
|
||||
SYNTAX TruthValue
|
||||
MAX-ACCESS read-write
|
||||
STATUS current
|
||||
DESCRIPTION
|
||||
"This object indicates that the MSK shall be refreshed whenever an
|
||||
STA leaves the BSS that has the MSK."
|
||||
::= { hh3cwapiConfigExtEntry 26 }
|
||||
|
||||
hh3cwapiCfgPSKValue OBJECT-TYPE
|
||||
SYNTAX OCTET STRING (SIZE(2..32))
|
||||
MAX-ACCESS read-write
|
||||
STATUS current
|
||||
DESCRIPTION
|
||||
"The PSK value when WAPI in PSK mode is the selected AKM suite.
|
||||
In that case, the BK will obtain its value from this object.
|
||||
This object is logically write-only. Reading this variable shall
|
||||
return unsuccessful status or null or zero."
|
||||
::= { hh3cwapiConfigExtEntry 27 }
|
||||
|
||||
hh3cwapiCfgPSKPassPhrase OBJECT-TYPE
|
||||
SYNTAX OCTET STRING (SIZE(1..16))
|
||||
MAX-ACCESS read-write
|
||||
STATUS current
|
||||
DESCRIPTION
|
||||
"The PSK value when WAPI in PSK mode is the selected AKM suite,
|
||||
which is configured by hh3cwapiCfgPSKValue.
|
||||
An alternative method of setting the PSK is to
|
||||
use the password-to-key algorithm.
|
||||
This variable provides a means to enter a pass-phrase.
|
||||
When this object is written, the WAPI entity shall
|
||||
use the password-to-key algorithm to derive a preshared key
|
||||
and populate hh3cwapiCfgPSKValue with this key.
|
||||
This object is logically write-only. Reading this variable shall
|
||||
return unsuccessful status or null or zero."
|
||||
::= { hh3cwapiConfigExtEntry 28 }
|
||||
|
||||
hh3cwapiCfgCertUpdateCount OBJECT-TYPE
|
||||
SYNTAX Unsigned32 (1..4294967295)
|
||||
MAX-ACCESS read-write
|
||||
STATUS current
|
||||
DESCRIPTION
|
||||
"The number of times message in the WAPI certificate
|
||||
authentication handshake will be retried per certificate
|
||||
authentication handshake attempt."
|
||||
DEFVAL { 3 }
|
||||
::= { hh3cwapiConfigExtEntry 29 }
|
||||
|
||||
hh3cwapiCfgMultiUpdateCount OBJECT-TYPE
|
||||
SYNTAX Unsigned32 (1..4294967295)
|
||||
MAX-ACCESS read-write
|
||||
STATUS current
|
||||
DESCRIPTION
|
||||
"The number of times message in the WAPI multicast key handshake
|
||||
will be retried per MSK handshake attempt."
|
||||
DEFVAL { 3 }
|
||||
::= { hh3cwapiConfigExtEntry 30 }
|
||||
|
||||
hh3cwapiCfgUniUpdateCount OBJECT-TYPE
|
||||
SYNTAX Unsigned32 (1..4294967295)
|
||||
MAX-ACCESS read-write
|
||||
STATUS current
|
||||
DESCRIPTION
|
||||
"The number of times message in the WAPI unicast key handshake
|
||||
will be retried per 3-way handshake attempt."
|
||||
DEFVAL { 3 }
|
||||
::= { hh3cwapiConfigExtEntry 31 }
|
||||
|
||||
hh3cwapiCfgMultiCipherSize OBJECT-TYPE
|
||||
SYNTAX Unsigned32 (0..4294967295)
|
||||
MAX-ACCESS read-only
|
||||
STATUS current
|
||||
DESCRIPTION
|
||||
"This object indicates the length in bits of the multicast cipher
|
||||
key. This should be 256 for SMS4, where the first 128 bits are
|
||||
for encryption, and the last 128 bits for integrity check."
|
||||
::= { hh3cwapiConfigExtEntry 32 }
|
||||
|
||||
hh3cwapiCfgBKLifetime OBJECT-TYPE
|
||||
SYNTAX Unsigned32 (1..4294967295)
|
||||
UNITS "seconds"
|
||||
MAX-ACCESS read-write
|
||||
STATUS current
|
||||
DESCRIPTION
|
||||
"The maximum lifetime of a BK in the BK cache."
|
||||
DEFVAL { 43200 }
|
||||
::= { hh3cwapiConfigExtEntry 33 }
|
||||
|
||||
hh3cwapiCfgBKReauthThreshold OBJECT-TYPE
|
||||
SYNTAX Unsigned32 (1..100)
|
||||
UNITS "percentage"
|
||||
MAX-ACCESS read-write
|
||||
STATUS current
|
||||
DESCRIPTION
|
||||
"The percentage of the BK lifetime that should expire before a
|
||||
reauthentication occurs."
|
||||
DEFVAL { 70 }
|
||||
::= { hh3cwapiConfigExtEntry 34 }
|
||||
|
||||
hh3cwapiCfgSATimeout OBJECT-TYPE
|
||||
SYNTAX Unsigned32 (1..4294967295)
|
||||
UNITS "seconds"
|
||||
MAX-ACCESS read-write
|
||||
STATUS current
|
||||
DESCRIPTION
|
||||
"The maximum time a security association shall take to set up."
|
||||
DEFVAL { 60 }
|
||||
::= { hh3cwapiConfigExtEntry 35 }
|
||||
|
||||
hh3cwapiAuthenSuiteSelected OBJECT-TYPE
|
||||
SYNTAX OCTET STRING (SIZE(4))
|
||||
MAX-ACCESS read-only
|
||||
STATUS current
|
||||
DESCRIPTION
|
||||
"The selector of the last negotiated AKM suite."
|
||||
::= { hh3cwapiConfigExtEntry 36 }
|
||||
|
||||
hh3cwapiUniCipherSelected OBJECT-TYPE
|
||||
SYNTAX OCTET STRING (SIZE(4))
|
||||
MAX-ACCESS read-only
|
||||
STATUS current
|
||||
DESCRIPTION
|
||||
"The selector of the last negotiated unicast cipher."
|
||||
::= { hh3cwapiConfigExtEntry 37 }
|
||||
|
||||
hh3cwapiMultiCipherSelected OBJECT-TYPE
|
||||
SYNTAX OCTET STRING (SIZE(4))
|
||||
MAX-ACCESS read-only
|
||||
STATUS current
|
||||
DESCRIPTION
|
||||
"The selector of the last negotiated multicast cipher."
|
||||
::= { hh3cwapiConfigExtEntry 38 }
|
||||
|
||||
hh3cwapiBKIDUsed OBJECT-TYPE
|
||||
SYNTAX OCTET STRING (SIZE(16))
|
||||
MAX-ACCESS read-only
|
||||
STATUS current
|
||||
DESCRIPTION
|
||||
"The selector of the last BKID used in the last unicast
|
||||
cipher key handshake."
|
||||
::= { hh3cwapiConfigExtEntry 39 }
|
||||
|
||||
hh3cwapiAuthenSuiteRequested OBJECT-TYPE
|
||||
SYNTAX OCTET STRING (SIZE(4))
|
||||
MAX-ACCESS read-only
|
||||
STATUS current
|
||||
DESCRIPTION
|
||||
"The selector of the last requested AKM suite."
|
||||
::= { hh3cwapiConfigExtEntry 40 }
|
||||
|
||||
hh3cwapiUniCipherRequested OBJECT-TYPE
|
||||
SYNTAX OCTET STRING (SIZE(4))
|
||||
MAX-ACCESS read-only
|
||||
STATUS current
|
||||
DESCRIPTION
|
||||
"The selector of the last requested unicast cipher."
|
||||
::= { hh3cwapiConfigExtEntry 41 }
|
||||
|
||||
hh3cwapiMultiCipherRequested OBJECT-TYPE
|
||||
SYNTAX OCTET STRING (SIZE(4))
|
||||
MAX-ACCESS read-only
|
||||
STATUS current
|
||||
DESCRIPTION
|
||||
"The selector of the last requested multicast cipher."
|
||||
::= { hh3cwapiConfigExtEntry 42 }
|
||||
|
||||
hh3cwapiStatsTable OBJECT-TYPE
|
||||
SYNTAX SEQUENCE OF Hh3cwapiStatsEntry
|
||||
MAX-ACCESS not-accessible
|
||||
STATUS current
|
||||
DESCRIPTION
|
||||
"This table maintains per-STA statistics in a WAPI. The entry
|
||||
with hh3cwapiStatsSTAAddress set to FF-FF-FF-FF-FF-FF
|
||||
shall contain statistics for broadcast/multicast traffic."
|
||||
::= { hh3cwapiMIBTableObjects 3 }
|
||||
|
||||
hh3cwapiStatsEntry OBJECT-TYPE
|
||||
SYNTAX Hh3cwapiStatsEntry
|
||||
MAX-ACCESS not-accessible
|
||||
STATUS current
|
||||
DESCRIPTION
|
||||
"An entry in the hh3cwapiStatsTable."
|
||||
INDEX { hh3cwapiStationMAC }
|
||||
::= { hh3cwapiStatsTable 1 }
|
||||
|
||||
Hh3cwapiStatsEntry ::=
|
||||
SEQUENCE {
|
||||
hh3cwapiStationMAC MacAddress,
|
||||
hh3cwapiStatsSTAAddress MacAddress,
|
||||
hh3cwapiStatsVersion Unsigned32,
|
||||
hh3cwapiStatsCtrlPortStatus TruthValue,
|
||||
hh3cwapiStatsSelectedUniCipher OCTET STRING,
|
||||
hh3cwapiStatsWPIReplayCnt Counter32,
|
||||
hh3cwapiStatsWPIDecryptErr Counter32,
|
||||
hh3cwapiStatsWPIMICErr Counter32,
|
||||
hh3cwapiStatsWAISignatureErr Counter32,
|
||||
hh3cwapiStatsWAIHMACErr Counter32,
|
||||
hh3cwapiStatsWAIAuthenFail Counter32,
|
||||
hh3cwapiStatsWAIDiscardCnt Counter32,
|
||||
hh3cwapiStatsWAITimeoutCnt Counter32,
|
||||
hh3cwapiStatsWAIFormatErr Counter32,
|
||||
hh3cwapiStatsWAICertFail Counter32,
|
||||
hh3cwapiStatsWAIUniFail Counter32,
|
||||
hh3cwapiStatsWAIMultiFail Counter32
|
||||
}
|
||||
|
||||
hh3cwapiStationMAC OBJECT-TYPE
|
||||
SYNTAX MacAddress
|
||||
MAX-ACCESS not-accessible
|
||||
STATUS current
|
||||
DESCRIPTION
|
||||
"Represents the unique MAC Address of station."
|
||||
::= { hh3cwapiStatsEntry 1 }
|
||||
|
||||
hh3cwapiStatsSTAAddress OBJECT-TYPE
|
||||
SYNTAX MacAddress
|
||||
MAX-ACCESS read-only
|
||||
STATUS current
|
||||
DESCRIPTION
|
||||
"The MAC address of the STA to which the statistics in this
|
||||
conceptual row belong."
|
||||
::= { hh3cwapiStatsEntry 2 }
|
||||
|
||||
hh3cwapiStatsVersion OBJECT-TYPE
|
||||
SYNTAX Unsigned32 (1..4294967295)
|
||||
MAX-ACCESS read-only
|
||||
STATUS current
|
||||
DESCRIPTION
|
||||
"The WAPI version with which the STA is associated."
|
||||
::= { hh3cwapiStatsEntry 3 }
|
||||
|
||||
hh3cwapiStatsCtrlPortStatus OBJECT-TYPE
|
||||
SYNTAX TruthValue
|
||||
MAX-ACCESS read-only
|
||||
STATUS current
|
||||
DESCRIPTION
|
||||
"This object indicates the status of the authentication
|
||||
entity's controlled port. When the value is TRUE, it means
|
||||
'authenticated'. Otherwise, it means 'unauthenticated'."
|
||||
::= { hh3cwapiStatsEntry 4 }
|
||||
|
||||
hh3cwapiStatsSelectedUniCipher OBJECT-TYPE
|
||||
SYNTAX OCTET STRING (SIZE(4))
|
||||
MAX-ACCESS read-only
|
||||
STATUS current
|
||||
DESCRIPTION
|
||||
"The unicast cipher suite selector used during association."
|
||||
::= { hh3cwapiStatsEntry 5 }
|
||||
|
||||
hh3cwapiStatsWPIReplayCnt OBJECT-TYPE
|
||||
SYNTAX Counter32
|
||||
MAX-ACCESS read-only
|
||||
STATUS current
|
||||
DESCRIPTION
|
||||
"The number of WPI MPDUs discarded by the replay mechanism."
|
||||
::= { hh3cwapiStatsEntry 6 }
|
||||
|
||||
hh3cwapiStatsWPIDecryptErr OBJECT-TYPE
|
||||
SYNTAX Counter32
|
||||
MAX-ACCESS read-only
|
||||
STATUS current
|
||||
DESCRIPTION
|
||||
"The number of WPI MPDUs discarded because of unavailable cipher
|
||||
key during WPI-SMS4 decryption."
|
||||
::= { hh3cwapiStatsEntry 7 }
|
||||
|
||||
hh3cwapiStatsWPIMICErr OBJECT-TYPE
|
||||
SYNTAX Counter32
|
||||
MAX-ACCESS read-only
|
||||
STATUS current
|
||||
DESCRIPTION
|
||||
"The number of WPI MPDUs discarded because of MIC checking
|
||||
failure during WPI-SMS4 decryption."
|
||||
::= { hh3cwapiStatsEntry 8 }
|
||||
|
||||
hh3cwapiStatsWAISignatureErr OBJECT-TYPE
|
||||
SYNTAX Counter32
|
||||
MAX-ACCESS read-only
|
||||
STATUS current
|
||||
DESCRIPTION
|
||||
"This counter increases when the received WAI packets' signature
|
||||
is wrong."
|
||||
::= { hh3cwapiStatsEntry 9 }
|
||||
|
||||
hh3cwapiStatsWAIHMACErr OBJECT-TYPE
|
||||
SYNTAX Counter32
|
||||
MAX-ACCESS read-only
|
||||
STATUS current
|
||||
DESCRIPTION
|
||||
"This counter increases when message authentication key
|
||||
checking error occurs on the received WAI packets."
|
||||
::= { hh3cwapiStatsEntry 10 }
|
||||
|
||||
hh3cwapiStatsWAIAuthenFail OBJECT-TYPE
|
||||
SYNTAX Counter32
|
||||
MAX-ACCESS read-only
|
||||
STATUS current
|
||||
DESCRIPTION
|
||||
"This counter increases when the WAI authentication result
|
||||
is unsuccessful."
|
||||
::= { hh3cwapiStatsEntry 11 }
|
||||
|
||||
hh3cwapiStatsWAIDiscardCnt OBJECT-TYPE
|
||||
SYNTAX Counter32
|
||||
MAX-ACCESS read-only
|
||||
STATUS current
|
||||
DESCRIPTION
|
||||
"This counter increases when the received WAI packet is
|
||||
discarded."
|
||||
::= { hh3cwapiStatsEntry 12 }
|
||||
|
||||
hh3cwapiStatsWAITimeoutCnt OBJECT-TYPE
|
||||
SYNTAX Counter32
|
||||
MAX-ACCESS read-only
|
||||
STATUS current
|
||||
DESCRIPTION
|
||||
"This counter increases when a WAI packet timeout is
|
||||
detected."
|
||||
::= { hh3cwapiStatsEntry 13 }
|
||||
|
||||
hh3cwapiStatsWAIFormatErr OBJECT-TYPE
|
||||
SYNTAX Counter32
|
||||
MAX-ACCESS read-only
|
||||
STATUS current
|
||||
DESCRIPTION
|
||||
"This counter increases when WAI packet format error occurs"
|
||||
::= { hh3cwapiStatsEntry 14 }
|
||||
|
||||
hh3cwapiStatsWAICertFail OBJECT-TYPE
|
||||
SYNTAX Counter32
|
||||
MAX-ACCESS read-only
|
||||
STATUS current
|
||||
DESCRIPTION
|
||||
"This counter increases when WAI certificate authentication
|
||||
fails."
|
||||
::= { hh3cwapiStatsEntry 15 }
|
||||
|
||||
hh3cwapiStatsWAIUniFail OBJECT-TYPE
|
||||
SYNTAX Counter32
|
||||
MAX-ACCESS read-only
|
||||
STATUS current
|
||||
DESCRIPTION
|
||||
"This counter increases when WAI unicast cipher key
|
||||
negotiation succeeds."
|
||||
::= { hh3cwapiStatsEntry 16 }
|
||||
|
||||
hh3cwapiStatsWAIMultiFail OBJECT-TYPE
|
||||
SYNTAX Counter32
|
||||
MAX-ACCESS read-only
|
||||
STATUS current
|
||||
DESCRIPTION
|
||||
"This counter increases when the WAI multicast cipher key
|
||||
announcement failure occurs."
|
||||
::= { hh3cwapiStatsEntry 17 }
|
||||
|
||||
-- ************************************************************************
|
||||
-- * trap OBJECT
|
||||
-- ************************************************************************
|
||||
|
||||
Reference in New Issue
Block a user