530 lines
17 KiB
Plaintext
530 lines
17 KiB
Plaintext
-- *******************************************************************
|
|
-- QTECH-WLAN-SECURITY-MIB.mib : Qtech WLAN DHCP MIB
|
|
--
|
|
-- Oct 2009, luolc
|
|
--
|
|
-- Copyright (c) 2009 by Qtech Networks Co.,Ltd.
|
|
-- All rights reserved.
|
|
-- *******************************************************************
|
|
QTECH-WLAN-SECURITY-MIB DEFINITIONS ::= BEGIN
|
|
IMPORTS
|
|
MODULE-IDENTITY,
|
|
OBJECT-TYPE,
|
|
Integer32,
|
|
Unsigned32
|
|
FROM SNMPv2-SMI
|
|
TruthValue,
|
|
DisplayString,
|
|
MacAddress,
|
|
RowStatus
|
|
FROM SNMPv2-TC
|
|
MODULE-COMPLIANCE,
|
|
NOTIFICATION-GROUP,
|
|
OBJECT-GROUP
|
|
FROM SNMPv2-CONF
|
|
qtechApgWlanId
|
|
FROM QTECH-AC-MGMT-MIB
|
|
qtechMgmt
|
|
FROM QTECH-SMI;
|
|
|
|
|
|
-- **********************************************
|
|
-- * MODULE IDENTITY
|
|
-- **********************************************
|
|
qtechWLANsecurityMIB MODULE-IDENTITY
|
|
LAST-UPDATED "200910280000Z"
|
|
ORGANIZATION
|
|
"Qtech Networks Co.,Ltd."
|
|
CONTACT-INFO
|
|
"Tel: 4008-111-000
|
|
E-mail: service@qtech.com.cn "
|
|
|
|
DESCRIPTION
|
|
"
|
|
Wlan security software private MIB for Qtech SNC.
|
|
This is AC device manage MIB.
|
|
"
|
|
REVISION "200910280000Z"
|
|
DESCRIPTION
|
|
"Initial version of this MIB module."
|
|
|
|
::= { qtechMgmt 61 }
|
|
|
|
|
|
-- ***************************************************************************
|
|
-- * Major sections
|
|
-- ***************************************************************************
|
|
qtechWLANsecurityMIBObjects OBJECT IDENTIFIER ::= { qtechWLANsecurityMIB 1 }
|
|
|
|
|
|
--***************************************************************************
|
|
--* AP agent MIB object
|
|
--***************************************************************************
|
|
|
|
qtechAPworkmode OBJECT-TYPE
|
|
SYNTAX INTEGER { fitap(1), fatap(2) }
|
|
MAX-ACCESS read-write
|
|
STATUS current
|
|
DESCRIPTION
|
|
"This Attribute present AP device work mode ,
|
|
Value 1 means Fit AP , Value 2 means Fat AP."
|
|
DEFVAL { 1 }
|
|
::= { qtechWLANsecurityMIBObjects 1}
|
|
|
|
--***************************************************************************
|
|
--* qtechWLANsecurityConfig Table
|
|
--***************************************************************************
|
|
|
|
qtechWLANsecurityConfigTable OBJECT-TYPE
|
|
SYNTAX SEQUENCE OF QtechWLANsecurityConfigEntry
|
|
MAX-ACCESS not-accessible
|
|
STATUS current
|
|
DESCRIPTION
|
|
"Qtech Private WLAN security MIB"
|
|
::={ qtechWLANsecurityMIBObjects 2 }
|
|
|
|
|
|
qtechWLANsecurityConfigEntry OBJECT-TYPE
|
|
SYNTAX QtechWLANsecurityConfigEntry
|
|
MAX-ACCESS not-accessible
|
|
STATUS current
|
|
DESCRIPTION
|
|
"An agent MAY process one or more WLAN security , which is identifed by qtechApgWlanId.
|
|
In other words, wlan ID is the index of this MIB table."
|
|
INDEX { qtechApgWlanId }
|
|
::={ qtechWLANsecurityConfigTable 1 }
|
|
|
|
|
|
QtechWLANsecurityConfigEntry ::=
|
|
SEQUENCE {
|
|
qtechWLANsecrymode INTEGER,
|
|
qtechstaticweplength INTEGER,
|
|
qtech8021xweplength INTEGER,
|
|
qtechWPAenabled TruthValue,
|
|
qtechWPAPairwisecipher INTEGER,
|
|
qtechWPAakmmode INTEGER,
|
|
qtechWPApskPassPhrase DisplayString,
|
|
qtechWLANsecry80211i TruthValue,
|
|
qtechWAPIasuIpaddress Unsigned32,
|
|
qtechWAPIcertificateformat INTEGER,
|
|
qtechWAPImsrekeyClientoff TruthValue,
|
|
qtechWAPIimportcertificate INTEGER,
|
|
qtechWAPIcacertificatename DisplayString,
|
|
qtechWAPIlocalcertificatename DisplayString,
|
|
qtechWAPIascertificatename DisplayString,
|
|
qtechRSNenabled TruthValue,
|
|
qtechRSNPairwisecipher INTEGER,
|
|
qtechRSNakmmode INTEGER,
|
|
qtechRSNpskPassPhrase DisplayString,
|
|
qtechWEPAuthenAlgorithm INTEGER,
|
|
qtechWLANsecurityStatus RowStatus,
|
|
qtechACauthenMethodsupport INTEGER,
|
|
qtechWLANEAPAuthenSupport INTEGER
|
|
}
|
|
|
|
qtechWLANsecrymode OBJECT-TYPE
|
|
SYNTAX INTEGER {open(1),staticwep(2), wep8021x(3),wpanone(4),wpapsk(5),wpa8021x(6),tsn(7) }
|
|
MAX-ACCESS read-write
|
|
STATUS current
|
|
DESCRIPTION
|
|
"This attribute present wlan security mode. Value 1 means open,
|
|
Value 2 means static-wep,Value 3 means 802.1x-wep,Value 4 means WPA-PSK,
|
|
Value 5 means WPA-802.1x,Value 6 means TSN(Hybrid)"
|
|
::= { qtechWLANsecurityConfigEntry 1}
|
|
|
|
qtechstaticweplength OBJECT-TYPE
|
|
SYNTAX INTEGER { wep40(1),wep104(2),wep128(3)}
|
|
MAX-ACCESS read-write
|
|
STATUS current
|
|
DESCRIPTION
|
|
"Static WEP key length,1 means WEP-40,
|
|
2 means WEP-104, 3 means WEP-128,default is 2."
|
|
DEFVAL { 2 }
|
|
::= { qtechWLANsecurityConfigEntry 2}
|
|
|
|
|
|
qtech8021xweplength OBJECT-TYPE
|
|
SYNTAX INTEGER { wep40(1),wep104(2),wep128(3)}
|
|
MAX-ACCESS read-write
|
|
STATUS current
|
|
DESCRIPTION
|
|
"IEEE802.1x WEP key length,1 means WEP-40,
|
|
2 means WEP-104, 3 means WEP-128,default is 2."
|
|
DEFVAL { 2 }
|
|
::= { qtechWLANsecurityConfigEntry 3}
|
|
|
|
qtechWPAenabled OBJECT-TYPE
|
|
SYNTAX TruthValue
|
|
MAX-ACCESS read-write
|
|
STATUS current
|
|
DESCRIPTION
|
|
"Does this WLAN open WPA1 (it is not RSNA) support. "
|
|
DEFVAL { false }
|
|
::= { qtechWLANsecurityConfigEntry 4}
|
|
|
|
|
|
qtechWPAPairwisecipher OBJECT-TYPE
|
|
SYNTAX INTEGER { tkip(1),aes(2), tkiporaes(3) }
|
|
MAX-ACCESS read-write
|
|
STATUS current
|
|
DESCRIPTION
|
|
"WPA1 cipher mode default is TKIP(1)."
|
|
DEFVAL { 1 }
|
|
::= { qtechWLANsecurityConfigEntry 5}
|
|
|
|
|
|
qtechWPAakmmode OBJECT-TYPE
|
|
SYNTAX INTEGER { ieee8021x(1), psk(2), pskor8021x(3) }
|
|
MAX-ACCESS read-write
|
|
STATUS current
|
|
DESCRIPTION
|
|
"WPA1 AKM mode ,default is 802.1x."
|
|
DEFVAL { 1 }
|
|
::= { qtechWLANsecurityConfigEntry 6}
|
|
|
|
|
|
qtechWPApskPassPhrase OBJECT-TYPE
|
|
SYNTAX DisplayString
|
|
MAX-ACCESS read-write
|
|
STATUS current
|
|
DESCRIPTION
|
|
"WPA1 PSK password ,it is write-only.
|
|
Any try to read it return FAIL."
|
|
::= { qtechWLANsecurityConfigEntry 7 }
|
|
|
|
|
|
qtechWLANsecry80211i OBJECT-TYPE
|
|
SYNTAX TruthValue
|
|
MAX-ACCESS read-write
|
|
STATUS current
|
|
DESCRIPTION
|
|
"IEEE802.11i or WAPI security mode.
|
|
true means IEEE802.11i, false means WAPI."
|
|
DEFVAL { true}
|
|
::= { qtechWLANsecurityConfigEntry 8 }
|
|
|
|
|
|
qtechWAPIasuIpaddress OBJECT-TYPE
|
|
SYNTAX Unsigned32 (1..4294967295)
|
|
MAX-ACCESS read-write
|
|
STATUS current
|
|
DESCRIPTION
|
|
"WAPI ASU IP address."
|
|
::= { qtechWLANsecurityConfigEntry 9 }
|
|
|
|
|
|
qtechWAPIcertificateformat OBJECT-TYPE
|
|
SYNTAX INTEGER { x509v3(1), wapigbw(2) }
|
|
MAX-ACCESS read-write
|
|
STATUS current
|
|
DESCRIPTION
|
|
"WAPI certificate format ,1 means x509v3,
|
|
2 means WAPI-GBW. Now we only support x509v3."
|
|
DEFVAL { 1 }
|
|
::= { qtechWLANsecurityConfigEntry 10 }
|
|
|
|
|
|
qtechWAPImsrekeyClientoff OBJECT-TYPE
|
|
SYNTAX TruthValue
|
|
MAX-ACCESS read-write
|
|
STATUS current
|
|
DESCRIPTION
|
|
"When one user off line, deos the WAPI sure update group keys,
|
|
default is false."
|
|
DEFVAL { false }
|
|
::= { qtechWLANsecurityConfigEntry 11 }
|
|
|
|
|
|
qtechWAPIimportcertificate OBJECT-TYPE
|
|
SYNTAX INTEGER { ca(1),local(2),as(3) }
|
|
MAX-ACCESS read-write
|
|
STATUS current
|
|
DESCRIPTION
|
|
"Import WAPI certificate,this is write-only."
|
|
::= { qtechWLANsecurityConfigEntry 12 }
|
|
|
|
|
|
qtechWAPIcacertificatename OBJECT-TYPE
|
|
SYNTAX DisplayString
|
|
MAX-ACCESS read-write
|
|
STATUS current
|
|
DESCRIPTION
|
|
"WAPI CA certificate file name, default is wapi_ca.cer."
|
|
::= { qtechWLANsecurityConfigEntry 13 }
|
|
|
|
qtechWAPIlocalcertificatename OBJECT-TYPE
|
|
SYNTAX DisplayString
|
|
MAX-ACCESS read-write
|
|
STATUS current
|
|
DESCRIPTION
|
|
"WAPI Local certificate file name, default is wapi_local.cer."
|
|
::= { qtechWLANsecurityConfigEntry 14 }
|
|
|
|
qtechWAPIascertificatename OBJECT-TYPE
|
|
SYNTAX DisplayString
|
|
MAX-ACCESS read-write
|
|
STATUS current
|
|
DESCRIPTION
|
|
"WAPI ASU certificate file name, default is wapi_as.cer."
|
|
::= { qtechWLANsecurityConfigEntry 15 }
|
|
|
|
qtechRSNenabled OBJECT-TYPE
|
|
SYNTAX TruthValue
|
|
MAX-ACCESS read-write
|
|
STATUS current
|
|
DESCRIPTION
|
|
"RSNA (WPA2) enable or disable"
|
|
::= { qtechWLANsecurityConfigEntry 16 }
|
|
|
|
qtechRSNPairwisecipher OBJECT-TYPE
|
|
SYNTAX INTEGER { tkip(1), aes(2), tkiporaes(3) }
|
|
MAX-ACCESS read-write
|
|
STATUS current
|
|
DESCRIPTION
|
|
"WPA2 cipher mode."
|
|
DEFVAL { 2 }
|
|
::= { qtechWLANsecurityConfigEntry 17 }
|
|
|
|
qtechRSNakmmode OBJECT-TYPE
|
|
SYNTAX INTEGER { ieee8021x(1), psk(2), pskor8021x(3) }
|
|
MAX-ACCESS read-write
|
|
STATUS current
|
|
DESCRIPTION
|
|
"WPA2 authen key manage mode."
|
|
DEFVAL { 1 }
|
|
::= { qtechWLANsecurityConfigEntry 18 }
|
|
|
|
qtechRSNpskPassPhrase OBJECT-TYPE
|
|
SYNTAX DisplayString
|
|
MAX-ACCESS read-write
|
|
STATUS current
|
|
DESCRIPTION
|
|
"WPA2 PSK password ,it is write-only.
|
|
Any try to read it return FAIL."
|
|
::= { qtechWLANsecurityConfigEntry 19 }
|
|
|
|
qtechWEPAuthenAlgorithm OBJECT-TYPE
|
|
SYNTAX INTEGER { openSystem(1), sharedKey(2) }
|
|
MAX-ACCESS read-only
|
|
STATUS current
|
|
DESCRIPTION
|
|
"authentication algorithms supported by the Authencator.
|
|
The following are the values and the associated algorithm.
|
|
Value = 1: Open System
|
|
Value = 2: Shared Key"
|
|
::= { qtechWLANsecurityConfigEntry 20 }
|
|
|
|
qtechWLANsecurityStatus OBJECT-TYPE
|
|
SYNTAX RowStatus
|
|
MAX-ACCESS read-write
|
|
STATUS current
|
|
DESCRIPTION
|
|
"The status column used for creating and
|
|
deleting instances of the columnar objects in the
|
|
default WEP key Table."
|
|
::= { qtechWLANsecurityConfigEntry 21 }
|
|
|
|
qtechACauthenMethodsupport OBJECT-TYPE
|
|
SYNTAX INTEGER
|
|
MAX-ACCESS read-write
|
|
STATUS current
|
|
DESCRIPTION
|
|
"authentication method supported by the AC, including the
|
|
EAP-SIM authentication, WEP authentication, EAP-MD5
|
|
authentication."
|
|
::= { qtechWLANsecurityConfigEntry 22 }
|
|
|
|
qtechWLANEAPAuthenSupport OBJECT-TYPE
|
|
SYNTAX INTEGER
|
|
{
|
|
enableEAPAuthentication(0),
|
|
disableEAPAuthentication(1),
|
|
notSupportingEAPAuthentication(2)
|
|
}
|
|
MAX-ACCESS read-write
|
|
STATUS current
|
|
DESCRIPTION
|
|
"Whether the current ap or ac enables or diables the EAP authentication."
|
|
::= { qtechWLANsecurityConfigEntry 23 }
|
|
--********************************************************************
|
|
-- * dot11WEPDefaultKeys TABLE
|
|
--********************************************************************
|
|
|
|
qtechWEPDefaultKeysTable OBJECT-TYPE
|
|
SYNTAX SEQUENCE OF QtechWEPDefaultKeysEntry
|
|
MAX-ACCESS not-accessible
|
|
STATUS current
|
|
DESCRIPTION
|
|
"Conceptual table for WEP default keys. "
|
|
REFERENCE
|
|
"IEEE Std 802.11-2007, 8.3.2"
|
|
::= { qtechWLANsecurityMIBObjects 3 }
|
|
|
|
qtechWEPDefaultKeysEntry OBJECT-TYPE
|
|
SYNTAX QtechWEPDefaultKeysEntry
|
|
MAX-ACCESS not-accessible
|
|
STATUS current
|
|
DESCRIPTION
|
|
"An Entry (conceptual row) in the WEP Default Keys Table."
|
|
INDEX { qtechApgWlanId,
|
|
qtechWEPDefaultKeyIndex }
|
|
::= { qtechWEPDefaultKeysTable 1 }
|
|
|
|
QtechWEPDefaultKeysEntry ::=
|
|
SEQUENCE {
|
|
qtechWEPDefaultKeyIndex INTEGER,
|
|
qtechWEPDefaultKeyValue OCTET STRING,
|
|
qtechWEPDefaultKeyLength INTEGER
|
|
}
|
|
|
|
qtechWEPDefaultKeyIndex OBJECT-TYPE
|
|
SYNTAX INTEGER (1..4)
|
|
MAX-ACCESS not-accessible
|
|
STATUS current
|
|
DESCRIPTION
|
|
"The auxiliary variable used to identify instances
|
|
of the columnar objects in the WEP Default Keys Table.
|
|
The value of this variable is equal to the
|
|
WEPDefaultKeyID + 1"
|
|
::= { qtechWEPDefaultKeysEntry 1 }
|
|
|
|
qtechWEPDefaultKeyValue OBJECT-TYPE
|
|
SYNTAX OCTET STRING
|
|
MAX-ACCESS read-write
|
|
STATUS current
|
|
DESCRIPTION
|
|
"A WEP default secret key value."
|
|
::= { qtechWEPDefaultKeysEntry 2 }
|
|
|
|
qtechWEPDefaultKeyLength OBJECT-TYPE
|
|
SYNTAX INTEGER { wep40(1),wep104(2),wep128(3) }
|
|
MAX-ACCESS read-write
|
|
STATUS current
|
|
DESCRIPTION
|
|
"A WEP default secret key length."
|
|
::= { qtechWEPDefaultKeysEntry 3 }
|
|
|
|
--********************************************************************
|
|
-- * End of dot11WEPDefaultKeys TABLE
|
|
--********************************************************************
|
|
|
|
--********************************************************************
|
|
--* Compliance statements
|
|
--********************************************************************
|
|
qtechWlansecurityMIBConform OBJECT IDENTIFIER ::= { qtechWLANsecurityMIB 2 }
|
|
|
|
qtechWlansecurityMIBCompliances OBJECT IDENTIFIER ::= { qtechWlansecurityMIBConform 1 }
|
|
|
|
qtechWlansecurityMIBGroups OBJECT IDENTIFIER ::= { qtechWlansecurityMIBConform 2 }
|
|
|
|
qtechWlansecurityMIBCompliance MODULE-COMPLIANCE
|
|
STATUS current
|
|
DESCRIPTION
|
|
"The compliance statement for entities which implement
|
|
the wlan security module of Qtech Ac device Manager"
|
|
MODULE
|
|
MANDATORY-GROUPS {
|
|
qtechWlansecuritycofigGroup,
|
|
qtechWEPDefaultKeysGroup,
|
|
qtechWlansecurityTrapGroup
|
|
}
|
|
::= { qtechWlansecurityMIBCompliances 1 }
|
|
|
|
--********************************************************************
|
|
--* Units of conformance
|
|
--********************************************************************
|
|
|
|
qtechWlansecuritycofigGroup OBJECT-GROUP
|
|
OBJECTS {
|
|
qtechAPworkmode,
|
|
qtechWLANsecrymode ,
|
|
qtechstaticweplength,
|
|
qtech8021xweplength,
|
|
qtechWPAenabled,
|
|
qtechWPAPairwisecipher,
|
|
qtechWPAakmmode,
|
|
qtechWPApskPassPhrase,
|
|
qtechWLANsecry80211i,
|
|
qtechWAPIasuIpaddress,
|
|
qtechWAPIcertificateformat,
|
|
qtechWAPImsrekeyClientoff,
|
|
qtechWAPIimportcertificate,
|
|
qtechWAPIcacertificatename,
|
|
qtechWAPIlocalcertificatename,
|
|
qtechWAPIascertificatename,
|
|
qtechRSNenabled,
|
|
qtechRSNPairwisecipher,
|
|
qtechRSNakmmode,
|
|
qtechRSNpskPassPhrase,
|
|
qtechWEPAuthenAlgorithm,
|
|
qtechWLANsecurityStatus,
|
|
qtechACauthenMethodsupport,
|
|
qtechWLANEAPAuthenSupport,
|
|
qtechWlansecurityWepDecrytEnableTrapVar,
|
|
qtechWlansecurityDeviceMAC
|
|
}
|
|
STATUS current
|
|
DESCRIPTION
|
|
"This collection of objects represents the
|
|
WLAN security private MIB "
|
|
::= { qtechWlansecurityMIBGroups 1 }
|
|
|
|
qtechWEPDefaultKeysGroup OBJECT-GROUP
|
|
OBJECTS {
|
|
qtechWEPDefaultKeyValue,
|
|
qtechWEPDefaultKeyLength
|
|
}
|
|
STATUS current
|
|
DESCRIPTION
|
|
"This collection of objects represents the
|
|
WLAN WEP default keys."
|
|
::= { qtechWlansecurityMIBGroups 2 }
|
|
|
|
qtechWlansecurityTrapGroup NOTIFICATION-GROUP
|
|
NOTIFICATIONS {
|
|
qtechWlansecurityWepDecrytErr
|
|
}
|
|
STATUS current
|
|
DESCRIPTION
|
|
"This collection of objects represents the
|
|
wlan wep traps private MIB "
|
|
::= { qtechWlansecurityMIBGroups 3 }
|
|
|
|
--***********************************************************
|
|
--* variable of trap
|
|
--***********************************************************
|
|
qtechWlansecurityTrapvar OBJECT IDENTIFIER ::= { qtechWLANsecurityMIB 3 }
|
|
|
|
qtechWlansecurityWepDecrytEnableTrapVar OBJECT-TYPE
|
|
SYNTAX Integer32
|
|
MAX-ACCESS read-write
|
|
STATUS current
|
|
DESCRIPTION
|
|
"Tell the host whether need to send the trap."
|
|
::= { qtechWlansecurityTrapvar 1 }
|
|
|
|
qtechWlansecurityDeviceMAC OBJECT-TYPE
|
|
SYNTAX MacAddress
|
|
MAX-ACCESS read-write
|
|
STATUS current
|
|
DESCRIPTION
|
|
"MAC address of the device."
|
|
::= { qtechWlansecurityTrapvar 2 }
|
|
--***********************************************************
|
|
--* wep decryt error trap
|
|
--***********************************************************
|
|
qtechWLANsecurityTraps OBJECT IDENTIFIER ::= { qtechWLANsecurityMIB 0 }
|
|
|
|
qtechWlansecurityWepDecrytErr NOTIFICATION-TYPE
|
|
OBJECTS {
|
|
qtechApgWlanId,
|
|
qtechWlansecurityDeviceMAC
|
|
}
|
|
STATUS current
|
|
DESCRIPTION
|
|
"The information of an event of a wep decrytion error."
|
|
::= { qtechWLANsecurityTraps 1 }
|
|
|
|
|
|
END
|