cabhPsDev802dot11SecPSKPassPhraseToKey

CABH-PS-DEV-MIB · .1.3.6.1.4.1.4491.2.4.1.1.6.2.2.1.5

Object

column r/w OctetString
The Password used for PS to derive WPA PSK encryption key.
After a successful set, the values of 
cabhPsDev802dot11SecWPAPreSharedKey is updated as described
below:
              
For wpaPSK:
If cabhPsDev802dot11SecOperMode wpaPSK bit is set to '1'
the value of cabhPsDev802dot11SecWPAPreSharedKey is updated
with the Password Base Key Derivation Function from  the 
Password-based Cryptographic Specification PKCS #5 v2.0 
RFC 2898 (PBKDF2) with the following specific parameters:
              
PSK = PBKDF2(PassPhrase, ssid, ssidLength, 4096, 256)
PassPhrase is the value of this object
ssid is the PS SSID value used as the function salt
ssidLength is the number of octets of ssid
the iterations count is 4096 and the key generation length
is 256 bits (32 octets).
              
This object value is normally read by issuing SNMP request 
PDUs. This object can be cleared with an SNMP SET to an
empty string Value and the PS MUST not update the type of
keys being set to '1' in cabhPsDev802dot11SecOperMode.
              
Vector examples for wpaPSK:
              
for wpaPSK:
passphrase:
       'ABCD4321' ( hex code 0x41.42.43.44.34.33.32.31 )
SSID: 'ABCD4321' ( hex code 0x41.42.43.44.34.33.32.31 )
              
256 bit PBKDF2('ABCD4321', 'ABCD4321', 8, 4096, 32)
cabhPsDev802dot11SecWPAPreSharedKey =
0x7C199CF2FEF9AF206C8EE0E9703920C2
  3517068B3F96B011E0F975C9131BDB58

Context

MIB
CABH-PS-DEV-MIB
OID
.1.3.6.1.4.1.4491.2.4.1.1.6.2.2.1.5
Type
column
Access
readwrite
Status
current
Parent
cabhPsDev802dot11SecEntry
Groups
1

Walk the column to discover its indexed instances, or supply every index to read one instance.

Walk the column
/usr/bin/snmpbulkwalk -v2c -c '<community>' -Pud -Ir -OQUs -m 'CABH-PS-DEV-MIB' -M '/opt/observium/mibs/rfc:/opt/observium/mibs/net-snmp' 'udp:<hostname>:161' 'CABH-PS-DEV-MIB::cabhPsDev802dot11SecPSKPassPhraseToKey'
More examples
Read one indexed instance
/usr/bin/snmpget -v2c -c '<community>' -Pud -Ir -OQUv -m 'CABH-PS-DEV-MIB' -M '/opt/observium/mibs/rfc:/opt/observium/mibs/net-snmp' 'udp:<hostname>:161' 'CABH-PS-DEV-MIB::cabhPsDev802dot11SecPSKPassPhraseToKey.<ifIndex>'
Translate to a numeric OID
/usr/bin/snmptranslate -Pud -Ir -On -m 'CABH-PS-DEV-MIB' -M '/opt/observium/mibs/rfc:/opt/observium/mibs/net-snmp' 'CABH-PS-DEV-MIB::cabhPsDev802dot11SecPSKPassPhraseToKey'

Syntax

OctetString

Values & Constraints

Object Constraints
range: 8-63

Conformance