CISCO-LWAPP-WAPI-MIB Table View

Table-centric layout grouping table, row, and column objects.

Standard view Table view

Tables

Rows

Columns

cLWapiWlanStats

table

.1.3.6.1.4.1.9.9.9997.1.1 · 1 row entry · 12 columns

Open in standard view

This table maintains the WAPI statistics for each WLAN on which WAPI is configured as the security protocol.

cLWapiWlanStatsEntry entry .1.3.6.1.4.1.9.9.9997.1.1.1

An entry in the cLWWSW Table

Indexes

CISCO-LWAPP-WLAN-MIBcLWlanIndex

Column	Syntax	OID
cLWWSWAISignatureErrors This counter shall increment when the signature in the received WAI message is incorrect	SNMPv2-SMICounter32 Textual Convention: SNMPv2-SMICounter32 `Unsigned32` Type Constraints: `range: 0..4294967295`	`.1.3.6.1.4.1.9.9.9997.1.1.1.1`
cLWWSWAIHMACErrors This counter shall increment when the message authentication code in the received WAI message is incorrect	SNMPv2-SMICounter32 Textual Convention: SNMPv2-SMICounter32 `Unsigned32` Type Constraints: `range: 0..4294967295`	`.1.3.6.1.4.1.9.9.9997.1.1.1.2`
cLWWSWAIAuthResultFailures This counter shall increment when the WAI authentication is unsuccessful	SNMPv2-SMICounter32 Textual Convention: SNMPv2-SMICounter32 `Unsigned32` Type Constraints: `range: 0..4294967295`	`.1.3.6.1.4.1.9.9.9997.1.1.1.3`
cLWWSWAIDiscardCounters This counter shall increment when the received WAI message is discarded	SNMPv2-SMICounter32 Textual Convention: SNMPv2-SMICounter32 `Unsigned32` Type Constraints: `range: 0..4294967295`	`.1.3.6.1.4.1.9.9.9997.1.1.1.4`
cLWWSWAITimeoutCounters This counter shall increment when the WAI message is timeout	SNMPv2-SMICounter32 Textual Convention: SNMPv2-SMICounter32 `Unsigned32` Type Constraints: `range: 0..4294967295`	`.1.3.6.1.4.1.9.9.9997.1.1.1.5`
cLWWSWAIFormatErrors This counter shall increment when there exists format error in the WAI message	SNMPv2-SMICounter32 Textual Convention: SNMPv2-SMICounter32 `Unsigned32` Type Constraints: `range: 0..4294967295`	`.1.3.6.1.4.1.9.9.9997.1.1.1.6`
cLWWSWAICertHandshakeFailures This counter shall increment when the WAI Certificate Authentication is unsuccessful	SNMPv2-SMICounter32 Textual Convention: SNMPv2-SMICounter32 `Unsigned32` Type Constraints: `range: 0..4294967295`	`.1.3.6.1.4.1.9.9.9997.1.1.1.7`
cLWWSWAIUnicastHandshakeFailures This counter shall increment when the WAI Unicast Key Negotiation is unsuccessful	SNMPv2-SMICounter32 Textual Convention: SNMPv2-SMICounter32 `Unsigned32` Type Constraints: `range: 0..4294967295`	`.1.3.6.1.4.1.9.9.9997.1.1.1.8`
cLWWSWAIMulticastHandshakeFailures This counter shall increment when the WAI Multicast Key Negotiation is unsuccessful	SNMPv2-SMICounter32 Textual Convention: SNMPv2-SMICounter32 `Unsigned32` Type Constraints: `range: 0..4294967295`	`.1.3.6.1.4.1.9.9.9997.1.1.1.9`
cLWWSWPIRXReplayCounters This counter shall increment when the WPI RX replay check is unsuccessful	SNMPv2-SMICounter32 Textual Convention: SNMPv2-SMICounter32 `Unsigned32` Type Constraints: `range: 0..4294967295`	`.1.3.6.1.4.1.9.9.9997.1.1.1.10`
cLWWSWPIRXMicErrorCounters This counter shall increment when the WPI MIC is error	SNMPv2-SMICounter64 Textual Convention: SNMPv2-SMICounter64 `Unsigned64` Type Constraints: `range: 0..18446744073709551615`	`.1.3.6.1.4.1.9.9.9997.1.1.1.11`
cLWWSWPIRXDecryptErrorCounters This counter shall increment when the WPI Decryption is error	SNMPv2-SMICounter64 Textual Convention: SNMPv2-SMICounter64 `Unsigned64` Type Constraints: `range: 0..18446744073709551615`	`.1.3.6.1.4.1.9.9.9997.1.1.1.12`

cLWapiWlanConfig

table

.1.3.6.1.4.1.9.9.9997.1.3 · 1 row entry · 15 columns

Open in standard view

This table maintains the WAPI config entry for the WLAN.

cLWapiWlanConfigEntrty entry .1.3.6.1.4.1.9.9.9997.1.3.1

An entry in the cLWapiWlanConfig Table

Indexes

CISCO-LWAPP-WLAN-MIBcLWlanIndex

Column Syntax OID

cLWCSWlanWapiEnable

This object is used to enable the WAPI security on the WLAN.

SNMPv2-TCTruthValuer/w

Textual Convention: SNMPv2-TCTruthValue Enumeration

Type Values:

1	true
2	false

.1.3.6.1.4.1.9.9.9997.1.3.1.1

cLWCSWlanWapiAkmKeyMgmtMode

This object is used to enable the AKM type to be used for the WAPI WLAN.

Enumerationr/w

Enumerated Values:

0	invalid
1	cert
2	psk

.1.3.6.1.4.1.9.9.9997.1.3.1.2

cLWCSWlanWapiEncryptType

This object is used to enable the encryption type for WAPI WLAN.

Bitsr/w

Enumerated Values:

sms4

.1.3.6.1.4.1.9.9.9997.1.3.1.3

cLWCSWlanWapiPskFmt

This object indicates the type of the authentication preshared key
configured through the object cLWCSWlanWapiPskSetkey.
Note that the key configuration is applicable only when psk is configured
as the…

CISCO-LWAPP-TC-MIBCLSecKeyFormatr/w

Textual Convention: CISCO-LWAPP-TC-MIBCLSecKeyFormat Enumeration

Type Values:

1	default
2	hex
3	ascii

.1.3.6.1.4.1.9.9.9997.1.3.1.4

cLWCSWlanWapiPsk

This object is used to configure the Pre-Shared Key for WAI PSK authentication for the WLAN.
The key can be in ASCII or HEX format.
'ascii' 8-40 characters
'hex' 4-40 octets.

OctetStringr/w

Constraints:
range: 8-80

.1.3.6.1.4.1.9.9.9997.1.3.1.5

cLWCSWlanWapiConfigUnicasCiphersEntry

The selector of a supported unicast cipher suite. It consists of an OUI (the first 3 octets)
and a cipher suite identifier (the last octet).

OctetString

Constraints:
range: 4-4

.1.3.6.1.4.1.9.9.9997.1.3.1.6

cLWCSWlanWapiConfigUnicastCipherSize

This object indicates the length in bit of the USK. This should be 256 for SMS4.
The first 128bits is the UEK and the last 128bits is the UCK.

Unsigned32

Textual Convention: CISCO-ATM-SWITCH-CUG-MIBUnsigned32 Unsigned32

.1.3.6.1.4.1.9.9.9997.1.3.1.7

cLWCSWlanWapiMcastCipherSize

This object indicates the length in bit of the MSK. This should be 256 for in SMS4.
The first 128bits is the MEK and the last 128bits is the MCK.

Unsigned32

Textual Convention: CISCO-ATM-SWITCH-CUG-MIBUnsigned32 Unsigned32

.1.3.6.1.4.1.9.9.9997.1.3.1.8

cLWCSWlanBKLifeTime

This object is used to configure the maximum lifetime of a BK in the BK cache.

secondsUnsigned32r/w

Textual Convention: CISCO-ATM-SWITCH-CUG-MIBUnsigned32 Unsigned32

.1.3.6.1.4.1.9.9.9997.1.3.1.9

cLWCSWlanBKReauthThreshold

This object is used to configure the percentage of the BK lifetime that should expire before a WAI reauthentication occurs.

percentageUnsigned32r/w

Textual Convention: CISCO-ATM-SWITCH-CUG-MIBUnsigned32 Unsigned32

.1.3.6.1.4.1.9.9.9997.1.3.1.10

cLWCSWlanWapiConfigMulticastCipher

This object indicates the multicast cipher suite that this entity must adopt. The WAPI Parameter
Set information element shall adopt the value of this variable, which contains a 3-octet OUI and
a one-octet cipher suite …

OctetStringr/w

Constraints:
range: 4-4

.1.3.6.1.4.1.9.9.9997.1.3.1.11

cLWCSWlanWapiAuthenticationSuiteSelected

This object represents the selector of the last AKM suite negotiated.

OctetString

Constraints:
range: 4-4

.1.3.6.1.4.1.9.9.9997.1.3.1.12

cLWCSWlanWapiUnicastCipherSelected

This object indicates the selector of the last unicast cipher suite negotiated.

OctetString

Constraints:
range: 4-4

.1.3.6.1.4.1.9.9.9997.1.3.1.13

cLWCSWlanWapiMulticastCipherSelected

This object indicates the selector of the last multicast cipher suite negotiated.

OctetString

Constraints:
range: 4-4

.1.3.6.1.4.1.9.9.9997.1.3.1.14

cLWCSWlanWapiPreauthenticationState

This object represents the state of Preauthentication
in WAPI and currently it is not supported.

SNMPv2-TCTruthValue

Textual Convention: SNMPv2-TCTruthValue Enumeration

Type Values:

1	true
2	false

.1.3.6.1.4.1.9.9.9997.1.3.1.15

cLWapiAPTable

table

.1.3.6.1.4.1.9.9.9997.1.4 · 1 row entry · 1 columns

Open in standard view

This table maintains the WAPI details and 
configurations for each AP connected.

cLWapiAPEntry entry .1.3.6.1.4.1.9.9.9997.1.4.1

An entry in the cLWapiAPTable Table.

Indexes

CISCO-LWAPP-AP-MIBcLApSysMacAddress

Column	Syntax	OID
cLWCSWapiAPMaxUnicastKeysSupport This object represents the maximum number of USK's that an AP can support.	Integer32 Textual Convention: COPS-PR-SPPIInteger32 `Integer32` Type Constraints: `range: -2147483648..2147483647`	`.1.3.6.1.4.1.9.9.9997.1.4.1.1`

cLWapiWlanAKMSuitesConfigTable

table

.1.3.6.1.4.1.9.9.9997.1.5 · 1 row entry · 3 columns

Open in standard view

This table maintains the WAPI config entry for the WLAN.

cLWapiWlanAKMSuitesConfigEntry entry .1.3.6.1.4.1.9.9.9997.1.5.1

An entry in the cLWapiWlanAKMSuitesConfig Table

Indexes

CISCO-LWAPP-WLAN-MIBcLWlanIndex cLWCSWlanWapiAuthenticationSuiteIndex

Column Syntax OID

cLWCSWlanWapiAuthenticationSuiteIndex

This object is used to a index for AKM suites on the WLAN.

Enumeration

Enumerated Values:

1	cert
2	psk

.1.3.6.1.4.1.9.9.9997.1.5.1.1

cLWCSWlanWapiAuthenticationSuite

This object is used to indicate the AKM suite octects on the WLAN.

OctetString

Constraints:
range: 4-4

.1.3.6.1.4.1.9.9.9997.1.5.1.2

cLWCSWlanWapiAuthenticationSuiteEnable

This object is used to enable the AKM suites on the WLAN.

SNMPv2-TCTruthValuer/w

Textual Convention: SNMPv2-TCTruthValue Enumeration

Type Values:

1	true
2	false

.1.3.6.1.4.1.9.9.9997.1.5.1.3

cLWapiCiphers

table

.1.3.6.1.4.1.9.9.9997.1.6 · 1 row entry · 2 columns

Open in standard view

This table maintains the unicast cipher suites supported by this entity.
It allows enabling and disabling of each unicast cipher suite by network management.
The unicast cipher suite list in the WAPI Parameter Set information
element is formed using the information in this table.

cLWapiCiphersEntry entry .1.3.6.1.4.1.9.9.9997.1.6.1

An entry in the cLWapiCiphers Table.

Indexes

CISCO-LWAPP-WLAN-MIBcLWlanIndex cLWCSWlanCipherIndex

Column Syntax OID

cLWCSWlanCipherIndex

This object represents auxiliary index of the CiscoWapiCiphersEntry.

Unsigned32

Textual Convention: CISCO-ATM-SWITCH-CUG-MIBUnsigned32 Unsigned32

.1.3.6.1.4.1.9.9.9997.1.6.1.1

cLWCSWlanCipherEnabled

This object represents enables or disables the unicast cipher.

SNMPv2-TCTruthValuer/w

Textual Convention: SNMPv2-TCTruthValue Enumeration

Type Values:

1	true
2	false

.1.3.6.1.4.1.9.9.9997.1.6.1.2

CISCO-LWAPP-WAPI-MIB Table View

cLWapiWlanStats

cLWapiClientStats

cLWapiWlanConfig

cLWapiAPTable

cLWapiWlanAKMSuitesConfigTable

cLWapiCiphers