HH3C-WAPI-MIB Table View

Table-centric layout grouping table, row, and column objects.

Standard view Table view
Tables
3
Rows
3
Columns
67

hh3cwapiConfigTable

table
.1.3.6.1.4.1.25506.2.77.3.1 · 1 row entry · 8 columns
Open in standard view 
The table containing WAPI configuration objects.
hh3cwapiConfigEntry entry .1.3.6.1.4.1.25506.2.77.3.1.1
An entry in the hh3cwapiConfigTable.
Indexes
IF-MIBifIndex
Column Syntax OID
hh3cwapiConfigASIPAddressType
This object is used to set IP addresses type of AS.
INET-ADDRESS-MIBInetAddressTyper/w
Textual Convention: INET-ADDRESS-MIBInetAddressType Enumeration
Type Values:
0unknown
1ipv4
2ipv6
3ipv4z
4ipv6z
16dns
25l2vpn
 .1.3.6.1.4.1.25506.2.77.3.1.1.1
hh3cwapiConfigASIPAddress
This object is used to set the IP address of AS.
INET-ADDRESS-MIBInetAddressr/w
Textual Convention: INET-ADDRESS-MIBInetAddress OctetString
Type Constraints:
range: 0..255
 .1.3.6.1.4.1.25506.2.77.3.1.1.2
hh3cwapiConfigAuthMethod
This object selects a mechanism for WAPI authentication.
The default is certificate.
Enumerationr/w
Enumerated Values:
1certificate
2psk
3certificatePsk
 .1.3.6.1.4.1.25506.2.77.3.1.1.3
hh3cwapiConfigAuthMode
This object selects a mechanism for WAPI authentication.
When the value is standard, it shall indicate that the entity
acts based on the official definition. Otherwise, it shall
indicate that the entity finishes authent…
Enumerationr/w
Enumerated Values:
1standard
2radiusExtension
 .1.3.6.1.4.1.25506.2.77.3.1.1.4
hh3cwapiConfigISPDomain
The ISP domain name.
OctetStringr/w
Constraints:
range: 0-24
 .1.3.6.1.4.1.25506.2.77.3.1.1.5
hh3cwapiConfigCertificateDomain
The PKI domain name.
OctetStringr/w
Constraints:
range: 1-15
 .1.3.6.1.4.1.25506.2.77.3.1.1.6
hh3cwapiConfigASName
The name of AS.
OctetStringr/w
Constraints:
range: 1-15
 .1.3.6.1.4.1.25506.2.77.3.1.1.7
hh3cwapiConfigBKRekeyEnabled
This object indicates whether the BK rekey function is
supported. When the value is TRUE, it shall indicate that
the BK rekey function is supported. Otherwise, it shall
indicate that the BK rekey function is not support…
SNMPv2-TCTruthValuer/w
Textual Convention: SNMPv2-TCTruthValue Enumeration
Type Values:
1true
2false
 .1.3.6.1.4.1.25506.2.77.3.1.1.8

hh3cwapiConfigExtTable

table
.1.3.6.1.4.1.25506.2.77.3.2 · 1 row entry · 42 columns
Open in standard view 
The table containing WAPI configuration objects for SSID.
hh3cwapiConfigExtEntry entry .1.3.6.1.4.1.25506.2.77.3.2.1
An extend entry in the hh3cwapiConfigExtTable.
Indexes
hh3cwapiConfigServicePolicyID
Column Syntax OID
hh3cwapiConfigServicePolicyID
Represents the ID of each service policy.
SNMPv2-SMIInteger32
Textual Convention: SNMPv2-SMIInteger32 Integer32
Type Constraints:
range: -2147483648..2147483647
 .1.3.6.1.4.1.25506.2.77.3.2.1.1
hh3cwapiConfigUnicastCipherEnabled
This object enables or disables the unicast cipher.
SNMPv2-TCTruthValuer/w
Textual Convention: SNMPv2-TCTruthValue Enumeration
Type Values:
1true
2false
 .1.3.6.1.4.1.25506.2.77.3.2.1.2
hh3cwapiConfigUnicastCipherSize
This object indicates the length in bits of the unicast cipher
key. This should be 256 for SMS4, first 128 bits for encrypting,
last 128 bits for integrity checking.
Unsigned32
Constraints:
range: 0-4294967295
 .1.3.6.1.4.1.25506.2.77.3.2.1.3
hh3cwapiConfigAuthenticationSuiteEnabled
This variable indicates the corresponding AKM suite is enabled
or disabled.
SNMPv2-TCTruthValuer/w
Textual Convention: SNMPv2-TCTruthValue Enumeration
Type Values:
1true
2false
 .1.3.6.1.4.1.25506.2.77.3.2.1.4
hh3cwapiConfigAuthenticationSuite
The selector of an AKM suite. It consists of an OUI (the first 3
octets) and a cipher suite identifier (the last octet).
OctetString
Constraints:
range: 4-4
 .1.3.6.1.4.1.25506.2.77.3.2.1.5
hh3cwapiCfgExtASIPAddressType
This object is used to set IP addresses type of AS.
INET-ADDRESS-MIBInetAddressTyper/w
Textual Convention: INET-ADDRESS-MIBInetAddressType Enumeration
Type Values:
0unknown
1ipv4
2ipv6
3ipv4z
4ipv6z
16dns
25l2vpn
 .1.3.6.1.4.1.25506.2.77.3.2.1.6
hh3cwapiCfgExtASIPAddress
This object is used to set the IP address of AS.
INET-ADDRESS-MIBInetAddressr/w
Textual Convention: INET-ADDRESS-MIBInetAddress OctetString
Type Constraints:
range: 0..255
 .1.3.6.1.4.1.25506.2.77.3.2.1.7
hh3cwapiCfgExtASName
This object is used to set the name of AS.
OctetStringr/w
Constraints:
range: 1-15
 .1.3.6.1.4.1.25506.2.77.3.2.1.8
hh3cwapiCfgExtCertDomain
This object is used to set the PKI domain name.
OctetStringr/w
Constraints:
range: 1-15
 .1.3.6.1.4.1.25506.2.77.3.2.1.9
hh3cwapiCfgExtCertInstalled
This object indicates whether the entity has installed
certificate. When the value is TRUE, it shall indicate that
the SSID has installed certificate. Otherwise, it shall
indicate that the SSID hasn't installed certifi…
SNMPv2-TCTruthValue
Textual Convention: SNMPv2-TCTruthValue Enumeration
Type Values:
1true
2false
 .1.3.6.1.4.1.25506.2.77.3.2.1.10
hh3cwapiConfigVersion
The highest WAPI version this entity supports.
SNMPv2-SMIInteger32
Textual Convention: SNMPv2-SMIInteger32 Integer32
Type Constraints:
range: -2147483648..2147483647
 .1.3.6.1.4.1.25506.2.77.3.2.1.11
hh3cwapiControlledAuthControl
This object indicates whether the entity is enabled with
authentication. When the value is FALSE, it shall indicate that
authentication is not enabled on this entity, and the status of
the controlled port is 'authentica…
SNMPv2-TCTruthValue
Textual Convention: SNMPv2-TCTruthValue Enumeration
Type Values:
1true
2false
 .1.3.6.1.4.1.25506.2.77.3.2.1.12
hh3cwapiControlledPortControl
This object indicates the controlling type of the entity's port.
This object is available when
hh3cwapiControlledAuthControl is TRUE. When the value is
zero, it means 'automatic', and the status of the controlled port
i…
SNMPv2-SMIInteger32
Textual Convention: SNMPv2-SMIInteger32 Integer32
Type Constraints:
range: -2147483648..2147483647
 .1.3.6.1.4.1.25506.2.77.3.2.1.13
hh3cwapiOptionImplemented
This object indicates whether the entity supports WAPI. When the
value is TRUE, it shall indicate that the entity supports WAPI.
Otherwise, it shall indicate that the entity does not support WAPI.
SNMPv2-TCTruthValue
Textual Convention: SNMPv2-TCTruthValue Enumeration
Type Values:
1true
2false
 .1.3.6.1.4.1.25506.2.77.3.2.1.14
hh3cwapiPreauthImplemented
This object indicates whether the entity supports WAPI
preauthentication. This object can't be set to TRUE, unless
hh3cwapiOptionImplemented is TRUE.
SNMPv2-TCTruthValue
Textual Convention: SNMPv2-TCTruthValue Enumeration
Type Values:
1true
2false
 .1.3.6.1.4.1.25506.2.77.3.2.1.15
hh3cwapiEnabled
When this object is set to TRUE, it shall indicate that WAPI is
enabled on this entity. The entity will advertise the WAPI
information element in its beacon and probe response frames.
SNMPv2-TCTruthValuer/w
Textual Convention: SNMPv2-TCTruthValue Enumeration
Type Values:
1true
2false
 .1.3.6.1.4.1.25506.2.77.3.2.1.16
hh3cwapiPreauthEnabled
When this object is set to TRUE, it shall indicate that WAPI
preauthentication is enabled on this entity. Otherwise, it shall
indicate that WAPI preauthentication is disabled on this entity.
This object requires that hh…
SNMPv2-TCTruthValuer/w
Textual Convention: SNMPv2-TCTruthValue Enumeration
Type Values:
1true
2false
 .1.3.6.1.4.1.25506.2.77.3.2.1.17
hh3cwapiCfgUniKeysSupported
This object indicates how many unicast keys the entity supports
for WAPI.
SNMPv2-SMIUnsigned32
Textual Convention: SNMPv2-SMIUnsigned32 Unsigned32
Type Constraints:
range: 0..4294967295
 .1.3.6.1.4.1.25506.2.77.3.2.1.18
hh3cwapiCfgUniRekeyMethod
This object selects a mechanism for rekeying the WAPI USK. The
default is time-based, once per day. Rekeying the USK is only
applicable to an entity acting as an AE or ASUE.
Enumerationr/w
Enumerated Values:
1disabled
2timeBased
3packetBased
4timepacketBased
 .1.3.6.1.4.1.25506.2.77.3.2.1.19
hh3cwapiCfgUniRekeyTime
Time in seconds after which the WAPI USK shall be refreshed.
The timer shall start at the moment the USK was set using the
MLME-SETWPIKEYS request primitive.
secondsUnsigned32r/w
Constraints:
range: 1-4294967295
 .1.3.6.1.4.1.25506.2.77.3.2.1.20
hh3cwapiCfgUniRekeyPackets
A packet count (a multiple of 1000) after which the WAPI USK
shall be refreshed. The packet counter shall start at the moment
the USK was set using the MLME-SETKEYS request primitive and it
shall count all packets encry…
1000 packetsUnsigned32r/w
Constraints:
range: 1-4294967295
 .1.3.6.1.4.1.25506.2.77.3.2.1.21
hh3cwapiCfgMultiCipher
This object indicates the multicast cipher suite selector the
entity must use. The multicast cipher suite in the WAPI
information element shall take its value from this variable.
It contains an OUI (the first 3 octets) …
OctetStringr/w
Constraints:
range: 4-4
 .1.3.6.1.4.1.25506.2.77.3.2.1.22
hh3cwapiCfgMultiRekeyMethod
This object selects a mechanism for rekeying the WAPI MSK. The
default is time-based, once per day. Rekeying the MSK is only
applicable to an entity acting as an AE or ASUE.
Enumerationr/w
Enumerated Values:
1disabled
2timeBased
3packetBased
4timepacketBased
 .1.3.6.1.4.1.25506.2.77.3.2.1.23
hh3cwapiCfgMultiRekeyTime
Time in seconds after which the WAPI MSK shall be refreshed.
The timer shall start at the moment the MSK was set using the
MLME-SETWPIKEYS request primitive.
secondsUnsigned32r/w
Constraints:
range: 1-4294967295
 .1.3.6.1.4.1.25506.2.77.3.2.1.24
hh3cwapiCfgMultiRekeyPackets
A packet count (a multiple of 1000) after which the WAPI MSK
shall be refreshed. The packet counter shall start at the moment
the MSK was set using the MLME-SETKEYS request primitive and it
shall count all packets encry…
1000 packetsUnsigned32r/w
Constraints:
range: 1-4294967295
 .1.3.6.1.4.1.25506.2.77.3.2.1.25
hh3cwapiCfgMultiRekeyStrict
This object indicates that the MSK shall be refreshed whenever an
STA leaves the BSS that has the MSK.
SNMPv2-TCTruthValuer/w
Textual Convention: SNMPv2-TCTruthValue Enumeration
Type Values:
1true
2false
 .1.3.6.1.4.1.25506.2.77.3.2.1.26
hh3cwapiCfgPSKValue
The PSK value when WAPI in PSK mode is the selected AKM suite.
In that case, the BK will obtain its value from this object.
This object is logically write-only. Reading this variable shall
return unsuccessful status or …
OctetStringr/w
Constraints:
range: 2-32
 .1.3.6.1.4.1.25506.2.77.3.2.1.27
hh3cwapiCfgPSKPassPhrase
The PSK value when WAPI in PSK mode is the selected AKM suite,
which is configured by hh3cwapiCfgPSKValue.
An alternative method of setting the PSK is to
use the password-to-key algorithm.
This variable provides a means…
OctetStringr/w
Constraints:
range: 1-16
 .1.3.6.1.4.1.25506.2.77.3.2.1.28
hh3cwapiCfgCertUpdateCount
The number of times message in the WAPI certificate
authentication handshake will be retried per certificate
authentication handshake attempt.
Unsigned32r/w
Constraints:
range: 1-4294967295
 .1.3.6.1.4.1.25506.2.77.3.2.1.29
hh3cwapiCfgMultiUpdateCount
The number of times message in the WAPI multicast key handshake
will be retried per MSK handshake attempt.
Unsigned32r/w
Constraints:
range: 1-4294967295
 .1.3.6.1.4.1.25506.2.77.3.2.1.30
hh3cwapiCfgUniUpdateCount
The number of times message in the WAPI unicast key handshake
will be retried per 3-way handshake attempt.
Unsigned32r/w
Constraints:
range: 1-4294967295
 .1.3.6.1.4.1.25506.2.77.3.2.1.31
hh3cwapiCfgMultiCipherSize
This object indicates the length in bits of the multicast cipher
key. This should be 256 for SMS4, where the first 128 bits are
for encryption, and the last 128 bits for integrity check.
Unsigned32
Constraints:
range: 0-4294967295
 .1.3.6.1.4.1.25506.2.77.3.2.1.32
hh3cwapiCfgBKLifetime
The maximum lifetime of a BK in the BK cache.
secondsUnsigned32r/w
Constraints:
range: 1-4294967295
 .1.3.6.1.4.1.25506.2.77.3.2.1.33
hh3cwapiCfgBKReauthThreshold
The percentage of the BK lifetime that should expire before a
reauthentication occurs.
percentageUnsigned32r/w
Constraints:
range: 1-100
 .1.3.6.1.4.1.25506.2.77.3.2.1.34
hh3cwapiCfgSATimeout
The maximum time a security association shall take to set up.
secondsUnsigned32r/w
Constraints:
range: 1-4294967295
 .1.3.6.1.4.1.25506.2.77.3.2.1.35
hh3cwapiAuthenSuiteSelected
The selector of the last negotiated AKM suite.
OctetString
Constraints:
range: 4-4
 .1.3.6.1.4.1.25506.2.77.3.2.1.36
hh3cwapiUniCipherSelected
The selector of the last negotiated unicast cipher.
OctetString
Constraints:
range: 4-4
 .1.3.6.1.4.1.25506.2.77.3.2.1.37
hh3cwapiMultiCipherSelected
The selector of the last negotiated multicast cipher.
OctetString
Constraints:
range: 4-4
 .1.3.6.1.4.1.25506.2.77.3.2.1.38
hh3cwapiBKIDUsed
The selector of the last BKID used in the last unicast
cipher key handshake.
OctetString
Constraints:
range: 16-16
 .1.3.6.1.4.1.25506.2.77.3.2.1.39
hh3cwapiAuthenSuiteRequested
The selector of the last requested AKM suite.
OctetString
Constraints:
range: 4-4
 .1.3.6.1.4.1.25506.2.77.3.2.1.40
hh3cwapiUniCipherRequested
The selector of the last requested unicast cipher.
OctetString
Constraints:
range: 4-4
 .1.3.6.1.4.1.25506.2.77.3.2.1.41
hh3cwapiMultiCipherRequested
The selector of the last requested multicast cipher.
OctetString
Constraints:
range: 4-4
 .1.3.6.1.4.1.25506.2.77.3.2.1.42

hh3cwapiStatsTable

table
.1.3.6.1.4.1.25506.2.77.3.3 · 1 row entry · 17 columns
Open in standard view 
This table maintains per-STA statistics in a WAPI. The entry
with hh3cwapiStatsSTAAddress set to FF-FF-FF-FF-FF-FF
shall contain statistics for broadcast/multicast traffic.
hh3cwapiStatsEntry entry .1.3.6.1.4.1.25506.2.77.3.3.1
An entry in the hh3cwapiStatsTable.
Indexes
hh3cwapiStationMAC
Column Syntax OID
hh3cwapiStationMAC
Represents the unique MAC Address of station.
SNMPv2-TCMacAddress
Textual Convention: SNMPv2-TCMacAddress OctetString
Type Constraints:
range: 6
 .1.3.6.1.4.1.25506.2.77.3.3.1.1
hh3cwapiStatsSTAAddress
The MAC address of the STA to which the statistics in this
conceptual row belong.
SNMPv2-TCMacAddress
Textual Convention: SNMPv2-TCMacAddress OctetString
Type Constraints:
range: 6
 .1.3.6.1.4.1.25506.2.77.3.3.1.2
hh3cwapiStatsVersion
The WAPI version with which the STA is associated.
Unsigned32
Constraints:
range: 1-4294967295
 .1.3.6.1.4.1.25506.2.77.3.3.1.3
hh3cwapiStatsCtrlPortStatus
This object indicates the status of the authentication
entity's controlled port. When the value is TRUE, it means
'authenticated'. Otherwise, it means 'unauthenticated'.
SNMPv2-TCTruthValue
Textual Convention: SNMPv2-TCTruthValue Enumeration
Type Values:
1true
2false
 .1.3.6.1.4.1.25506.2.77.3.3.1.4
hh3cwapiStatsSelectedUniCipher
The unicast cipher suite selector used during association.
OctetString
Constraints:
range: 4-4
 .1.3.6.1.4.1.25506.2.77.3.3.1.5
hh3cwapiStatsWPIReplayCnt
The number of WPI MPDUs discarded by the replay mechanism.
SNMPv2-SMICounter32
Textual Convention: SNMPv2-SMICounter32 Unsigned32
Type Constraints:
range: 0..4294967295
 .1.3.6.1.4.1.25506.2.77.3.3.1.6
hh3cwapiStatsWPIDecryptErr
The number of WPI MPDUs discarded because of unavailable cipher
key during WPI-SMS4 decryption.
SNMPv2-SMICounter32
Textual Convention: SNMPv2-SMICounter32 Unsigned32
Type Constraints:
range: 0..4294967295
 .1.3.6.1.4.1.25506.2.77.3.3.1.7
hh3cwapiStatsWPIMICErr
The number of WPI MPDUs discarded because of MIC checking
failure during WPI-SMS4 decryption.
SNMPv2-SMICounter32
Textual Convention: SNMPv2-SMICounter32 Unsigned32
Type Constraints:
range: 0..4294967295
 .1.3.6.1.4.1.25506.2.77.3.3.1.8
hh3cwapiStatsWAISignatureErr
This counter increases when the received WAI packets' signature
is wrong.
SNMPv2-SMICounter32
Textual Convention: SNMPv2-SMICounter32 Unsigned32
Type Constraints:
range: 0..4294967295
 .1.3.6.1.4.1.25506.2.77.3.3.1.9
hh3cwapiStatsWAIHMACErr
This counter increases when message authentication key
checking error occurs on the received WAI packets.
SNMPv2-SMICounter32
Textual Convention: SNMPv2-SMICounter32 Unsigned32
Type Constraints:
range: 0..4294967295
 .1.3.6.1.4.1.25506.2.77.3.3.1.10
hh3cwapiStatsWAIAuthenFail
This counter increases when the WAI authentication result
is unsuccessful.
SNMPv2-SMICounter32
Textual Convention: SNMPv2-SMICounter32 Unsigned32
Type Constraints:
range: 0..4294967295
 .1.3.6.1.4.1.25506.2.77.3.3.1.11
hh3cwapiStatsWAIDiscardCnt
This counter increases when the received WAI packet is
discarded.
SNMPv2-SMICounter32
Textual Convention: SNMPv2-SMICounter32 Unsigned32
Type Constraints:
range: 0..4294967295
 .1.3.6.1.4.1.25506.2.77.3.3.1.12
hh3cwapiStatsWAITimeoutCnt
This counter increases when a WAI packet timeout is
detected.
SNMPv2-SMICounter32
Textual Convention: SNMPv2-SMICounter32 Unsigned32
Type Constraints:
range: 0..4294967295
 .1.3.6.1.4.1.25506.2.77.3.3.1.13
hh3cwapiStatsWAIFormatErr
This counter increases when WAI packet format error occurs
SNMPv2-SMICounter32
Textual Convention: SNMPv2-SMICounter32 Unsigned32
Type Constraints:
range: 0..4294967295
 .1.3.6.1.4.1.25506.2.77.3.3.1.14
hh3cwapiStatsWAICertFail
This counter increases when WAI certificate authentication
fails.
SNMPv2-SMICounter32
Textual Convention: SNMPv2-SMICounter32 Unsigned32
Type Constraints:
range: 0..4294967295
 .1.3.6.1.4.1.25506.2.77.3.3.1.15
hh3cwapiStatsWAIUniFail
This counter increases when WAI unicast cipher key
negotiation succeeds.
SNMPv2-SMICounter32
Textual Convention: SNMPv2-SMICounter32 Unsigned32
Type Constraints:
range: 0..4294967295
 .1.3.6.1.4.1.25506.2.77.3.3.1.16
hh3cwapiStatsWAIMultiFail
This counter increases when the WAI multicast cipher key
announcement failure occurs.
SNMPv2-SMICounter32
Textual Convention: SNMPv2-SMICounter32 Unsigned32
Type Constraints:
range: 0..4294967295
 .1.3.6.1.4.1.25506.2.77.3.3.1.17