cLWSecDot11EssCckmKeyMgmtMode
CISCO-LWAPP-WLAN-SECURITY-MIB ·
.1.3.6.1.4.1.9.9.521.1.1.1.1.6
Object
column
r/w
Bits
This object specifies the type of authentication
key management that is applicable only when
cLWSecDot11EssCckmWpaSupport is set to a value of
'true'.
The following are the possible key management
configurations allowed and accepted by the system.
dot1x + CCKM
dot1x only
CCKM only
PSK only
FT fast transition dot1x only
FT PSK only
FT PSK + PSK
FT SAE + SAE
FT SAE-EXT-KEY + SAE-EXT-KEY
FT dot1x + dot1x
FT dot1x + dot1x + CCKM
dot1x + CCKM +11w
dot1x + 11w
CCKM + 11w
PSK + 11wPsk
Context
- MIB
- CISCO-LWAPP-WLAN-SECURITY-MIB
- OID
.1.3.6.1.4.1.9.9.521.1.1.1.1.6- Type
- column
- Access
- readwrite
- Status
- current
- Parent
- cLWSecDot11EssCckmEntry
- Table
- cLWSecDot11EssCckmTable
- Siblings
- 28
Syntax
Bits
Values & Constraints
Enumerated Values
0 | dot1x |
1 | cckm |
2 | psk |
3 | ftDot1x |
4 | ftPsk |
5 | pmfDot1x |
6 | pmfPsk |
7 | osenDot1x |
8 | sae |
9 | owe |
10 | ftSae |
11 | saeExtKey |
12 | ftSaeExtKey |
Related Objects
Sibling Objects
| Object | Type | Syntax | OID |
|---|---|---|---|
| cLWSecDot11EssCckmWpaSupport This object specifies to enable or disable layer-2
security using WPA1 or WPA2. When this
object is set to 'true' layer-2 security is enabled.
When this object is set to 'fals… | column | SNMPv2-TCTruthValue | .1.3.6.1.4.1.9.9.521.1.1.1.1.1 |
| cLWSecDot11EssFtEnable deprecated This object specifies whether fast transition is enabled
for particular WLAN.
A value of 'true' means that fast transition is enabled and
A value of 'false' means that fast transi… | column | SNMPv2-TCTruthValue | .1.3.6.1.4.1.9.9.521.1.1.1.1.10 |
| cLWSecDot11EssFtReassocTime This object specifies the fast transition
re-association time. | column | SNMPv2-SMIUnsigned32 | .1.3.6.1.4.1.9.9.521.1.1.1.1.11 |
| cLWSecDot11EssFtOverDs This object specifies whether fast transition over
distributed system is enabled.
A 'true' value means that fast transition over the
distributed system is enabled.
A 'false' val… | column | SNMPv2-TCTruthValue | .1.3.6.1.4.1.9.9.521.1.1.1.1.12 |
| cLWSecDot11Ess11wPfm This object specifies the 802.11w PFM status for a
particular WLAN. | column | Enumeration | .1.3.6.1.4.1.9.9.521.1.1.1.1.13 |
| cLWSecDot11EssRetryTime This object specifies the 802.11w Security Association(SA)
query retry timeout. | column | milliseconds SNMPv2-SMIUnsigned32 | .1.3.6.1.4.1.9.9.521.1.1.1.1.14 |
| cLWSecDot11EssComebackTime This object specifies the 802.11w association comeback time. | column | SNMPv2-SMIUnsigned32 | .1.3.6.1.4.1.9.9.521.1.1.1.1.15 |
| cLWSecDot11EssFtMode This object indicates the 11r status for a wlan
cLWSecDot11EssFtMode is set to a value of
'adaptive'. | column | Enumeration | .1.3.6.1.4.1.9.9.521.1.1.1.1.16 |
| cLWSecDot11EssWpa3Security This object specifies whether
wpa3 security is enabled or not.
A value of 'true' indicates that WPA3 security
is enabled on the controller.
A value of 'false' indicates tha… | column | SNMPv2-TCTruthValue | .1.3.6.1.4.1.9.9.521.1.1.1.1.17 |
| cLWSecDot11EssMPskEnable This object specifies whether
Multi-PSK security feature is enabled or not.
True: indicates Multi-PSK security feature
is enabled.
False: indicates Multi-PSK security featu… | column | SNMPv2-TCTruthValue | .1.3.6.1.4.1.9.9.521.1.1.1.1.18 |
| cLWSecDot11EssSaeAntiClogThreshold This object specifies the threshold for number of
SAE open sessions beyond which Anti Clogging shall
be enforced for future associations. | column | Unsigned32 | .1.3.6.1.4.1.9.9.521.1.1.1.1.19 |
| cLWSecDot11EssCckmWpa1Security This object specifies whether cckmwpa1 security
is enabled or not.
A value of 'true' indicates that WPA1 security
is enabled on the controller.
A value of 'false' indic… | column | SNMPv2-TCTruthValue | .1.3.6.1.4.1.9.9.521.1.1.1.1.2 |
| cLWSecDot11EssSaeRetransTimeout This object specifies the SAE Retransmission
Timeout value. | column | milliseconds Unsigned32 | .1.3.6.1.4.1.9.9.521.1.1.1.1.20 |
| cLWSecDot11EssSaeMaxRetry This object specifies the SAE maximum number of
retry count | column | Integer32 | .1.3.6.1.4.1.9.9.521.1.1.1.1.21 |
| cLWSecDot11OsenEnable This object specifies whether Hotspot 2.0
OSEN security feature is enabled or not.
True: indicates OSEN security feature
is enabled.
False: indicates OSEN security feature i… | column | SNMPv2-TCTruthValue | .1.3.6.1.4.1.9.9.521.1.1.1.1.22 |
| cLWSecDot11TMWlanId This object shall be used to configure OWE
Transition mode support on the corresponding
WLANs. Range: 0-4096. It enables OWE Transition
mode on the corresponding WLANs. If it is 0… | column | SNMPv2-SMIUnsigned32 | .1.3.6.1.4.1.9.9.521.1.1.1.1.23 |
| cLWSecDot11EssWpa3EncType This object specifies the type of WPA3 encryption
configured on this WLAN.
The value populated by this object is applicable
only when cLWSecDot11EssWpa3Security populates
a value … | column | Bits | .1.3.6.1.4.1.9.9.521.1.1.1.1.24 |
| cLWSecDot11EssPskType This object indicates the type of storage used
to store PSK.
clear: indicate PSK is stored as clear text'.
aes : indicate the PSK is stored encrypted using AES. | column | Enumeration | .1.3.6.1.4.1.9.9.521.1.1.1.1.25 |
| cLWSecDot11EssEasyPskEnable This object specifies whether Easy PSK security feature is
enabled or not.
True: indicates Easy PSK security feature is enabled.
False: indicates Easy PSK security feature is disa… | column | SNMPv2-TCTruthValue | .1.3.6.1.4.1.9.9.521.1.1.1.1.26 |
| cLWSecDot11EssSaePweMode This object specifies SAE Password Element Mode
0: Hunting And Pecking Only, disables Hash To Element
1: Hash To Element Only, disables Hunting and Pecking
2: Both Hash to element… | column | Enumeration | .1.3.6.1.4.1.9.9.521.1.1.1.1.27 |
| cLWSecDot11TransitionDisable This object specifies whether Transition Disable feature is
enabled or not.
True: indicates Transition Disable feature is enabled.
False: indicates Transition Disable feature is d… | column | SNMPv2-TCTruthValue | .1.3.6.1.4.1.9.9.521.1.1.1.1.28 |
| cLWSecDot11BeaconProtectionEnable This object specifies whether Beacon Protection feature is
enabled or not.
True: indicates Beacon Protection feature is enabled.
False: indicates Beacon Protection feature is disa… | column | SNMPv2-TCTruthValue | .1.3.6.1.4.1.9.9.521.1.1.1.1.29 |
| cLWSecDot11EssCckmWpa1EncType This object specifies the type of WPA1 encryption
configured on this WLAN.
The value populated by this object is applicable
only when cLWSecDot11EssCckmWpa1Security populates
a va… | column | CISCO-LWAPP-TC-MIBCLSecEncryptType | .1.3.6.1.4.1.9.9.521.1.1.1.1.3 |
| cLWSecDot11EssCckmWpa2Security This object specifies whether
cckmwpa2 security is enabled or not.
A value of 'true' indicates that WPA2 security
is enabled on the controller.
A value of 'false' indicates… | column | SNMPv2-TCTruthValue | .1.3.6.1.4.1.9.9.521.1.1.1.1.4 |
| cLWSecDot11EssCckmWpa2EncType This object specifies the type of WPA2 encryption
configured on this WLAN.
The value populated by this object is applicable
only when cLWSecDot11EssCckmWpa2Security populates
a va… | column | CISCO-LWAPP-TC-MIBCLSecEncryptType | .1.3.6.1.4.1.9.9.521.1.1.1.1.5 |
| cLWSecDot11EssPskFmt This object specifies the type of the
authentication preshared key configured through
the object cLWSecDot11EssCckmPsk. Note
that the key configuration is applicable only
when ps… | column | CISCO-LWAPP-TC-MIBCLSecKeyFormat | .1.3.6.1.4.1.9.9.521.1.1.1.1.7 |
| cLWSecDot11EssPsk This object specifies the authentication pre-shared
key in the hex format that is applicable only when
the 'psk' bit is specified in the
cLWSecDot11EssCckmKeyMgmtMode object.
… | column | OctetString | .1.3.6.1.4.1.9.9.521.1.1.1.1.8 |
| cLWSecDot11EssCckmGtkRandomize This object represents the Group Temporal Key(GTK)
used for multicast and broadcast packet encryption
in wpa1 and wpa2 clients.
This object indicates the Group Tem… | column | SNMPv2-TCTruthValue | .1.3.6.1.4.1.9.9.521.1.1.1.1.9 |