hwWsecAuthPairwiseCipher
HUAWEI-WLAN-SECURITY-MIB ·
.1.3.6.1.4.1.2011.6.139.6.4.1.7
Object
column
r/w
Enumeration
The selector of a supported pairwise cipher. It consists of an OUI
(the first 3 octets) and a cipher suite identifier (the last octet).
0x00147201 : WPI-SMS4
0x000FAC00 : Use group cipher suite
0x000FAC01 : WEP-40
0x000FAC02 : TKIP
0x000FAC04 : CCMP-default in an RSNA
0x000FAC05 : WEP-104
0x000FAC06 : wep-128
0x000FAC07 : tkip-ccmp
0x00E0FC01 : null (no encryption), only for open system authentication
The cipher suite selector 00-0F-AC:4 (CCMP) shall be the default cipher suite value.
The cipher suite selectors 00-0F-AC:1 (WEP-40) and 00-0F-AC:5 (WEP-104) are only valid as a group
cipher suite in a transition security network (TSN) to allow pre-RSNA devices to join the BSS.
Use of CCMP as the group cipher suite with TKIP as the pairwise cipher suite shall not be supported.
NOTE?If the STAs can support CCMP, then there is no need for a weaker data confidentiality protocol.
The cipher suite selector 00-0F-AC:0 (Use group cipher suite) is only valid as the pairwise cipher suite. An
AP may specify the selector 00-0F-AC:0 (Use group cipher suite) for a pairwise cipher suite if it does not
cipher selection, this shall be the only pairwise cipher selection the AP advertises.
If CCMP is enabled, then the AP supports pairwise keys, and thus the suite selector 00-0F-AC:0 (Use group
cipher suite) shall not be a valid option.
Context
- MIB
- HUAWEI-WLAN-SECURITY-MIB
- OID
.1.3.6.1.4.1.2011.6.139.6.4.1.7- Type
- column
- Access
- readwrite
- Status
- current
- Parent
- hwWsecAuthSuitesEntry
- Table
- hwWsecAuthSuitesTable
- Siblings
- 29
Syntax
Enumeration
Values & Constraints
Enumerated Values
1 | wpiSms4 |
2 | wep40 |
3 | wep104 |
4 | tkip |
5 | ccmp |
6 | null |
7 | tkipCcmp |
8 | wep128 |
Related Objects
Sibling Objects
| Object | Type | Syntax | OID |
|---|---|---|---|
| hwWsecAuthSuiteIndex The auxiliary variable used as an index into the
hwWsecAuthSuitesTable. | column | Enumeration | .1.3.6.1.4.1.2011.6.139.6.4.1.1 |
| hwWsecAuthUnicastRekeyTime The time in seconds after which the WAPI/RSNA USK shall be refreshed. The timer shall start
at the moment the USK was set using the MLME-SETWPIKEYS.request primitive. | column | seconds SNMPv2-SMIUnsigned32 | .1.3.6.1.4.1.2011.6.139.6.4.1.10 |
| hwWsecAuthUnicastRekeyPackets A packet count (in 1000s of packets) after which the WAPI/RSNA USK shall be refreshed. The
packet counter shall start at the moment the USK was set using the
MLME-SETWPIKEYS.reque… | column | 1000 packets SNMPv2-SMIUnsigned32 | .1.3.6.1.4.1.2011.6.139.6.4.1.11 |
| hwWsecAuthMulticastCipher This object indicates the multicast cipher suite that this entity must adopt. The WAPI/RSNA
information element shall adopt the value of this variable, which contains a 3-octet OU… | column | Enumeration | .1.3.6.1.4.1.2011.6.139.6.4.1.12 |
| hwWsecAuthMulticastCipherSize This object indicates the length in bit of the multicast cipher key.
This should be 256 for in SMS4.
The former 128bits is the encryption key and the latter 128bi… | column | SNMPv2-SMIInteger32 | .1.3.6.1.4.1.2011.6.139.6.4.1.13 |
| hwWsecAuthMulticastRekeyMethod This object selects a mechanism for rekeying the WAPI/RSNA MSK. The default is time-based,
once per day. Rekeying the MSK is only applicable to an entity acting in the
Authenticat… | column | Enumeration | .1.3.6.1.4.1.2011.6.139.6.4.1.14 |
| hwWsecAuthMulticastRekeyTime The time in seconds after which the WAPI/RSNA MSK shall be refreshed. The timer shall start
at the moment the MSK was set using the MLME-SETWPIKEYS.request primitive. | column | seconds SNMPv2-SMIUnsigned32 | .1.3.6.1.4.1.2011.6.139.6.4.1.15 |
| hwWsecAuthMulticastRekeyPackets A packet count (in 1000s of packets) after which the WAPI/RSNA MSK shall be refreshed. The
packet counter shall start at the moment the MSK was set using the
MLME-SETWPIKEYS.reque… | column | 1000 packets SNMPv2-SMIUnsigned32 | .1.3.6.1.4.1.2011.6.139.6.4.1.16 |
| hwWsecAuthMulticastRekeyStrict This object signals that the MSK shall be refreshed whenever a STA leaves the BSS that
possesses the MSK. | column | SNMPv2-TCTruthValue | .1.3.6.1.4.1.2011.6.139.6.4.1.17 |
| hwWsecAuthPSKValue The PSK for when WAPI/RSNA in PSK mode is the selected AKM suite. In that case, the BK/PMK
will obtain its value from this object. This object is logically write-only. Reading thi… | column | OctetString | .1.3.6.1.4.1.2011.6.139.6.4.1.18 |
| hwWsecAuthPSKPassPhrase The PSK, for when WAPI/RSNA in PSK mode is the selected AKM suite, is configured by
hwWsecAuthPSKValue. An alternative manner of setting the PSK uses the
password-to-key algorithm… | column | SNMPv2-TCDisplayString | .1.3.6.1.4.1.2011.6.139.6.4.1.19 |
| hwWsecAuthSuite The selector of an AKM suite. It consists of an OUI (the first 3
octets) and a cipher suite identifier (the last octet).
0x00147201 : WAPI certification authenticat… | column | OctetString | .1.3.6.1.4.1.2011.6.139.6.4.1.2 |
| hwWsecAuthCertificateUpdateCount The number of times messages in the WAPI Certificate Authentication Handshake
protocol will be retried per Certificate Authentication Handshake attempt. | column | SNMPv2-SMIUnsigned32 | .1.3.6.1.4.1.2011.6.139.6.4.1.20 |
| hwWsecAuthMulticastUpdateCount The number of times Message 1 in the WAPI Multicast Key Announcement Handshake
will be retried per MSK Handshake attempt.
The number of times Message 1 in the RSNA … | column | SNMPv2-SMIUnsigned32 | .1.3.6.1.4.1.2011.6.139.6.4.1.21 |
| hwWsecAuthUnicastUpdateCount The number of times Message 1 and Message 3 in the WAPI Unicast Key Negotiation
Handshake will be retried per USK Handshake attempt.
The number of times Message 1 a… | column | SNMPv2-SMIUnsigned32 | .1.3.6.1.4.1.2011.6.139.6.4.1.22 |
| hwWsecAuthBKLifetime The maximum lifetime of a BK in the BK cache. | column | seconds SNMPv2-SMIUnsigned32 | .1.3.6.1.4.1.2011.6.139.6.4.1.23 |
| hwWsecAuthBKReauthThreshold The percentage of the BK lifetime that should expire before a WAI/RSNA re-authentication
occurs. | column | percentage SNMPv2-SMIUnsigned32 | .1.3.6.1.4.1.2011.6.139.6.4.1.24 |
| hwWsecAuthSATimeout The maximum time a security association shall take to set up. | column | seconds SNMPv2-SMIUnsigned32 | .1.3.6.1.4.1.2011.6.139.6.4.1.25 |
| hwWsecAuthExcludeUnencrypted When this attribute is TRUE, the STA shall not indicate at the MAC service
interface received MSDUs that have the Protected Frame subfield of
the Frame Control field equal to zero… | column | SNMPv2-TCTruthValue | .1.3.6.1.4.1.2011.6.139.6.4.1.26 |
| hwWsecAuthDot1XMethod Leaf don't sustain for V2R3 on 2012/11/26. | column | SNMPv2-SMIInteger32 | .1.3.6.1.4.1.2011.6.139.6.4.1.27 |
| hwWsecAuthControlledAuthControl This attribute indicates whether the entity enable the authentication. If the value is '0'
which means 'authentication disabled', the state of the controlled port shall be set to
… | column | SNMPv2-TCTruthValue | .1.3.6.1.4.1.2011.6.139.6.4.1.28 |
| hwWsecAuthControlledPortControl This attribute, when the hwWsecAuthControlledAuthControl is set to true, shall be
effective and indicate the methods by which the port is controlled. If the value is '0' which
mea… | column | SNMPv2-SMIInteger32 | .1.3.6.1.4.1.2011.6.139.6.4.1.29 |
| hwWsecAuthSuiteEnabled This variable indicates whether the corresponding AKM suite is
enabled/disabled. | column | SNMPv2-TCTruthValue | .1.3.6.1.4.1.2011.6.139.6.4.1.3 |
| hwWsecAuthOptionalImplemented This attribute, when true, shall indicate that the WAPI, WPA, RSNA option is implemented; else, this
attribute shall be false. | column | SNMPv2-TCTruthValue | .1.3.6.1.4.1.2011.6.139.6.4.1.30 |
| hwWsecAuthPreauthenticationImplemented This variable indicates whether the entity supports WAPI pre-authentication. This cannot
be TRUE unless hwWsecAuthOptionImplemented is TRUE. | column | SNMPv2-TCTruthValue | .1.3.6.1.4.1.2011.6.139.6.4.1.4 |
| hwWsecAuthPreauthenticationEnabled When this object is set to TRUE, this shall indicate that WAPI pre-authentication is
enabled on this entity. This object requires that WAPI authentication of this profile Enabled. | column | SNMPv2-TCTruthValue | .1.3.6.1.4.1.2011.6.139.6.4.1.5 |
| hwWsecAuthUnicastKeysSupported This object indicates the number of the unicast keys that a WAPI/RSNA of this entity supports. | column | SNMPv2-SMIInteger32 | .1.3.6.1.4.1.2011.6.139.6.4.1.6 |
| hwWsecAuthPairwiseCipherSize This object indicates the length in bits of the pairwise cipher
key. This should be 256 for TKIP and 128 for CCMP. | column | SNMPv2-SMIInteger32 | .1.3.6.1.4.1.2011.6.139.6.4.1.8 |
| hwWsecAuthUnicastRekeyMethod This object selects a mechanism for rekeying the WAPI/RSNA USK. The default is time-based,
once per day. Rekeying the USK is only applicable to an entity acting in the AE or ASUE
… | column | Enumeration | .1.3.6.1.4.1.2011.6.139.6.4.1.9 |