mirror of
https://github.com/librenms/librenms.git
synced 2024-10-07 16:52:45 +00:00
git-svn-id: http://www.observium.org/svn/observer/trunk@1569 61d68cd4-352d-0410-923a-c4978735b2b8
791 lines
29 KiB
Plaintext
791 lines
29 KiB
Plaintext
ENTERASYS-WIFI-PROTECTED-ACCESS-MIB DEFINITIONS ::= BEGIN
|
|
|
|
--
|
|
-- enterasys-wifi-protected-access-mib.txt
|
|
--
|
|
-- This MIB module provides configuration and information objects
|
|
-- for Enterasys Networks' implementation of the Wi-Fi Protected
|
|
-- Access (WPA). This MIB was derived from version 3 of the
|
|
-- IEEE 802.11i draft.
|
|
--
|
|
-- Enterasys Networks reserves the right to make changes in this
|
|
-- specification and other information contained in this document
|
|
-- without prior notice. The reader should consult Enterasys Networks
|
|
-- to determine whether any such changes have been made.
|
|
--
|
|
-- In no event shall Enterasys Networks be liable for any incidental,
|
|
-- indirect, special, or consequential damages whatsoever (including
|
|
-- but not limited to lost profits) arising out of or related to this
|
|
-- document or the information contained in it, even if Enterasys
|
|
-- Networks has been advised of, known, or should have known, the
|
|
-- possibility of such damages.
|
|
--
|
|
-- Enterasys Networks grants vendors, end-users, and other interested
|
|
-- parties a non-exclusive license to use this Specification in
|
|
-- connection with the management of Enterasys Networks products.
|
|
--
|
|
-- Copyright July 2003 Enterasys Networks, Inc.
|
|
--
|
|
|
|
IMPORTS
|
|
MODULE-IDENTITY, OBJECT-TYPE, Integer32, Unsigned32, Counter32
|
|
FROM SNMPv2-SMI
|
|
MODULE-COMPLIANCE, OBJECT-GROUP
|
|
FROM SNMPv2-CONF
|
|
DisplayString, MacAddress, TruthValue
|
|
FROM SNMPv2-TC
|
|
etsysModules
|
|
FROM ENTERASYS-MIB-NAMES;
|
|
|
|
etsysWiFiProtectedAccessMIB MODULE-IDENTITY
|
|
LAST-UPDATED "200311061515Z" -- Thu Nov 6 15:15 GMT 2003
|
|
ORGANIZATION "Enterasys Networks, Inc"
|
|
CONTACT-INFO
|
|
"Postal: Enterasys Networks
|
|
50 Minuteman Rd.
|
|
Andover, MA 01810-1008
|
|
USA
|
|
Phone: +1 978 684 1000
|
|
E-mail: support@enterasys.com
|
|
WWW: http://www.enterasys.com"
|
|
|
|
DESCRIPTION
|
|
"This MIB module defines a portion of the SNMP enterprise
|
|
MIBs under Enterasys Networks' enterprise OID pertaining to
|
|
Wi-Fi Protected Access (WPA) management functionality.
|
|
|
|
This implementation includes Enterasys variants of objects
|
|
that appear in draft 3.0 of IEEE Std 802.11i, and are relevant
|
|
to the Wi-Fi Alliance's WPA specification. Since the initial
|
|
WPA implementation is TKIP-based, the initial version of this
|
|
MIB does not include AES-specific objects."
|
|
|
|
REVISION "200311061515Z" -- Thu Nov 6 15:15 GMT 2003
|
|
DESCRIPTION "Corrected the postal code in the CONTACT-INFO clause."
|
|
|
|
REVISION "200308071708Z" -- Thu Aug 7 17:08 GMT 2003
|
|
DESCRIPTION "Initial version of this MIB module."
|
|
|
|
::= { etsysModules 32 }
|
|
|
|
|
|
-- ---------------------------------------------------------- --
|
|
-- The Wi-Fi Protected Access Object Identifier
|
|
-- ---------------------------------------------------------- --
|
|
|
|
etsysWiFiProtectedAccessObjects
|
|
OBJECT IDENTIFIER ::= { etsysWiFiProtectedAccessMIB 1 }
|
|
|
|
|
|
-- ---------------------------------------------------------- --
|
|
-- Textual Conventions
|
|
-- ---------------------------------------------------------- --
|
|
|
|
-- ---------------------------------------------------------- --
|
|
-- WPA Configuration Table
|
|
-- ---------------------------------------------------------- --
|
|
|
|
etsysWPAConfigTable OBJECT-TYPE
|
|
SYNTAX SEQUENCE OF EtsysWPAConfigEntry
|
|
MAX-ACCESS not-accessible
|
|
STATUS current
|
|
DESCRIPTION
|
|
"The table containing WPA configuration objects."
|
|
::= { etsysWiFiProtectedAccessObjects 1 }
|
|
|
|
etsysWPAConfigEntry OBJECT-TYPE
|
|
SYNTAX EtsysWPAConfigEntry
|
|
MAX-ACCESS not-accessible
|
|
STATUS current
|
|
DESCRIPTION
|
|
"An entry in the etsysWPAConfigTable."
|
|
INDEX { etsysWPAConfigIndex }
|
|
::= { etsysWPAConfigTable 1 }
|
|
|
|
EtsysWPAConfigEntry ::=
|
|
SEQUENCE {
|
|
etsysWPAConfigIndex INTEGER,
|
|
etsysWPAConfigOptionImplemented TruthValue,
|
|
etsysWPAConfigEnabled TruthValue,
|
|
etsysWPAConfigTKIPNumberOfReplayCounters INTEGER,
|
|
etsysWPAConfigVersion Integer32,
|
|
etsysWPAConfigPairwiseKeysSupported Unsigned32,
|
|
etsysWPAConfigMulticastCipher OCTET STRING,
|
|
etsysWPAConfigGroupRekeyMethod INTEGER,
|
|
etsysWPAConfigGroupRekeyTime Unsigned32,
|
|
etsysWPAConfigGroupRekeyPackets Unsigned32,
|
|
etsysWPAConfigGroupRekeyStrict TruthValue,
|
|
etsysWPAConfigPSKValue OCTET STRING,
|
|
etsysWPAConfigPSKPassPhrase DisplayString,
|
|
etsysWPAConfigPSKValueEntered TruthValue,
|
|
etsysWPAConfigMultipleAuthSuitesSupported TruthValue,
|
|
etsysWPAConfigGroupMasterRekeyTime Unsigned32,
|
|
etsysWPAConfigGroupUpdateTimeOut Unsigned32,
|
|
etsysWPAConfigGroupUpdateCount Unsigned32,
|
|
etsysWPAConfigPairwiseUpdateTimeOut Unsigned32,
|
|
etsysWPAConfigPairwiseUpdateCount Unsigned32,
|
|
etsysWPAConfigLegacyOptionSupported TruthValue,
|
|
etsysWPAConfigAllowLegacyClients TruthValue,
|
|
etsysWPAConfigRekeyPairwiseWEP TruthValue
|
|
}
|
|
|
|
etsysWPAConfigIndex OBJECT-TYPE
|
|
SYNTAX INTEGER (0..2147483647)
|
|
MAX-ACCESS not-accessible
|
|
STATUS current
|
|
DESCRIPTION
|
|
"Each 802.11 interface is represented by an entry in the
|
|
ifTable. If this index is zero, the information in this
|
|
table shall apply to all 802.11 interfaces."
|
|
::= { etsysWPAConfigEntry 1 }
|
|
|
|
etsysWPAConfigOptionImplemented OBJECT-TYPE
|
|
SYNTAX TruthValue
|
|
MAX-ACCESS read-only
|
|
STATUS current
|
|
DESCRIPTION
|
|
"This variable indicates whether the entity is WPA-capable."
|
|
::= { etsysWPAConfigEntry 2 }
|
|
|
|
etsysWPAConfigEnabled OBJECT-TYPE
|
|
SYNTAX TruthValue
|
|
MAX-ACCESS read-write
|
|
STATUS current
|
|
DESCRIPTION
|
|
"When this object is set to TRUE, this shall indicate that
|
|
WPA is enabled on this entity. The entity will advertise the
|
|
WPA Information Element in its Beacons and Probe Responses.
|
|
|
|
This object requires that dot11PrivacyInvoked also be set
|
|
to TRUE.
|
|
|
|
If dot11PrivacyInvoked is TRUE and etsysWPAConfigEnabled is
|
|
FALSE, the security mechanism used is WEP."
|
|
::= { etsysWPAConfigEntry 3 }
|
|
|
|
etsysWPAConfigTKIPNumberOfReplayCounters OBJECT-TYPE
|
|
SYNTAX INTEGER
|
|
MAX-ACCESS read-only
|
|
STATUS current
|
|
DESCRIPTION
|
|
"Specifies the number of replay counters:
|
|
(0) - 1 replay counter,
|
|
(1) - 2 replay counters,
|
|
(2) - 4 replay counters,
|
|
(3) - 16 replay counters."
|
|
::= { etsysWPAConfigEntry 4 }
|
|
|
|
etsysWPAConfigVersion OBJECT-TYPE
|
|
SYNTAX Integer32
|
|
MAX-ACCESS read-only
|
|
STATUS current
|
|
DESCRIPTION
|
|
"The highest WPA version this entity supports."
|
|
::= { etsysWPAConfigEntry 5 }
|
|
|
|
etsysWPAConfigPairwiseKeysSupported OBJECT-TYPE
|
|
SYNTAX Unsigned32 (0..4294967295)
|
|
MAX-ACCESS read-only
|
|
STATUS current
|
|
DESCRIPTION
|
|
"This object indicates how many pairwise keys the entity
|
|
supports for WPA. When zero, it only supports (four)
|
|
group keys."
|
|
::= { etsysWPAConfigEntry 6 }
|
|
|
|
etsysWPAConfigMulticastCipher OBJECT-TYPE
|
|
SYNTAX OCTET STRING (SIZE(4))
|
|
MAX-ACCESS read-write
|
|
STATUS current
|
|
DESCRIPTION
|
|
"This object indicates the multicast cipher suite selector
|
|
the entity must use. The multicast cipher suite in the WPA
|
|
Information Element shall take its value from this variable.
|
|
It consists of an OUI (the three most significant octets)
|
|
and a cipher suite identifier (the least significant octet).
|
|
|
|
The network administrator can always override the
|
|
automatically selected multicast cipher suite by writing
|
|
this object."
|
|
::= { etsysWPAConfigEntry 7 }
|
|
|
|
etsysWPAConfigGroupRekeyMethod OBJECT-TYPE
|
|
SYNTAX INTEGER { disabled(1), timeBased(2), packetBased(3) }
|
|
MAX-ACCESS read-write
|
|
STATUS current
|
|
DESCRIPTION
|
|
"This object selects a mechanism for rekeying the WPA Group Key.
|
|
The default is time-based, once per day. Rekeying the Group
|
|
key is only applicable to an entity acting in the Authenticator
|
|
role (an AP in an ESS)."
|
|
DEFVAL { timeBased }
|
|
::= { etsysWPAConfigEntry 8 }
|
|
|
|
etsysWPAConfigGroupRekeyTime OBJECT-TYPE
|
|
SYNTAX Unsigned32 (1..4294967295)
|
|
UNITS "seconds"
|
|
MAX-ACCESS read-write
|
|
STATUS current
|
|
DESCRIPTION
|
|
"The time in seconds after which the WPA group key
|
|
must be refreshed. The timer shall start at the moment
|
|
the group key was set using the MLME-SetKeys primitive.
|
|
The fine granularity (seconds) also enables the network
|
|
Administrator to 'immediately' refresh the group key."
|
|
DEFVAL { 86400 } -- once per day
|
|
::= { etsysWPAConfigEntry 9 }
|
|
|
|
etsysWPAConfigGroupRekeyPackets OBJECT-TYPE
|
|
SYNTAX Unsigned32 (1..4294967295)
|
|
UNITS "1000 packets"
|
|
MAX-ACCESS read-write
|
|
STATUS current
|
|
DESCRIPTION
|
|
"A packet count (in 1000s of packets) after which the WPA
|
|
group key shall be refreshed. The packet counter shall
|
|
start at the moment the group key was set using the
|
|
MLME-SetKeys primitive and it shall count all packets
|
|
encrypted using the current group key."
|
|
::= { etsysWPAConfigEntry 10 }
|
|
|
|
etsysWPAConfigGroupRekeyStrict OBJECT-TYPE
|
|
SYNTAX TruthValue
|
|
MAX-ACCESS read-write
|
|
STATUS current
|
|
DESCRIPTION
|
|
"This object signals that the WPA group key shall be
|
|
refreshed whenever a Station leaves the BSS."
|
|
::= { etsysWPAConfigEntry 11 }
|
|
|
|
etsysWPAConfigPSKValue OBJECT-TYPE
|
|
SYNTAX OCTET STRING (SIZE(32))
|
|
MAX-ACCESS read-write
|
|
STATUS current
|
|
DESCRIPTION
|
|
"The Pre-Shared Key (PSK) for when WPA in PSK mode is
|
|
the selected authentication suite. In that case, the PMK
|
|
will obtain its value from this object.
|
|
|
|
A string of all 0x00 octets has the meaning 'clear the
|
|
key'.
|
|
|
|
This object is logically write-only. Reading this
|
|
variable shall return unsuccessful status or null or zero."
|
|
::= { etsysWPAConfigEntry 12 }
|
|
|
|
etsysWPAConfigPSKPassPhrase OBJECT-TYPE
|
|
SYNTAX DisplayString
|
|
MAX-ACCESS read-write
|
|
STATUS current
|
|
DESCRIPTION
|
|
"The PSK, for when WPA in PSK mode is the selected
|
|
authentication suite, is configured by etsysWPAConfigPSKValue.
|
|
|
|
An alternative manner of setting the PSK uses the
|
|
password-to-key algorithm defined in section XXX. This
|
|
variable provides a means to enter a pass phrase. When
|
|
this object is written, the WPA entity shall use the
|
|
password-to-key algorithm specified in section XXX to
|
|
derive a pre-shared key and populate etsysWPAConfigPSKValue
|
|
with this key.
|
|
|
|
This object is logically write-only. Reading this
|
|
variable shall return unsuccessful status or null
|
|
or zero."
|
|
::= { etsysWPAConfigEntry 13 }
|
|
|
|
|
|
etsysWPAConfigPSKValueEntered OBJECT-TYPE
|
|
SYNTAX TruthValue
|
|
MAX-ACCESS read-only
|
|
STATUS current
|
|
DESCRIPTION
|
|
"Indicates whether the Pre-Shared Key (etsysWPAConfigPSKValue)
|
|
is set. This allows a network management system to prompt
|
|
the network manager, when appropriate, to enter the initial
|
|
value of the key."
|
|
::= { etsysWPAConfigEntry 14 }
|
|
|
|
etsysWPAConfigMultipleAuthSuitesSupported OBJECT-TYPE
|
|
SYNTAX TruthValue
|
|
MAX-ACCESS read-only
|
|
STATUS current
|
|
DESCRIPTION
|
|
"Indicates whether the entity can take advantage of multiple
|
|
selections in the etsysWPAConfigAuthenticationSuitesTable.
|
|
|
|
On radios that allow use of only one key management suite at
|
|
a time, the access point may choose among the selected suites
|
|
in an arbitrary fashion."
|
|
::= { etsysWPAConfigEntry 15 }
|
|
|
|
etsysWPAConfigGroupMasterRekeyTime OBJECT-TYPE
|
|
SYNTAX Unsigned32 (1..4294967295)
|
|
UNITS "seconds"
|
|
MAX-ACCESS read-write
|
|
STATUS current
|
|
DESCRIPTION
|
|
"The time in seconds after which the WPA group master
|
|
key must be changed. The timer shall start at the
|
|
moment the group master key was set.
|
|
|
|
A group key refresh will occur on a group master key
|
|
change.
|
|
The fine granularity (seconds) also enables the network
|
|
Administrator to 'immediately' refresh the group master key."
|
|
DEFVAL { 604800 } -- 604800 = 7*86400, once per week
|
|
::= { etsysWPAConfigEntry 16 }
|
|
|
|
etsysWPAConfigGroupUpdateTimeOut OBJECT-TYPE
|
|
SYNTAX Unsigned32 (1..4294967295)
|
|
UNITS "seconds"
|
|
MAX-ACCESS read-write
|
|
STATUS current
|
|
DESCRIPTION
|
|
"The time in seconds after which the WPA group
|
|
update handshake will be retried. The timer shall
|
|
start at the moment the group update message is sent."
|
|
DEFVAL { 100 }
|
|
::= { etsysWPAConfigEntry 17 }
|
|
|
|
etsysWPAConfigGroupUpdateCount OBJECT-TYPE
|
|
SYNTAX Unsigned32 (1..4294967295)
|
|
MAX-ACCESS read-write
|
|
STATUS current
|
|
DESCRIPTION
|
|
"The number of times the WPA Group update will be retried."
|
|
DEFVAL { 3 }
|
|
::= { etsysWPAConfigEntry 18 }
|
|
|
|
etsysWPAConfigPairwiseUpdateTimeOut OBJECT-TYPE
|
|
SYNTAX Unsigned32 (1..4294967295)
|
|
UNITS "seconds"
|
|
MAX-ACCESS read-write
|
|
STATUS current
|
|
DESCRIPTION
|
|
"The time in seconds after which the WPA 4-way handshake
|
|
will be retried. The timer shall start at the moment a
|
|
4-way message is sent."
|
|
DEFVAL { 100 }
|
|
::= { etsysWPAConfigEntry 19 }
|
|
|
|
etsysWPAConfigPairwiseUpdateCount OBJECT-TYPE
|
|
SYNTAX Unsigned32 (1..4294967295)
|
|
MAX-ACCESS read-write
|
|
STATUS current
|
|
DESCRIPTION
|
|
"The number of times the WPA 4-way handshake will be retried."
|
|
DEFVAL { 3 }
|
|
::= { etsysWPAConfigEntry 20 }
|
|
|
|
etsysWPAConfigLegacyOptionSupported OBJECT-TYPE
|
|
SYNTAX TruthValue
|
|
MAX-ACCESS read-only
|
|
STATUS current
|
|
DESCRIPTION
|
|
"This object indicates whether the entity supports the 'Allow
|
|
Legacy Clients' option. The answer may vary depending upon
|
|
the currently-installed radio card model."
|
|
::= { etsysWPAConfigEntry 21 }
|
|
|
|
etsysWPAConfigAllowLegacyClients OBJECT-TYPE
|
|
SYNTAX TruthValue
|
|
MAX-ACCESS read-write
|
|
STATUS current
|
|
DESCRIPTION
|
|
"This object provides a way to indicate that an access point in
|
|
WPA mode should accept associations from both WPA clients and
|
|
legacy (pre-WPA, pre-RSN) clients.
|
|
|
|
When this object is true(1), the etsysWPAConfigMulticastCipher
|
|
must be WEP-40 or WEP-104 (a.k.a. 128-bit WEP).
|
|
|
|
Using WEP Group keys and letting legacy clients associate may
|
|
weaken security. To minimize this,
|
|
|
|
1. Enable legacy associations only on radios that support
|
|
Pairwise keys.
|
|
|
|
2. Enable frequent Group key rekeying. With TKIP and AES,
|
|
there's much less threat of key cracking than with WEP,
|
|
so the default is 'once in a blue moon'. With WEP, you
|
|
need to think more in terms of Rapid Rekeying.
|
|
|
|
Access points implementing this feature are under no obligation
|
|
to support non-802.1X clients. For instance, an access point
|
|
might use one-time dynamic WEP keys when WPA Group key rotation
|
|
is disabled. Static WEP clients would not know these keys."
|
|
::= { etsysWPAConfigEntry 22 }
|
|
|
|
etsysWPAConfigRekeyPairwiseWEP OBJECT-TYPE
|
|
SYNTAX TruthValue
|
|
MAX-ACCESS read-write
|
|
STATUS current
|
|
DESCRIPTION
|
|
"This object applies when WPA is enabled (dot11PrivacyInvoked,
|
|
etsysWPAConfigEnabled) and management has chosen to allow a mix
|
|
of WPA and non-WPA clients (etsysWPAConfigAllowLegacyClients).
|
|
|
|
It specifies whether the access point should tumble Pairwise
|
|
WEP keys belonging to non-WPA clients. The access point uses
|
|
Group key rotation as a trigger for Pairwise WEP key tumbling;
|
|
if you want the latter, be sure to configure the former.
|
|
|
|
See also: etsysDot1xRekeyPairwise."
|
|
::= { etsysWPAConfigEntry 23 }
|
|
|
|
|
|
-- ---------------------------------------------------------- --
|
|
-- Unicast Cipher Suite configuration table
|
|
-- ---------------------------------------------------------- --
|
|
|
|
etsysWPAConfigUnicastCiphersTable OBJECT-TYPE
|
|
SYNTAX SEQUENCE OF EtsysWPAConfigUnicastCiphersEntry
|
|
MAX-ACCESS not-accessible
|
|
STATUS current
|
|
DESCRIPTION
|
|
"This table lists the unicast ciphers supported
|
|
by this entity. It allows enabling and disabling
|
|
of each unicast cipher by network management.
|
|
The Unicast Cipher Suite list in the WPA Information
|
|
Element is formed using the information in this table."
|
|
::= { etsysWiFiProtectedAccessObjects 2 }
|
|
|
|
etsysWPAConfigUnicastCiphersEntry OBJECT-TYPE
|
|
SYNTAX EtsysWPAConfigUnicastCiphersEntry
|
|
MAX-ACCESS not-accessible
|
|
STATUS current
|
|
DESCRIPTION
|
|
"The table entry, indexed by the interface index (or all
|
|
interfaces) and the unicast cipher."
|
|
INDEX { etsysWPAConfigIndex, etsysWPAConfigUnicastCipherIndex }
|
|
::= { etsysWPAConfigUnicastCiphersTable 1 }
|
|
|
|
EtsysWPAConfigUnicastCiphersEntry ::=
|
|
SEQUENCE {
|
|
etsysWPAConfigUnicastCipherIndex Unsigned32,
|
|
etsysWPAConfigUnicastCipher OCTET STRING,
|
|
etsysWPAConfigUnicastCipherEnabled TruthValue
|
|
}
|
|
|
|
etsysWPAConfigUnicastCipherIndex OBJECT-TYPE
|
|
SYNTAX Unsigned32 (1..4294967295)
|
|
MAX-ACCESS not-accessible
|
|
STATUS current
|
|
DESCRIPTION
|
|
"The auxiliary index into the
|
|
etsysWPAConfigUnicastCiphersTable."
|
|
::= { etsysWPAConfigUnicastCiphersEntry 1 }
|
|
|
|
etsysWPAConfigUnicastCipher OBJECT-TYPE
|
|
SYNTAX OCTET STRING (SIZE(4))
|
|
MAX-ACCESS read-only
|
|
STATUS current
|
|
DESCRIPTION
|
|
"The selector of a supported unicast cipher. It consists of
|
|
an OUI (the three most significant octets) and a cipher
|
|
suite identifier (the least significant octet)."
|
|
::= { etsysWPAConfigUnicastCiphersEntry 2 }
|
|
|
|
etsysWPAConfigUnicastCipherEnabled OBJECT-TYPE
|
|
SYNTAX TruthValue
|
|
MAX-ACCESS read-write
|
|
STATUS current
|
|
DESCRIPTION
|
|
"This object enables or disables the unicast cipher."
|
|
::= { etsysWPAConfigUnicastCiphersEntry 3 }
|
|
|
|
|
|
-- ---------------------------------------------------------- --
|
|
-- The Authentication Suites Table
|
|
-- ---------------------------------------------------------- --
|
|
|
|
etsysWPAConfigAuthenticationSuitesTable OBJECT-TYPE
|
|
SYNTAX SEQUENCE OF EtsysWPAConfigAuthenticationSuitesEntry
|
|
MAX-ACCESS not-accessible
|
|
STATUS current
|
|
DESCRIPTION
|
|
"This table lists the authentication suites supported
|
|
by this entity. Each authentication suite can be
|
|
individually enabled and disabled. The Authentication
|
|
Suite List in the WPA IE is formed using the information
|
|
in this table."
|
|
::= { etsysWiFiProtectedAccessObjects 3 }
|
|
|
|
etsysWPAConfigAuthenticationSuitesEntry OBJECT-TYPE
|
|
SYNTAX EtsysWPAConfigAuthenticationSuitesEntry
|
|
MAX-ACCESS not-accessible
|
|
STATUS current
|
|
DESCRIPTION
|
|
"An entry (row) in the
|
|
etsysWPAConfigAuthenticationSuitesTable."
|
|
INDEX { etsysWPAConfigIndex, etsysWPAConfigAuthenticationSuiteIndex }
|
|
::= { etsysWPAConfigAuthenticationSuitesTable 1 }
|
|
|
|
EtsysWPAConfigAuthenticationSuitesEntry ::=
|
|
SEQUENCE {
|
|
etsysWPAConfigAuthenticationSuiteIndex Unsigned32,
|
|
etsysWPAConfigAuthenticationSuite OCTET STRING,
|
|
etsysWPAConfigAuthenticationSuiteEnabled TruthValue
|
|
}
|
|
|
|
etsysWPAConfigAuthenticationSuiteIndex OBJECT-TYPE
|
|
SYNTAX Unsigned32 (1..4294967295)
|
|
MAX-ACCESS not-accessible
|
|
STATUS current
|
|
DESCRIPTION
|
|
"The auxiliary variable used as an index into
|
|
the etsysWPAConfigAuthenticationSuitesTable."
|
|
::= { etsysWPAConfigAuthenticationSuitesEntry 1 }
|
|
|
|
etsysWPAConfigAuthenticationSuite OBJECT-TYPE
|
|
SYNTAX OCTET STRING (SIZE(4))
|
|
MAX-ACCESS read-only
|
|
STATUS current
|
|
DESCRIPTION
|
|
"The selector of an authentication suite. It consists of an
|
|
OUI (the three most significant octets) and a cipher suite
|
|
identifier (the least significant octet). "
|
|
::= { etsysWPAConfigAuthenticationSuitesEntry 2 }
|
|
|
|
etsysWPAConfigAuthenticationSuiteEnabled OBJECT-TYPE
|
|
SYNTAX TruthValue
|
|
MAX-ACCESS read-write
|
|
STATUS current
|
|
DESCRIPTION
|
|
"This variable indicates whether the corresponding
|
|
authentication suite is enabled/disabled."
|
|
::= { etsysWPAConfigAuthenticationSuitesEntry 3 }
|
|
|
|
|
|
-- ---------------------------------------------------------- --
|
|
-- WPA statistics
|
|
-- ---------------------------------------------------------- --
|
|
|
|
etsysWPAStatsTable OBJECT-TYPE
|
|
SYNTAX SEQUENCE OF EtsysWPAStatsEntry
|
|
MAX-ACCESS not-accessible
|
|
STATUS current
|
|
DESCRIPTION
|
|
"This table maintains per-STA statistics for SN.
|
|
The entry with etsysWPAStatsSTAAddress set to
|
|
FF-FF-FF-FF-FF-FF shall contain statistics for
|
|
broadcast/multicast traffic."
|
|
::= { etsysWiFiProtectedAccessObjects 4 }
|
|
|
|
etsysWPAStatsEntry OBJECT-TYPE
|
|
SYNTAX EtsysWPAStatsEntry
|
|
MAX-ACCESS not-accessible
|
|
STATUS current
|
|
DESCRIPTION
|
|
"An entry in the etsysWPAStatsTable."
|
|
INDEX { etsysWPAConfigIndex, etsysWPAStatsIndex }
|
|
::= { etsysWPAStatsTable 1 }
|
|
|
|
EtsysWPAStatsEntry ::=
|
|
SEQUENCE {
|
|
etsysWPAStatsIndex Unsigned32,
|
|
etsysWPAStatsSTAAddress MacAddress,
|
|
etsysWPAStatsVersion Unsigned32,
|
|
etsysWPAStatsSelectedUnicastCipher OCTET STRING,
|
|
etsysWPAStatsTKIPICVErrors Counter32,
|
|
etsysWPAStatsTKIPLocalMICFailures Counter32,
|
|
etsysWPAStatsTKIPRemoteMICFailures Counter32,
|
|
etsysWPAStatsTKIPCounterMeasuresInvoked Counter32
|
|
}
|
|
|
|
etsysWPAStatsIndex OBJECT-TYPE
|
|
SYNTAX Unsigned32 (1..4294967295)
|
|
MAX-ACCESS not-accessible
|
|
STATUS current
|
|
DESCRIPTION
|
|
"An auxiliary index into the etsysWPAStatsTable."
|
|
::= { etsysWPAStatsEntry 1 }
|
|
|
|
etsysWPAStatsSTAAddress OBJECT-TYPE
|
|
SYNTAX MacAddress
|
|
MAX-ACCESS read-only
|
|
STATUS current
|
|
DESCRIPTION
|
|
"The MAC address of the station the statistics in this
|
|
conceptual row belong to."
|
|
::= { etsysWPAStatsEntry 2 }
|
|
|
|
etsysWPAStatsVersion OBJECT-TYPE
|
|
SYNTAX Unsigned32 (1..4294967295)
|
|
MAX-ACCESS read-only
|
|
STATUS current
|
|
DESCRIPTION
|
|
"The WPA version which the station associated with."
|
|
::= { etsysWPAStatsEntry 3 }
|
|
|
|
etsysWPAStatsSelectedUnicastCipher OBJECT-TYPE
|
|
SYNTAX OCTET STRING (SIZE(4))
|
|
MAX-ACCESS read-only
|
|
STATUS current
|
|
DESCRIPTION
|
|
"The Authentication Suite the station selected
|
|
during association. The value consists of a three
|
|
octet OUI followed by a one octet Type as follows:
|
|
|
|
OUI Value Authentication Type Key Management Type
|
|
-------- ----- ------------------- -------------------
|
|
00:00:00 0 Reserved Reserved
|
|
00:00:00 1 Unspecified authentication 802.1X Key Management
|
|
over 802.1X
|
|
00:00:00 2 None 802.1X Key Management
|
|
using pre-shared Key
|
|
00:00:00 3-255 Reserved Reserved
|
|
Vendor any Vendor Specific Vendor Specific
|
|
other any Reserved Reserved"
|
|
::= { etsysWPAStatsEntry 4 }
|
|
|
|
etsysWPAStatsTKIPICVErrors OBJECT-TYPE
|
|
SYNTAX Counter32
|
|
MAX-ACCESS read-only
|
|
STATUS current
|
|
DESCRIPTION
|
|
"Counts the number of TKIP ICV errors encountered
|
|
when decrypting packets for the station."
|
|
::= { etsysWPAStatsEntry 5 }
|
|
|
|
etsysWPAStatsTKIPLocalMICFailures OBJECT-TYPE
|
|
SYNTAX Counter32
|
|
MAX-ACCESS read-only
|
|
STATUS current
|
|
DESCRIPTION
|
|
"Counts the number of Michael MIC failure encountered
|
|
when checking the integrity of packets received from
|
|
the station at this entity."
|
|
::= { etsysWPAStatsEntry 6 }
|
|
|
|
etsysWPAStatsTKIPRemoteMICFailures OBJECT-TYPE
|
|
SYNTAX Counter32
|
|
MAX-ACCESS read-only
|
|
STATUS current
|
|
DESCRIPTION
|
|
"Counts the number of Michael MIC failures encountered
|
|
by the station identified by dot11StatsSTAAddress and
|
|
reported back to this entity. "
|
|
::= { etsysWPAStatsEntry 7 }
|
|
|
|
etsysWPAStatsTKIPCounterMeasuresInvoked OBJECT-TYPE
|
|
SYNTAX Counter32
|
|
MAX-ACCESS read-only
|
|
STATUS current
|
|
DESCRIPTION
|
|
"Counts the number of times a MIC failure occurred two
|
|
times within 60 seconds and counter-measures were
|
|
invoked. This variables counts this for both local and
|
|
remote. It counts every time countermeasures are
|
|
invoked."
|
|
::= { etsysWPAStatsEntry 8 }
|
|
|
|
|
|
-- ---------------------------------------------------------- --
|
|
-- Wi-Fi Protected Access MIB - Conformance Information
|
|
-- ---------------------------------------------------------- --
|
|
|
|
etsysWpaConformance
|
|
OBJECT IDENTIFIER ::= { etsysWiFiProtectedAccessMIB 2 }
|
|
|
|
etsysWpaGroups
|
|
OBJECT IDENTIFIER ::= { etsysWpaConformance 1 }
|
|
|
|
etsysWpaCompliances
|
|
OBJECT IDENTIFIER ::= { etsysWpaConformance 2 }
|
|
|
|
|
|
-- ---------------------------------------------------------- --
|
|
-- Units of conformance
|
|
-- ---------------------------------------------------------- --
|
|
|
|
etsysWpaBaseGroup OBJECT-GROUP
|
|
OBJECTS {
|
|
etsysWPAConfigOptionImplemented,
|
|
etsysWPAConfigEnabled,
|
|
etsysWPAConfigTKIPNumberOfReplayCounters,
|
|
etsysWPAConfigVersion,
|
|
etsysWPAConfigPairwiseKeysSupported,
|
|
etsysWPAConfigMulticastCipher,
|
|
etsysWPAConfigGroupRekeyMethod,
|
|
etsysWPAConfigGroupRekeyTime,
|
|
etsysWPAConfigGroupRekeyPackets,
|
|
etsysWPAConfigGroupRekeyStrict,
|
|
etsysWPAConfigPSKValue,
|
|
etsysWPAConfigPSKValueEntered,
|
|
etsysWPAConfigMultipleAuthSuitesSupported,
|
|
etsysWPAConfigPSKPassPhrase,
|
|
etsysWPAConfigGroupMasterRekeyTime,
|
|
etsysWPAConfigGroupUpdateTimeOut,
|
|
etsysWPAConfigGroupUpdateCount,
|
|
etsysWPAConfigPairwiseUpdateTimeOut,
|
|
etsysWPAConfigPairwiseUpdateCount,
|
|
etsysWPAConfigLegacyOptionSupported,
|
|
etsysWPAConfigAllowLegacyClients,
|
|
etsysWPAConfigRekeyPairwiseWEP
|
|
}
|
|
STATUS current
|
|
DESCRIPTION
|
|
"A collection of objects providing configuration
|
|
information for the WPA service."
|
|
::= { etsysWpaGroups 1 }
|
|
|
|
etsysWpaUnicastCipherGroup OBJECT-GROUP
|
|
OBJECTS {
|
|
etsysWPAConfigUnicastCipher,
|
|
etsysWPAConfigUnicastCipherEnabled
|
|
}
|
|
STATUS current
|
|
DESCRIPTION
|
|
"A collection of objects providing configuration
|
|
information for the WPA service."
|
|
::= { etsysWpaGroups 2 }
|
|
|
|
etsysWpaAuthSuiteGroup OBJECT-GROUP
|
|
OBJECTS {
|
|
etsysWPAConfigAuthenticationSuite,
|
|
etsysWPAConfigAuthenticationSuiteEnabled
|
|
}
|
|
STATUS current
|
|
DESCRIPTION
|
|
"A collection of objects providing configuration
|
|
information for the WPA service."
|
|
::= { etsysWpaGroups 3 }
|
|
|
|
etsysWpaStatsGroup OBJECT-GROUP
|
|
OBJECTS {
|
|
etsysWPAStatsSTAAddress,
|
|
etsysWPAStatsVersion,
|
|
etsysWPAStatsSelectedUnicastCipher,
|
|
etsysWPAStatsTKIPICVErrors,
|
|
etsysWPAStatsTKIPLocalMICFailures,
|
|
etsysWPAStatsTKIPRemoteMICFailures,
|
|
etsysWPAStatsTKIPCounterMeasuresInvoked
|
|
}
|
|
STATUS current
|
|
DESCRIPTION
|
|
"A collection of objects providing statistics
|
|
information for the WPA service."
|
|
::= { etsysWpaGroups 4 }
|
|
|
|
|
|
-- ---------------------------------------------------------- --
|
|
-- Compliance statements
|
|
-- ---------------------------------------------------------- --
|
|
|
|
etsysWpaCompliance MODULE-COMPLIANCE
|
|
STATUS current
|
|
DESCRIPTION
|
|
"The compliance statement for devices that support the
|
|
Enterasys Wi-Fi Protected Access (WPA) MIB."
|
|
|
|
MODULE -- this module
|
|
MANDATORY-GROUPS {
|
|
etsysWpaBaseGroup
|
|
}
|
|
|
|
::= { etsysWpaCompliances 1 }
|
|
|
|
END
|