CISCO-LWAPP-WAPI-MIB

File: CISCO-LWAPP-WAPI-MIB.mib (32438 bytes)

Imported modules

SNMPv2-SMI SNMPv2-TC CISCO-LWAPP-WLAN-MIB
CISCO-LWAPP-DOT11-CLIENT-MIB CISCO-SMI CISCO-LWAPP-TC-MIB
CISCO-LWAPP-AP-MIB

Imported symbols

Unsigned32 Integer32 Counter64
Counter32 IpAddress OBJECT-TYPE
MODULE-IDENTITY MacAddress cLWlanIndex
cldcClientMacAddress ciscoMgmt CLSecKeyFormat
DisplayString TruthValue cLApSysMacAddress

Defined Types

CiscoWapiWlanStatsEntry  
SEQUENCE    
  cLWWSWAISignatureErrors Counter32
  cLWWSWAIHMACErrors Counter32
  cLWWSWAIAuthResultFailures Counter32
  cLWWSWAIDiscardCounters Counter32
  cLWWSWAITimeoutCounters Counter32
  cLWWSWAIFormatErrors Counter32
  cLWWSWAICertHandshakeFailures Counter32
  cLWWSWAIUnicastHandshakeFailures Counter32
  cLWWSWAIMulticastHandshakeFailures Counter32
  cLWWSWPIRXReplayCounters Counter32
  cLWWSWPIRXMicErrorCounters Counter64
  cLWWSWPIRXDecryptErrorCounters Counter64

CiscoWapiClientStatsEntry  
SEQUENCE    
  cLWCSWapiClientVersion Integer32
  cLWCSWAISignatureErrors Counter32
  cLWCSWAIHMACErrors Counter32
  cLWCSWAIAuthResultFailures Counter32
  cLWCSWAIDiscardCounters Counter32
  cLWCSWAITimeoutCounters Counter32
  cLWCSWAIFormatErrors Counter32
  cLWCSWAICertHandshakeFailures Counter32
  cLWCSWAIUnicastHandshakeFailures Counter32
  cLWCSWAIMulticastHandshakeFailures Counter32
  cLWCSWAIUnicastCipherSuite OCTET STRING
  cLWCSWAIMcastCipherSuite OCTET STRING
  cLWCSWAIAuthenticationSuiteRequested OCTET STRING
  cLWCSWAIBKIDUsed OCTET STRING
  cLWCSWAICtrPortState TruthValue

CiscoWapiWlanConfigEntry  
SEQUENCE    
  cLWCSWlanWapiEnable TruthValue
  cLWCSWlanWapiAkmKeyMgmtMode INTEGER
  cLWCSWlanWapiEncryptType BITS
  cLWCSWlanWapiPskFmt CLSecKeyFormat
  cLWCSWlanWapiPsk OCTET STRING
  cLWCSWlanWapiConfigUnicasCiphersEntry OCTET STRING
  cLWCSWlanWapiConfigUnicastCipherSize Unsigned32
  cLWCSWlanWapiMcastCipherSize Unsigned32
  cLWCSWlanBKLifeTime Unsigned32
  cLWCSWlanBKReauthThreshold Unsigned32
  cLWCSWlanWapiConfigMulticastCipher OCTET STRING
  cLWCSWlanWapiAuthenticationSuiteSelected OCTET STRING
  cLWCSWlanWapiUnicastCipherSelected OCTET STRING
  cLWCSWlanWapiMulticastCipherSelected OCTET STRING
  cLWCSWlanWapiPreauthenticationState TruthValue

CiscoWapiAPEntry  
SEQUENCE    
  cLWCSWapiAPMaxUnicastKeysSupport Integer32

CiscoWapiAuthenticationConfigEntry  
SEQUENCE    
  cLWCSWlanWapiAuthenticationSuiteIndex INTEGER
  cLWCSWlanWapiAuthenticationSuite OCTET STRING
  cLWCSWlanWapiAuthenticationSuiteEnable TruthValue

CiscoWapiCiphersEntry  
SEQUENCE    
  cLWCSWlanCipherIndex Unsigned32
  cLWCSWlanCipherEnabled TruthValue

Defined Values

ciscoLwappWapiMIB 1.3.6.1.4.1.9.9.9997
cisco WiFi Controller Snmp agent support for Wapi. WAPI is a Chinese National Standard for Wireless LAN (GB 15629.11-2003) GLOSSARY: WAPI - WLAN Authentication and Privacy Infrastructures WAI - WLAN Authentication Interface WLAN - Wireless Local Area Network WPI - Wireless Privacy Interface MSK - multicast session key AKM - authentication and key management BKID - Base Key IDentification
MODULE-IDENTITY    

ciscoLwappWapiMIBObjects 1.3.6.1.4.1.9.9.9997.1
OBJECT IDENTIFIER    

cLWapiWlanStats 1.3.6.1.4.1.9.9.9997.1.1
This table maintains the WAPI statistics for each WLAN on which WAPI is configured as the security protocol.
Status: current Access: not-accessible
OBJECT-TYPE    
  SEQUENCE OF  
    CiscoWapiWlanStatsEntry

cLWapiWlanStatsEntry 1.3.6.1.4.1.9.9.9997.1.1.1
An entry in the cLWWSW Table
Status: current Access: not-accessible
OBJECT-TYPE    
  CiscoWapiWlanStatsEntry  

cLWWSWAISignatureErrors 1.3.6.1.4.1.9.9.9997.1.1.1.1
This counter shall increment when the signature in the received WAI message is incorrect
Status: current Access: read-only
OBJECT-TYPE    
  Counter32  

cLWWSWAIHMACErrors 1.3.6.1.4.1.9.9.9997.1.1.1.2
This counter shall increment when the message authentication code in the received WAI message is incorrect
Status: current Access: read-only
OBJECT-TYPE    
  Counter32  

cLWWSWAIAuthResultFailures 1.3.6.1.4.1.9.9.9997.1.1.1.3
This counter shall increment when the WAI authentication is unsuccessful
Status: current Access: read-only
OBJECT-TYPE    
  Counter32  

cLWWSWAIDiscardCounters 1.3.6.1.4.1.9.9.9997.1.1.1.4
This counter shall increment when the received WAI message is discarded
Status: current Access: read-only
OBJECT-TYPE    
  Counter32  

cLWWSWAITimeoutCounters 1.3.6.1.4.1.9.9.9997.1.1.1.5
This counter shall increment when the WAI message is timeout
Status: current Access: read-only
OBJECT-TYPE    
  Counter32  

cLWWSWAIFormatErrors 1.3.6.1.4.1.9.9.9997.1.1.1.6
This counter shall increment when there exists format error in the WAI message
Status: current Access: read-only
OBJECT-TYPE    
  Counter32  

cLWWSWAICertHandshakeFailures 1.3.6.1.4.1.9.9.9997.1.1.1.7
This counter shall increment when the WAI Certificate Authentication is unsuccessful
Status: current Access: read-only
OBJECT-TYPE    
  Counter32  

cLWWSWAIUnicastHandshakeFailures 1.3.6.1.4.1.9.9.9997.1.1.1.8
This counter shall increment when the WAI Unicast Key Negotiation is unsuccessful
Status: current Access: read-only
OBJECT-TYPE    
  Counter32  

cLWWSWAIMulticastHandshakeFailures 1.3.6.1.4.1.9.9.9997.1.1.1.9
This counter shall increment when the WAI Multicast Key Negotiation is unsuccessful
Status: current Access: read-only
OBJECT-TYPE    
  Counter32  

cLWWSWPIRXReplayCounters 1.3.6.1.4.1.9.9.9997.1.1.1.10
This counter shall increment when the WPI RX replay check is unsuccessful
Status: current Access: read-only
OBJECT-TYPE    
  Counter32  

cLWWSWPIRXMicErrorCounters 1.3.6.1.4.1.9.9.9997.1.1.1.11
This counter shall increment when the WPI MIC is error
Status: current Access: read-only
OBJECT-TYPE    
  Counter64  

cLWWSWPIRXDecryptErrorCounters 1.3.6.1.4.1.9.9.9997.1.1.1.12
This counter shall increment when the WPI Decryption is error
Status: current Access: read-only
OBJECT-TYPE    
  Counter64  

cLWapiClientStats 1.3.6.1.4.1.9.9.9997.1.2
This table maintains the WAPI statistics for each client connected to a WLAN on which WAPI is configured as the security protocol.
Status: current Access: not-accessible
OBJECT-TYPE    
  SEQUENCE OF  
    CiscoWapiClientStatsEntry

cLWapiClientStatsEntry 1.3.6.1.4.1.9.9.9997.1.2.1
An entry in the cLWapiClientStats Table
Status: current Access: not-accessible
OBJECT-TYPE    
  CiscoWapiClientStatsEntry  

cLWCSWapiClientVersion 1.3.6.1.4.1.9.9.9997.1.2.1.1
This object represents the WAPI draft version used by the WAPI client
Status: current Access: read-only
OBJECT-TYPE    
  Integer32  

cLWCSWAISignatureErrors 1.3.6.1.4.1.9.9.9997.1.2.1.2
This counter shall increment when the signature in the received WAI message is incorrect
Status: current Access: read-only
OBJECT-TYPE    
  Counter32  

cLWCSWAIHMACErrors 1.3.6.1.4.1.9.9.9997.1.2.1.3
This counter shall increment when the message authentication code in the received WAI message is incorrect
Status: current Access: read-only
OBJECT-TYPE    
  Counter32  

cLWCSWAIAuthResultFailures 1.3.6.1.4.1.9.9.9997.1.2.1.4
This counter shall increment when the WAI authentication is unsuccessful
Status: current Access: read-only
OBJECT-TYPE    
  Counter32  

cLWCSWAIDiscardCounters 1.3.6.1.4.1.9.9.9997.1.2.1.5
This counter shall increment when the received WAI message is discarded
Status: current Access: read-only
OBJECT-TYPE    
  Counter32  

cLWCSWAITimeoutCounters 1.3.6.1.4.1.9.9.9997.1.2.1.6
This counter shall increment when the WAI message is timeout
Status: current Access: read-only
OBJECT-TYPE    
  Counter32  

cLWCSWAIFormatErrors 1.3.6.1.4.1.9.9.9997.1.2.1.7
This counter shall increment when there exists format error in the WAI message
Status: current Access: read-only
OBJECT-TYPE    
  Counter32  

cLWCSWAICertHandshakeFailures 1.3.6.1.4.1.9.9.9997.1.2.1.8
This counter shall increment when the WAI Certificate Authentication is unsuccessful
Status: current Access: read-only
OBJECT-TYPE    
  Counter32  

cLWCSWAIUnicastHandshakeFailures 1.3.6.1.4.1.9.9.9997.1.2.1.9
This counter shall increment when the WAI Unicast Key Negotiation is unsuccessful
Status: current Access: read-only
OBJECT-TYPE    
  Counter32  

cLWCSWAIMulticastHandshakeFailures 1.3.6.1.4.1.9.9.9997.1.2.1.10
This counter shall increment when the WAI Multicast Key Negotiation is unsuccessful
Status: current Access: read-only
OBJECT-TYPE    
  Counter32  

cLWCSWAIUnicastCipherSuite 1.3.6.1.4.1.9.9.9997.1.2.1.11
This value represents the Client Unicast Cipher Suite in use, of which obtained from Assoc req frame
Status: current Access: read-only
OBJECT-TYPE    
  OCTET STRING Size(4)  

cLWCSWAIMcastCipherSuite 1.3.6.1.4.1.9.9.9997.1.2.1.12
This value represents the Client Multicast Cipher Suite in use, of which obtained from Assoc req frame
Status: current Access: read-only
OBJECT-TYPE    
  OCTET STRING Size(4)  

cLWCSWAIAuthenticationSuiteRequested 1.3.6.1.4.1.9.9.9997.1.2.1.13
This object specificies the last AKM suite requested from client. 0x 00 14 72 01 : cert 0x 00 14 72 02 : psk
Status: current Access: read-only
OBJECT-TYPE    
  OCTET STRING Size(4)  

cLWCSWAIBKIDUsed 1.3.6.1.4.1.9.9.9997.1.2.1.14
This value represents the selector of the last BKID used in the last Unicast Key Negotiation Handshake
Status: current Access: read-only
OBJECT-TYPE    
  OCTET STRING Size(16)  

cLWCSWAICtrPortState 1.3.6.1.4.1.9.9.9997.1.2.1.15
This value represents the state of client controlled port entity, true means authenticated, false means not authenticated
Status: current Access: read-only
OBJECT-TYPE    
  TruthValue  

cLWapiWlanConfig 1.3.6.1.4.1.9.9.9997.1.3
This table maintains the WAPI config entry for the WLAN.
Status: current Access: not-accessible
OBJECT-TYPE    
  SEQUENCE OF  
    CiscoWapiWlanConfigEntry

cLWapiWlanConfigEntrty 1.3.6.1.4.1.9.9.9997.1.3.1
An entry in the cLWapiWlanConfig Table
Status: current Access: not-accessible
OBJECT-TYPE    
  CiscoWapiWlanConfigEntry  

cLWCSWlanWapiEnable 1.3.6.1.4.1.9.9.9997.1.3.1.1
This object is used to enable the WAPI security on the WLAN.
Status: current Access: read-write
OBJECT-TYPE    
  TruthValue  

cLWCSWlanWapiAkmKeyMgmtMode 1.3.6.1.4.1.9.9.9997.1.3.1.2
This object is used to enable the AKM type to be used for the WAPI WLAN.
Status: current Access: read-write
OBJECT-TYPE    
  INTEGER invalid(0), cert(1), psk(2)  

cLWCSWlanWapiEncryptType 1.3.6.1.4.1.9.9.9997.1.3.1.3
This object is used to enable the encryption type for WAPI WLAN.
Status: current Access: read-write
OBJECT-TYPE    
  BITS sms4(0)  

cLWCSWlanWapiPskFmt 1.3.6.1.4.1.9.9.9997.1.3.1.4
This object indicates the type of the authentication preshared key configured through the object cLWCSWlanWapiPskSetkey. Note that the key configuration is applicable only when psk is configured as the key management mechanism through the cLWCSWlanWapiAkmKeyMgmtMode object.
Status: current Access: read-write
OBJECT-TYPE    
  CLSecKeyFormat  

cLWCSWlanWapiPsk 1.3.6.1.4.1.9.9.9997.1.3.1.5
This object is used to configure the Pre-Shared Key for WAI PSK authentication for the WLAN. The key can be in ASCII or HEX format. 'ascii' 8-40 characters 'hex' 4-40 octets.
Status: current Access: read-write
OBJECT-TYPE    
  OCTET STRING Size(8..80)  

cLWCSWlanWapiConfigUnicasCiphersEntry 1.3.6.1.4.1.9.9.9997.1.3.1.6
The selector of a supported unicast cipher suite. It consists of an OUI (the first 3 octets) and a cipher suite identifier (the last octet).
Status: current Access: read-only
OBJECT-TYPE    
  OCTET STRING Size(4)  

cLWCSWlanWapiConfigUnicastCipherSize 1.3.6.1.4.1.9.9.9997.1.3.1.7
This object indicates the length in bit of the USK. This should be 256 for SMS4. The first 128bits is the UEK and the last 128bits is the UCK.
Status: current Access: read-only
OBJECT-TYPE    
  Unsigned32  

cLWCSWlanWapiMcastCipherSize 1.3.6.1.4.1.9.9.9997.1.3.1.8
This object indicates the length in bit of the MSK. This should be 256 for in SMS4. The first 128bits is the MEK and the last 128bits is the MCK.
Status: current Access: read-only
OBJECT-TYPE    
  Unsigned32  

cLWCSWlanBKLifeTime 1.3.6.1.4.1.9.9.9997.1.3.1.9
This object is used to configure the maximum lifetime of a BK in the BK cache.
Status: current Access: read-write
OBJECT-TYPE    
  Unsigned32  

cLWCSWlanBKReauthThreshold 1.3.6.1.4.1.9.9.9997.1.3.1.10
This object is used to configure the percentage of the BK lifetime that should expire before a WAI reauthentication occurs.
Status: current Access: read-write
OBJECT-TYPE    
  Unsigned32  

cLWCSWlanWapiConfigMulticastCipher 1.3.6.1.4.1.9.9.9997.1.3.1.11
This object indicates the multicast cipher suite that this entity must adopt. The WAPI Parameter Set information element shall adopt the value of this variable, which contains a 3-octet OUI and a one-octet cipher suite identifier.
Status: current Access: read-write
OBJECT-TYPE    
  OCTET STRING Size(4)  

cLWCSWlanWapiAuthenticationSuiteSelected 1.3.6.1.4.1.9.9.9997.1.3.1.12
This object represents the selector of the last AKM suite negotiated.
Status: current Access: read-only
OBJECT-TYPE    
  OCTET STRING Size(4)  

cLWCSWlanWapiUnicastCipherSelected 1.3.6.1.4.1.9.9.9997.1.3.1.13
This object indicates the selector of the last unicast cipher suite negotiated.
Status: current Access: read-only
OBJECT-TYPE    
  OCTET STRING Size(4)  

cLWCSWlanWapiMulticastCipherSelected 1.3.6.1.4.1.9.9.9997.1.3.1.14
This object indicates the selector of the last multicast cipher suite negotiated.
Status: current Access: read-only
OBJECT-TYPE    
  OCTET STRING Size(4)  

cLWCSWlanWapiPreauthenticationState 1.3.6.1.4.1.9.9.9997.1.3.1.15
This object represents the state of Preauthentication in WAPI and currently it is not supported.
Status: current Access: read-only
OBJECT-TYPE    
  TruthValue  

cLWapiAPTable 1.3.6.1.4.1.9.9.9997.1.4
This table maintains the WAPI details and configurations for each AP connected.
Status: current Access: not-accessible
OBJECT-TYPE    
  SEQUENCE OF  
    CiscoWapiAPEntry

cLWapiAPEntry 1.3.6.1.4.1.9.9.9997.1.4.1
An entry in the cLWapiAPTable Table.
Status: current Access: not-accessible
OBJECT-TYPE    
  CiscoWapiAPEntry  

cLWCSWapiAPMaxUnicastKeysSupport 1.3.6.1.4.1.9.9.9997.1.4.1.1
This object represents the maximum number of USK's that an AP can support.
Status: current Access: read-only
OBJECT-TYPE    
  Integer32  

cLWapiWlanAKMSuitesConfigTable 1.3.6.1.4.1.9.9.9997.1.5
This table maintains the WAPI config entry for the WLAN.
Status: current Access: not-accessible
OBJECT-TYPE    
  SEQUENCE OF  
    CiscoWapiAuthenticationConfigEntry

cLWapiWlanAKMSuitesConfigEntry 1.3.6.1.4.1.9.9.9997.1.5.1
An entry in the cLWapiWlanAKMSuitesConfig Table
Status: current Access: not-accessible
OBJECT-TYPE    
  CiscoWapiAuthenticationConfigEntry  

cLWCSWlanWapiAuthenticationSuiteIndex 1.3.6.1.4.1.9.9.9997.1.5.1.1
This object is used to a index for AKM suites on the WLAN.
Status: current Access: not-accessible
OBJECT-TYPE    
  INTEGER cert(1), psk(2)  

cLWCSWlanWapiAuthenticationSuite 1.3.6.1.4.1.9.9.9997.1.5.1.2
This object is used to indicate the AKM suite octects on the WLAN.
Status: current Access: read-only
OBJECT-TYPE    
  OCTET STRING Size(4)  

cLWCSWlanWapiAuthenticationSuiteEnable 1.3.6.1.4.1.9.9.9997.1.5.1.3
This object is used to enable the AKM suites on the WLAN.
Status: current Access: read-write
OBJECT-TYPE    
  TruthValue  

cLWapiCiphers 1.3.6.1.4.1.9.9.9997.1.6
This table maintains the unicast cipher suites supported by this entity. It allows enabling and disabling of each unicast cipher suite by network management. The unicast cipher suite list in the WAPI Parameter Set information element is formed using the information in this table.
Status: current Access: not-accessible
OBJECT-TYPE    
  SEQUENCE OF  
    CiscoWapiCiphersEntry

cLWapiCiphersEntry 1.3.6.1.4.1.9.9.9997.1.6.1
An entry in the cLWapiCiphers Table.
Status: current Access: not-accessible
OBJECT-TYPE    
  CiscoWapiCiphersEntry  

cLWCSWlanCipherIndex 1.3.6.1.4.1.9.9.9997.1.6.1.1
This object represents auxiliary index of the CiscoWapiCiphersEntry.
Status: current Access: not-accessible
OBJECT-TYPE    
  Unsigned32  

cLWCSWlanCipherEnabled 1.3.6.1.4.1.9.9.9997.1.6.1.2
This object represents enables or disables the unicast cipher.
Status: current Access: read-write
OBJECT-TYPE    
  TruthValue  

ciscoLwappWapiConfig 1.3.6.1.4.1.9.9.9997.2
OBJECT IDENTIFIER    

clWapiASIpAddress 1.3.6.1.4.1.9.9.9997.2.1
This object represents the IP address of the WAPI authentication server.
Status: current Access: read-write
OBJECT-TYPE    
  IpAddress  

clWapiASPortNumber 1.3.6.1.4.1.9.9.9997.2.2
This object represents the UDP port number for WAPI authentication server.
Status: current Access: read-write
OBJECT-TYPE    
  Integer32  

clWapiASRequestTimeout 1.3.6.1.4.1.9.9.9997.2.3
This object represents timeout value for the packets sent to Auth Server.
Status: current Access: read-write
OBJECT-TYPE    
  Integer32  

clWapiMulticastRekeyMethod 1.3.6.1.4.1.9.9.9997.2.4
This object selects a mechanism for rekeying the WAPI MSK. The default is time-based, once per day. Rekeying the MSK is only applicable to an entry acting in the AE role.
Status: current Access: read-write
OBJECT-TYPE    
  INTEGER disabled(1), timeBased(2), messageBased(3), timemessageBased(4)  

clWapiMulticastRekeyTime 1.3.6.1.4.1.9.9.9997.2.5
This object represents the time in seconds after which the WAPI MSK will be refreshed. The timer will start the moment the MSK was set using the MLME-SETWPIKEYS request primitive.
Status: current Access: read-write
OBJECT-TYPE    
  Unsigned32  

clWapiMulticastRekeyMessages 1.3.6.1.4.1.9.9.9997.2.6
This object represents the message count in thousands after which the WAPI MSK will be refreshed. The message counter will start the moment the MSK was set using the MLME-SETWPIKEYS request primitive.
Status: current Access: read-write
OBJECT-TYPE    
  Unsigned32  

clWapiMulticastRekeyStrict 1.3.6.1.4.1.9.9.9997.2.7
This object signals that the MSK shall be refreshed whenever a STA leaves the BSS that possesses the MSK.
Status: current Access: read-write
OBJECT-TYPE    
  TruthValue  

clWapiConfigCertificateUpdateCount 1.3.6.1.4.1.9.9.9997.2.8
This object represents the number of times messages in the WAPI hhandshake protocol will be retried per certificate handshake attempt.
Status: current Access: read-write
OBJECT-TYPE    
  Unsigned32  

clWapiConfigMulticastUpdateCount 1.3.6.1.4.1.9.9.9997.2.9
This object represents the number of times message 1 in the WAPI muticast key announcement handshake will be retried per MSK handshake attempt.
Status: current Access: read-write
OBJECT-TYPE    
  Unsigned32  

clWapiConfigUnicastUpdateCount 1.3.6.1.4.1.9.9.9997.2.10
This object represents the number of times message 1 and message 3 in the WAPI unicast key announcement handshake will be retried per USK handshake attempt.
Status: current Access: read-write
OBJECT-TYPE    
  Unsigned32  

cLWCSWapiConfigureVersion 1.3.6.1.4.1.9.9.9997.2.11
This object represents the WAPI configuration version
Status: current Access: read-only
OBJECT-TYPE    
  Integer32  

clWapiConfigControlledPortControl 1.3.6.1.4.1.9.9.9997.2.12
This object indicates the value of the Controlled port. If the value is 0 which means automatic, the current behaviour. The state of the controlled port shall be based on the result of authentication.
Status: current Access: read-only
OBJECT-TYPE    
  INTEGER auto(0)  

clWapiUserInvalidCertificationInbreakNetwork 1.3.6.1.4.1.9.9.9997.2.13
This object represents the WAPI user with invalid certification.
Status: current Access: read-only
OBJECT-TYPE    
  DisplayString  

cLApWAPISecurityLowAttack 1.3.6.1.4.1.9.9.9997.2.14
This object represents the WAPI security low attack notification information.
Status: current Access: read-only
OBJECT-TYPE    
  DisplayString  

clWapiUnicastRekeyMethod 1.3.6.1.4.1.9.9.9997.2.15
This object selects a mechanism for rekeying the WAPI USK. The default is time-based, once per day. Rekeying the USK is only applicable to an entry acting in the AE role. Method 1 (disabled) will temporarily stop the unicast rekeying
Status: current Access: read-write
OBJECT-TYPE    
  INTEGER disabled(1), timeBased(2), messageBased(3), timeMessageBased(4)  

clWapiUnicastRekeyTime 1.3.6.1.4.1.9.9.9997.2.16
This object represents the time in seconds after which the WAPI USK will be refreshed. The timer will start the moment the USK was set using the MLME-SETWPIKEYS request primitive.
Status: current Access: read-write
OBJECT-TYPE    
  Unsigned32  

clWapiUnicastRekeyMessage 1.3.6.1.4.1.9.9.9997.2.17
This object represents the message count in thousands after which the WAPI USK will be refreshed. The message counter will start the moment the USK was set using the MLME-SETWPIKEYS request primitive. This MIB will be configurable od of TIME or TIME&PACKET
Status: current Access: read-write
OBJECT-TYPE    
  Unsigned32  

clWapiConfigSATimeout 1.3.6.1.4.1.9.9.9997.2.18
This object represents the maximum time a security association shall take to set up.
Status: current Access: read-write
OBJECT-TYPE    
  Unsigned32  

cLApWAPIReplayAttack 1.3.6.1.4.1.9.9.9997.2.19
This object represents the WAPI replay attack notification information.
Status: current Access: read-only
OBJECT-TYPE    
  DisplayString  

cLApWAPITamperAttack 1.3.6.1.4.1.9.9.9997.2.20
This object represents the WAPI tamper attack notification information.
Status: current Access: read-only
OBJECT-TYPE    
  DisplayString  

clWapiAddressRedirectAttack 1.3.6.1.4.1.9.9.9997.2.21
This object represents the WAPI redirect attack notification information.
Status: current Access: read-only
OBJECT-TYPE    
  DisplayString  

ciscoLwappWapiCertificateObjects 1.3.6.1.4.1.9.9.9997.3
OBJECT IDENTIFIER    

clWapiWLCCertificateStatus 1.3.6.1.4.1.9.9.9997.3.1
This object represents the installation state of WLC Certificate. True means the WLC certificate is installed. False means it is uninstalled.
Status: current Access: read-only
OBJECT-TYPE    
  TruthValue  

clWapiCACertificateStatus 1.3.6.1.4.1.9.9.9997.3.2
This object represents the installation state of Certificate Authority Certificate. True means the CA certificate is installed. False means it is uninstalled
Status: current Access: read-only
OBJECT-TYPE    
  TruthValue  

clWapiASCertificateStatus 1.3.6.1.4.1.9.9.9997.3.3
This object represents the installation state of Auth Server Certificate. True means the AS certificate is installed. False means it is uninstalled.
Status: current Access: read-only
OBJECT-TYPE    
  TruthValue  

ciscoLwappWapiMIBNotifObjects 1.3.6.1.4.1.9.9.9997.4
OBJECT IDENTIFIER    

ciscoLwappWapiUserInvalidCertificateNetworkTrap 1.3.6.1.4.1.9.9.9997.4.1
This notification will be sent when the WAPI Client is installed with invalid certificates.
Status: current Access: read-only
NOTIFICATION-TYPE    

ciscoLwappWapiSecurityLowAttackTrap 1.3.6.1.4.1.9.9.9997.4.2
This notification will be sent when AP received a fake Unicast Key Negotiation Response frame of which the WIE_AUSE is different with that of AP sent before.
Status: current Access: read-only
NOTIFICATION-TYPE    

ciscoLwappWapiReplayAttackTrap 1.3.6.1.4.1.9.9.9997.4.3
This notification will be sent when AP received an AE challenge is different with that of AP received before.
Status: current Access: read-only
NOTIFICATION-TYPE    

ciscoLwappWapiTamperAttackTrap 1.3.6.1.4.1.9.9.9997.4.4
This notification will be sent when AP received an invaild Message Authentication Code.
Status: current Access: read-only
NOTIFICATION-TYPE    

ciscoLwappWapiAddressRedirectAttackTrap 1.3.6.1.4.1.9.9.9997.4.5
This notification will be sent when AP received an address redirect attack trap. Radio interface information (MAC), BSSID, SSID, Mac of station
Status: current Access: read-only
NOTIFICATION-TYPE