H3C-WIPS-MIB: View SNMP OID List / Download MIB

This MIB provides information about WIPS feature. Wireless Intrusion Prevention System (WIPS) WIPS is designed to be employed in an area that is serviced by an existing wireless network. It aids in the early detection of malicious outsider attacks and intrusions via wireless networks, and takes corresponding measures in order to guarantee the wireless environment security.

Represents whether the WIPS feature is enabled or not. 'true': enable the WIPS feature. 'false': disable the WIPS feature. WIPS and WIDS feature can not be enabled at the same time.

Represents the number of sensor license.

Represents whether the block list feature is enabled or not. 'block' : Enable the block list feature to filter unwanted devices. 'unblock' : Disable the block list feature. Enumeration: 'unblock': 2, 'block': 1.

Represents the time for AP getting inactive.

Represents the time for STA getting inactive.

Represents the time for device getting aged.

Represents the period of WIPS reporting the statistic.

Represents the period of WIPS reclassifying devices.

This object is used to remove all entries from the static trust list. It will return false for get operation.

This object is used to remove all entries from the static block list. It will return false for get operation.

This object is used to remove all entries from the ignore list. It will return false for get operation..

This object is used to remove all entries from the static countermeasure list. It will return false for get operation.

Represents the permit channel number by bitmap.

The table provides the list of virtual security domain.

Each entry contains information of each VSD.

Represents the name of virtual security domain.

The status of this table entry.

Represents the name of attack detect policy attached to the VSD.

The table defines the AP classification rules been attached to the VSD.

Each entry contains information of each AP classification rule in each VSD.

Represents the name of AP classification rule attached to the VSD.

The status of this table entry.

Represents the precedence of AP classification rule attached to the VSD.

The table defines the sensor been attached to the VSD.

Each entry contains information of each sensor in each VSD.

Represents the name of sensor attached to the VSD.

The status of this table entry.

Represents the running state of the sensor. It will return false for set operation. Enumeration: 'running': 1, 'idle': 2.

The table represents the list of sensor radio information.

Each entry contains information of a radio of a sensor.

Represents the radio identifier of the sensor.

Represents the scanning mode configured to the radio. Enumeration: 'middle': 3, 'detectFirst': 2, 'accessFirst': 1, 'detectOnly': 4.

The table defines the parameters for WIPS AP classification rule. One rule could be assigned to different VSDs.

Each entry contains information of each AP classification rule.

Represents the name of AP classification rule.

The status of this table entry.

Represents the severity level of the AP classification rule. Available value limits from 0 to 100.

Represents whether match all the AP classification sub-rules which have been configured.

Represents the type of AP classification.

Represents the compare way of the SSID in the sub rule, including include/not include/equal/not equal. Enumeration: 'notequal': 4, 'include': 1, 'notinclude': 2, 'equal': 3.

Represents the case sensitive or not for the SSID match. 'true': Case insensitive. 'false': Case sensitive.

Represents the SSID match template in the ap classification rule.

Represents the security type of active AP.

Represents match way of the security type of active AP. Enumeration: 'include': 2, 'equal': 1.

Represents the authentication type of the AP. undo - represents undo operation Enumeration: 'psk': 2, 'none': 1, 'other': 4, 'undo': 5, 'dot1x': 3.

Represents the high-limit of the RSSI of AP. Available value limits from 1 to 90.

Represents the low-limit of the RSSI of AP. Available value limits from 0 to 89.

Represents the high-limit of the duration of AP. Available value limits from 1 to 2592000.

Represents the low-limit of the duration of AP. Available value limits from 0 to 2591999.

Represents the high-limit of the number of AP. Available value limits from 1 to 128.

Represents the low-limit of the number of AP. Available value limits from 0 to 127.

Represents the high-limit of the number of client. Available value limits from 1 to 128.

Represents the low-limit of the number of client. Available value limits from 0 to 127.

Represents the bit string of supported attack detect policy. The specific attack detect policy is supported if its corresponding bit is set to 1; otherwise its corresponding bit is set to 0. bit0: adhoc bit1: ap-spoof bit2: client-spoof bit3: prohibited channel

The table defines the parameters for WIPS attack detect policy.

Each entry contains information of each attack detect policy.

Represents the name of attack detect policy.

The status of this table entry.

Represents the bit string of attack detect policy configuration. The specific attack detect policy is enabled if its corresponding bit is set to 1; disabled if its corresponding bit is set to 0. bit0: adhoc bit1: ap-spoof bit2: client-spoof bit3: prohibited channel

The table provides the MAC address list of devices in the static countermeasure list.

Each entry contains information of each MAC address in the static countermeasure list.

Represents the MAC address in static countermeasure list.

The status of this table entry.

The table provides the MAC address list of devices in the static block list. WIPS will ignore the frames from the devices in the list, and take the devices as rogue devices.

Each entry contains information of each MAC address in the static block list.

Represents the MAC address in static block list.

The status of this table entry.

The table provides the MAC address list of devices in the static trust list. WIPS will take the devices in the list as authorized devices.

Each entry contains information of each MAC address in the static trust list.

Represents the MAC address in static trust list.

The status of this table entry.

The table provides the MAC address list of devices in the ignore list. WIPS will ignore the events caused by the device in the list.

Each entry contains information of each MAC address in the ignore list.

Represents the MAC address in ignore list.

The status of this table entry.

The table represents the list of AP scanning mode configuration on radio.

Each entry contains information of WIPS scanning mode on radio.

Represents the name of AP.

Represents the radio of AP.

Represents the scanning mode. The radio enable-disable status must be disabled before WIPS scanning mode is configured on this radio. The mesh feature must be disabled before any WIPS scanning mode is set on radio. This radio can not apply any service template before the detectOnly scanning mode is set on the radio. Enumeration: 'middle': 3, 'detectFirst': 2, 'accessFirst': 1, 'detectOnly': 4.

The status of this table entry.

The table represents the list of possible BSS information for APs detected by the WIPS.

Each entry contains possible BSS information of each AP detected by WIPS.

Represents the virtual security domain where the BSS was detected.

Represents the Basic Service Set.

Represents the time since AP started to work, which is got from beacon/probe response frame.

Represents the time update h3cWIPSDctAPRunningTime since system is up.

Represents whether the detected AP is countered by WIPS.

Represents the radio channel which the detected AP work on.

Represents the radio type used by the detected AP.

Represents the authentication method used by the detected AP. none(1) - No key management mode configured, psk(2) - pre-shared key authentication, dot1x(3) - 802.1x authentication. other(4) - other authentication.

Represents the encrypt method used by the detected AP. none(1) - clear text or no cipher method is configure, wep(2) - WEP key, tkip(4) - WPA Temporal Key encryption, ccmp(8) - WPA AES CCMP encryption

Represents the security suites of the detected AP. clear 0x01 wpa2 0x02 wpa 0x04 wep 0x08

Represents the severity level of the detected AP.

Represents the time that AP was detected for the last time since system is up.

Represents the time that AP was detected for the first time since system is up.

Represents whether the AP will be taken as a rogue AP. If the value is true, the MAC address will be automatically added into h3cWIPSBlockListTable and the category of the AP will be taken as rogue. If the value is false, nothing will be done. It will return false for get operation.

Represents whether the AP will be taken as an authorized AP. If the value is true, the MAC address will be automatically added into h3cWIPSTrustListTable. If the value is false, nothing will be done. It will return false for get operation.

Represents whether the AP will be taken as an ignored AP. If the value is true, the MAC address will be automatically added into h3cWIPSIgnoreListTable. If the value is false, nothing will be done. It will return false for get operation.

Represents whether the AP will be taken as a countered AP. If the value is true, the MAC address will be automatically added into h3cWIPSCountermeasureListTable. If the value is false, nothing will be done. It will return false for get operation.

Represents the categorized result of the AP. For set operation, only the following values are valid: authorized(2),rogue(3),misconfigured(4),external(5)

Represents by which way the AP is categorized. manual(1) -categorized by user autoByNMS(2) -categorized by NMS(Network Management System) autoByDev(3) -categorized by WIPS

Represents the status of the AP detected by WIPS.

Represents the SSID broadcasted by AP.

Represents the number of clients associated with the detected AP.

Represents the number of sensors detecting the AP.

The table represents the list of station associated with APs detected by the WIPS.

Each entry contains possible station information detected by WIPS.

Represents the MAC address of station associated with AP.

The status of this table entry. It will return false for set operation.

The table represents the list of sensors.

Each entry contains possible sensor information of WIPS.

Represents the name of sensor.

Represents on which radio the sensor AP detected the AP.

Represents the current value of signal strength that WIPS sensor AP received from the AP.

Represents the time that AP was detected by this sensor for the last time since system is up.

The table represents the list of possible information for stations detected by the WIPS.

Each entry contains possible station information of each station detected by WIPS.

Represents the virtual security domain in which the station was detected.

Represents the MAC address of station.

Represents the BSSID which station associates with.

Represents the status of this station detected by WIPS.

Represents the categorized result of the station.

Represents the radio type used by the detected station.

Represents on which radio channel that WIPS sensor AP detected the station.

Represents whether the detected station is countered by WIPS.

Represents whether the station will be taken as a rogue station. If the value is true, the MAC address will be automatically added into h3cWIPSBlockListTable and the category of the station will be taken as rogue. If the value is false, nothing will be done. It will return false for get operation.

Represents whether the station will be taken as an authorized station. If the value is true, the MAC address will be automatically added into h3cWIPSTrustListTable. If the value is false, nothing will be done. It will return false for get operation.

Represents whether the station will be taken as an ignored station. If the value is true, the MAC address will be automatically added into h3cWIPSIgnoreListTable. If the value is false, nothing will be done. It will return false for get operation.

Represents whether the station will be taken as a countered station. If the value is true, the MAC address will be automatically added into h3cWIPSCountermeasureListTable. If the value is false, nothing will be done. It will return false for get operation.

Represents the time that station was detected for the first time since system is up.

Represents the time that station was detected for the last time since system is up.

Represents the number of sensors detecting the station.

Represents the authentication state of station with AP. Enumeration: 'eapSuccess': 3, 'eapLogoff': 4, 'authentication': 1, 'deauthentication': 6, 'disassociation': 5, 'association': 2.

The table represents the list of sensors detecting the station.

Each entry contains possible sensor information of WIPS.

Represents the name of sensor.

Represents on which radio the sensor AP detected the station.

Represents the current value of signal strength that WIPS sensor AP received from the station.

Represents the time that station was detected by this sensor for the last time since system is up.

The table represents the list of possible ESS information for networks detected by WIPS.

Each entry contains possible ESS information of each ESS detected by WIPS.

Represents the virtual security domain in which the ESS was detected.

Represents the service set identifier for the ESS. Using the ASCII value '1' represents that the SSID is not advertised in the beacon frames.

Represents the encrypt method, security suite and authentication method which are used by the detected ESS. The lowest 8 bits mean encrypt method. The higher 8 bits mean security suite. The third 8 bits stand for authentication method. The higerest 8 bits are reserved. The meaning is shown as follows: 31 23 15 7 0 + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + | reserved | auth method | security suite|encryptmethod| + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + For encrypt method, the following values are supported: 1: none - clear text or no cipher method is configure, 2: wep - WEP key, 4: tkip - WPA Temporal Key encryption, 8: ccmp - WPA AES CCMP encryption For security suite, the following values are supported: 0x01: clear 0x02: wpa2 0x04: wpa 0x08: wep For authentication method, the following values are supported: 1: none - No key management mode configured, 2: psk - pre-shared key authentication, 3: dot1x - 802.1x authentication. 4: other - other authentication

Represents the time that ESS was detected for the first time since system is up.

Represents the time that ESS was detected for the last time since system is up.

Represents the status of this ESS detected by WIPS.

Represents whether the ESS broadcasted its SSID.

Represents the number of APs using the same SSID in the ESS.

The table represents the list of APs using the same SSID in the ESS.

Each entry contains possible BSS information of each AP detected by WIPS.

Represents the Basic Service Set.

Represents on which radio channel that WIPS sensor AP detected the BSS.

Represents the number of clients associated with the detected BSS.

The table represents the list of block device MAC address.

Each entry contains block device MAC address information.

Represents the MAC address of block device.

Represents the status of block device. Enumeration: 'dynamic': 2, 'staticAndDynamic': 3, 'static': 1.

The table represents the list of channel information.

Each entry contains channel information.

Represents the channel number.

Represents the radio type used in the specific channel.

Represents whether the channel is permitted.

Represents the latest time that detecting the channel is active.

The table represents the list of countermeasure device information.

Each entry contains countermeasure device information.

Represents the MAC address of the countered device.

Represents the channel on which the countermeasure device was working.

Represents the first time that the device was countered since system is up.

Represents the last time that the device was countered since system is up.

Represents how many times that the device was countered.

Represents the number of sensors detecting the device.

The table represents the list of ignored device information.

Each entry contains ignored device information.

Represents the MAC address of the ignored device.

Represents the first time when the event caused by the device was ignored since system is up.

Represents the last time when the event caused by the device was ignored since system is up.

Represents the number of times of the event caused by device has been ignored.

The table represents the list of trust device information.

Each entry contains information of a trust device.

Represents the MAC address of the trust device.

Represents the status of the trust device. Enumeration: 'dynamic': 2, 'staticAndDynamic': 3, 'static': 1.

The table represents the list of channel statistics information.

Each entry contains information of channel statistics.

Represents the MAC address of sensor.

Represents the statistics channel.

Represents the count of total frames in the channel.

Represents the length of total frames in the channel.

Represents the count of broadcast and multicast frames in the channel.

Represents the total length of broadcast and multicast frames in the channel.

Represents the count of unicast frames in the channel.

Represents the total length of unicast frames in the channel.

Represents the count of management frames in the channel.

Represents the count of control frames in the channel.

Represents the count of data frames in the channel.

Represents the count of beacon frames in the channel.

Represents the count of RTS frames in the channel.

Represents the count of CTS frames in the channel.

Represents the count of probe request frames in the channel.

Represents the count of probe response frames in the channel.

Represents the count of fragment frames in the channel.

Represents the count of retry frames in the channel.

Represents the count of EAP-Success frames in the channel.

Represents the count of EAP-Failure frames in the channel.

Represents the count of EAPOL-Start frames in the channel.

Represents the count of EAPOL-Logoff frames in the channel.

Represents the count of association request frames in the channel.

Represents the count of association response frames in the channel.

Represents the count of unicast disassociation frames in the channel.

Represents the count of broadcast disassociation frames in the channel.

Represents the count of authentication frames in the channel.

Represents the count of unicast deauthentication frames in the channel.

Represents the count of broadcast deauthentication frames in the channel.

Represents the count of malformed frames in the channel.

The table represents the list of device statistics information.

Each entry contains information of device statistics.

Represents the MAC address of sensor.

Represents the MAC address of the device detected by the sensor.

Represents the device working channel.

Represents the count of total frames transmitted by the device in one channel.

Represents the length of total frames transmitted by the device in one channel.

Represents the count of broadcast and multicast frames transmitted by the device in one channel.

Represents the length of broadcast and multicast frames transmitted by the device in one channel.

Represents the count of unicast frames transmitted by the device in one channel.

Represents the length of unicast frames transmitted by the device in one channel.

Represents the count of management frames transmitted by the device in one channel.

Represents the count of control frames transmitted by the device in one channel.

Represents the count of data frames transmitted by the device in one channel.

Represents the count of beacon frames transmitted by the device in one channel.

Represents the count of RTS frames transmitted by the device in one channel.

Represents the count of probe frames transmitted by the device in one channel.

Represents the count of probe response frames transmitted by the device in one channel.

Represents the count of fragment frames transmitted by the device in one channel.

Represents the count of retry frames transmitted by the device in one channel.

Represents the count of association request frames transmitted by the device in one channel.

Represents the count of association response frames transmitted by the device in one channel.

Represents the count of unicast disassociation frames transmitted by the device in one channel.

Represents the count of broadcast disassociation frames transmitted by the device in one channel.

Represents the count of authentication frames transmitted by the device in one channel.

Represents the count of unicast deauthentication frames transmitted by the device in one channel.

Represents the count of broadcast deauthentication frames transmitted by the device in one channel.

Represents the count of EAP-Success frames transmitted by the device in one channel.

Represents the count of EAP-Failure frames transmitted by the device in one channel.

Represents the count of EAPOL-Start frames transmitted by the device in one channel.

Represents the count of EAPOL-Logoff frames transmitted by the device in one channel.

Represents the count of malformed frames transmitted by the device in one channel.

Represents the count of total frames received by the device in one channel.

Represents the length of total frames received by the device in one channel.

Represents the count of unicast frames received by the device in one channel.

Represents the length of unicast frames received by the device in one channel.

Represents the count of management frames received by the device in one channel.

Represents the count of control frames received by the device in one channel.

Represents the count of data frames received by the device in one channel.

Represents the count of RTS frames recieved by the device in one channel.

Represents the count of CTS frames recieved by the device in one channel.

Represents the count of probe request frames received by the device in one channel.

Represents the count of probe response frames received by the device in one channel.

Represents the count of fragment frames received by the device in one channel.

Represents the count of retry frames received by the device in one channel.

Represents the count of association request frames received by the device in one channel.

Represents the count of association response frames received by the device in one channel.

Represents the count of disassociation frames received by the device in one channel.

Represents the count of authentication frames received by the device in one channel.

Represents the count of deauthentication frames received by the device in one channel.

Represents the count of EAP-Success frames received by the device in one channel.

Represents the count of EAP-Failure frames received by the device in one channel.

Represents the count of EAPOL-Start frames received by the device in one channel.

Represents the count of EAPOL-Logoff frames received by the device in one channel.

Represents the count of malformed frames received by the device in one channel.