summaryrefslogtreecommitdiff
path: root/MIBS/comware/HH3C-WAPI-MIB
blob: b96acd207c6a9e864615c3e4184bbf1eeeee0a96 (plain)
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
136
137
138
139
140
141
142
143
144
145
146
147
148
149
150
151
152
153
154
155
156
157
158
159
160
161
162
163
164
165
166
167
168
169
170
171
172
173
174
175
176
177
178
179
180
181
182
183
184
185
186
187
188
189
190
191
192
193
194
195
196
197
198
199
200
201
202
203
204
205
206
207
208
209
210
211
212
213
214
215
216
217
218
219
220
221
222
223
224
225
226
227
228
229
230
231
232
233
234
235
236
237
238
239
240
241
242
243
244
245
246
247
248
249
250
251
252
253
254
255
256
257
258
259
260
261
262
263
264
265
266
267
268
269
270
271
272
273
274
275
276
277
278
279
280
281
282
283
284
285
286
287
288
289
290
291
292
293
294
295
296
297
298
299
300
301
302
303
304
305
306
307
308
309
310
311
312
313
314
315
316
317
318
319
320
321
322
323
324
325
326
327
328
329
330
331
332
333
334
335
336
337
338
339
340
341
342
343
344
345
346
347
348
349
350
351
352
353
354
355
356
357
358
359
360
361
362
363
364
365
366
367
368
369
370
371
372
373
374
375
376
377
378
379
380
381
382
383
384
385
386
387
388
389
390
391
392
393
394
395
396
397
398
399
400
401
402
403
404
405
406
407
408
409
410
411
412
413
414
415
416
417
418
419
420
421
422
423
424
425
426
427
428
429
430
431
432
433
434
435
436
437
438
439
440
441
442
443
444
445
446
447
448
449
450
451
452
453
454
455
456
457
458
459
460
461
462
463
464
465
466
467
468
469
470
471
472
473
474
475
476
477
478
479
480
481
482
483
484
485
486
487
488
489
490
491
492
493
494
495
496
497
498
499
500
501
502
503
504
505
506
507
508
509
510
511
512
513
514
515
516
517
518
519
520
521
522
523
524
525
526
527
528
529
530
531
532
533
534
535
536
537
538
539
540
541
542
543
544
545
546
547
548
549
550
551
552
553
554
555
556
557
558
559
560
561
562
563
564
565
566
567
568
569
570
571
572
573
574
575
576
577
578
579
580
581
582
583
584
585
586
587
588
589
590
591
592
593
594
595
596
597
598
599
600
601
602
603
604
605
606
607
608
609
610
611
612
613
614
615
616
617
618
619
620
621
622
623
624
625
626
627
628
629
630
631
632
633
634
635
636
637
638
639
640
641
642
643
644
645
646
647
648
649
650
651
652
653
654
655
656
657
658
659
660
661
662
663
664
665
666
667
668
669
670
671
672
673
674
675
676
677
678
679
680
681
682
683
684
685
686
687
688
689
690
691
692
693
694
695
696
697
698
699
700
701
702
703
704
705
706
707
708
709
710
711
712
713
714
715
716
717
718
719
720
721
722
723
724
725
726
727
728
729
730
731
732
733
734
735
736
737
738
739
740
741
742
743
744
745
746
747
748
749
750
751
752
753
754
755
756
757
758
759
760
761
762
763
764
765
766
767
768
769
770
771
772
773
774
775
776
777
778
779
780
781
782
783
784
785
786
787
788
789
790
791
792
793
794
795
796
797
798
799
800
801
802
803
804
805
806
807
808
809
810
811
812
813
814
815
816
817
818
819
820
821
822
823
824
825
826
827
828
829
830
831
832
833
834
835
836
837
838
839
840
841
842
843
844
845
846
847
848
849
850
851
852
853
854
855
856
857
858
859
860
861
862
863
864
865
866
867
868
869
870
871
872
873
874
875
876
877
878
879
880
881
882
883
884
885
886
887
888
889
890
891
892
893
894
895
896
897
898
899
900
901
902
903
904
905
906
907
908
909
910
911
912
913
914
915
916
917
918
919
920
921
922
923
924
925
926
927
928
929
930
931
932
933
934
935
936
937
938
939
940
941
942
943
944
945
946
947
948
949
950
951
952
953
954
955
956
957
958
959
960
961
962
963
964
965
966
967
968
969
970
971
972
973
974
975
976
977
978
979
980
981
982
983
984
985
986
987
988
989
990
991
992
993
994
995
996
997
998
999
1000
1001
1002
1003
1004
1005
1006
1007
1008
1009
1010
1011
1012
1013
1014
1015
1016
1017
1018
1019
1020
1021
1022
1023
1024
1025
1026
1027
1028
1029
1030
1031
1032
1033
1034
1035
1036
1037
1038
1039
1040
1041
1042
1043
1044
1045
1046
1047
1048
1049
1050
1051
1052
1053
1054
1055
1056
1057
1058
1059
1060
1061
1062
1063
1064
1065
1066
1067
1068
1069
1070
1071
1072
1073
1074
1075
1076
1077
1078
1079
1080
1081
1082
1083
1084
1085
1086
1087
1088
1089
1090
1091
1092
1093
1094
1095
1096
1097
1098
1099
1100
1101
1102
1103
1104
1105
1106
1107
1108
1109
1110
1111
1112
1113
1114
1115
1116
1117
1118
1119
1120
1121
1122
1123
1124
1125
1126
1127
1128
1129
1130
1131
1132
1133
1134
1135
1136
1137
1138
1139
1140
1141
1142
1143
1144
1145
1146
1147
1148
1149
1150
1151
1152
1153
1154
1155
1156
1157
1158
1159
1160
1161
1162
1163
1164
1165
1166
1167
1168
1169
1170
1171
1172
1173
1174
1175
1176
1177
1178
1179
1180
1181
1182
1183
1184
1185
1186
1187
1188
1189
1190
1191
1192
1193
1194
1195
1196
1197
1198
1199
1200
1201
1202
1203
-- ************************************************************************
-- Copyright (c) 2004-2018 New H3C Tech. Co., Ltd. All rights reserved.
--
-- Description: WAPI extension mib
-- Reference:
-- Version: V1.5
-- History:
--   V1.0 created by zhanglianglun
--     Initial version 2007-5-20
--   V1.1 2009-06-04 modified by caizibin
--        Add hh3cwapiCertificateInstalled, hh3cwapiConfigTable,
--        hh3cwapiUserwithInvalidCertificate,
--        hh3cwapiStationReplayAttack, hh3cwapiTamperAttack,
--        hh3cwapiLowSafeLevelAttack, hh3cwapiAddressRedirectionAttack,
--        hh3cwapiTrapInfoMacAddr, hh3cwapiTrapInfoAPId,
--        hh3cwapiTrapInfoRadioId, hh3cwapiTrapInfoBSSId
--   V1.2 2010-03-06 modified by xuyonggang
--        Add hh3cwapiConfigExtTable
--   V1.3 2010-11-23 modified by xuyonggang
--        Add hh3cwapiCfgExtASIPAddressType
--        Add hh3cwapiCfgExtASIPAddress
--        Add hh3cwapiCfgExtASName
--        Add hh3cwapiCfgExtCertDomain
--        Add hh3cwapiCfgExtCertInstalled
--   V1.4 2013-01-10 modified by xuyonggang
--        Add hh3cwapiTrapInfoAPMacAddr
--   V1.5 2018-05-07 modified by muzhuqing
--        Add node hh3cwapiConfigVersion to hh3cwapiConfigExtTable.
--        Add node hh3cwapiControlledAuthControl to hh3cwapiConfigExtTable.
--        Add node hh3cwapiControlledPortControl to hh3cwapiConfigExtTable.
--        Add node hh3cwapiOptionImplemented to hh3cwapiConfigExtTable.
--        Add node hh3cwapiPreauthImplemented to hh3cwapiConfigExtTable.
--        Add node hh3cwapiEnabled to hh3cwapiConfigExtTable.
--        Add node hh3cwapiPreauthEnabled to hh3cwapiConfigExtTable.
--        Add node hh3cwapiCfgUniKeysSupported to hh3cwapiConfigExtTable.
--        Add node hh3cwapiCfgUniRekeyMethod to hh3cwapiConfigExtTable.
--        Add node hh3cwapiCfgUniRekeyTime to hh3cwapiConfigExtTable.
--        Add node hh3cwapiCfgUniRekeyPackets to hh3cwapiConfigExtTable.
--        Add node hh3cwapiCfgMultiCipher to hh3cwapiConfigExtTable.
--        Add node hh3cwapiCfgMultiRekeyMethod to hh3cwapiConfigExtTable.
--        Add node hh3cwapiCfgMultiRekeyTime to hh3cwapiConfigExtTable.
--        Add node hh3cwapiCfgMultiRekeyPackets to hh3cwapiConfigExtTable.
--        Add node hh3cwapiCfgMultiRekeyStrict to hh3cwapiConfigExtTable.
--        Add node hh3cwapiCfgPSKValue to hh3cwapiConfigExtTable.
--        Add node hh3cwapiCfgPSKPassPhrase to hh3cwapiConfigExtTable.
--        Add node hh3cwapiCfgCertUpdateCount to hh3cwapiConfigExtTable.
--        Add node hh3cwapiCfgMultiUpdateCount to hh3cwapiConfigExtTable.
--        Add node hh3cwapiCfgUniUpdateCount to hh3cwapiConfigExtTable.
--        Add node hh3cwapiCfgMultiCipherSize to hh3cwapiConfigExtTable.
--        Add node hh3cwapiCfgBKLifetime to hh3cwapiConfigExtTable.
--        Add node hh3cwapiCfgBKReauthThreshold to hh3cwapiConfigExtTable.
--        Add node hh3cwapiCfgSATimeout to hh3cwapiConfigExtTable.
--        Add node hh3cwapiAuthenSuiteSelected to hh3cwapiConfigExtTable.
--        Add node hh3cwapiUniCipherSelected to hh3cwapiConfigExtTable.
--        Add node hh3cwapiMultiCipherSelected to hh3cwapiConfigExtTable.
--        Add node hh3cwapiBKIDUsed to hh3cwapiConfigExtTable.
--        Add node hh3cwapiAuthenSuiteRequested to hh3cwapiConfigExtTable.
--        Add node hh3cwapiUniCipherRequested to hh3cwapiConfigExtTable.
--        Add node hh3cwapiMultiCipherRequested to hh3cwapiConfigExtTable.
--        Add table hh3cwapiStatsTable.
-- ************************************************************************
HH3C-WAPI-MIB DEFINITIONS ::= BEGIN

    IMPORTS
        Counter32, Integer32, Unsigned32,
        MODULE-IDENTITY, OBJECT-TYPE, NOTIFICATION-TYPE
            FROM SNMPv2-SMI
        TruthValue, MacAddress
            FROM SNMPv2-TC
        ifIndex, ifDescr
            FROM IF-MIB
        InetAddressType, InetAddress
            FROM INET-ADDRESS-MIB
        hh3cCommon
            FROM HH3C-OID-MIB;

    hh3cwapiMIB MODULE-IDENTITY
        LAST-UPDATED "201012011757Z"
        ORGANIZATION
            "New H3C Technologies Co., Ltd."
        CONTACT-INFO
            "Platform Team New H3C Technologies Co., Ltd.
            Hai-Dian District Beijing P.R. China
            http://www.h3c.com
            Zip:100085
            "
        DESCRIPTION
            "HH3C-WAPI-MIB is an extension of MIB in WAPI
            protocol.  This MIB contains objects to
            manage configuration and monitor running state
            for WAPI feature."
        REVISION "201012011757Z"
        DESCRIPTION
            "Add node hh3cwapiConfigVersion to hh3cwapiConfigExtTable.
            Add node hh3cwapiControlledAuthControl to hh3cwapiConfigExtTable.
            Add node hh3cwapiControlledPortControl to hh3cwapiConfigExtTable.
            Add node hh3cwapiOptionImplemented to hh3cwapiConfigExtTable.
            Add node hh3cwapiPreauthImplemented to hh3cwapiConfigExtTable.
            Add node hh3cwapiEnabled to hh3cwapiConfigExtTable.
            Add node hh3cwapiPreauthEnabled to hh3cwapiConfigExtTable.
            Add node hh3cwapiCfgUniKeysSupported to hh3cwapiConfigExtTable.
            Add node hh3cwapiCfgUniRekeyMethod to hh3cwapiConfigExtTable.
            Add node hh3cwapiCfgUniRekeyTime to hh3cwapiConfigExtTable.
            Add node hh3cwapiCfgUniRekeyPackets to hh3cwapiConfigExtTable.
            Add node hh3cwapiCfgMultiCipher to hh3cwapiConfigExtTable.
            Add node hh3cwapiCfgMultiRekeyMethod to hh3cwapiConfigExtTable.
            Add node hh3cwapiCfgMultiRekeyTime to hh3cwapiConfigExtTable.
            Add node hh3cwapiCfgMultiRekeyPackets to hh3cwapiConfigExtTable.
            Add node hh3cwapiCfgMultiRekeyStrict to hh3cwapiConfigExtTable.
            Add node hh3cwapiCfgPSKValue to hh3cwapiConfigExtTable.
            Add node hh3cwapiCfgPSKPassPhrase to hh3cwapiConfigExtTable.
            Add node hh3cwapiCfgCertUpdateCount to hh3cwapiConfigExtTable.
            Add node hh3cwapiCfgMultiUpdateCount to hh3cwapiConfigExtTable.
            Add node hh3cwapiCfgUniUpdateCount to hh3cwapiConfigExtTable.
            Add node hh3cwapiCfgMultiCipherSize to hh3cwapiConfigExtTable.
            Add node hh3cwapiCfgBKLifetime to hh3cwapiConfigExtTable.
            Add node hh3cwapiCfgBKReauthThreshold to hh3cwapiConfigExtTable.
            Add node hh3cwapiCfgSATimeout to hh3cwapiConfigExtTable.
            Add node hh3cwapiAuthenSuiteSelected to hh3cwapiConfigExtTable.
            Add node hh3cwapiUniCipherSelected to hh3cwapiConfigExtTable.
            Add node hh3cwapiMultiCipherSelected to hh3cwapiConfigExtTable.
            Add node hh3cwapiBKIDUsed to hh3cwapiConfigExtTable.
            Add node hh3cwapiAuthenSuiteRequested to hh3cwapiConfigExtTable.
            Add node hh3cwapiUniCipherRequested to hh3cwapiConfigExtTable.
            Add node hh3cwapiMultiCipherRequested to hh3cwapiConfigExtTable.
            Add table hh3cwapiStatsTable."
        ::= { hh3cCommon 77 }

    hh3cwapiMIBObjects OBJECT IDENTIFIER ::= { hh3cwapiMIB 1 }
    hh3cwapiMIBStatsObjects OBJECT IDENTIFIER ::= { hh3cwapiMIB 2 }
    hh3cwapiMIBTableObjects OBJECT IDENTIFIER ::= { hh3cwapiMIB 3 }
    hh3cwapiTrap OBJECT IDENTIFIER ::= { hh3cwapiMIB 4 }

-- ************************************************************************
-- * hh3cwapiModeEnabled OBJECT
-- ************************************************************************
    hh3cwapiModeEnabled OBJECT-TYPE
        SYNTAX TruthValue
        MAX-ACCESS read-write
        STATUS current
        DESCRIPTION
            "When this object is set to TRUE, it shall indicate that WAPI
            is enabled.  Otherwise, it shall indicate that WAPI is disabled."
        ::= { hh3cwapiMIBObjects 1 }

-- ************************************************************************
-- * hh3cwapiASIPAddress OBJECT
-- ************************************************************************
    hh3cwapiASIPAddressType OBJECT-TYPE
        SYNTAX  InetAddressType
        MAX-ACCESS read-write
        STATUS current
        DESCRIPTION
            "This object is used to set global IP addresses
            type (IPv4 or IPv6) of AS."
        DEFVAL { ipv4 }
        ::= { hh3cwapiMIBObjects 2 }

    hh3cwapiASIPAddress OBJECT-TYPE
        SYNTAX InetAddress
        MAX-ACCESS read-write
        STATUS current
        DESCRIPTION
            "This object is used to set the global IP address of AS."
        ::= { hh3cwapiMIBObjects 3 }

-- ************************************************************************
-- * hh3cwapiCertificateInstalled OBJECT
-- ************************************************************************
    hh3cwapiCertificateInstalled OBJECT-TYPE
        SYNTAX  TruthValue
        MAX-ACCESS read-only
        STATUS current
        DESCRIPTION
            "This object indicates whether the entity has installed
            certificate.  When the value is TRUE, it shall indicate that
            the entity has installed certificate.  Otherwise, it shall
            indicate that the entity hasn't installed certificate."
        ::= { hh3cwapiMIBObjects 4 }

-- ************************************************************************
-- * 9 statistics OBJECTS
-- ************************************************************************
    hh3cwapiStatsWAISignatureErrors OBJECT-TYPE
        SYNTAX Counter32
        MAX-ACCESS read-only
        STATUS current
        DESCRIPTION
            "This counter increases when the received packet of
            WAI signature is wrong."
        ::= { hh3cwapiMIBStatsObjects 1 }

    hh3cwapiStatsWAIHMACErrors OBJECT-TYPE
        SYNTAX Counter32
        MAX-ACCESS read-only
        STATUS current
        DESCRIPTION
            "This counter increases when the received packet of
            WAI message authentication key checking error occurs."
        ::= { hh3cwapiMIBStatsObjects 2 }

    hh3cwapiStatsWAIAuthRsltFailures OBJECT-TYPE
        SYNTAX Counter32
        MAX-ACCESS read-only
        STATUS current
        DESCRIPTION
            "This counter increases when the WAI authentication result is
            unsuccessful."
        ::= { hh3cwapiMIBStatsObjects 3 }

    hh3cwapiStatsWAIDiscardCounters OBJECT-TYPE
        SYNTAX Counter32
        MAX-ACCESS read-only
        STATUS current
        DESCRIPTION
            "This counter increases when the received packet of WAI are
            discarded."
        ::= { hh3cwapiMIBStatsObjects 4 }

    hh3cwapiStatsWAITimeoutCounters OBJECT-TYPE
        SYNTAX Counter32
        MAX-ACCESS read-only
        STATUS current
        DESCRIPTION
            "This counter increases when the packet of WAI overtime are
            detected."
        ::= { hh3cwapiMIBStatsObjects 5 }

    hh3cwapiStatsWAIFormatErrors OBJECT-TYPE
        SYNTAX Counter32
        MAX-ACCESS read-only
        STATUS current
        DESCRIPTION
            "This counter increases when the WAI packet of WAI format
            error is detected."
        ::= { hh3cwapiMIBStatsObjects 6 }

    hh3cwapiStatsWAICtfHskFailures OBJECT-TYPE
        SYNTAX Counter32
        MAX-ACCESS read-only
        STATUS current
        DESCRIPTION
            "This counter increases when the WAI certificate authenticates
            unsuccessfully."
        ::= { hh3cwapiMIBStatsObjects 7 }

    hh3cwapiStatsWAIUniHskFailures OBJECT-TYPE
        SYNTAX Counter32
        MAX-ACCESS read-only
        STATUS current
        DESCRIPTION
            "This counter increases when the WAI unicast cipher key
            negotiates unsuccessfully."
        ::= { hh3cwapiMIBStatsObjects 8 }

    hh3cwapiStatsWAIMulHskFailures OBJECT-TYPE
        SYNTAX Counter32
        MAX-ACCESS read-only
        STATUS current
        DESCRIPTION
            "This counter increases when the WAI multicast cipher key
            announces unsuccessfully."
        ::= { hh3cwapiMIBStatsObjects 9 }

-- ************************************************************************
-- * hh3cwapiConfigTable Table
-- ************************************************************************
    hh3cwapiConfigTable OBJECT-TYPE
        SYNTAX SEQUENCE OF Hh3cwapiConfigEntry
        MAX-ACCESS not-accessible
        STATUS current
        DESCRIPTION
            "The table containing WAPI configuration objects."
        ::= { hh3cwapiMIBTableObjects 1 }

    hh3cwapiConfigEntry OBJECT-TYPE
        SYNTAX Hh3cwapiConfigEntry
        MAX-ACCESS not-accessible
        STATUS current
        DESCRIPTION
            "An entry in the hh3cwapiConfigTable."
        INDEX { ifIndex }
        ::= { hh3cwapiConfigTable 1 }

    Hh3cwapiConfigEntry ::= SEQUENCE
        {
            hh3cwapiConfigASIPAddressType InetAddressType,
            hh3cwapiConfigASIPAddress InetAddress,
            hh3cwapiConfigAuthMethod INTEGER,
            hh3cwapiConfigAuthMode INTEGER,
            hh3cwapiConfigISPDomain OCTET STRING,
            hh3cwapiConfigCertificateDomain OCTET STRING,
            hh3cwapiConfigASName OCTET STRING,
            hh3cwapiConfigBKRekeyEnabled TruthValue
        }

    hh3cwapiConfigASIPAddressType OBJECT-TYPE
        SYNTAX InetAddressType
        MAX-ACCESS read-write
        STATUS current
        DESCRIPTION
            "This object is used to set IP addresses type of AS."
        ::= { hh3cwapiConfigEntry 1 }

    hh3cwapiConfigASIPAddress OBJECT-TYPE
        SYNTAX InetAddress
        MAX-ACCESS read-write
        STATUS current
        DESCRIPTION
            "This object is used to set the IP address of AS."
        ::= { hh3cwapiConfigEntry 2 }

    hh3cwapiConfigAuthMethod OBJECT-TYPE
        SYNTAX INTEGER {
            certificate(1),
            psk(2),
            certificatePsk(3)
        }
        MAX-ACCESS read-write
        STATUS current
        DESCRIPTION
            "This object selects a mechanism for WAPI authentication.
            The default is certificate."
        DEFVAL { certificate }
        ::= { hh3cwapiConfigEntry 3 }

    hh3cwapiConfigAuthMode OBJECT-TYPE
        SYNTAX INTEGER {
            standard(1),
            radiusExtension(2)
        }
        MAX-ACCESS read-write
        STATUS current
        DESCRIPTION
            "This object selects a mechanism for WAPI authentication.
            When the value is standard, it shall indicate that the entity
            acts based on the official definition. Otherwise, it shall
            indicate that the entity finishes authentication by means of RADIUS.
            The default is standard."
        DEFVAL { standard }
        ::= { hh3cwapiConfigEntry 4 }

    hh3cwapiConfigISPDomain OBJECT-TYPE
        SYNTAX OCTET STRING (SIZE(0..24))
        MAX-ACCESS read-write
        STATUS current
        DESCRIPTION
            "The ISP domain name."
        ::= { hh3cwapiConfigEntry 5 }

    hh3cwapiConfigCertificateDomain OBJECT-TYPE
        SYNTAX OCTET STRING (SIZE(1..15))
        MAX-ACCESS read-write
        STATUS current
        DESCRIPTION
            "The PKI domain name."
        ::= { hh3cwapiConfigEntry 6 }

    hh3cwapiConfigASName OBJECT-TYPE
        SYNTAX OCTET STRING (SIZE(1..15))
        MAX-ACCESS read-write
        STATUS current
        DESCRIPTION
            "The name of AS."
        ::= { hh3cwapiConfigEntry 7 }

    hh3cwapiConfigBKRekeyEnabled OBJECT-TYPE
        SYNTAX TruthValue
        MAX-ACCESS read-write
        STATUS current
        DESCRIPTION
            "This object indicates whether the BK rekey function is
            supported. When the value is TRUE, it shall indicate that
            the BK rekey function is supported. Otherwise, it shall
            indicate that the BK rekey function is not supported."
        ::= { hh3cwapiConfigEntry 8 }

-- *************************************************************************
-- * hh3cwapiConfigExtTable Table
-- *************************************************************************

    hh3cwapiConfigExtTable OBJECT-TYPE
        SYNTAX SEQUENCE OF Hh3cwapiConfigExtEntry
        MAX-ACCESS not-accessible
        STATUS current
        DESCRIPTION
            "The table containing WAPI configuration objects for SSID."
        ::= { hh3cwapiMIBTableObjects 2 }

    hh3cwapiConfigExtEntry OBJECT-TYPE
        SYNTAX Hh3cwapiConfigExtEntry
        MAX-ACCESS not-accessible
        STATUS current
        DESCRIPTION
            "An extend entry in the hh3cwapiConfigExtTable."
        INDEX { hh3cwapiConfigServicePolicyID }
        ::= { hh3cwapiConfigExtTable 1 }

    Hh3cwapiConfigExtEntry ::= SEQUENCE
    {
        hh3cwapiConfigServicePolicyID Integer32,
        hh3cwapiConfigUnicastCipherEnabled TruthValue,
        hh3cwapiConfigUnicastCipherSize Unsigned32,
        hh3cwapiConfigAuthenticationSuiteEnabled TruthValue,
        hh3cwapiConfigAuthenticationSuite  OCTET STRING,
        hh3cwapiCfgExtASIPAddressType InetAddressType,
        hh3cwapiCfgExtASIPAddress InetAddress,
        hh3cwapiCfgExtASName OCTET STRING,
        hh3cwapiCfgExtCertDomain OCTET STRING,
        hh3cwapiCfgExtCertInstalled TruthValue,
        hh3cwapiConfigVersion Integer32,
        hh3cwapiControlledAuthControl TruthValue,
        hh3cwapiControlledPortControl Integer32,
        hh3cwapiOptionImplemented TruthValue,
        hh3cwapiPreauthImplemented TruthValue,
        hh3cwapiEnabled TruthValue,
        hh3cwapiPreauthEnabled TruthValue,
        hh3cwapiCfgUniKeysSupported Unsigned32,
        hh3cwapiCfgUniRekeyMethod INTEGER,
        hh3cwapiCfgUniRekeyTime Unsigned32,
        hh3cwapiCfgUniRekeyPackets Unsigned32,
        hh3cwapiCfgMultiCipher OCTET STRING,
        hh3cwapiCfgMultiRekeyMethod INTEGER,
        hh3cwapiCfgMultiRekeyTime Unsigned32,
        hh3cwapiCfgMultiRekeyPackets Unsigned32,
        hh3cwapiCfgMultiRekeyStrict TruthValue,
        hh3cwapiCfgPSKValue OCTET STRING,
        hh3cwapiCfgPSKPassPhrase OCTET STRING,
        hh3cwapiCfgCertUpdateCount Unsigned32,
        hh3cwapiCfgMultiUpdateCount Unsigned32,
        hh3cwapiCfgUniUpdateCount Unsigned32,
        hh3cwapiCfgMultiCipherSize Unsigned32,
        hh3cwapiCfgBKLifetime Unsigned32,
        hh3cwapiCfgBKReauthThreshold Unsigned32,
        hh3cwapiCfgSATimeout Unsigned32,
        hh3cwapiAuthenSuiteSelected OCTET STRING,
        hh3cwapiUniCipherSelected OCTET STRING,
        hh3cwapiMultiCipherSelected OCTET STRING,
        hh3cwapiBKIDUsed OCTET STRING,
        hh3cwapiAuthenSuiteRequested OCTET STRING,
        hh3cwapiUniCipherRequested OCTET STRING,
        hh3cwapiMultiCipherRequested OCTET STRING
    }

    hh3cwapiConfigServicePolicyID OBJECT-TYPE
    SYNTAX      Integer32
    MAX-ACCESS  not-accessible
    STATUS      current
    DESCRIPTION
        "Represents the ID of each service policy."
    ::= { hh3cwapiConfigExtEntry 1 }

   hh3cwapiConfigUnicastCipherEnabled OBJECT-TYPE
        SYNTAX TruthValue
        MAX-ACCESS read-write
        STATUS current
        DESCRIPTION
            "This object enables or disables the unicast cipher."
        ::= { hh3cwapiConfigExtEntry 2 }

   hh3cwapiConfigUnicastCipherSize OBJECT-TYPE
        SYNTAX Unsigned32 (0..4294967295)
        MAX-ACCESS read-only
        STATUS current
        DESCRIPTION
            "This object indicates the length in bits of the unicast cipher
            key.  This should be 256 for SMS4, first 128 bits for encrypting,
            last 128 bits for integrity checking."
        ::= { hh3cwapiConfigExtEntry 3 }

    hh3cwapiConfigAuthenticationSuiteEnabled OBJECT-TYPE
        SYNTAX TruthValue
        MAX-ACCESS read-write
        STATUS current
        DESCRIPTION
            "This variable indicates the corresponding AKM suite is enabled
            or disabled."
        ::= { hh3cwapiConfigExtEntry 4 }

    hh3cwapiConfigAuthenticationSuite OBJECT-TYPE
        SYNTAX OCTET STRING (SIZE(4))
        MAX-ACCESS read-only
        STATUS current
        DESCRIPTION
            "The selector of an AKM suite.  It consists of an OUI (the first 3
            octets) and a cipher suite identifier (the last octet)."
        ::= { hh3cwapiConfigExtEntry 5 }

    hh3cwapiCfgExtASIPAddressType OBJECT-TYPE
        SYNTAX InetAddressType
        MAX-ACCESS read-write
        STATUS current
        DESCRIPTION
            "This object is used to set IP addresses type of AS."
        ::= { hh3cwapiConfigExtEntry 6 }

    hh3cwapiCfgExtASIPAddress OBJECT-TYPE
        SYNTAX InetAddress
        MAX-ACCESS read-write
        STATUS current
        DESCRIPTION
            "This object is used to set the IP address of AS."
        ::= { hh3cwapiConfigExtEntry 7 }

    hh3cwapiCfgExtASName OBJECT-TYPE
        SYNTAX OCTET STRING (SIZE(1..15))
        MAX-ACCESS read-write
        STATUS current
        DESCRIPTION
            "This object is used to set the name of AS."
        ::= { hh3cwapiConfigExtEntry 8 }

    hh3cwapiCfgExtCertDomain OBJECT-TYPE
        SYNTAX OCTET STRING (SIZE(1..15))
        MAX-ACCESS read-write
        STATUS current
        DESCRIPTION
            "This object is used to set the PKI domain name."
        ::= { hh3cwapiConfigExtEntry 9 }

    hh3cwapiCfgExtCertInstalled OBJECT-TYPE
        SYNTAX  TruthValue
        MAX-ACCESS read-only
        STATUS current
        DESCRIPTION
            "This object indicates whether the entity has installed
            certificate.  When the value is TRUE, it shall indicate that
            the SSID has installed certificate. Otherwise, it shall
            indicate that the SSID hasn't installed certificate."
        ::= { hh3cwapiConfigExtEntry 10 }

    hh3cwapiConfigVersion OBJECT-TYPE
        SYNTAX Integer32
        MAX-ACCESS read-only
        STATUS current
        DESCRIPTION
            "The highest WAPI version this entity supports."
        ::= { hh3cwapiConfigExtEntry 11 }

    hh3cwapiControlledAuthControl OBJECT-TYPE
        SYNTAX TruthValue
        MAX-ACCESS read-only
        STATUS current
        DESCRIPTION
            "This object indicates whether the entity is enabled with
            authentication. When the value is FALSE, it shall indicate that
            authentication is not enabled on this entity, and the status of
            the controlled port is 'authenticated'. When the value is TRUE,
            it shall indicate that authentication is enabled, and the status
            of controlled port is decided by
            hh3cwapiControlledPortControl."
        ::= { hh3cwapiConfigExtEntry 12 }

    hh3cwapiControlledPortControl OBJECT-TYPE
        SYNTAX Integer32
        MAX-ACCESS read-only
        STATUS current
        DESCRIPTION
            "This object indicates the controlling type of the entity's port.
            This object is available when
            hh3cwapiControlledAuthControl is TRUE. When the value is
            zero, it means 'automatic', and the status of the controlled port
            is decided by authentication result. When the value is one,
            it means 'forcibly unauthenticated', and the status of the
            controlled port is 'unauthenticated'."
        ::= { hh3cwapiConfigExtEntry 13 }

    hh3cwapiOptionImplemented OBJECT-TYPE
        SYNTAX TruthValue
        MAX-ACCESS read-only
        STATUS current
        DESCRIPTION
            "This object indicates whether the entity supports WAPI. When the
            value is TRUE, it shall indicate that the entity supports WAPI.
            Otherwise, it shall indicate that the entity does not support WAPI."
        ::= { hh3cwapiConfigExtEntry 14 }

    hh3cwapiPreauthImplemented OBJECT-TYPE
        SYNTAX TruthValue
        MAX-ACCESS read-only
        STATUS current
        DESCRIPTION
            "This object indicates whether the entity supports WAPI
            preauthentication. This object can't be set to TRUE, unless
            hh3cwapiOptionImplemented is TRUE."
        ::= { hh3cwapiConfigExtEntry 15 }

    hh3cwapiEnabled OBJECT-TYPE
        SYNTAX TruthValue
        MAX-ACCESS read-write
        STATUS current
        DESCRIPTION
            "When this object is set to TRUE, it shall indicate that WAPI is
            enabled on this entity. The entity will advertise the WAPI
            information element in its beacon and probe response frames."
        ::= { hh3cwapiConfigExtEntry 16 }

    hh3cwapiPreauthEnabled OBJECT-TYPE
        SYNTAX TruthValue
        MAX-ACCESS read-write
        STATUS current
        DESCRIPTION
            "When this object is set to TRUE, it shall indicate that WAPI
            preauthentication is enabled on this entity. Otherwise, it shall
            indicate that WAPI preauthentication is disabled on this entity.
            This object requires that hh3cWAPIEnabled also be set to
            TRUE."
        ::= { hh3cwapiConfigExtEntry 17 }

    hh3cwapiCfgUniKeysSupported OBJECT-TYPE
        SYNTAX Unsigned32
        MAX-ACCESS read-only
        STATUS current
        DESCRIPTION
            "This object indicates how many unicast keys the entity supports
            for WAPI."
        ::= { hh3cwapiConfigExtEntry 18 }

    hh3cwapiCfgUniRekeyMethod OBJECT-TYPE
        SYNTAX INTEGER {
            disabled(1),
            timeBased(2),
            packetBased(3),
            timepacketBased(4)
        }
        MAX-ACCESS read-write
        STATUS current
        DESCRIPTION
            "This object selects a mechanism for rekeying the WAPI USK. The
            default is time-based, once per day. Rekeying the USK is only
            applicable to an entity acting as an AE or ASUE."
        DEFVAL { timeBased }
        ::= { hh3cwapiConfigExtEntry 19 }

    hh3cwapiCfgUniRekeyTime OBJECT-TYPE
        SYNTAX Unsigned32 (1..4294967295)
        UNITS "seconds"
        MAX-ACCESS read-write
        STATUS current
        DESCRIPTION
            "Time in seconds after which the WAPI USK shall be refreshed.
            The timer shall start at the moment the USK was set using the
            MLME-SETWPIKEYS request primitive."
        DEFVAL { 86400 }
        ::= { hh3cwapiConfigExtEntry 20 }

    hh3cwapiCfgUniRekeyPackets OBJECT-TYPE
        SYNTAX Unsigned32 (1..4294967295)
        UNITS "1000 packets"
        MAX-ACCESS read-write
        STATUS current
        DESCRIPTION
            "A packet count (a multiple of 1000) after which the WAPI USK
            shall be refreshed. The packet counter shall start at the moment
            the USK was set using the MLME-SETKEYS request primitive and it
            shall count all packets encrypted using the current USK."
        ::= { hh3cwapiConfigExtEntry 21 }

    hh3cwapiCfgMultiCipher OBJECT-TYPE
        SYNTAX OCTET STRING (SIZE(4))
        MAX-ACCESS read-write
        STATUS current
        DESCRIPTION
            "This object indicates the multicast cipher suite selector the
            entity must use. The multicast cipher suite in the WAPI
            information element shall take its value from this variable.
            It contains an OUI (the first 3 octets) and a cipher suite
            identifier (the last octet)."
        ::= { hh3cwapiConfigExtEntry 22 }

    hh3cwapiCfgMultiRekeyMethod OBJECT-TYPE
        SYNTAX INTEGER {
            disabled(1),
            timeBased(2),
            packetBased(3),
            timepacketBased(4)
        }
        MAX-ACCESS read-write
        STATUS current
        DESCRIPTION
            "This object selects a mechanism for rekeying the WAPI MSK. The
            default is time-based, once per day. Rekeying the MSK is only
            applicable to an entity acting as an AE or ASUE."
        DEFVAL { timeBased }
        ::= { hh3cwapiConfigExtEntry 23 }

    hh3cwapiCfgMultiRekeyTime OBJECT-TYPE
        SYNTAX Unsigned32 (1..4294967295)
        UNITS "seconds"
        MAX-ACCESS read-write
        STATUS current
        DESCRIPTION
            "Time in seconds after which the WAPI MSK shall be refreshed.
            The timer shall start at the moment the MSK was set using the
            MLME-SETWPIKEYS request primitive."
        DEFVAL { 86400 }
        ::= { hh3cwapiConfigExtEntry 24 }

    hh3cwapiCfgMultiRekeyPackets OBJECT-TYPE
        SYNTAX Unsigned32 (1..4294967295)
        UNITS "1000 packets"
        MAX-ACCESS read-write
        STATUS current
        DESCRIPTION
            "A packet count (a multiple of 1000) after which the WAPI MSK
            shall be refreshed. The packet counter shall start at the moment
            the MSK was set using the MLME-SETKEYS request primitive and it
            shall count all packets encrypted using the current MSK."
        ::= { hh3cwapiConfigExtEntry 25 }

    hh3cwapiCfgMultiRekeyStrict OBJECT-TYPE
        SYNTAX TruthValue
        MAX-ACCESS read-write
        STATUS current
        DESCRIPTION
            "This object indicates that the MSK shall be refreshed whenever an
            STA leaves the BSS that has the MSK."
        ::= { hh3cwapiConfigExtEntry 26 }

    hh3cwapiCfgPSKValue OBJECT-TYPE
        SYNTAX OCTET STRING (SIZE(2..32))
        MAX-ACCESS read-write
        STATUS current
        DESCRIPTION
            "The PSK value when WAPI in PSK mode is the selected AKM suite.
            In that case, the BK will obtain its value from this object.
            This object is logically write-only. Reading this variable shall
            return unsuccessful status or null or zero."
        ::= { hh3cwapiConfigExtEntry 27 }

    hh3cwapiCfgPSKPassPhrase OBJECT-TYPE
        SYNTAX OCTET STRING (SIZE(1..16))
        MAX-ACCESS read-write
        STATUS current
        DESCRIPTION
            "The PSK value when WAPI in PSK mode is the selected AKM suite,
            which is configured by hh3cwapiCfgPSKValue.
            An alternative method of setting the PSK is to
            use the password-to-key algorithm.
            This variable provides a means to enter a pass-phrase.
            When this object is written, the WAPI entity shall
            use the password-to-key algorithm to derive a preshared key
            and populate hh3cwapiCfgPSKValue with this key.
            This object is logically write-only. Reading this variable shall
            return unsuccessful status or null or zero."
        ::= { hh3cwapiConfigExtEntry 28 }

    hh3cwapiCfgCertUpdateCount OBJECT-TYPE
        SYNTAX Unsigned32 (1..4294967295)
        MAX-ACCESS read-write
        STATUS current
        DESCRIPTION
            "The number of times message in the WAPI certificate
            authentication handshake will be retried per certificate
            authentication handshake attempt."
        DEFVAL { 3 }
        ::= { hh3cwapiConfigExtEntry 29 }

    hh3cwapiCfgMultiUpdateCount OBJECT-TYPE
        SYNTAX Unsigned32 (1..4294967295)
        MAX-ACCESS read-write
        STATUS current
        DESCRIPTION
            "The number of times message in the WAPI multicast key handshake
            will be retried per MSK handshake attempt."
        DEFVAL { 3 }
        ::= { hh3cwapiConfigExtEntry 30 }

    hh3cwapiCfgUniUpdateCount OBJECT-TYPE
        SYNTAX Unsigned32 (1..4294967295)
        MAX-ACCESS read-write
        STATUS current
        DESCRIPTION
            "The number of times message in the WAPI unicast key handshake
            will be retried per 3-way handshake attempt."
        DEFVAL { 3 }
        ::= { hh3cwapiConfigExtEntry 31 }

    hh3cwapiCfgMultiCipherSize OBJECT-TYPE
        SYNTAX Unsigned32 (0..4294967295)
        MAX-ACCESS read-only
        STATUS current
        DESCRIPTION
            "This object indicates the length in bits of the multicast cipher
            key. This should be 256 for SMS4, where the first 128 bits are
            for encryption, and the last 128 bits for integrity check."
        ::= { hh3cwapiConfigExtEntry 32 }

    hh3cwapiCfgBKLifetime OBJECT-TYPE
        SYNTAX Unsigned32 (1..4294967295)
        UNITS "seconds"
        MAX-ACCESS read-write
        STATUS current
        DESCRIPTION
            "The maximum lifetime of a BK in the BK cache."
        DEFVAL { 43200 }
        ::= { hh3cwapiConfigExtEntry 33 }

    hh3cwapiCfgBKReauthThreshold OBJECT-TYPE
        SYNTAX Unsigned32 (1..100)
        UNITS "percentage"
        MAX-ACCESS read-write
        STATUS current
        DESCRIPTION
            "The percentage of the BK lifetime that should expire before a
            reauthentication occurs."
        DEFVAL { 70 }
        ::= { hh3cwapiConfigExtEntry 34 }

    hh3cwapiCfgSATimeout OBJECT-TYPE
        SYNTAX Unsigned32 (1..4294967295)
        UNITS "seconds"
        MAX-ACCESS read-write
        STATUS current
        DESCRIPTION
            "The maximum time a security association shall take to set up."
        DEFVAL { 60 }
        ::= { hh3cwapiConfigExtEntry 35 }

    hh3cwapiAuthenSuiteSelected OBJECT-TYPE
        SYNTAX OCTET STRING (SIZE(4))
        MAX-ACCESS read-only
        STATUS current
        DESCRIPTION
            "The selector of the last negotiated AKM suite."
        ::= { hh3cwapiConfigExtEntry 36 }

    hh3cwapiUniCipherSelected OBJECT-TYPE
        SYNTAX OCTET STRING (SIZE(4))
        MAX-ACCESS read-only
        STATUS current
        DESCRIPTION
            "The selector of the last negotiated unicast cipher."
        ::= { hh3cwapiConfigExtEntry 37 }

    hh3cwapiMultiCipherSelected OBJECT-TYPE
        SYNTAX OCTET STRING (SIZE(4))
        MAX-ACCESS read-only
        STATUS current
        DESCRIPTION
            "The selector of the last negotiated multicast cipher."
        ::= { hh3cwapiConfigExtEntry 38 }

    hh3cwapiBKIDUsed OBJECT-TYPE
        SYNTAX OCTET STRING (SIZE(16))
        MAX-ACCESS read-only
        STATUS current
        DESCRIPTION
            "The selector of the last BKID used in the last unicast
            cipher key handshake."
        ::= { hh3cwapiConfigExtEntry 39 }

    hh3cwapiAuthenSuiteRequested OBJECT-TYPE
        SYNTAX OCTET STRING (SIZE(4))
        MAX-ACCESS read-only
        STATUS current
        DESCRIPTION
            "The selector of the last requested AKM suite."
        ::= { hh3cwapiConfigExtEntry 40 }

    hh3cwapiUniCipherRequested OBJECT-TYPE
        SYNTAX OCTET STRING (SIZE(4))
        MAX-ACCESS read-only
        STATUS current
        DESCRIPTION
            "The selector of the last requested unicast cipher."
        ::= { hh3cwapiConfigExtEntry 41 }

    hh3cwapiMultiCipherRequested OBJECT-TYPE
        SYNTAX OCTET STRING (SIZE(4))
        MAX-ACCESS read-only
        STATUS current
        DESCRIPTION
            "The selector of the last requested multicast cipher."
        ::= { hh3cwapiConfigExtEntry 42 }

    hh3cwapiStatsTable OBJECT-TYPE
        SYNTAX SEQUENCE OF Hh3cwapiStatsEntry
        MAX-ACCESS not-accessible
        STATUS current
        DESCRIPTION
            "This table maintains per-STA statistics in a WAPI. The entry
            with hh3cwapiStatsSTAAddress set to FF-FF-FF-FF-FF-FF
            shall contain statistics for broadcast/multicast traffic."
        ::= { hh3cwapiMIBTableObjects 3 }

    hh3cwapiStatsEntry OBJECT-TYPE
        SYNTAX Hh3cwapiStatsEntry
        MAX-ACCESS not-accessible
        STATUS current
        DESCRIPTION
            "An entry in the hh3cwapiStatsTable."
        INDEX { hh3cwapiStationMAC }
        ::= { hh3cwapiStatsTable 1 }

    Hh3cwapiStatsEntry ::=
        SEQUENCE {
            hh3cwapiStationMAC MacAddress,
            hh3cwapiStatsSTAAddress MacAddress,
            hh3cwapiStatsVersion Unsigned32,
            hh3cwapiStatsCtrlPortStatus TruthValue,
            hh3cwapiStatsSelectedUniCipher OCTET STRING,
            hh3cwapiStatsWPIReplayCnt Counter32,
            hh3cwapiStatsWPIDecryptErr Counter32,
            hh3cwapiStatsWPIMICErr Counter32,
            hh3cwapiStatsWAISignatureErr Counter32,
            hh3cwapiStatsWAIHMACErr Counter32,
            hh3cwapiStatsWAIAuthenFail Counter32,
            hh3cwapiStatsWAIDiscardCnt Counter32,
            hh3cwapiStatsWAITimeoutCnt Counter32,
            hh3cwapiStatsWAIFormatErr Counter32,
            hh3cwapiStatsWAICertFail Counter32,
            hh3cwapiStatsWAIUniFail Counter32,
            hh3cwapiStatsWAIMultiFail Counter32
        }

    hh3cwapiStationMAC OBJECT-TYPE
    SYNTAX      MacAddress
    MAX-ACCESS  not-accessible
    STATUS      current
    DESCRIPTION
        "Represents the unique MAC Address of station."
    ::= { hh3cwapiStatsEntry 1 }

    hh3cwapiStatsSTAAddress OBJECT-TYPE
        SYNTAX MacAddress
        MAX-ACCESS read-only
        STATUS current
        DESCRIPTION
            "The MAC address of the STA to which the statistics in this
            conceptual row belong."
        ::= { hh3cwapiStatsEntry 2 }

    hh3cwapiStatsVersion OBJECT-TYPE
        SYNTAX Unsigned32 (1..4294967295)
        MAX-ACCESS read-only
        STATUS current
        DESCRIPTION
            "The WAPI version with which the STA is associated."
        ::= { hh3cwapiStatsEntry 3 }

    hh3cwapiStatsCtrlPortStatus OBJECT-TYPE
        SYNTAX TruthValue
        MAX-ACCESS read-only
        STATUS current
        DESCRIPTION
            "This object indicates the status of the authentication
            entity's controlled port. When the value is TRUE, it means
            'authenticated'. Otherwise, it means 'unauthenticated'."
        ::= { hh3cwapiStatsEntry 4 }

    hh3cwapiStatsSelectedUniCipher OBJECT-TYPE
        SYNTAX OCTET STRING (SIZE(4))
        MAX-ACCESS read-only
        STATUS current
        DESCRIPTION
            "The unicast cipher suite selector used during association."
        ::= { hh3cwapiStatsEntry 5 }

    hh3cwapiStatsWPIReplayCnt OBJECT-TYPE
        SYNTAX Counter32
        MAX-ACCESS read-only
        STATUS current
        DESCRIPTION
            "The number of WPI MPDUs discarded by the replay mechanism."
        ::= { hh3cwapiStatsEntry 6 }

    hh3cwapiStatsWPIDecryptErr OBJECT-TYPE
        SYNTAX Counter32
        MAX-ACCESS read-only
        STATUS current
        DESCRIPTION
            "The number of WPI MPDUs discarded because of unavailable cipher
            key during WPI-SMS4 decryption."
        ::= { hh3cwapiStatsEntry 7 }

    hh3cwapiStatsWPIMICErr OBJECT-TYPE
        SYNTAX Counter32
        MAX-ACCESS read-only
        STATUS current
        DESCRIPTION
            "The number of WPI MPDUs discarded because of MIC checking
            failure during WPI-SMS4 decryption."
        ::= { hh3cwapiStatsEntry 8 }

    hh3cwapiStatsWAISignatureErr OBJECT-TYPE
        SYNTAX Counter32
        MAX-ACCESS read-only
        STATUS current
        DESCRIPTION
            "This counter increases when the received WAI packets' signature
            is wrong."
        ::= { hh3cwapiStatsEntry 9 }

    hh3cwapiStatsWAIHMACErr OBJECT-TYPE
        SYNTAX Counter32
        MAX-ACCESS read-only
        STATUS current
        DESCRIPTION
            "This counter increases when message authentication key
            checking error occurs on the received WAI packets."
        ::= { hh3cwapiStatsEntry 10 }

    hh3cwapiStatsWAIAuthenFail OBJECT-TYPE
        SYNTAX Counter32
        MAX-ACCESS read-only
        STATUS current
        DESCRIPTION
            "This counter increases when the WAI authentication result
            is unsuccessful."
        ::= { hh3cwapiStatsEntry 11 }

    hh3cwapiStatsWAIDiscardCnt OBJECT-TYPE
        SYNTAX Counter32
        MAX-ACCESS read-only
        STATUS current
        DESCRIPTION
            "This counter increases when the received WAI packet is
            discarded."
        ::= { hh3cwapiStatsEntry 12 }

    hh3cwapiStatsWAITimeoutCnt OBJECT-TYPE
        SYNTAX Counter32
        MAX-ACCESS read-only
        STATUS current
        DESCRIPTION
            "This counter increases when a WAI packet timeout is
            detected."
        ::= { hh3cwapiStatsEntry 13 }

    hh3cwapiStatsWAIFormatErr OBJECT-TYPE
        SYNTAX Counter32
        MAX-ACCESS read-only
        STATUS current
        DESCRIPTION
            "This counter increases when WAI packet format error occurs"
        ::= { hh3cwapiStatsEntry 14 }

    hh3cwapiStatsWAICertFail OBJECT-TYPE
        SYNTAX Counter32
        MAX-ACCESS read-only
        STATUS current
        DESCRIPTION
            "This counter increases when WAI certificate authentication
            fails."
        ::= { hh3cwapiStatsEntry 15 }

    hh3cwapiStatsWAIUniFail OBJECT-TYPE
        SYNTAX Counter32
        MAX-ACCESS read-only
        STATUS current
        DESCRIPTION
            "This counter increases when WAI unicast cipher key
            negotiation succeeds."
        ::= { hh3cwapiStatsEntry 16 }

    hh3cwapiStatsWAIMultiFail OBJECT-TYPE
        SYNTAX Counter32
        MAX-ACCESS read-only
        STATUS current
        DESCRIPTION
            "This counter increases when the WAI multicast cipher key
            announcement failure occurs."
        ::= { hh3cwapiStatsEntry 17 }

-- ************************************************************************
-- * trap OBJECT
-- ************************************************************************
    hh3cwapiTrapPrefix OBJECT IDENTIFIER ::= { hh3cwapiTrap 0 }
    hh3cwapiUserwithInvalidCertificate NOTIFICATION-TYPE
        OBJECTS
        {
            ifIndex,
            ifDescr,
            hh3cwapiTrapInfoMacAddr,
            hh3cwapiTrapInfoAPId,
            hh3cwapiTrapInfoRadioId,
            hh3cwapiTrapInfoBSSId,
            hh3cwapiTrapInfoAPMacAddr
        }
        STATUS current
        DESCRIPTION
            "This trap is sent when a user intrudes upon network with invalid
            certificate."
        ::= { hh3cwapiTrapPrefix 1 }

    hh3cwapiStationReplayAttack NOTIFICATION-TYPE
        OBJECTS
        {
            ifIndex,
            ifDescr,
            hh3cwapiTrapInfoMacAddr,
            hh3cwapiTrapInfoAPId,
            hh3cwapiTrapInfoRadioId,
            hh3cwapiTrapInfoBSSId,
            hh3cwapiTrapInfoAPMacAddr
        }
        STATUS current
        DESCRIPTION
            "This trap is sent when an attacker records and replays network
            transactions."
        ::= { hh3cwapiTrapPrefix 2 }

    hh3cwapiTamperAttack NOTIFICATION-TYPE
        OBJECTS
        {
            ifIndex,
            ifDescr,
            hh3cwapiTrapInfoMacAddr,
            hh3cwapiTrapInfoAPId,
            hh3cwapiTrapInfoRadioId,
            hh3cwapiTrapInfoBSSId,
            hh3cwapiTrapInfoAPMacAddr
        }
        STATUS current
        DESCRIPTION
            "This trap is sent when an attacker monitors network traffic and
            maliciously changes data in transit(for example, an attacker may
            modify the contents of a WAI message)."
        ::= { hh3cwapiTrapPrefix 3 }

    hh3cwapiLowSafeLevelAttack NOTIFICATION-TYPE
        OBJECTS
        {
            ifIndex,
            ifDescr,
            hh3cwapiTrapInfoMacAddr,
            hh3cwapiTrapInfoAPId,
            hh3cwapiTrapInfoRadioId,
            hh3cwapiTrapInfoBSSId,
            hh3cwapiTrapInfoAPMacAddr
        }
        STATUS current
        DESCRIPTION
            "This trap is sent when a station associates AP(Access Point),
            creates packet of Unicast Key Negotiation Response with wrong
            WIE(WAPI Information Element) of ASUE(Authentication Supplicant
            Entity)."
        ::= { hh3cwapiTrapPrefix 4 }

    hh3cwapiAddressRedirectionAttack NOTIFICATION-TYPE
        OBJECTS
        {
            ifIndex,
            ifDescr,
            hh3cwapiTrapInfoMacAddr,
            hh3cwapiTrapInfoAPId,
            hh3cwapiTrapInfoRadioId,
            hh3cwapiTrapInfoBSSId,
            hh3cwapiTrapInfoAPMacAddr
        }
        STATUS current
        DESCRIPTION
            "This trap is sent when an attacker maliciously changes destination
            MAC address of WPI(WLAN Privacy Infrastructure) frame."
        ::= { hh3cwapiTrapPrefix 5 }

-- ************************************************************************
-- * The following objects are used for binding informations when sending traps.
-- ************************************************************************

hh3cwapiTrapInfo OBJECT IDENTIFIER ::= { hh3cwapiTrap 1 }

hh3cwapiTrapInfoMacAddr OBJECT-TYPE
        SYNTAX MacAddress
        MAX-ACCESS accessible-for-notify
        STATUS current
        DESCRIPTION
            "The MAC address of the WAPI user."
        ::= { hh3cwapiTrapInfo 1 }

hh3cwapiTrapInfoAPId OBJECT-TYPE
        SYNTAX Integer32
        MAX-ACCESS accessible-for-notify
        STATUS current
        DESCRIPTION
            "To uniquely identify each AP."
        ::= { hh3cwapiTrapInfo 2 }

hh3cwapiTrapInfoRadioId OBJECT-TYPE
        SYNTAX Integer32
        MAX-ACCESS accessible-for-notify
        STATUS current
        DESCRIPTION
            "Represents each radio."
        ::= { hh3cwapiTrapInfo 3 }

hh3cwapiTrapInfoBSSId OBJECT-TYPE
        SYNTAX MacAddress
        MAX-ACCESS accessible-for-notify
        STATUS current
        DESCRIPTION
            "As MAC Address format, it is to identify BSS."
        ::= { hh3cwapiTrapInfo 4 }

hh3cwapiTrapInfoAPMacAddr OBJECT-TYPE
        SYNTAX MacAddress
        MAX-ACCESS accessible-for-notify
        STATUS current
        DESCRIPTION
            "As MAC Address format, it is to identify AP"
        ::= { hh3cwapiTrapInfo 5 }
END