All MIBs › ENTERASYS-WIFI-PROTECTED-ACCESS-MIB › etsysWPAConfigAllowLegacyClients
etsysWPAConfigAllowLegacyClients
Module: ENTERASYS-WIFI-PROTECTED-ACCESS-MIB
OID (symbolic): ENTERASYS-WIFI-PROTECTED-ACCESS-MIB::etsysWPAConfigAllowLegacyClients
OID (numeric): 1.3.6.1.4.1.5624.1.2.32.1.1.1.22
Node type: OBJECT-TYPE
Type: TruthValue
Access: read-write
Description: This object provides a way to indicate that an access point in WPA mode should accept associations from both WPA clients and legacy (pre-WPA, pre-RSN) clients.
When this object is true(1), the etsysWPAConfigMulticastCipher must be WEP-40 or WEP-104 (a.k.a. 128-bit WEP).
Using WEP Group keys and letting legacy clients associate may weaken security. To minimize this,
1. Enable legacy associations only on radios that support Pairwise keys.
2. Enable frequent Group key rekeying. With TKIP and AES, there's much less threat of key cracking than with WEP, so the default is 'once in a blue moon'. With WEP, you need to think more in terms of Rapid Rekeying.
Access points implementing this feature are under no obligation to support non-802.1X clients. For instance, an access point might use one-time dynamic WEP keys when WPA Group key rotation is disabled. Static WEP clients would not know these keys.
What is etsysWPAConfigAllowLegacyClients?
When true, lets the AP accept associations from both WPA clients and legacy pre-WPA clients on the same radio, which requires the multicast cipher to be WEP-40 or WEP-104; admins mitigate the resulting security weakening by enabling frequent group-key rekeying and only allowing this on radios that support pairwise keys.
Examples
Walk all instances (SNMPv2c):
snmpwalk -v2c -c public <target> 1.3.6.1.4.1.5624.1.2.32.1.1.1.22 snmpwalk -v2c -c public <target> ENTERASYS-WIFI-PROTECTED-ACCESS-MIB::etsysWPAConfigAllowLegacyClients
Get a specific instance (index 1):
snmpget -v2c -c public <target> 1.3.6.1.4.1.5624.1.2.32.1.1.1.22.1 snmpget -v2c -c public <target> ENTERASYS-WIFI-PROTECTED-ACCESS-MIB::etsysWPAConfigAllowLegacyClients.1
Set instance 1 (SNMPv2c):
snmpset -v2c -c private <target> 1.3.6.1.4.1.5624.1.2.32.1.1.1.22.1 s <value>
Start monitoring Enterasys/Extreme Networks wireless access point/controller (WPA/TKIP wireless security) with a free 30-day trial of IPNetwork Monitor. Create custom SNMP monitor using the ENTERASYS-WIFI-PROTECTED-ACCESS-MIB::etsysWPAConfigAllowLegacyClients OID value, configure state conditions and alerts, and monitor any Enterasys/Extreme Networks wireless access point/controller (WPA/TKIP wireless security) from a single console.
OID Breakdown
Upper-level ancestors (9 from the standard OID tree / other modules)
| Numeric OID | Name | Module |
|---|---|---|
| 1 | iso | LANART-AGENT |
| 1.3 | org | AirPair-MIB |
| 1.3.6 | dod | AirPair-MIB |
| 1.3.6.1 | internet | AirPair-MIB |
| 1.3.6.1.4 | private | AirPair-MIB |
| 1.3.6.1.4.1 | enterprises | AirPair-MIB |
| 1.3.6.1.4.1.5624 | enterasys | ENTERASYS-MIB-NAMES |
| 1.3.6.1.4.1.5624.1 | etsysMibs | ENTERASYS-MIB-NAMES |
| 1.3.6.1.4.1.5624.1.2 | etsysModules | ENTERASYS-MIB-NAMES |
| Numeric OID | Name | Module |
|---|---|---|
| 1.3.6.1.4.1.5624.1.2.32 | etsysWiFiProtectedAccessMIB | ENTERASYS-WIFI-PROTECTED-ACCESS-MIB |
| 1.3.6.1.4.1.5624.1.2.32.1 | etsysWiFiProtectedAccessObjects | ENTERASYS-WIFI-PROTECTED-ACCESS-MIB |
| 1.3.6.1.4.1.5624.1.2.32.1.1 | etsysWPAConfigTable | ENTERASYS-WIFI-PROTECTED-ACCESS-MIB |
| 1.3.6.1.4.1.5624.1.2.32.1.1.1 | etsysWPAConfigEntry | ENTERASYS-WIFI-PROTECTED-ACCESS-MIB |
| 1.3.6.1.4.1.5624.1.2.32.1.1.1.22 | etsysWPAConfigAllowLegacyClients | ENTERASYS-WIFI-PROTECTED-ACCESS-MIB |