HH3C-DOT11-PROBE-MIB

All MIBs › HH3C-DOT11-PROBE-MIB

Organization: New H3C Technologies Co., Ltd.

Last Updated: 2016-03-28

Category: Technology: Wireless, Vendor: H3C/HH3C

Description: Manages 802.11 wireless probe functions on H3C APs for passive client and device discovery.

Start monitoring vendor-neutral, standards-based MIB, any SNMPv3-capable network device (SNMP engine identity/boot/clock status) with a free 30-day trial of IPNetwork Monitor. Import MIBs, browse SNMP OIDs, create custom SNMP monitors, configure alerts, and monitor any SNMP-enabled network device from a single console.

What Is HH3C-DOT11-PROBE-MIB?

HH3C-DOT11-PROBE-MIB is an H3C (Hangzhou Huawei-3Com/New H3C) enterprise MIB covering the 802.11 wireless probing feature, which uses AP radios as sensors to passively detect and enumerate nearby wireless clients and devices rather than serving normal client traffic. It exposes per-AP-radio probe configuration (enable status per AP name and radio ID) and a discovered-client table capturing MAC address, associated BSSID/SSID, and whether the detected client is dissociating. Its monitoring focus is wireless security/visibility status: administrators use it to confirm probing is enabled on expected AP radios and to review the live population of detected wireless clients, including transient or rogue devices appearing near a sensor. It depends on the underlying H3C wireless AP/controller management framework for AP naming and radio indexing conventions. It is typically deployed in enterprise WLAN environments using H3C access points for wireless intrusion/rogue-device detection alongside normal Wi-Fi service. Engineers can download the HH3C-DOT11-PROBE-MIB file directly to load it into their MIB browser.

IPNetwork Monitor allows you to monitor SNMP objects defined in HH3C-DOT11-PROBE-MIB. Use the built-in SNMP Monitoring Browser to explore available variables, view their current values and descriptions, and select the objects you want to monitor. You can then create SNMP monitors, configure thresholds, and receive alerts when monitored values change.

Supported Devices

H3C (New H3C/HPE Networking) wireless access point acting as a probe sensor

Monitoring Examples

An administrator would poll hh3cDot11PROBERadioCfgTable/hh3cDot11PROBERadioCfgEntry, keyed by hh3cDot11PROBERadioCfgApName and hh3cDot11PROBERadioCfgRadioId, to confirm hh3cDot11PROBERadioCfgStatus shows probing enabled on the intended AP radios. The hh3cDot11PROBEClientTable would then be polled to see hh3cDot11PROBEClientMac, hh3cDot11PROBEClientBSSID, and hh3cDot11PROBEClientSSID for devices detected near a sensor, revealing unexpected or rogue wireless clients. hh3cDot11PROBEClientIsDiss and hh3cDot11PROBEClientStatus would show when a previously detected client has left or gone stale.

What Can Be Monitored

probe enable status per AP radio
detected client MAC address
detected client BSSID/SSID
client dissociation status

Imported Objects

From HH3C-OID-MIB

hh3cDot11

OBJECT-IDENTITY

From SNMPv2-SMI

Integer32
MODULE-IDENTITY
OBJECT-TYPE
TimeTicks

From SNMPv2-TC

MacAddress
TEXTUAL-CONVENTION
TruthValue

How to Use in IPNetwork Monitor

Example using hh3cDot11PROBEClientRSSIMax OID:

Select an H3C wireless access point acting as a probe sensor (rogue-device detection) as the target host to create a monitor — the SNMP service should be up and running on it. Click New Monitor, then check SNMP Custom on the Favorites tab, click Next, and confirm the host. On the next page, click Select... to open the built-in SNMP MIB Browser and type hh3cDot11PROBEClientRSSIMax into the Find box to locate it in the OID tree, selecting the specific row/instance you want to monitor since this is a table column, then select it and click OK. Represents the maximum RSSI of the detected client. On the monitor's Main parameters page you can set the target's SNMP port (default 161), credentials, polling interval, and other settings — see the SNMP Monitor help for details. On the State conditions and Alerting tabs, configure when the monitor should change state and trigger an alert; since this is an Integer32-type OID, Value bounds is the most useful condition here — trigger an alert if the value drifts significantly from its normal baseline, since an unexpected change often points to a real underlying issue. Click Finish to create the monitor; you can adjust any parameter later.

OIDs

OID symbolic	OID numeric	Type	Access	Description
hh3cDot11PROBE	1.3.6.1.4.1.25506.2.75.17			This MIB provides information about the probing feature. Probing is designed to detect wireless devices around a sensor.
hh3cDot11PROBEConfigGroup	1.3.6.1.4.1.25506.2.75.17.1
hh3cDot11PROBERadioCfgTable	1.3.6.1.4.1.25506.2.75.17.1.1		not-accessible	The table defines the configuration of probing enable status.
hh3cDot11PROBERadioCfgEntry	1.3.6.1.4.1.25506.2.75.17.1.1.1		not-accessible	Each entry contains the enable status of probing.
OCT hh3cDot11PROBERadioCfgApName	1.3.6.1.4.1.25506.2.75.17.1.1.1.1	OCTET STRING	not-accessible	Represents the AP name.
I32 hh3cDot11PROBERadioCfgRadioId	1.3.6.1.4.1.25506.2.75.17.1.1.1.2	Integer32	not-accessible	Represents the radio ID of the AP.
HH3 hh3cDot11PROBERadioCfgStatus	1.3.6.1.4.1.25506.2.75.17.1.1.1.3	Hh3cDot11PROBEEnabledStatus	read-write	The enable status of probing configuration on the radio.
hh3cDot11PROBEDataGroup	1.3.6.1.4.1.25506.2.75.17.2
hh3cDot11PROBEClientTable	1.3.6.1.4.1.25506.2.75.17.2.1		not-accessible	The table contains information about clients detected by probing.
hh3cDot11PROBEClientEntry	1.3.6.1.4.1.25506.2.75.17.2.1.1		not-accessible	Each entry contains information about a client detected by probing.
MAC hh3cDot11PROBEClientMac	1.3.6.1.4.1.25506.2.75.17.2.1.1.1	MacAddress	not-accessible	Represents the MAC address of the client detected by probing.
MAC hh3cDot11PROBEClientBSSID	1.3.6.1.4.1.25506.2.75.17.2.1.1.2	MacAddress	read-only	Represents the BSSID with which the detected client is associated.
OCT hh3cDot11PROBEClientSSID	1.3.6.1.4.1.25506.2.75.17.2.1.1.3	OCTET STRING	read-only	Represents the SSID with which the detected client is associated.
T/F hh3cDot11PROBEClientIsDiss	1.3.6.1.4.1.25506.2.75.17.2.1.1.4	TruthValue	read-only	Represents whether the detected client is disassociated.
HH3 hh3cDot11PROBEClientStatus	1.3.6.1.4.1.25506.2.75.17.2.1.1.5	Hh3cDot11PROBEDevStatus	read-only	Represents the status of the detected client.
TIK hh3cDot11PROBEClientDuratTime	1.3.6.1.4.1.25506.2.75.17.2.1.1.6	TimeTicks	read-only	Represents the duration of the detected client status.
OCT hh3cDot11PROBEClientVendor	1.3.6.1.4.1.25506.2.75.17.2.1.1.7	OCTET STRING	read-only	Represents the vendor of the detected client.
I32 hh3cDot11PROBEClientRptApNum	1.3.6.1.4.1.25506.2.75.17.2.1.1.8	Integer32	read-only	Represents the number of sensors that have detected the client.
HH3 hh3cDot11PROBEClientWorkChannel	1.3.6.1.4.1.25506.2.75.17.2.1.1.9	Hh3cDot11PROBEChannel	read-only	Represents the channel on which the sensor detected the client.
I32 hh3cDot11PROBEClientRSSIMaxEx	1.3.6.1.4.1.25506.2.75.17.2.1.1.10	Integer32	read-only	Represents the maximum RSSI of the detected client.
I32 hh3cDot11PROBEClientRSSIMin	1.3.6.1.4.1.25506.2.75.17.2.1.1.11	Integer32	read-only	Represents the minimum RSSI of the detected client.
I32 hh3cDot11PROBEClientRSSI	1.3.6.1.4.1.25506.2.75.17.2.1.1.12	Integer32	read-only	Represents the RSSI of the detected client.
OCT hh3cDot11PROBEClientFirstTime	1.3.6.1.4.1.25506.2.75.17.2.1.1.13	OCTET STRING	read-only	Represents the First Report Time of the detected client.
OCT hh3cDot11PROBEClientLastTime	1.3.6.1.4.1.25506.2.75.17.2.1.1.14	OCTET STRING	read-only	Represents the Last Report Time of the detected client.
hh3cDot11PROBEStatTable	1.3.6.1.4.1.25506.2.75.17.2.2		not-accessible	The table contains statistic information about detected clients.
hh3cDot11PROBEStatEntry	1.3.6.1.4.1.25506.2.75.17.2.2.1		not-accessible	Each entry contains statistic information about a detected station.
OCT hh3cDot11PROBEStatTime	1.3.6.1.4.1.25506.2.75.17.2.2.1.1	OCTET STRING	not-accessible	Represents the statistics collection time of the detected client.
I32 hh3cDot11PROBEStatRssiMaxNum	1.3.6.1.4.1.25506.2.75.17.2.2.1.2	Integer32	read-only	Represents the maximum RSSI of the detected client.
I32 hh3cDot11PROBEStatRssiMiddleNum	1.3.6.1.4.1.25506.2.75.17.2.2.1.3	Integer32	read-only	Represents the medium RSSI of the detected client.
I32 hh3cDot11PROBEStatRssiMinNum	1.3.6.1.4.1.25506.2.75.17.2.2.1.4	Integer32	read-only	Represents the minimum RSSI of the detected client.
I32 hh3cDot11PROBEStatTotalNum	1.3.6.1.4.1.25506.2.75.17.2.2.1.5	Integer32	read-only	Represents the total number of detected clients.
I32 hh3cDot11PROBEStatAssocNum	1.3.6.1.4.1.25506.2.75.17.2.2.1.6	Integer32	read-only	Represents the number of detected associated clients.
I32 hh3cDot11PROBEStatDissocNum	1.3.6.1.4.1.25506.2.75.17.2.2.1.7	Integer32	read-only	Represents the number of detected disassociated clients.
hh3cDot11PROBEApTable	1.3.6.1.4.1.25506.2.75.17.2.3		not-accessible	The table contains information about AP detected by probing.
hh3cDot11PROBEApEntry	1.3.6.1.4.1.25506.2.75.17.2.3.1		not-accessible	Each entry contains information about a detected AP.
MAC hh3cDot11PROBEApMacAddress	1.3.6.1.4.1.25506.2.75.17.2.3.1.1	MacAddress	not-accessible	Represents the MAC address of the detected AP.
OCT hh3cDot11PROBEApSsid	1.3.6.1.4.1.25506.2.75.17.2.3.1.2	OCTET STRING	read-only	Represents the SSID of the detected AP.
HH3 hh3cDot11PROBEApStatus	1.3.6.1.4.1.25506.2.75.17.2.3.1.3	Hh3cDot11PROBEDevStatus	read-only	Represents the device status of the detected AP.
TIK hh3cDot11PROBEApStatusDuTime	1.3.6.1.4.1.25506.2.75.17.2.3.1.4	TimeTicks	read-only	Represents the last report time of the detected AP.
OCT hh3cDot11PROBEApVendor	1.3.6.1.4.1.25506.2.75.17.2.3.1.5	OCTET STRING	read-only	Represents the vendor of the detected AP.
HH3 hh3cDot11PROBEApRadioType	1.3.6.1.4.1.25506.2.75.17.2.3.1.6	Hh3cDot11PROBERadioType	read-only	Represents the radio type used by the detected AP.
HH3 hh3cDot11PROBEApSecurityType	1.3.6.1.4.1.25506.2.75.17.2.3.1.7	Hh3cDot11PROBESecurityType	read-only	Represents the security suites of the detected AP.
HH3 hh3cDot11PROBEApEncryMethod	1.3.6.1.4.1.25506.2.75.17.2.3.1.8	Hh3cDot11PROBEEncryptMethod	read-only	Represents the encryption method used by the detected AP.
HH3 hh3cDot11PROBEApAuthMethod	1.3.6.1.4.1.25506.2.75.17.2.3.1.9	Hh3cDot11PROBEAuthMethod	read-only	Represents the authentication method used by the detected AP.
T/F hh3cDot11PROBEApIsBroadSSID	1.3.6.1.4.1.25506.2.75.17.2.3.1.10	TruthValue	read-only	Represents the support of the detected AP for broadcasting the SSID.
T/F hh3cDot11PROBEApQosSupport	1.3.6.1.4.1.25506.2.75.17.2.3.1.11	TruthValue	read-only	Represents the support of the detected AP for QoS.
I32 hh3cDot11PROBEApBeaconIntvl	1.3.6.1.4.1.25506.2.75.17.2.3.1.12	Integer32	read-only	Represents the beacon interval of the detected AP.
TIK hh3cDot11PROBEApUpDuration	1.3.6.1.4.1.25506.2.75.17.2.3.1.13	TimeTicks	read-only	Represents the amount of time that has elapsed since AP started to work, which is calculated by using beacon/probe response frame.
T/F hh3cDot11PROBEApSCWS	1.3.6.1.4.1.25506.2.75.17.2.3.1.14	TruthValue	read-only	Represents the support for channel bandwidth of the detected AP.
I32 hh3cDot11PROBEApRptSensorNum	1.3.6.1.4.1.25506.2.75.17.2.3.1.15	Integer32	read-only	Represents the number of sensors that have detected the AP.
HH3 hh3cDot11PROBEApChannel	1.3.6.1.4.1.25506.2.75.17.2.3.1.16	Hh3cDot11PROBEChannel	read-only	Represents the radio channel on which the detected AP operates.
I32 hh3cDot11PROBEApRSSIMax	1.3.6.1.4.1.25506.2.75.17.2.3.1.17	Integer32	read-only	Represents the maximum RSSI of the detected AP.
I32 hh3cDot11PROBEApRSSIMin	1.3.6.1.4.1.25506.2.75.17.2.3.1.18	Integer32	read-only	Represents the minimum RSSI of the detected AP.
I32 hh3cDot11PROBEApRSSI	1.3.6.1.4.1.25506.2.75.17.2.3.1.19	Integer32	read-only	Represents the RSSI of the detected AP.
OCT hh3cDot11PROBEApFirstRptTime	1.3.6.1.4.1.25506.2.75.17.2.3.1.20	OCTET STRING	read-only	Represents the first report time of the detected AP.
OCT hh3cDot11PROBEApLastRptTime	1.3.6.1.4.1.25506.2.75.17.2.3.1.21	OCTET STRING	read-only	Represents the last report time of the detected AP.
hh3cDot11PROBEApAssoCltTable	1.3.6.1.4.1.25506.2.75.17.2.4		not-accessible	The table contains information about associated clients.
hh3cDot11PROBEApAssoCltEntry	1.3.6.1.4.1.25506.2.75.17.2.4.1		not-accessible	Each entry contains information about an associated client.
MAC hh3cDot11PROBEApAssoCltApMac	1.3.6.1.4.1.25506.2.75.17.2.4.1.1	MacAddress	not-accessible	Represents the MAC address of the AP.
MAC hh3cDot11PROBEApAssoCltCltMac	1.3.6.1.4.1.25506.2.75.17.2.4.1.2	MacAddress	not-accessible	Represents the MAC address of the client.
T/F hh3cDot11PROBEApAssoCltIsAsso	1.3.6.1.4.1.25506.2.75.17.2.4.1.3	TruthValue	read-only	Represents whether the detected client has been associated with the AP.
hh3cDot11PROBEApRepSenTable	1.3.6.1.4.1.25506.2.75.17.2.5		not-accessible	The table contains information about the sensor that detected the AP.
hh3cDot11PROBEApRepSenEntry	1.3.6.1.4.1.25506.2.75.17.2.5.1		not-accessible	Each entry contains information about the sensor that detected the AP.
MAC hh3cDot11PROBEApRepSenApMac	1.3.6.1.4.1.25506.2.75.17.2.5.1.1	MacAddress	not-accessible	Represents the MAC address of the AP.
OCT hh3cDot11PROBEApRepSenSenName	1.3.6.1.4.1.25506.2.75.17.2.5.1.2	OCTET STRING	not-accessible	Represents the name of the sensor.
I32 hh3cDot11PROBEApRepSenRadioId	1.3.6.1.4.1.25506.2.75.17.2.5.1.3	Integer32	read-only	Represents the radio ID of the sensor.
I32 hh3cDot11PROBEApRepSenRssi	1.3.6.1.4.1.25506.2.75.17.2.5.1.4	Integer32	read-only	Represents the RSSI of the sensor.
HH3 hh3cDot11PROBEApRepSenChannel	1.3.6.1.4.1.25506.2.75.17.2.5.1.5	Hh3cDot11PROBEChannel	read-only	Represents the channel on which the sensor detected the AP.
OCT hh3cDot11PROBEApRepSenFirRepTim	1.3.6.1.4.1.25506.2.75.17.2.5.1.6	OCTET STRING	read-only	Represents the duration of the detected AP.
OCT hh3cDot11PROBEApRepSenLasRepTim	1.3.6.1.4.1.25506.2.75.17.2.5.1.7	OCTET STRING	read-only	Represents the duration of the detected AP.
hh3cDot11PROBECliRepSenTable	1.3.6.1.4.1.25506.2.75.17.2.6		not-accessible	The table contains information about the sensor that detected the client.
hh3cDot11PROBECliRepSenEntry	1.3.6.1.4.1.25506.2.75.17.2.6.1		not-accessible	Each entry contains information about the sensor that detected the client.
MAC hh3cDot11PROBECliRepSenCliMac	1.3.6.1.4.1.25506.2.75.17.2.6.1.1	MacAddress	not-accessible	Represents the MAC address of the client.
OCT hh3cDot11PROBECliRepSenSenName	1.3.6.1.4.1.25506.2.75.17.2.6.1.2	OCTET STRING	not-accessible	Represents the name of the sensor.
I32 hh3cDot11PROBECliRepSenRadioId	1.3.6.1.4.1.25506.2.75.17.2.6.1.3	Integer32	read-only	Represents the radio ID of the sensor.
I32 hh3cDot11PROBECliRepSenRssi	1.3.6.1.4.1.25506.2.75.17.2.6.1.4	Integer32	read-only	Represents the RSSI of the sensor.
HH3 hh3cDot11PROBECliRepSenChannel	1.3.6.1.4.1.25506.2.75.17.2.6.1.5	Hh3cDot11PROBEChannel	read-only	Represents the channel on which the sensor detected the client.
OCT hh3cDot11PROBECliRepSenFRepTime	1.3.6.1.4.1.25506.2.75.17.2.6.1.6	OCTET STRING	read-only	Represents the duration of the detected client.
OCT hh3cDot11PROBECliRepSenLRepTime	1.3.6.1.4.1.25506.2.75.17.2.6.1.7	OCTET STRING	read-only	Represents the duration of the detected client.
MAC hh3cDot11PROBECliRepSenAssAPMac	1.3.6.1.4.1.25506.2.75.17.2.6.1.8	MacAddress	read-only	Represents the MAC address of the associated AP.

RFC description

Manages wireless probe feature for detecting 802.11 devices and sensors around APs.

Start monitoring H3C wireless access point acting as a probe sensor (rogue-device detection) with a free 30-day trial of IPNetwork Monitor. Import MIBs, browse SNMP OIDs, create custom SNMP monitors, configure alerts, and monitor any SNMP-enabled network device from a single console.

Download HH3C-DOT11-PROBE-MIB