All MIBs › HUAWEI-WLAN-SECURITY-MIB › hwWsecAuthPairwiseCipher
hwWsecAuthPairwiseCipher
Module: HUAWEI-WLAN-SECURITY-MIB
OID (symbolic): HUAWEI-WLAN-SECURITY-MIB::hwWsecAuthPairwiseCipher
OID (numeric): 1.3.6.1.4.1.2011.6.139.6.4.1.7
Node type: OBJECT-TYPE
Type: INTEGER
Access: read-write
Description: The selector of a supported pairwise cipher. It consists of an OUI (the first 3 octets) and a cipher suite identifier (the last octet).
0x00147201 : WPI-SMS4 0x000FAC00 : Use group cipher suite 0x000FAC01 : WEP-40 0x000FAC02 : TKIP 0x000FAC04 : CCMP-default in an RSNA 0x000FAC05 : WEP-104 0x000FAC06 : wep-128 0x000FAC07 : tkip-ccmp 0x00E0FC01 : null (no encryption), only for open system authentication
The cipher suite selector 00-0F-AC:4 (CCMP) shall be the default cipher suite value. The cipher suite selectors 00-0F-AC:1 (WEP-40) and 00-0F-AC:5 (WEP-104) are only valid as a group cipher suite in a transition security network (TSN) to allow pre-RSNA devices to join the BSS.
Use of CCMP as the group cipher suite with TKIP as the pairwise cipher suite shall not be supported.
NOTE?If the STAs can support CCMP, then there is no need for a weaker data confidentiality protocol.
The cipher suite selector 00-0F-AC:0 (Use group cipher suite) is only valid as the pairwise cipher suite. An AP may specify the selector 00-0F-AC:0 (Use group cipher suite) for a pairwise cipher suite if it does not cipher selection, this shall be the only pairwise cipher selection the AP advertises.
If CCMP is enabled, then the AP supports pairwise keys, and thus the suite selector 00-0F-AC:0 (Use group cipher suite) shall not be a valid option.
What is hwWsecAuthPairwiseCipher?
Selects the pairwise (unicast) cipher suite used for this authentication entry - options include WPI-SMS4, WEP-40, WEP-104, WEP-128, TKIP, CCMP, a TKIP/CCMP combination, or null. CCMP is the default and recommended cipher, since weaker ciphers such as WEP are only valid in a transition security network alongside pre-RSNA devices.
Examples
Walk all instances (SNMPv2c):
snmpwalk -v2c -c public <target> 1.3.6.1.4.1.2011.6.139.6.4.1.7 snmpwalk -v2c -c public <target> HUAWEI-WLAN-SECURITY-MIB::hwWsecAuthPairwiseCipher
Get a specific instance (index 1):
snmpget -v2c -c public <target> 1.3.6.1.4.1.2011.6.139.6.4.1.7.1 snmpget -v2c -c public <target> HUAWEI-WLAN-SECURITY-MIB::hwWsecAuthPairwiseCipher.1
Set instance 1 (SNMPv2c):
snmpset -v2c -c private <target> 1.3.6.1.4.1.2011.6.139.6.4.1.7.1 i <value>
SNMPv3 example:
snmpget -v3 -l authPriv -u snmpv3-user -a SHA -A "AuthPassword1" -x AES -X "PrivPassword1" <target> hwWsecAuthPairwiseCipher.1
Start monitoring Huawei wireless access point/WLAN controller (WPA/WPA2/802.1X security) with a free 30-day trial of IPNetwork Monitor. Create custom SNMP monitor using the HUAWEI-WLAN-SECURITY-MIB::hwWsecAuthPairwiseCipher OID value, configure state conditions and alerts, and monitor any Huawei wireless access point/WLAN controller (WPA/WPA2/802.1X security) from a single console.
OID Breakdown
Upper-level ancestors (9 from the standard OID tree / other modules)
| Numeric OID | Name | Module |
|---|---|---|
| 1 | iso | LANART-AGENT |
| 1.3 | org | AirPair-MIB |
| 1.3.6 | dod | AirPair-MIB |
| 1.3.6.1 | internet | AirPair-MIB |
| 1.3.6.1.4 | private | AirPair-MIB |
| 1.3.6.1.4.1 | enterprises | AirPair-MIB |
| 1.3.6.1.4.1.2011 | huawei | EXPERTV2-MIB |
| 1.3.6.1.4.1.2011.6 | huaweiUtility | HUAWEI-3COM-OID-MIB |
| 1.3.6.1.4.1.2011.6.139 | hwWlan | HUAWEI-WLAN-MIB |
| Numeric OID | Name | Module |
|---|---|---|
| 1.3.6.1.4.1.2011.6.139.6 | hwWlanSecurity | HUAWEI-WLAN-SECURITY-MIB |
| 1.3.6.1.4.1.2011.6.139.6.4 | hwWsecAuthSuitesTable | HUAWEI-WLAN-SECURITY-MIB |
| 1.3.6.1.4.1.2011.6.139.6.4.1 | hwWsecAuthSuitesEntry | HUAWEI-WLAN-SECURITY-MIB |
| 1.3.6.1.4.1.2011.6.139.6.4.1.7 | hwWsecAuthPairwiseCipher | HUAWEI-WLAN-SECURITY-MIB |