All MIBs › IEEE802dot11-MIB › dot11RSNAConfigPairwiseCipher
dot11RSNAConfigPairwiseCipher
Module: IEEE802dot11-MIB
OID (symbolic): IEEE802dot11-MIB::dot11RSNAConfigPairwiseCipher
OID (numeric): 1.2.840.10036.1.10.1.2
Node type: OBJECT-TYPE
Type: OCTET STRING
Access: read-only
Description:
The selector of a supported pairwise cipher. It consists of an OUI (the first 3 octets) and a cipher suite identifier (the last octet).
What is dot11RSNAConfigPairwiseCipher?
This 4-byte value specifies which encryption algorithm (AES, TKIP, etc.) is configured for unicast client-to-AP traffic. It defines the per-packet security method. An operator enforcing security policy would confirm this is set to AES and not the deprecated TKIP to prevent weak encryption.
Examples
Walk all instances (SNMPv2c):
snmpwalk -v2c -c public <target> 1.2.840.10036.1.10.1.2 snmpwalk -v2c -c public <target> IEEE802dot11-MIB::dot11RSNAConfigPairwiseCipher
Get a specific instance (index 1):
snmpget -v2c -c public <target> 1.2.840.10036.1.10.1.2.1 snmpget -v2c -c public <target> IEEE802dot11-MIB::dot11RSNAConfigPairwiseCipher.1
OID Breakdown
| Numeric OID | Name | Module |
|---|---|---|
| 1 | iso | LANART-AGENT |
| 1.2 | member_body | IEEE802dot11-MIB |
| 1.2.840 | us | IEEE802dot11-MIB |
| 1.2.840.10036 | ieee802dot11 | IEEE802dot11-MIB |
| 1.2.840.10036.1 | dot11smt | IEEE802dot11-MIB |
| 1.2.840.10036.1.10 | dot11RSNAConfigPairwiseCiphersTable | IEEE802dot11-MIB |
| 1.2.840.10036.1.10.1 | dot11RSNAConfigPairwiseCiphersEntry | IEEE802dot11-MIB |
| 1.2.840.10036.1.10.1.2 | dot11RSNAConfigPairwiseCipher | IEEE802dot11-MIB |