-- ============================================================================= -- Copyright (c) 2009-2023 FS.COM Inc. All Rights Reserved. -- -- Description: -- The file defines a MIB to provide wireless intrusion prevention service -- feature. -- Reference: -- Version: V1.3 -- History: -- V1.0 created by sunlongfei -- Initial version 2012-01-09 -- V1.1 updated by sunlongfei 2012-12-7 -- Modify the descriptions of fsWIPSDctAPAdd2CtmList, -- fsWIPSDctAPAdd2IgnoreList,fsWIPSDctAPAdd2WhiteList, -- fsWIPSDctAPAdd2BlackListc,fsWIPSDctStaAdd2BlackList, -- fsWIPSDctStaAdd2WhiteList,fsWIPSDctStaAdd2IgnoreList, -- fsWIPSDctStaAdd2CtmList,fsWIPSDevStatTxProbeRequest. -- V1.2 modified by sunlongfei 2013-6-7 -- In fsWIPSGlobalConfigGroup, -- Modify the descriptions of fsWIPSEnable. -- Add fsWIPSDynamicTrustListAgingTime, fsWIPSDevUpdateTime, -- fsWIPSADOSEnable, fsWIPSAccessFlowScanEnable. -- Modify fsWIPSVsdTable, fsWIPSAtkDctPolicyCfgGroup, -- fsWIPSDctAPTable, fsWIPSDctStaTable. -- Add fsWIPSSigConfigGroup, fsWIPSCtmConfigGroup, -- fsWIPSMalPktDctConfigGroup, fsWIPSStaticTrustOUIListCfgTable -- fsWIPSStaticTrustVendorListCfgTable, -- fsWIPSCtmDeviceTable, fsWIPSMalPktStatTable -- modified by sunlongfei 2013-11-21 -- Modify the size of fsWIPSSensorNameCfg, fsWIPSDctModeAPName, -- fsWIPSDctAPRptSensorName, fsWIPSDctStaRptSensorName -- from '1..32' to '1..64'. -- V1.3 modified by jianing 2014-05-12 -- Add fsWIPSDctUnassocStaTable, fsWIPSDctUnassocStaRptSensorTable. -- Modify the descriptions of fsWIPSAtkDctPolicyCfgTable, -- fsWIPSMalPktDctConfigGroup, fsWIPSMalPktStatTable,fsWIPSAPAuthType, -- fsWIPSDctAPAuthMethod, fsWIPSDctAPRadioType, fsWIPSDctStaRadioType, -- fsWIPSDctNetworkFirstRptTm. -- ============================================================================= FS-WIPS-MIB DEFINITIONS ::= BEGIN IMPORTS TimeTicks, Integer32, Unsigned32, OBJECT-TYPE, MODULE-IDENTITY, Counter64 FROM SNMPv2-SMI TruthValue, RowStatus, MacAddress, TEXTUAL-CONVENTION FROM SNMPv2-TC fsCommon FROM FS-OID-MIB; fsWIPS MODULE-IDENTITY LAST-UPDATED "201112291450Z" -- December 29, 2011 at 14:50 GMT ORGANIZATION "Fiberstore Co.,Limited" CONTACT-INFO "" DESCRIPTION "This MIB provides information about WIPS feature. Wireless Intrusion Prevention System (WIPS) WIPS is designed to be employed in an area that is serviced by an existing wireless network. It aids in the early detection of malicious outsider attacks and intrusions via wireless networks, and takes corresponding measures in order to guarantee the wireless environment security. " REVISION "201112291450Z" -- December 29, 2011 at 14:50 GMT DESCRIPTION "The initial revision of this MIB module." ::= { fsCommon 118 } -- -- Textual conventions -- FsWIPSRadioType ::= TEXTUAL-CONVENTION DISPLAY-HINT "d" STATUS current DESCRIPTION "Represents AP 802.11 radio type of 802.11a/b/g/n as per the standard. dot11a 0x01 dot11b 0x02 dot11g 0x04 dot11n 0x08 dot11gn 0x10 dot11an 0x20 dot11ac 0x40" SYNTAX Unsigned32 FsWIPSDevStatus ::= TEXTUAL-CONVENTION STATUS current DESCRIPTION "Represents the status of devices detected by WIPS." SYNTAX INTEGER { active(1), inactive(2) } FsWIPSDevCategoryWay ::= TEXTUAL-CONVENTION STATUS current DESCRIPTION "Represents by which way the device is categorized. 'manual': the device is categorized by user. 'autoByNMS': the device is automatically categorized by NMS(Network Management System). 'autoByDev': the device is automatically categorized by WIPS." SYNTAX INTEGER { manual(1), autoByNMS(2), autoByDev(3) } FsWIPSDeviceCategoryType ::= TEXTUAL-CONVENTION STATUS current DESCRIPTION "Represents the categorized type of device detected by WIPS." SYNTAX INTEGER { none(0), authorizedAP(1), authorizedClient(2), misconfiguredAP(3), rogueAP(4), unauthorizedClient(5), externalAP(6), adhoc(7), bridge(8), misassociatedClient(9), potentialAuthorizedAP(10), potentialRogueAP(11), potentialExternalAP(12), uncategorizedAP(13), uncategorizedClient(14) } FsWIPSAPCategoryType ::= TEXTUAL-CONVENTION STATUS current DESCRIPTION "Represents the categorized type of AP detected by WIPS." SYNTAX INTEGER { adhoc(1), authorized(2), rogue(3), misconfigured(4), external(5), potentialAuthorized(6), potentialRogue(7), potentialExternal(8), uncategorized(9) } FsWIPSClientCategoryType ::= TEXTUAL-CONVENTION STATUS current DESCRIPTION "Represents the categorized type of Client detected by WIPS." SYNTAX INTEGER { authorized(1), unauthorized(2), misassociated(3), uncategorized(4), unassociated(5) } FsWIPSChannel ::= TEXTUAL-CONVENTION DISPLAY-HINT "d" STATUS current DESCRIPTION "Represents the channel number." SYNTAX Integer32 (0..224) FsWIPSEncryptMethod ::= TEXTUAL-CONVENTION DISPLAY-HINT "d" STATUS current DESCRIPTION "Represents the frame encryption cipher types for frames on IEEE 802.11 radio interfaces. The MIB defines TC by referring to the 802.11i protocol. The following values are supported: none(1) - clear text or no cipher method is configure, wep(2) - WEP key, tkip(4) - WPA Temporal Key encryption, ccmp(8) - WPA AES CCMP encryption" SYNTAX Unsigned32 FsWIPSAuthMethod ::= TEXTUAL-CONVENTION STATUS current DESCRIPTION "Represents the key management mode defined by 802.11i. The following values are supported: none - No key management mode configured, psk - pre-shared key authentication, dot1x - 802.1x authentication. other - other authentication." SYNTAX INTEGER { none(1), psk(2), dot1x(3), other(4), pskANDdot1x(5), pskANDother(6), dot1xANDother(7), pskANDdot1xANDother(8) } FsWIPSAPClassifyType ::= TEXTUAL-CONVENTION STATUS current DESCRIPTION "Represents the classify type of AP. 'other' - represents undo operation." SYNTAX INTEGER { other(1), authorized(2), external(3), misconfigured(4), rogue(5) } FsWIPSAPSecurityType ::= TEXTUAL-CONVENTION DISPLAY-HINT "d" STATUS current DESCRIPTION "Represents the AP security type. clear 0x01 wpa2 0x02 wpa 0x04 wep 0x08" SYNTAX Unsigned32 -- -- Node definitions -- fsWIPSConfigGroup OBJECT IDENTIFIER ::= { fsWIPS 1 } fsWIPSGlobalConfigGroup OBJECT IDENTIFIER ::= { fsWIPSConfigGroup 1 } fsWIPSEnable OBJECT-TYPE SYNTAX TruthValue MAX-ACCESS read-write STATUS current DESCRIPTION "Represents whether the WIPS feature is enabled or not. 'true': enable the WIPS feature. 'false': disable the WIPS feature." ::= { fsWIPSGlobalConfigGroup 1 } fsWIPSSensorLicenseNum OBJECT-TYPE SYNTAX Unsigned32 MAX-ACCESS read-only STATUS current DESCRIPTION "Represents the number of sensor license." ::= { fsWIPSGlobalConfigGroup 2 } fsWIPSBlocklistAction OBJECT-TYPE SYNTAX INTEGER { block(1), unblock(2) } MAX-ACCESS read-write STATUS current DESCRIPTION "Represents whether the block list feature is enabled or not. 'block' : Enable the block list feature to filter unwanted devices. 'unblock' : Disable the block list feature." ::= { fsWIPSGlobalConfigGroup 3 } fsWIPSAPInactiveTime OBJECT-TYPE SYNTAX Integer32 (60..600) UNITS "second" MAX-ACCESS read-write STATUS current DESCRIPTION "Represents the time for AP getting inactive." DEFVAL { 300 } ::= { fsWIPSGlobalConfigGroup 4 } fsWIPSSTAInactiveTime OBJECT-TYPE SYNTAX Integer32 (120..1200) UNITS "second" MAX-ACCESS read-write STATUS current DESCRIPTION "Represents the time for STA getting inactive." DEFVAL { 600 } ::= { fsWIPSGlobalConfigGroup 5 } fsWIPSDevAgingTime OBJECT-TYPE SYNTAX Integer32 (60..2592000) UNITS "second" MAX-ACCESS read-write STATUS current DESCRIPTION "Represents the time for device getting aged." DEFVAL { 86400 } ::= { fsWIPSGlobalConfigGroup 6 } fsWIPSStatisticPeriod OBJECT-TYPE SYNTAX Integer32 (60..86400) UNITS "second" MAX-ACCESS read-write STATUS current DESCRIPTION "Represents the period of WIPS reporting the statistic." DEFVAL { 900 } ::= { fsWIPSGlobalConfigGroup 7 } fsWIPSReclassificationPeriod OBJECT-TYPE SYNTAX Integer32 (10..3600) UNITS "second" MAX-ACCESS read-write STATUS current DESCRIPTION "Represents the period of WIPS reclassifying devices." DEFVAL { 600 } ::= { fsWIPSGlobalConfigGroup 8 } fsWIPSResetAllTrustList OBJECT-TYPE SYNTAX TruthValue MAX-ACCESS read-write STATUS current DESCRIPTION "This object is used to remove all entries from the static trust list. It will return false for get operation." ::= { fsWIPSGlobalConfigGroup 9 } fsWIPSResetAllBlockList OBJECT-TYPE SYNTAX TruthValue MAX-ACCESS read-write STATUS current DESCRIPTION "This object is used to remove all entries from the static block list. It will return false for get operation." ::= { fsWIPSGlobalConfigGroup 10 } fsWIPSResetAllIgnoreList OBJECT-TYPE SYNTAX TruthValue MAX-ACCESS read-write STATUS current DESCRIPTION "This object is used to remove all entries from the ignore list. It will return false for get operation.." ::= { fsWIPSGlobalConfigGroup 11 } fsWIPSResetAllCtmList OBJECT-TYPE SYNTAX TruthValue MAX-ACCESS read-write STATUS current DESCRIPTION "This object is used to remove all entries from the static countermeasure list. It will return false for get operation." ::= { fsWIPSGlobalConfigGroup 12 } fsWIPSPermitChlBitMap OBJECT-TYPE SYNTAX OCTET STRING (SIZE (32)) MAX-ACCESS read-write STATUS current DESCRIPTION "Represents the permit channel number by bitmap." ::= { fsWIPSGlobalConfigGroup 13 } fsWIPSDynamicTrustListAgingTime OBJECT-TYPE SYNTAX Integer32 (60..86400) UNITS "second" MAX-ACCESS read-write STATUS current DESCRIPTION "Represents the time for devices in the dynamic trust list getting aged." DEFVAL {300} ::= { fsWIPSGlobalConfigGroup 14 } fsWIPSDevUpdateTime OBJECT-TYPE SYNTAX Integer32 (10..30) UNITS "second" MAX-ACCESS read-write STATUS current DESCRIPTION "Represents the period of WIPS update the status of devices." DEFVAL {20} ::= { fsWIPSGlobalConfigGroup 15 } fsWIPSADOSEnable OBJECT-TYPE SYNTAX TruthValue MAX-ACCESS read-write STATUS current DESCRIPTION "Represents whether enable the ADOS feature. 'true': enable the ADOS feature. 'false': disable the ADOS feature." DEFVAL { false } ::= { fsWIPSGlobalConfigGroup 16 } fsWIPSAccessFlowScanEnable OBJECT-TYPE SYNTAX TruthValue MAX-ACCESS read-write STATUS current DESCRIPTION "Represents whether the WIPS scanning feature during the access flow is enabled or not. 'true': enable the feature. 'false': disable the feature." DEFVAL { false } ::= { fsWIPSGlobalConfigGroup 17} fsWIPSVsdConfigGroup OBJECT IDENTIFIER ::= { fsWIPSConfigGroup 2 } fsWIPSVsdTable OBJECT-TYPE SYNTAX SEQUENCE OF FsWIPSVsdEntry MAX-ACCESS not-accessible STATUS current DESCRIPTION "The table provides the list of virtual security domain." ::= { fsWIPSVsdConfigGroup 1 } fsWIPSVsdEntry OBJECT-TYPE SYNTAX FsWIPSVsdEntry MAX-ACCESS not-accessible STATUS current DESCRIPTION "Each entry contains information of each VSD." INDEX { fsWIPSVsdNameCfg } ::= { fsWIPSVsdTable 1 } FsWIPSVsdEntry ::= SEQUENCE { fsWIPSVsdNameCfg OCTET STRING, fsWIPSVsdRowStatus RowStatus, fsWIPSVsdAtkDctPolicyNameCfg OCTET STRING, fsWIPSVsdCtmPolicyNameCfg OCTET STRING, fsWIPSVsdSigPolicyNameCfg OCTET STRING, fsWIPSVsdMalPktPolicyNameCfg OCTET STRING } fsWIPSVsdNameCfg OBJECT-TYPE SYNTAX OCTET STRING (SIZE (1..32)) MAX-ACCESS not-accessible STATUS current DESCRIPTION "Represents the name of virtual security domain." ::= { fsWIPSVsdEntry 1 } fsWIPSVsdRowStatus OBJECT-TYPE SYNTAX RowStatus MAX-ACCESS read-create STATUS current DESCRIPTION "The status of this table entry." ::= { fsWIPSVsdEntry 2 } fsWIPSVsdAtkDctPolicyNameCfg OBJECT-TYPE SYNTAX OCTET STRING (SIZE (0..32)) MAX-ACCESS read-create STATUS current DESCRIPTION "Represents the name of attack detect policy attached to the VSD." ::= { fsWIPSVsdEntry 3 } fsWIPSVsdCtmPolicyNameCfg OBJECT-TYPE SYNTAX OCTET STRING (SIZE (0..32)) MAX-ACCESS read-create STATUS current DESCRIPTION "Represents the name of countermeasure policy attached to the VSD." ::= { fsWIPSVsdEntry 4 } fsWIPSVsdSigPolicyNameCfg OBJECT-TYPE SYNTAX OCTET STRING (SIZE (0..32)) MAX-ACCESS read-create STATUS current DESCRIPTION "Represents the name of signature policy attached to the VSD" ::= { fsWIPSVsdEntry 5 } fsWIPSVsdMalPktPolicyNameCfg OBJECT-TYPE SYNTAX OCTET STRING (SIZE (0..32)) MAX-ACCESS read-create STATUS current DESCRIPTION "Represents the name of malformed packet detect policy attached to the VSD" ::= { fsWIPSVsdEntry 6 } fsWIPSRule2VsdTable OBJECT-TYPE SYNTAX SEQUENCE OF FsWIPSRule2VsdEntry MAX-ACCESS not-accessible STATUS current DESCRIPTION "The table defines the AP classification rules been attached to the VSD. " ::= { fsWIPSVsdConfigGroup 2 } fsWIPSRule2VsdEntry OBJECT-TYPE SYNTAX FsWIPSRule2VsdEntry MAX-ACCESS not-accessible STATUS current DESCRIPTION "Each entry contains information of each AP classification rule in each VSD. " INDEX { fsWIPSVsdNameCfg, fsWIPSRule2VsdAPClaRuleNameCfg } ::= { fsWIPSRule2VsdTable 1 } FsWIPSRule2VsdEntry ::= SEQUENCE { fsWIPSRule2VsdAPClaRuleNameCfg OCTET STRING, fsWIPSRule2VsdRowStatus RowStatus, fsWIPSRule2VsdPrecedence Integer32 } fsWIPSRule2VsdAPClaRuleNameCfg OBJECT-TYPE SYNTAX OCTET STRING (SIZE (1..32)) MAX-ACCESS not-accessible STATUS current DESCRIPTION "Represents the name of AP classification rule attached to the VSD." ::= { fsWIPSRule2VsdEntry 1 } fsWIPSRule2VsdRowStatus OBJECT-TYPE SYNTAX RowStatus MAX-ACCESS read-create STATUS current DESCRIPTION "The status of this table entry." ::= { fsWIPSRule2VsdEntry 2 } fsWIPSRule2VsdPrecedence OBJECT-TYPE SYNTAX Integer32 (0..15) MAX-ACCESS read-create STATUS current DESCRIPTION "Represents the precedence of AP classification rule attached to the VSD." DEFVAL { 0 } ::= { fsWIPSRule2VsdEntry 3 } fsWIPSSensor2VsdTable OBJECT-TYPE SYNTAX SEQUENCE OF FsWIPSSensor2VsdEntry MAX-ACCESS not-accessible STATUS current DESCRIPTION "The table defines the sensor been attached to the VSD. " ::= { fsWIPSVsdConfigGroup 3 } fsWIPSSensor2VsdEntry OBJECT-TYPE SYNTAX FsWIPSSensor2VsdEntry MAX-ACCESS not-accessible STATUS current DESCRIPTION "Each entry contains information of each sensor in each VSD." INDEX { fsWIPSVsdNameCfg, fsWIPSSensorNameCfg } ::= { fsWIPSSensor2VsdTable 1 } FsWIPSSensor2VsdEntry ::= SEQUENCE { fsWIPSSensorNameCfg OCTET STRING, fsWIPSSensor2VsdRowStatus RowStatus, fsWIPSSensorState INTEGER } fsWIPSSensorNameCfg OBJECT-TYPE SYNTAX OCTET STRING (SIZE (1..64)) MAX-ACCESS not-accessible STATUS current DESCRIPTION "Represents the name of sensor attached to the VSD." ::= { fsWIPSSensor2VsdEntry 1 } fsWIPSSensor2VsdRowStatus OBJECT-TYPE SYNTAX RowStatus MAX-ACCESS read-create STATUS current DESCRIPTION "The status of this table entry." ::= { fsWIPSSensor2VsdEntry 2 } fsWIPSSensorState OBJECT-TYPE SYNTAX INTEGER { running(1), idle(2) } MAX-ACCESS read-create STATUS current DESCRIPTION "Represents the running state of the sensor. It will return false for set operation." ::= { fsWIPSSensor2VsdEntry 3 } fsWIPSSensorRadioTable OBJECT-TYPE SYNTAX SEQUENCE OF FsWIPSSensorRadioEntry MAX-ACCESS not-accessible STATUS current DESCRIPTION "The table represents the list of sensor radio information." ::= { fsWIPSVsdConfigGroup 4 } fsWIPSSensorRadioEntry OBJECT-TYPE SYNTAX FsWIPSSensorRadioEntry MAX-ACCESS not-accessible STATUS current DESCRIPTION "Each entry contains information of a radio of a sensor." INDEX { fsWIPSVsdNameCfg, fsWIPSSensorNameCfg, fsWIPSSensorRadioRadioId } ::= { fsWIPSSensorRadioTable 1 } FsWIPSSensorRadioEntry ::= SEQUENCE { fsWIPSSensorRadioRadioId Integer32, fsWIPSSensorRadioScanMode INTEGER } fsWIPSSensorRadioRadioId OBJECT-TYPE SYNTAX Integer32 (1..4) MAX-ACCESS not-accessible STATUS current DESCRIPTION "Represents the radio identifier of the sensor." ::= { fsWIPSSensorRadioEntry 1 } fsWIPSSensorRadioScanMode OBJECT-TYPE SYNTAX INTEGER { accessFirst(1), detectFirst(2), middle(3), detectOnly(4) } MAX-ACCESS read-only STATUS current DESCRIPTION "Represents the scanning mode configured to the radio." ::= { fsWIPSSensorRadioEntry 2 } fsWIPSAPClaRuleTable OBJECT-TYPE SYNTAX SEQUENCE OF FsWIPSAPClaRuleEntry MAX-ACCESS not-accessible STATUS current DESCRIPTION "The table defines the parameters for WIPS AP classification rule. One rule could be assigned to different VSDs. " ::= { fsWIPSConfigGroup 3 } fsWIPSAPClaRuleEntry OBJECT-TYPE SYNTAX FsWIPSAPClaRuleEntry MAX-ACCESS not-accessible STATUS current DESCRIPTION "Each entry contains information of each AP classification rule. " INDEX { fsWIPSAPClaRuleName } ::= { fsWIPSAPClaRuleTable 1 } FsWIPSAPClaRuleEntry ::= SEQUENCE { fsWIPSAPClaRuleName OCTET STRING, fsWIPSAPClaRowStatus RowStatus, fsWIPSAPClaSeverityLevel Unsigned32, fsWIPSAPClaRuleMatchAll TruthValue, fsWIPSAPClaType FsWIPSAPClassifyType, fsWIPSAPClaSubRuleSSIDOperator INTEGER, fsWIPSAPClaSubRuleSSIDCase TruthValue, fsWIPSAPClaSubRuleSSID OCTET STRING, fsWIPSSecurityType FsWIPSAPSecurityType, fsWIPSSecurityTypeMatch INTEGER, fsWIPSAPAuthType INTEGER, fsWIPSMaxRSSIValue Unsigned32, fsWIPSMinRSSIValue Unsigned32, fsWIPSMaxDuration Unsigned32, fsWIPSMinDuration Unsigned32, fsWIPSMaxAPNum Unsigned32, fsWIPSMinAPNum Unsigned32, fsWIPSMaxClientNum Unsigned32, fsWIPSMinClientNum Unsigned32, fsWIPSOUIInfo OCTET STRING, fsWIPSVendorInfo OCTET STRING, fsWIPSAPAuthTypeMatch INTEGER } fsWIPSAPClaRuleName OBJECT-TYPE SYNTAX OCTET STRING (SIZE (1..32)) MAX-ACCESS not-accessible STATUS current DESCRIPTION "Represents the name of AP classification rule." ::= { fsWIPSAPClaRuleEntry 1 } fsWIPSAPClaRowStatus OBJECT-TYPE SYNTAX RowStatus MAX-ACCESS read-create STATUS current DESCRIPTION "The status of this table entry." ::= { fsWIPSAPClaRuleEntry 2 } fsWIPSAPClaSeverityLevel OBJECT-TYPE SYNTAX Unsigned32 MAX-ACCESS read-create STATUS current DESCRIPTION "Represents the severity level of the AP classification rule. Available value limits from 0 to 100." DEFVAL { 'ffffffff'h } ::= { fsWIPSAPClaRuleEntry 3 } fsWIPSAPClaRuleMatchAll OBJECT-TYPE SYNTAX TruthValue MAX-ACCESS read-create STATUS current DESCRIPTION "Represents whether match all the AP classification sub-rules which have been configured." DEFVAL { false } ::= { fsWIPSAPClaRuleEntry 4 } fsWIPSAPClaType OBJECT-TYPE SYNTAX FsWIPSAPClassifyType MAX-ACCESS read-create STATUS current DESCRIPTION "Represents the type of AP classification." ::= { fsWIPSAPClaRuleEntry 5 } fsWIPSAPClaSubRuleSSIDOperator OBJECT-TYPE SYNTAX INTEGER { include(1), notinclude(2), equal(3), notequal(4) } MAX-ACCESS read-create STATUS current DESCRIPTION "Represents the compare way of the SSID in the sub rule, including include/not include/equal/not equal." ::= { fsWIPSAPClaRuleEntry 6 } fsWIPSAPClaSubRuleSSIDCase OBJECT-TYPE SYNTAX TruthValue MAX-ACCESS read-create STATUS current DESCRIPTION "Represents the case sensitive or not for the SSID match. 'true': Case insensitive. 'false': Case sensitive." DEFVAL { false } ::= { fsWIPSAPClaRuleEntry 7 } fsWIPSAPClaSubRuleSSID OBJECT-TYPE SYNTAX OCTET STRING (SIZE (0..32)) MAX-ACCESS read-create STATUS current DESCRIPTION "Represents the SSID match template in the ap classification rule." ::= { fsWIPSAPClaRuleEntry 8 } fsWIPSSecurityType OBJECT-TYPE SYNTAX FsWIPSAPSecurityType MAX-ACCESS read-create STATUS current DESCRIPTION "Represents the security type of active AP. " DEFVAL { 'ffffffff'h } ::= { fsWIPSAPClaRuleEntry 9 } fsWIPSSecurityTypeMatch OBJECT-TYPE SYNTAX INTEGER { equal(1), include(2) } MAX-ACCESS read-create STATUS current DESCRIPTION "Represents match way of the security type of active AP. " DEFVAL { include } ::= { fsWIPSAPClaRuleEntry 10 } fsWIPSAPAuthType OBJECT-TYPE SYNTAX INTEGER { none(1), psk(2), dot1x(3), other(4), undo(5), pskANDdot1x(6), pskANDother(7), dot1xANDother(8), pskANDdot1xANDother(9), noneANDpsk(10), noneANDdot1x(11), noneANDother(12), noneANDpskANDdot1x(13), noneANDpskANDother(14), noneANDdot1xANDother(15), noneANDpskANDdot1xANDother(16) } MAX-ACCESS read-create STATUS current DESCRIPTION "Represents the authentication type of the AP. undo - represents undo operation" DEFVAL { undo } ::= { fsWIPSAPClaRuleEntry 11 } fsWIPSMaxRSSIValue OBJECT-TYPE SYNTAX Unsigned32 MAX-ACCESS read-create STATUS current DESCRIPTION "Represents the high-limit of the RSSI of AP. Available value limits from 1 to 90." DEFVAL { 'ffffffff'h } ::= { fsWIPSAPClaRuleEntry 12 } fsWIPSMinRSSIValue OBJECT-TYPE SYNTAX Unsigned32 MAX-ACCESS read-create STATUS current DESCRIPTION "Represents the low-limit of the RSSI of AP. Available value limits from 0 to 89." DEFVAL { 'ffffffff'h } ::= { fsWIPSAPClaRuleEntry 13 } fsWIPSMaxDuration OBJECT-TYPE SYNTAX Unsigned32 UNITS "second" MAX-ACCESS read-create STATUS current DESCRIPTION "Represents the high-limit of the duration of AP. Available value limits from 1 to 2592000." DEFVAL { 'ffffffff'h } ::= { fsWIPSAPClaRuleEntry 14 } fsWIPSMinDuration OBJECT-TYPE SYNTAX Unsigned32 UNITS "second" MAX-ACCESS read-create STATUS current DESCRIPTION "Represents the low-limit of the duration of AP. Available value limits from 0 to 2591999." DEFVAL { 'ffffffff'h } ::= { fsWIPSAPClaRuleEntry 15 } fsWIPSMaxAPNum OBJECT-TYPE SYNTAX Unsigned32 MAX-ACCESS read-create STATUS current DESCRIPTION "Represents the high-limit of the number of AP. Available value limits from 1 to 128." DEFVAL { 'ffffffff'h } ::= { fsWIPSAPClaRuleEntry 16 } fsWIPSMinAPNum OBJECT-TYPE SYNTAX Unsigned32 MAX-ACCESS read-create STATUS current DESCRIPTION "Represents the low-limit of the number of AP. Available value limits from 0 to 127." DEFVAL { 'ffffffff'h } ::= { fsWIPSAPClaRuleEntry 17 } fsWIPSMaxClientNum OBJECT-TYPE SYNTAX Unsigned32 MAX-ACCESS read-create STATUS current DESCRIPTION "Represents the high-limit of the number of client. Available value limits from 1 to 128." DEFVAL { 'ffffffff'h } ::= { fsWIPSAPClaRuleEntry 18 } fsWIPSMinClientNum OBJECT-TYPE SYNTAX Unsigned32 MAX-ACCESS read-create STATUS current DESCRIPTION "Represents the low-limit of the number of client. Available value limits from 0 to 127." DEFVAL { 'ffffffff'h } ::= { fsWIPSAPClaRuleEntry 19 } fsWIPSOUIInfo OBJECT-TYPE SYNTAX OCTET STRING (SIZE (0..6)) MAX-ACCESS read-create STATUS current DESCRIPTION "Represents the OUI hexadecimal string of the AP." ::= { fsWIPSAPClaRuleEntry 20 } fsWIPSVendorInfo OBJECT-TYPE SYNTAX OCTET STRING (SIZE (0..64)) MAX-ACCESS read-create STATUS current DESCRIPTION "Represents the vendor info of the AP." ::= { fsWIPSAPClaRuleEntry 21 } fsWIPSAPAuthTypeMatch OBJECT-TYPE SYNTAX INTEGER { equal(1), include(2) } MAX-ACCESS read-create STATUS current DESCRIPTION "Represents match way of the authentication type of active AP. " DEFVAL { include } ::= { fsWIPSAPClaRuleEntry 22 } fsWIPSAtkDctPolicyCfgGroup OBJECT IDENTIFIER ::= { fsWIPSConfigGroup 4 } fsWIPSAtkDctPolicyCfgSupportSet OBJECT-TYPE SYNTAX OCTET STRING (SIZE (16)) MAX-ACCESS read-only STATUS current DESCRIPTION "Represents the bit string of supported attack detect policy. The specific attack detect policy is supported if its corresponding bit is set to 1; otherwise its corresponding bit is set to 0. bit0: adhoc bit1: ap-spoof bit2: client-spoof bit3: prohibited channel bit4: ap-flood bit5: eapol-start bit6: authentication bit7: association bit8: reassociation bit9: weak-IV bit10: invalid-OUI bit11: ps-attack bit12: windows-bridge bit13: hotspot-attack bit14: ap-impersonation bit15: soft-ap bit16: unencrypted-authorized-ap bit17: unencrypted-trust-client" ::= { fsWIPSAtkDctPolicyCfgGroup 1 } fsWIPSAtkDctPolicyCfgTable OBJECT-TYPE SYNTAX SEQUENCE OF FsWIPSAtkDctPolicyCfgEntry MAX-ACCESS not-accessible STATUS current DESCRIPTION "The table defines the parameters for WIPS attack detect policy." ::= { fsWIPSAtkDctPolicyCfgGroup 2 } fsWIPSAtkDctPolicyCfgEntry OBJECT-TYPE SYNTAX FsWIPSAtkDctPolicyCfgEntry MAX-ACCESS not-accessible STATUS current DESCRIPTION "Each entry contains information of each attack detect policy." INDEX { fsWIPSAtkDctPolicyName } ::= { fsWIPSAtkDctPolicyCfgTable 1 } FsWIPSAtkDctPolicyCfgEntry ::= SEQUENCE { fsWIPSAtkDctPolicyName OCTET STRING, fsWIPSAtkDctPolicyCfgRowStatus RowStatus, fsWIPSAtkDctPolicyBitString OCTET STRING, fsWIPSAtkDctPolicyAPFloodQT Integer32, fsWIPSAtkDctPolicyAPSpoofQT Integer32, fsWIPSAtkDctPolicyCliSpoofQT Integer32, fsWIPSAtkDctPolicyDosAssoQT Integer32, fsWIPSAtkDctPolicyDosAuthQT Integer32, fsWIPSAtkDctPolicyDosEAPOLStartQT Integer32, fsWIPSAtkDctPolicyDosReAssoQT Integer32, fsWIPSAtkDctPolicyWeakIVQT Integer32, fsWIPSAtkDctPolicyInvalidOUIAction INTEGER, fsWIPSAtkDctPolicyUnencryptedAuthApQT Integer32, fsWIPSAtkDctPolicyUnencryptedAuthClientQT Integer32, fsWIPSAtkDctPolicyPSAttackQT Integer32, fsWIPSAtkDctPolicyPSAttackMinOffPacket Integer32, fsWIPSAtkDctPolicyPSAttackOnOffPercent Integer32, fsWIPSAtkDctPolicyApImpersonationQT Integer32, fsWIPSAtkDctPolicyApImpersonationBeaconIncThreshold Integer32, fsWIPSAtkDctPolicyApImpersonationBeaconIncWaitTime Integer32, fsWIPSAtkDctPolicySoftApConvertTime Integer32 } fsWIPSAtkDctPolicyName OBJECT-TYPE SYNTAX OCTET STRING (SIZE (1..32)) MAX-ACCESS not-accessible STATUS current DESCRIPTION "Represents the name of attack detect policy." ::= { fsWIPSAtkDctPolicyCfgEntry 1 } fsWIPSAtkDctPolicyCfgRowStatus OBJECT-TYPE SYNTAX RowStatus MAX-ACCESS read-create STATUS current DESCRIPTION "The status of this table entry." ::= { fsWIPSAtkDctPolicyCfgEntry 2 } fsWIPSAtkDctPolicyBitString OBJECT-TYPE SYNTAX OCTET STRING (SIZE (16)) MAX-ACCESS read-create STATUS current DESCRIPTION "Represents the bit string of attack detect policy configuration. The specific attack detect policy is enabled if its corresponding bit is set to 1; disabled if its corresponding bit is set to 0. bit0: adhoc bit1: ap-spoof bit2: client-spoof bit3: prohibited channel bit4: ap-flood bit5: eapol-start bit6: authentication bit7: association bit8: reassociation bit9: weak-IV bit10: invalid-OUI bit11: ps-attack bit12: windows-bridge bit13: hotspot-attack bit14: ap-impersonation bit15: soft-ap bit16: unencrypted-authorized-ap bit17: unencrypted-trust-client" ::= { fsWIPSAtkDctPolicyCfgEntry 3 } fsWIPSAtkDctPolicyAPFloodQT OBJECT-TYPE SYNTAX Integer32 (5..604800) MAX-ACCESS read-create STATUS current DESCRIPTION "Represents the quiet time after reporting the AP flood attack event alarm." DEFVAL { 600 } ::= { fsWIPSAtkDctPolicyCfgEntry 4 } fsWIPSAtkDctPolicyAPSpoofQT OBJECT-TYPE SYNTAX Integer32 (5..604800) MAX-ACCESS read-create STATUS current DESCRIPTION "Represents the quiet time after reporting the AP spoofing attack event alarm." DEFVAL { 600 } ::= { fsWIPSAtkDctPolicyCfgEntry 5 } fsWIPSAtkDctPolicyCliSpoofQT OBJECT-TYPE SYNTAX Integer32 (5..604800) MAX-ACCESS read-create STATUS current DESCRIPTION "Represents the quiet time after reporting the client spoofing attack event alarm." DEFVAL { 600 } ::= { fsWIPSAtkDctPolicyCfgEntry 6 } fsWIPSAtkDctPolicyDosAssoQT OBJECT-TYPE SYNTAX Integer32 (5..604800) MAX-ACCESS read-create STATUS current DESCRIPTION "Represents the quiet time after reporting the dos of association attack event alarm." DEFVAL { 600 } ::= { fsWIPSAtkDctPolicyCfgEntry 7 } fsWIPSAtkDctPolicyDosAuthQT OBJECT-TYPE SYNTAX Integer32 (5..604800) MAX-ACCESS read-create STATUS current DESCRIPTION "Represents the quiet time after reporting the dos of authentication attack event alarm." DEFVAL { 600 } ::= { fsWIPSAtkDctPolicyCfgEntry 8 } fsWIPSAtkDctPolicyDosEAPOLStartQT OBJECT-TYPE SYNTAX Integer32 (5..604800) MAX-ACCESS read-create STATUS current DESCRIPTION "Represents the quiet time after reporting the dos of EAPOL-start attack event alarm." DEFVAL { 600 } ::= { fsWIPSAtkDctPolicyCfgEntry 9 } fsWIPSAtkDctPolicyDosReAssoQT OBJECT-TYPE SYNTAX Integer32 (5..604800) MAX-ACCESS read-create STATUS current DESCRIPTION "Represents the quiet time after reporting the dos of reassociation attack event alarm." DEFVAL { 600 } ::= { fsWIPSAtkDctPolicyCfgEntry 10 } fsWIPSAtkDctPolicyWeakIVQT OBJECT-TYPE SYNTAX Integer32 (5..604800) MAX-ACCESS read-create STATUS current DESCRIPTION "Represents the quiet time after reporting the weak-IV event alarm." DEFVAL { 600 } ::= { fsWIPSAtkDctPolicyCfgEntry 11 } fsWIPSAtkDctPolicyInvalidOUIAction OBJECT-TYPE SYNTAX INTEGER { none(0), rogue(1) } MAX-ACCESS read-create STATUS current DESCRIPTION "Represents the action after detecting the invalid OUI, which classify the device as rogue device." ::= { fsWIPSAtkDctPolicyCfgEntry 12 } fsWIPSAtkDctPolicyUnencryptedAuthApQT OBJECT-TYPE SYNTAX Integer32 (5..604800) MAX-ACCESS read-create STATUS current DESCRIPTION "Represents the quiet time after reporting the unencrypted-authorized-ap event alarm." DEFVAL { 600 } ::= { fsWIPSAtkDctPolicyCfgEntry 13 } fsWIPSAtkDctPolicyUnencryptedAuthClientQT OBJECT-TYPE SYNTAX Integer32 (5..604800) MAX-ACCESS read-create STATUS current DESCRIPTION "Represents the quiet time after reporting the unencrypted-trust-client event alarm." DEFVAL { 600 } ::= { fsWIPSAtkDctPolicyCfgEntry 14 } fsWIPSAtkDctPolicyPSAttackQT OBJECT-TYPE SYNTAX Integer32 (5..604800) MAX-ACCESS read-create STATUS current DESCRIPTION "Represents the quiet time after reporting the ps-attack event alarm." DEFVAL { 600 } ::= { fsWIPSAtkDctPolicyCfgEntry 15 } fsWIPSAtkDctPolicyPSAttackMinOffPacket OBJECT-TYPE SYNTAX Integer32 (10..150) MAX-ACCESS read-create STATUS current DESCRIPTION "Specify the minimum number of OFF packets as threshold in detecting ps-attack." DEFVAL { 50 } ::= { fsWIPSAtkDctPolicyCfgEntry 16 } fsWIPSAtkDctPolicyPSAttackOnOffPercent OBJECT-TYPE SYNTAX Integer32 (0..100) MAX-ACCESS read-create STATUS current DESCRIPTION "Specify the ratio of ON packets to OFF packets in percentage as threshold in detecting ps-attack." DEFVAL { 50 } ::= { fsWIPSAtkDctPolicyCfgEntry 17 } fsWIPSAtkDctPolicyApImpersonationQT OBJECT-TYPE SYNTAX Integer32 (5..604800) MAX-ACCESS read-create STATUS current DESCRIPTION "Represents the quiet time after reporting the ap-impersonation event alarm." DEFVAL { 600 } ::= { fsWIPSAtkDctPolicyCfgEntry 18 } fsWIPSAtkDctPolicyApImpersonationBeaconIncThreshold OBJECT-TYPE SYNTAX Integer32 (1..100) MAX-ACCESS read-create STATUS current DESCRIPTION "Specify the increased percentage threshold for beacon frames that can trigger an AP impersonation alert" DEFVAL { 30 } ::= { fsWIPSAtkDctPolicyCfgEntry 19 } fsWIPSAtkDctPolicyApImpersonationBeaconIncWaitTime OBJECT-TYPE SYNTAX Integer32 (0..360000) MAX-ACCESS read-create STATUS current DESCRIPTION "Specify the waiting time before a suspected AP is determined as an AP impersonator. If the beacon frames keep on increasing beyond the threshold during the waiting time, then the suspected AP should be determined as an AP impersonator." DEFVAL { 10 } ::= { fsWIPSAtkDctPolicyCfgEntry 20 } fsWIPSAtkDctPolicySoftApConvertTime OBJECT-TYPE SYNTAX Integer32 (5..600) MAX-ACCESS read-create STATUS current DESCRIPTION "Specify the minimum client-AP switchover threshold used to determine a soft AP" DEFVAL { 10 } ::= { fsWIPSAtkDctPolicyCfgEntry 21 } fsWIPSStaticCtmListCfgTable OBJECT-TYPE SYNTAX SEQUENCE OF FsWIPSStaticCtmListCfgEntry MAX-ACCESS not-accessible STATUS current DESCRIPTION "The table provides the MAC address list of devices in the static countermeasure list." ::= { fsWIPSConfigGroup 5 } fsWIPSStaticCtmListCfgEntry OBJECT-TYPE SYNTAX FsWIPSStaticCtmListCfgEntry MAX-ACCESS not-accessible STATUS current DESCRIPTION "Each entry contains information of each MAC address in the static countermeasure list. " INDEX { fsWIPSStaticCtmListMAC } ::= { fsWIPSStaticCtmListCfgTable 1 } FsWIPSStaticCtmListCfgEntry ::= SEQUENCE { fsWIPSStaticCtmListMAC MacAddress, fsWIPSStaticCtmListRowStatus RowStatus } fsWIPSStaticCtmListMAC OBJECT-TYPE SYNTAX MacAddress MAX-ACCESS not-accessible STATUS current DESCRIPTION "Represents the MAC address in static countermeasure list." ::= { fsWIPSStaticCtmListCfgEntry 1 } fsWIPSStaticCtmListRowStatus OBJECT-TYPE SYNTAX RowStatus MAX-ACCESS read-create STATUS current DESCRIPTION "The status of this table entry." ::= { fsWIPSStaticCtmListCfgEntry 2 } fsWIPSStaticBlockListCfgTable OBJECT-TYPE SYNTAX SEQUENCE OF FsWIPSStaticBlockListCfgEntry MAX-ACCESS not-accessible STATUS current DESCRIPTION "The table provides the MAC address list of devices in the static block list. WIPS will ignore the frames from the devices in the list, and take the devices as rogue devices." ::= { fsWIPSConfigGroup 6 } fsWIPSStaticBlockListCfgEntry OBJECT-TYPE SYNTAX FsWIPSStaticBlockListCfgEntry MAX-ACCESS not-accessible STATUS current DESCRIPTION "Each entry contains information of each MAC address in the static block list. " INDEX { fsWIPSStaticBlockListMAC } ::= { fsWIPSStaticBlockListCfgTable 1 } FsWIPSStaticBlockListCfgEntry ::= SEQUENCE { fsWIPSStaticBlockListMAC MacAddress, fsWIPSStaticBlockListRowStatus RowStatus } fsWIPSStaticBlockListMAC OBJECT-TYPE SYNTAX MacAddress MAX-ACCESS not-accessible STATUS current DESCRIPTION "Represents the MAC address in static block list." ::= { fsWIPSStaticBlockListCfgEntry 1 } fsWIPSStaticBlockListRowStatus OBJECT-TYPE SYNTAX RowStatus MAX-ACCESS read-create STATUS current DESCRIPTION "The status of this table entry." ::= { fsWIPSStaticBlockListCfgEntry 2 } fsWIPSStaticTrustListCfgTable OBJECT-TYPE SYNTAX SEQUENCE OF FsWIPSStaticTrustListCfgEntry MAX-ACCESS not-accessible STATUS current DESCRIPTION "The table provides the MAC address list of devices in the static trust list. WIPS will take the devices in the list as authorized devices." ::= { fsWIPSConfigGroup 7 } fsWIPSStaticTrustListCfgEntry OBJECT-TYPE SYNTAX FsWIPSStaticTrustListCfgEntry MAX-ACCESS not-accessible STATUS current DESCRIPTION "Each entry contains information of each MAC address in the static trust list. " INDEX { fsWIPSStaticTrustListMAC } ::= { fsWIPSStaticTrustListCfgTable 1 } FsWIPSStaticTrustListCfgEntry ::= SEQUENCE { fsWIPSStaticTrustListMAC MacAddress, fsWIPSStaticTrustListRowStatus RowStatus } fsWIPSStaticTrustListMAC OBJECT-TYPE SYNTAX MacAddress MAX-ACCESS not-accessible STATUS current DESCRIPTION "Represents the MAC address in static trust list." ::= { fsWIPSStaticTrustListCfgEntry 1 } fsWIPSStaticTrustListRowStatus OBJECT-TYPE SYNTAX RowStatus MAX-ACCESS read-create STATUS current DESCRIPTION "The status of this table entry." ::= { fsWIPSStaticTrustListCfgEntry 2 } fsWIPSIgnoreListCfgTable OBJECT-TYPE SYNTAX SEQUENCE OF FsWIPSIgnoreListCfgEntry MAX-ACCESS not-accessible STATUS current DESCRIPTION "The table provides the MAC address list of devices in the ignore list. WIPS will ignore the events caused by the device in the list." ::= { fsWIPSConfigGroup 8 } fsWIPSIgnoreListCfgEntry OBJECT-TYPE SYNTAX FsWIPSIgnoreListCfgEntry MAX-ACCESS not-accessible STATUS current DESCRIPTION "Each entry contains information of each MAC address in the ignore list. " INDEX { fsWIPSIgnoreListMAC } ::= { fsWIPSIgnoreListCfgTable 1 } FsWIPSIgnoreListCfgEntry ::= SEQUENCE { fsWIPSIgnoreListMAC MacAddress, fsWIPSIgnoreListRowStatus RowStatus } fsWIPSIgnoreListMAC OBJECT-TYPE SYNTAX MacAddress MAX-ACCESS not-accessible STATUS current DESCRIPTION "Represents the MAC address in ignore list." ::= { fsWIPSIgnoreListCfgEntry 1 } fsWIPSIgnoreListRowStatus OBJECT-TYPE SYNTAX RowStatus MAX-ACCESS read-create STATUS current DESCRIPTION "The status of this table entry." ::= { fsWIPSIgnoreListCfgEntry 2 } fsWIPSDctModeTable OBJECT-TYPE SYNTAX SEQUENCE OF FsWIPSDctModeEntry MAX-ACCESS not-accessible STATUS current DESCRIPTION "The table represents the list of AP scanning mode configuration on radio." ::= { fsWIPSConfigGroup 9 } fsWIPSDctModeEntry OBJECT-TYPE SYNTAX FsWIPSDctModeEntry MAX-ACCESS not-accessible STATUS current DESCRIPTION "Each entry contains information of WIPS scanning mode on radio." INDEX { fsWIPSDctModeAPName, fsWIPSDctModeRadio } ::= { fsWIPSDctModeTable 1 } FsWIPSDctModeEntry ::= SEQUENCE { fsWIPSDctModeAPName OCTET STRING, fsWIPSDctModeRadio Integer32, fsWIPSDctModeScanMode INTEGER, fsWIPSDctModeRowStatus RowStatus } fsWIPSDctModeAPName OBJECT-TYPE SYNTAX OCTET STRING (SIZE (1..64)) MAX-ACCESS not-accessible STATUS current DESCRIPTION "Represents the name of AP." ::= { fsWIPSDctModeEntry 1 } fsWIPSDctModeRadio OBJECT-TYPE SYNTAX Integer32 (1..4) MAX-ACCESS not-accessible STATUS current DESCRIPTION "Represents the radio of AP." ::= { fsWIPSDctModeEntry 2 } fsWIPSDctModeScanMode OBJECT-TYPE SYNTAX INTEGER { accessFirst(1), detectFirst(2), middle(3), detectOnly(4) } MAX-ACCESS read-create STATUS current DESCRIPTION "Represents the scanning mode. The radio enable-disable status must be disabled before WIPS scanning mode is configured on this radio. The mesh feature must be disabled before any WIPS scanning mode is set on radio. This radio can not apply any service template before the detectOnly scanning mode is set on the radio. " ::= { fsWIPSDctModeEntry 3 } fsWIPSDctModeRowStatus OBJECT-TYPE SYNTAX RowStatus MAX-ACCESS read-create STATUS current DESCRIPTION "The status of this table entry." ::= { fsWIPSDctModeEntry 4 } fsWIPSSigConfigGroup OBJECT IDENTIFIER ::= { fsWIPSConfigGroup 10 } fsWIPSSigPolicyTable OBJECT-TYPE SYNTAX SEQUENCE OF FsWIPSSigPolicyEntry MAX-ACCESS not-accessible STATUS current DESCRIPTION "The table defines the parameters for WIPS signature policy. One policy could be assigned to different VSDs. " ::= { fsWIPSSigConfigGroup 1 } fsWIPSSigPolicyEntry OBJECT-TYPE SYNTAX FsWIPSSigPolicyEntry MAX-ACCESS not-accessible STATUS current DESCRIPTION "Each entry contains information of each signature policy." INDEX { fsWIPSSigPolicyNameCfg } ::= { fsWIPSSigPolicyTable 1 } FsWIPSSigPolicyEntry ::= SEQUENCE { fsWIPSSigPolicyNameCfg OCTET STRING, fsWIPSSigPolicyRowStatus RowStatus } fsWIPSSigPolicyNameCfg OBJECT-TYPE SYNTAX OCTET STRING (SIZE (1..32)) MAX-ACCESS not-accessible STATUS current DESCRIPTION "Represents the name of signature policy." ::= { fsWIPSSigPolicyEntry 1 } fsWIPSSigPolicyRowStatus OBJECT-TYPE SYNTAX RowStatus MAX-ACCESS read-create STATUS current DESCRIPTION "The status of this table entry." ::= { fsWIPSSigPolicyEntry 2 } fsWIPSSigRule2PolicyTable OBJECT-TYPE SYNTAX SEQUENCE OF FsWIPSSigRule2PolicyEntry MAX-ACCESS not-accessible STATUS current DESCRIPTION "The table defines the signature rules been attached to the signature policy. " ::= { fsWIPSSigConfigGroup 2 } fsWIPSSigRule2PolicyEntry OBJECT-TYPE SYNTAX FsWIPSSigRule2PolicyEntry MAX-ACCESS not-accessible STATUS current DESCRIPTION "Each entry contains information of each signature rules attached to signature policy." INDEX { fsWIPSSigPolicyNameCfg, fsWIPSSigRule2PolicySigRuleIDCfg } ::= { fsWIPSSigRule2PolicyTable 1 } FsWIPSSigRule2PolicyEntry ::= SEQUENCE { fsWIPSSigRule2PolicySigRuleIDCfg Unsigned32, fsWIPSSigRule2PolicyRowStatus RowStatus, fsWIPSSigRule2PolicyPrecedence Unsigned32 } fsWIPSSigRule2PolicySigRuleIDCfg OBJECT-TYPE SYNTAX Unsigned32 (1..64) MAX-ACCESS not-accessible STATUS current DESCRIPTION "Represents the ID of signature rule attached to signature policy." ::= { fsWIPSSigRule2PolicyEntry 1 } fsWIPSSigRule2PolicyRowStatus OBJECT-TYPE SYNTAX RowStatus MAX-ACCESS read-create STATUS current DESCRIPTION "The status of this table entry." ::= { fsWIPSSigRule2PolicyEntry 2 } fsWIPSSigRule2PolicyPrecedence OBJECT-TYPE SYNTAX Unsigned32 (1..64) MAX-ACCESS read-create STATUS current DESCRIPTION "Represents the precedence of signature rule attached to signature policy." DEFVAL { 1 } ::= { fsWIPSSigRule2PolicyEntry 3 } fsWIPSSigRuleTable OBJECT-TYPE SYNTAX SEQUENCE OF FsWIPSSigRuleEntry MAX-ACCESS not-accessible STATUS current DESCRIPTION "The table defines the signature rules. " ::= { fsWIPSSigConfigGroup 3 } fsWIPSSigRuleEntry OBJECT-TYPE SYNTAX FsWIPSSigRuleEntry MAX-ACCESS not-accessible STATUS current DESCRIPTION "Each entry contains information of each signature rules." INDEX { fsWIPSSigRuleName } ::= { fsWIPSSigRuleTable 1 } FsWIPSSigRuleEntry ::= SEQUENCE { fsWIPSSigRuleName OCTET STRING, fsWIPSSigRuleID Integer32, fsWIPSSigRuleRowStatus RowStatus, fsWIPSSigSubRuleMatchAll TruthValue, fsWIPSSigRuleDctPeriod Unsigned32, fsWIPSSigRuleTrackMethod INTEGER, fsWIPSSigRuleDctThresholdPerMAC Unsigned32, fsWIPSSigRuleDctThresholdPerSig Unsigned32, fsWIPSSigRuleActionEvtLevel Unsigned32, fsWIPSSigRuleQuietTime Unsigned32, fsWIPSSigSubRuleFrameType INTEGER, fsWIPSSigSubRuleFrameSubType INTEGER, fsWIPSSigSubRuleMac OCTET STRING, fsWIPSSigSubRuleMacType INTEGER, fsWIPSSigSubRuleSeqNumMin Unsigned32, fsWIPSSigSubRuleSeqNumMax Unsigned32, fsWIPSSigSubRuleSSIDLenMin Unsigned32, fsWIPSSigSubRuleSSIDLenMax Unsigned32, fsWIPSSigSubRuleSSID OCTET STRING, fsWIPSSigSubRuleSSIDOpe INTEGER, fsWIPSSigSubRuleSSIDCase TruthValue } fsWIPSSigRuleName OBJECT-TYPE SYNTAX OCTET STRING (SIZE (1..32)) MAX-ACCESS not-accessible STATUS current DESCRIPTION "Represents the name of signature rule." ::= { fsWIPSSigRuleEntry 1 } fsWIPSSigRuleID OBJECT-TYPE SYNTAX Integer32 (1..64) MAX-ACCESS read-create STATUS current DESCRIPTION "Represents the ID of signature rule. The values from 1 to 32 are for built-in rules, which can not be assigned to user-define rules. When a user-define signature rule is being created, if ID is not specified, the ID of the rule will be automatically assigned, which values from 33 to 64. Once the rule is created, the ID is fixed and can not be changed again." ::= { fsWIPSSigRuleEntry 2 } fsWIPSSigRuleRowStatus OBJECT-TYPE SYNTAX RowStatus MAX-ACCESS read-create STATUS current DESCRIPTION "The status of this table entry." ::= { fsWIPSSigRuleEntry 3 } fsWIPSSigSubRuleMatchAll OBJECT-TYPE SYNTAX TruthValue MAX-ACCESS read-create STATUS current DESCRIPTION "Represents whether match all the sub rules which have been configured in the signature rule. The default value for user-define rule is false, and for built-in rule is true." ::= { fsWIPSSigRuleEntry 4 } fsWIPSSigRuleDctPeriod OBJECT-TYPE SYNTAX Unsigned32 UNITS "second" MAX-ACCESS read-create STATUS current DESCRIPTION "Represents the detect period of signature rule. Available value limits from 1 to 3600. The default value depends on the certain rule. For user-define rules it is 60. The value 0xffffffff represents restoring default value operation." ::= { fsWIPSSigRuleEntry 5 } fsWIPSSigRuleTrackMethod OBJECT-TYPE SYNTAX INTEGER { perSig(1), perMAC(2), both(3) } MAX-ACCESS read-create STATUS current DESCRIPTION "Represents the track-method for the signature rule. The default value depends on the certain rule. For user-define rules it is 'both(3)'." ::= { fsWIPSSigRuleEntry 6 } fsWIPSSigRuleDctThresholdPerMAC OBJECT-TYPE SYNTAX Unsigned32 MAX-ACCESS read-create STATUS current DESCRIPTION "Represents the detect threshold for per-MAC track-method. Available value limits from 1 to 32000. The default value depends on the certain rule. For user-define rules it is 1000. The value 0xffffffff represents restoring default value operation." ::= { fsWIPSSigRuleEntry 7 } fsWIPSSigRuleDctThresholdPerSig OBJECT-TYPE SYNTAX Unsigned32 MAX-ACCESS read-create STATUS current DESCRIPTION "Represents the detect threshold for per-Signature track-method. Available value limits from 1 to 32000. The default value depends on the certain rule. For user-define rules it is 1000. The value 0xffffffff represents restoring default value operation." ::= { fsWIPSSigRuleEntry 8 } fsWIPSSigRuleActionEvtLevel OBJECT-TYPE SYNTAX Unsigned32 MAX-ACCESS read-create STATUS current DESCRIPTION "Represents the level of event sended for the action of reporting event alarm. Available value limits from 0 to 7. The default value depends on the certain rule. For user-define rules it is 0xffffffff." ::= { fsWIPSSigRuleEntry 9 } fsWIPSSigRuleQuietTime OBJECT-TYPE SYNTAX Unsigned32 MAX-ACCESS read-create STATUS current DESCRIPTION "Represents the quiet time after reporting event alarm. Available value limits from 60 to 32000. The default value depends on the certain rule. For user-define rules it is 900. The value 0xffffffff represents restoring default value operation." ::= { fsWIPSSigRuleEntry 10 } fsWIPSSigSubRuleFrameType OBJECT-TYPE SYNTAX INTEGER { manage(0), control(1), data(2), undo(3) } MAX-ACCESS read-create STATUS current DESCRIPTION "Represents the type of frame to match. 0x0 management type 0x1 control type 0x2 data type The default value depends on the certain rule. For user-define rules it is 'undo(3)'." ::= { fsWIPSSigRuleEntry 11 } fsWIPSSigSubRuleFrameSubType OBJECT-TYPE SYNTAX INTEGER { none(0), assocReq(1), assocRes(2), probeReq(3), beacon(4), disasso(5), auth(6), deauth(7) } MAX-ACCESS read-create STATUS current DESCRIPTION "Represents the sub-type of frame to match. 1 association request 2 association response 3 probe request 4 beacon 5 disassoc 6 authentication 7 de-authentication The default value depends on the certain rule. For user-define rules it is 'none(0)'." ::= { fsWIPSSigRuleEntry 12 } fsWIPSSigSubRuleMac OBJECT-TYPE SYNTAX OCTET STRING (SIZE (0..12)) MAX-ACCESS read-create STATUS current DESCRIPTION "Represents the MAC address or BSSID to match." ::= { fsWIPSSigRuleEntry 13 } fsWIPSSigSubRuleMacType OBJECT-TYPE SYNTAX INTEGER { source(0), dest(1), bssid(2) } MAX-ACCESS read-create STATUS current DESCRIPTION "Represents the type of MAC address or BSSID to match. 0 Source MAC address in the 802.11 frame header 1 Destination MAC address in the 802.11 frame header 2 BSSID field in the 802.11 frame header" ::= { fsWIPSSigRuleEntry 14 } fsWIPSSigSubRuleSeqNumMin OBJECT-TYPE SYNTAX Unsigned32 MAX-ACCESS read-create STATUS current DESCRIPTION "Represents the minimun value of sequence number of packet to match. Available value limits from 0 to 4094. The default value depends on the certain rule. For user-define rules it is 0xffffffff. The value 0xffffffff represents restoring default value operation." ::= { fsWIPSSigRuleEntry 15 } fsWIPSSigSubRuleSeqNumMax OBJECT-TYPE SYNTAX Unsigned32 MAX-ACCESS read-create STATUS current DESCRIPTION "Represents the maximum value of sequence number of packet to match. Available value limits from 1 to 4095. The default value depends on the certain rule. For user-define rules it is 0xffffffff. The value 0xffffffff represents restoring default value operation." ::= { fsWIPSSigRuleEntry 16 } fsWIPSSigSubRuleSSIDLenMin OBJECT-TYPE SYNTAX Unsigned32 MAX-ACCESS read-create STATUS current DESCRIPTION "Represents the minimun value of SSID of packet to match. Available value limits from 0 to 31. The default value depends on the certain rule. For user-define rules it is 0xffffffff. The value 0xffffffff represents restoring default value operation." ::= { fsWIPSSigRuleEntry 17 } fsWIPSSigSubRuleSSIDLenMax OBJECT-TYPE SYNTAX Unsigned32 MAX-ACCESS read-create STATUS current DESCRIPTION "Represents the maximum value of SSID of packet to match. Available value limits from 1 to 32. The default value depends on the certain rule. For user-define rules it is 0xffffffff. The value 0xffffffff represents restoring default value operation." ::= { fsWIPSSigRuleEntry 18 } fsWIPSSigSubRuleSSID OBJECT-TYPE SYNTAX OCTET STRING (SIZE (0..32)) MAX-ACCESS read-create STATUS current DESCRIPTION "Represents the string of SSID of packet to match." ::= { fsWIPSSigRuleEntry 19 } fsWIPSSigSubRuleSSIDOpe OBJECT-TYPE SYNTAX INTEGER { include(1), notinclude(2), equal(3), notequal(4) } MAX-ACCESS read-create STATUS current DESCRIPTION "Represents the compare way of the SSID in the sub rule, including include/not include/equal/not equal." ::= { fsWIPSSigRuleEntry 20 } fsWIPSSigSubRuleSSIDCase OBJECT-TYPE SYNTAX TruthValue MAX-ACCESS read-create STATUS current DESCRIPTION "Represents the case sensitive or not for the SSID match. 'true': Case insensitive. 'false': Case sensitive." DEFVAL { false } ::= { fsWIPSSigRuleEntry 21 } fsWIPSSigSubRulePatternTable OBJECT-TYPE SYNTAX SEQUENCE OF FsWIPSSigSubRulePatternEntry MAX-ACCESS not-accessible STATUS current DESCRIPTION "The table defines the signature sub rules which define the user-define match way through pattern of packet. " ::= { fsWIPSSigConfigGroup 4 } fsWIPSSigSubRulePatternEntry OBJECT-TYPE SYNTAX FsWIPSSigSubRulePatternEntry MAX-ACCESS not-accessible STATUS current DESCRIPTION "Each entry contains information of each pattern signature sub rules." INDEX { fsWIPSSigRuleName, fsWIPSSigSubRulePatternID } ::= { fsWIPSSigSubRulePatternTable 1 } FsWIPSSigSubRulePatternEntry ::= SEQUENCE { fsWIPSSigSubRulePatternID Unsigned32, fsWIPSSigSubRuleRowStatus RowStatus, fsWIPSSigSubRulePatternName OCTET STRING, fsWIPSSigSubRulePatternOffset Integer32, fsWIPSSigSubRulePatternMask Integer32, fsWIPSSigSubRulePatternValueMin Unsigned32, fsWIPSSigSubRulePatternValueMax Unsigned32, fsWIPSSigSubRulePatternFromPayload TruthValue } fsWIPSSigSubRulePatternID OBJECT-TYPE SYNTAX Unsigned32 (1..27) MAX-ACCESS not-accessible STATUS current DESCRIPTION "Represents the ID of the pattern sub rule." ::= { fsWIPSSigSubRulePatternEntry 1 } fsWIPSSigSubRuleRowStatus OBJECT-TYPE SYNTAX RowStatus MAX-ACCESS read-write STATUS current DESCRIPTION "The status of this table entry." ::= { fsWIPSSigSubRulePatternEntry 2 } fsWIPSSigSubRulePatternName OBJECT-TYPE SYNTAX OCTET STRING (SIZE(0..32)) MAX-ACCESS read-write STATUS current DESCRIPTION "Represents the name of the pattern sub rule." ::= { fsWIPSSigSubRulePatternEntry 3 } fsWIPSSigSubRulePatternOffset OBJECT-TYPE SYNTAX Integer32 (0..2346) MAX-ACCESS read-write STATUS current DESCRIPTION "Represents the offset value of packet match." ::= { fsWIPSSigSubRulePatternEntry 4 } fsWIPSSigSubRulePatternMask OBJECT-TYPE SYNTAX Integer32 (0..65535) MAX-ACCESS read-write STATUS current DESCRIPTION "Represents the mask value of packet match." ::= { fsWIPSSigSubRulePatternEntry 5 } fsWIPSSigSubRulePatternValueMin OBJECT-TYPE SYNTAX Unsigned32 MAX-ACCESS read-write STATUS current DESCRIPTION "Represents the minimun value of match byte. Available value limits from 0 to 65534." DEFVAL { 'ffffffff'h } ::= { fsWIPSSigSubRulePatternEntry 6 } fsWIPSSigSubRulePatternValueMax OBJECT-TYPE SYNTAX Unsigned32 MAX-ACCESS read-write STATUS current DESCRIPTION "Represents the maximun value of match byte. Available value limits from 1 to 65535." DEFVAL { 'ffffffff'h } ::= { fsWIPSSigSubRulePatternEntry 7 } fsWIPSSigSubRulePatternFromPayload OBJECT-TYPE SYNTAX TruthValue MAX-ACCESS read-write STATUS current DESCRIPTION "Represents whether match start from the payload of the data frame." DEFVAL { false } ::= { fsWIPSSigSubRulePatternEntry 8 } fsWIPSCtmConfigGroup OBJECT IDENTIFIER ::= { fsWIPSConfigGroup 11 } fsWIPSCtmPolicyCfgSupportSet OBJECT-TYPE SYNTAX OCTET STRING (SIZE (16)) MAX-ACCESS read-only STATUS current DESCRIPTION "Represents the bit string of supported countermeasure policy. The specific countermeasure policy is supported if its corresponding bit is set to 1; otherwise its corresponding bit is set to 0. bit3: misconfigured AP bit4: rogue AP bit5: unauthorized station bit6: external AP bit9: misassociation station bit10: potential authorized AP bit11: potential rogue AP bit12: potential external AP bit13: uncategorized AP bit14: uncategorized station " ::= { fsWIPSCtmConfigGroup 1 } fsWIPSCtmPolicyTable OBJECT-TYPE SYNTAX SEQUENCE OF FsWIPSCtmPolicyEntry MAX-ACCESS not-accessible STATUS current DESCRIPTION "The table defines the parameters for WIPS countermeasure policy. One policy could be assigned to different VSDs. " ::= { fsWIPSCtmConfigGroup 2 } fsWIPSCtmPolicyEntry OBJECT-TYPE SYNTAX FsWIPSCtmPolicyEntry MAX-ACCESS not-accessible STATUS current DESCRIPTION "Each entry contains information of each countermeasure policy." INDEX { fsWIPSCtmPolicyName } ::= { fsWIPSCtmPolicyTable 1 } FsWIPSCtmPolicyEntry ::= SEQUENCE { fsWIPSCtmPolicyName OCTET STRING, fsWIPSCtmPolicyCfgRowStatus RowStatus, fsWIPSCtmPolicyBitString OCTET STRING, fsWIPSCtmPolicyFixedChl TruthValue, fsWIPSCtmPolicyRogueAPPre Unsigned32, fsWIPSCtmPolicyPtRogueAPPre Unsigned32, fsWIPSCtmPolicyMisconfAPPre Unsigned32, fsWIPSCtmPolicyExternalAPPre Unsigned32, fsWIPSCtmPolicyPtExternalAPPre Unsigned32, fsWIPSCtmPolicyUncateAPPre Unsigned32, fsWIPSCtmPolicyPtAuthAPPre Unsigned32, fsWIPSCtmPolicyMisassoStaPre Unsigned32, fsWIPSCtmPolicyUncateStaPre Unsigned32, fsWIPSCtmPolicyUnauthStaPre Unsigned32 } fsWIPSCtmPolicyName OBJECT-TYPE SYNTAX OCTET STRING (SIZE (1..32)) MAX-ACCESS not-accessible STATUS current DESCRIPTION "Represents the name of countermeasure policy." ::= { fsWIPSCtmPolicyEntry 1 } fsWIPSCtmPolicyCfgRowStatus OBJECT-TYPE SYNTAX RowStatus MAX-ACCESS read-create STATUS current DESCRIPTION "The status of this table entry." ::= { fsWIPSCtmPolicyEntry 2 } fsWIPSCtmPolicyBitString OBJECT-TYPE SYNTAX OCTET STRING (SIZE (16)) MAX-ACCESS read-create STATUS current DESCRIPTION "Represents the bit string of countermeasure policy configuration. The specific countermeasure of device is enabled if its corresponding bit is set to 1; disabled if its corresponding bit is set to 0. bit3: misconfigured AP bit4: rogue AP bit5: unauthorized station bit6: external AP bit9: misassociation station bit10: potential authorized AP bit11: potential rogue AP bit12: potential external AP bit13: uncategorized AP bit14: uncategorized station" ::= { fsWIPSCtmPolicyEntry 3 } fsWIPSCtmPolicyFixedChl OBJECT-TYPE SYNTAX TruthValue MAX-ACCESS read-create STATUS current DESCRIPTION "Represents whether enable fixed channel scan function." DEFVAL { false } ::= { fsWIPSCtmPolicyEntry 4 } fsWIPSCtmPolicyRogueAPPre OBJECT-TYPE SYNTAX Unsigned32 MAX-ACCESS read-create STATUS current DESCRIPTION "Represents the precedence of countermeasure for rogue AP. Available value limits from 0 to 9. Value 0xffffffff represents undo operation." DEFVAL { 9 } ::= { fsWIPSCtmPolicyEntry 5 } fsWIPSCtmPolicyPtRogueAPPre OBJECT-TYPE SYNTAX Unsigned32 MAX-ACCESS read-create STATUS current DESCRIPTION "Represents the precedence of countermeasure for potential rogue AP. Available value limits from 0 to 9. Value 0xffffffff represents undo operation." DEFVAL { 7 } ::= { fsWIPSCtmPolicyEntry 6 } fsWIPSCtmPolicyMisconfAPPre OBJECT-TYPE SYNTAX Unsigned32 MAX-ACCESS read-create STATUS current DESCRIPTION "Represents the precedence of countermeasure for misconfigured AP. Available value limits from 0 to 9. Value 0xffffffff represents undo operation." DEFVAL { 3 } ::= { fsWIPSCtmPolicyEntry 7 } fsWIPSCtmPolicyExternalAPPre OBJECT-TYPE SYNTAX Unsigned32 MAX-ACCESS read-create STATUS current DESCRIPTION "Represents the precedence of countermeasure for external AP. Available value limits from 0 to 9. Value 0xffffffff represents undo operation." DEFVAL { 1 } ::= { fsWIPSCtmPolicyEntry 8 } fsWIPSCtmPolicyPtExternalAPPre OBJECT-TYPE SYNTAX Unsigned32 MAX-ACCESS read-create STATUS current DESCRIPTION "Represents the precedence of countermeasure for potential external AP. Available value limits from 0 to 9. Value 0xffffffff represents undo operation." DEFVAL { 2 } ::= { fsWIPSCtmPolicyEntry 9 } fsWIPSCtmPolicyUncateAPPre OBJECT-TYPE SYNTAX Unsigned32 MAX-ACCESS read-create STATUS current DESCRIPTION "Represents the precedence of countermeasure for uncategorized AP. Available value limits from 0 to 9. Value 0xffffffff represents undo operation." DEFVAL { 5 } ::= { fsWIPSCtmPolicyEntry 10 } fsWIPSCtmPolicyPtAuthAPPre OBJECT-TYPE SYNTAX Unsigned32 MAX-ACCESS read-create STATUS current DESCRIPTION "Represents the precedence of countermeasure for potential authorized AP. Available value limits from 0 to 9. Value 0xffffffff represents undo operation." DEFVAL { 0 } ::= { fsWIPSCtmPolicyEntry 11 } fsWIPSCtmPolicyMisassoStaPre OBJECT-TYPE SYNTAX Unsigned32 MAX-ACCESS read-create STATUS current DESCRIPTION "Represents the precedence of countermeasure for misassociated station. Available value limits from 0 to 9. Value 0xffffffff represents undo operation." DEFVAL { 6 } ::= { fsWIPSCtmPolicyEntry 12 } fsWIPSCtmPolicyUncateStaPre OBJECT-TYPE SYNTAX Unsigned32 MAX-ACCESS read-create STATUS current DESCRIPTION "Represents the precedence of countermeasure for uncategorized station. Available value limits from 0 to 9. Value 0xffffffff represents undo operation." DEFVAL { 4 } ::= { fsWIPSCtmPolicyEntry 13 } fsWIPSCtmPolicyUnauthStaPre OBJECT-TYPE SYNTAX Unsigned32 MAX-ACCESS read-create STATUS current DESCRIPTION "Represents the precedence of countermeasure for unauthorized station. Available value limits from 0 to 9. Value 0xffffffff represents undo operation." DEFVAL { 8 } ::= { fsWIPSCtmPolicyEntry 14 } fsWIPSCtmPolicyDevListTable OBJECT-TYPE SYNTAX SEQUENCE OF FsWIPSCtmPolicyDevListEntry MAX-ACCESS not-accessible STATUS current DESCRIPTION "The table defines the MAC address list of countermeasure device in WIPS countermeasure policy. " ::= { fsWIPSCtmConfigGroup 3 } fsWIPSCtmPolicyDevListEntry OBJECT-TYPE SYNTAX FsWIPSCtmPolicyDevListEntry MAX-ACCESS not-accessible STATUS current DESCRIPTION "Each entry contains information of each MAC address of device." INDEX { fsWIPSCtmPolicyName, fsWIPSCtmPolicyDevMAC } ::= { fsWIPSCtmPolicyDevListTable 1 } FsWIPSCtmPolicyDevListEntry ::= SEQUENCE { fsWIPSCtmPolicyDevMAC MacAddress, fsWIPSCtmPolicyDevRowStatus RowStatus } fsWIPSCtmPolicyDevMAC OBJECT-TYPE SYNTAX MacAddress MAX-ACCESS not-accessible STATUS current DESCRIPTION "Represents the MAC address of countermeasure device." ::= { fsWIPSCtmPolicyDevListEntry 1 } fsWIPSCtmPolicyDevRowStatus OBJECT-TYPE SYNTAX RowStatus MAX-ACCESS read-create STATUS current DESCRIPTION "The status of this table entry." ::= { fsWIPSCtmPolicyDevListEntry 2 } fsWIPSMalPktDctConfigGroup OBJECT IDENTIFIER ::= { fsWIPSConfigGroup 12 } fsWIPSMalPktDctCfgLogSupportSet OBJECT-TYPE SYNTAX OCTET STRING (SIZE (32)) MAX-ACCESS read-only STATUS current DESCRIPTION "Represents the bit string of supported malformed packet detect policy controlling the log function. The specific malformed packet detect policy is supported if its corresponding bit is set to 1; otherwise its corresponding bit is set to 0. bit0: invalid IE length bit1: duplicated IE bit2: redundant IE bit3: invalid packet length bit4: illegal IBSS and ESS bit5: invalid source address bit6: overflow EAPOL key length bit7: malformed authetication bit8: malformed association request bit9: malformed HT-IE bit10: large duration bit11: null probe response bit12: invalid deauthentication reason code bit13: invalid disassociation reason code bit14: overflow SSID length bit15: fata-jack bit17: invalid-channel" ::= { fsWIPSMalPktDctConfigGroup 1 } fsWIPSMalPktDctCfgTrapSupportSet OBJECT-TYPE SYNTAX OCTET STRING (SIZE (32)) MAX-ACCESS read-only STATUS current DESCRIPTION "Represents the bit string of supported malformed packet detect policy controlling the trap function. The specific malformed packet detect policy is supported if its corresponding bit is set to 1; otherwise its corresponding bit is set to 0. bit0: invalid IE length bit1: duplicated IE bit2: redundant IE bit3: invalid packet length bit4: illegal IBSS and ESS bit5: invalid source address bit6: overflow EAPOL key length bit7: malformed authetication bit8: malformed association request bit9: malformed HT-IE bit10: large duration bit11: null probe response bit12: invalid deauthentication reason code bit13: invalid disassociation reason code bit14: overflow SSID length bit15: fata-jack bit17: invalid-channel" ::= { fsWIPSMalPktDctConfigGroup 2 } fsWIPSMalPktDctPolicyTable OBJECT-TYPE SYNTAX SEQUENCE OF FsWIPSMalPktDctPolicyEntry MAX-ACCESS not-accessible STATUS current DESCRIPTION "Represents." ::= { fsWIPSMalPktDctConfigGroup 3 } fsWIPSMalPktDctPolicyEntry OBJECT-TYPE SYNTAX FsWIPSMalPktDctPolicyEntry MAX-ACCESS not-accessible STATUS current DESCRIPTION "Represents." INDEX { fsWIPSMalPktDctPolicyName } ::= { fsWIPSMalPktDctPolicyTable 1 } FsWIPSMalPktDctPolicyEntry ::= SEQUENCE { fsWIPSMalPktDctPolicyName OCTET STRING, fsWIPSMalPktDctPolicyCfgRowStatus RowStatus, fsWIPSMalPktDctPolicyLogBitString OCTET STRING, fsWIPSMalPktDctPolicyTrapBitString OCTET STRING, fsWIPSMalPktDctPolicyDurationThreshold Integer32, fsWIPSMalPktDctPolicyQuietTime Integer32 } fsWIPSMalPktDctPolicyName OBJECT-TYPE SYNTAX OCTET STRING (SIZE (1..32)) MAX-ACCESS not-accessible STATUS current DESCRIPTION "Represents the name of malformed packet detect policy." ::= { fsWIPSMalPktDctPolicyEntry 1 } fsWIPSMalPktDctPolicyCfgRowStatus OBJECT-TYPE SYNTAX RowStatus MAX-ACCESS read-create STATUS current DESCRIPTION "The status of this table entry." ::= { fsWIPSMalPktDctPolicyEntry 2 } fsWIPSMalPktDctPolicyLogBitString OBJECT-TYPE SYNTAX OCTET STRING (SIZE (32)) MAX-ACCESS read-create STATUS current DESCRIPTION "Represents the bit string of malformed packet detect policy controlling the log function configuration. The specific malformed packet detect is enbled if its corresponding bit is set to 1; disabled its corresponding bit is set to 0. bit0: invalid IE length bit1: duplicated IE bit2: redundant IE bit3: invalid packet length bit4: illegal IBSS and ESS bit5: invalid source address bit6: overflow EAPOL key length bit7: malformed authetication bit8: malformed association request bit9: malformed HT-IE bit10: large duration bit11: null probe response bit12: invalid deauthentication reason code bit13: invalid disassociation reason code bit14: overflow SSID length bit15: fata-jack bit17: invalid-channel" ::= { fsWIPSMalPktDctPolicyEntry 3 } fsWIPSMalPktDctPolicyTrapBitString OBJECT-TYPE SYNTAX OCTET STRING (SIZE (32)) MAX-ACCESS read-create STATUS current DESCRIPTION "Represents the bit string of malformed packet detect policy controlling the trap function configuration. The specific malformed packet detect is enbled if its corresponding bit is set to 1; disabled its corresponding bit is set to 0. bit0: invalid IE length bit1: duplicated IE bit2: redundant IE bit3: invalid packet length bit4: illegal IBSS and ESS bit5: invalid source address bit6: overflow EAPOL key length bit7: malformed authetication bit8: malformed association request bit9: malformed HT-IE bit10: large duration bit11: null probe response bit12: invalid deauthentication reason code bit13: invalid disassociation reason code bit14: overflow SSID length bit15: fata-jack bit17: invalid-channel" ::= { fsWIPSMalPktDctPolicyEntry 4 } fsWIPSMalPktDctPolicyDurationThreshold OBJECT-TYPE SYNTAX Integer32 (1..32767) MAX-ACCESS read-create STATUS current DESCRIPTION "Represents the threshold of duration for large duration malformed packet detection." DEFVAL {5000} ::= { fsWIPSMalPktDctPolicyEntry 5 } fsWIPSMalPktDctPolicyQuietTime OBJECT-TYPE SYNTAX Integer32 (5..604800) MAX-ACCESS read-create STATUS current DESCRIPTION "Represents the quiet time after reporting event alarm." DEFVAL { 600 } ::= { fsWIPSMalPktDctPolicyEntry 6 } fsWIPSStaticTrustOUIListCfgTable OBJECT-TYPE SYNTAX SEQUENCE OF FsWIPSStaticTrustOUIListCfgEntry MAX-ACCESS not-accessible STATUS current DESCRIPTION "The table provides the OUI list of devices in the static trust list. WIPS will take the devices in the list as authorized devices." ::= { fsWIPSConfigGroup 13 } fsWIPSStaticTrustOUIListCfgEntry OBJECT-TYPE SYNTAX FsWIPSStaticTrustOUIListCfgEntry MAX-ACCESS not-accessible STATUS current DESCRIPTION "Each entry contains information of each OUI in the static trust list. " INDEX { fsWIPSStaticTrustOUIListOUI } ::= { fsWIPSStaticTrustOUIListCfgTable 1 } FsWIPSStaticTrustOUIListCfgEntry ::= SEQUENCE { fsWIPSStaticTrustOUIListOUI OCTET STRING, fsWIPSStaticTrustOUIListRowStatus RowStatus } fsWIPSStaticTrustOUIListOUI OBJECT-TYPE SYNTAX OCTET STRING (SIZE (3)) MAX-ACCESS not-accessible STATUS current DESCRIPTION "Represents the OUI in static trust list." ::= { fsWIPSStaticTrustOUIListCfgEntry 1 } fsWIPSStaticTrustOUIListRowStatus OBJECT-TYPE SYNTAX RowStatus MAX-ACCESS read-create STATUS current DESCRIPTION "The status of this table entry." ::= { fsWIPSStaticTrustOUIListCfgEntry 2 } fsWIPSStaticTrustVendorListCfgTable OBJECT-TYPE SYNTAX SEQUENCE OF FsWIPSStaticTrustVendorListCfgEntry MAX-ACCESS not-accessible STATUS current DESCRIPTION "The table provides the vendor list of devices in the static trust list. WIPS will take the devices in the list as authorized devices." ::= { fsWIPSConfigGroup 14 } fsWIPSStaticTrustVendorListCfgEntry OBJECT-TYPE SYNTAX FsWIPSStaticTrustVendorListCfgEntry MAX-ACCESS not-accessible STATUS current DESCRIPTION "Each entry contains information of each vendor in the static trust list. " INDEX { fsWIPSStaticTrustVendorListVendor } ::= { fsWIPSStaticTrustVendorListCfgTable 1 } FsWIPSStaticTrustVendorListCfgEntry ::= SEQUENCE { fsWIPSStaticTrustVendorListVendor OCTET STRING, fsWIPSStaticTrustVendorListRowStatus RowStatus } fsWIPSStaticTrustVendorListVendor OBJECT-TYPE SYNTAX OCTET STRING (SIZE (1..64)) MAX-ACCESS not-accessible STATUS current DESCRIPTION "Represents the vendor in static trust list." ::= { fsWIPSStaticTrustVendorListCfgEntry 1 } fsWIPSStaticTrustVendorListRowStatus OBJECT-TYPE SYNTAX RowStatus MAX-ACCESS read-create STATUS current DESCRIPTION "The status of this table entry." ::= { fsWIPSStaticTrustVendorListCfgEntry 2 } fsWIPSDetectGroup OBJECT IDENTIFIER ::= { fsWIPS 2 } fsWIPSDctAPTable OBJECT-TYPE SYNTAX SEQUENCE OF FsWIPSDctAPEntry MAX-ACCESS not-accessible STATUS current DESCRIPTION "The table represents the list of possible BSS information for APs detected by the WIPS." ::= { fsWIPSDetectGroup 1 } fsWIPSDctAPEntry OBJECT-TYPE SYNTAX FsWIPSDctAPEntry MAX-ACCESS not-accessible STATUS current DESCRIPTION "Each entry contains possible BSS information of each AP detected by WIPS." INDEX { fsWIPSDctAPVSD, fsWIPSDctAPBSSID } ::= { fsWIPSDctAPTable 1 } FsWIPSDctAPEntry ::= SEQUENCE { fsWIPSDctAPVSD OCTET STRING, fsWIPSDctAPBSSID MacAddress, fsWIPSDctAPRunningTime TimeTicks, fsWIPSDctAPRunTmLastUpdateTm TimeTicks, fsWIPSDctAPIsCountered TruthValue, fsWIPSDctAPWorkChannel FsWIPSChannel, fsWIPSDctAPRadioType FsWIPSRadioType, fsWIPSDctAPAuthMethod FsWIPSAuthMethod, fsWIPSDctAPEncryptMethod FsWIPSEncryptMethod, fsWIPSDctAPSecurity FsWIPSAPSecurityType, fsWIPSDctAPSeverityLevel Unsigned32, fsWIPSDctAPLastDctTm TimeTicks, fsWIPSDctAPFirstDctTm TimeTicks, fsWIPSDctAPAdd2BlackList TruthValue, fsWIPSDctAPAdd2WhiteList TruthValue, fsWIPSDctAPAdd2IgnoreList TruthValue, fsWIPSDctAPAdd2CtmList TruthValue, fsWIPSDctAPCategory FsWIPSAPCategoryType, fsWIPSDctAPCategoryWay FsWIPSDevCategoryWay, fsWIPSDctAPStatus FsWIPSDevStatus, fsWIPSDctAPSSID OCTET STRING, fsWIPSDctAPAttachStaNum Integer32, fsWIPSDctAPRptSensorNum Integer32, fsWIPSDctAPVendor OCTET STRING } fsWIPSDctAPVSD OBJECT-TYPE SYNTAX OCTET STRING (SIZE (1..32)) MAX-ACCESS not-accessible STATUS current DESCRIPTION "Represents the virtual security domain where the BSS was detected." ::= { fsWIPSDctAPEntry 1 } fsWIPSDctAPBSSID OBJECT-TYPE SYNTAX MacAddress MAX-ACCESS not-accessible STATUS current DESCRIPTION "Represents the Basic Service Set." ::= { fsWIPSDctAPEntry 2 } fsWIPSDctAPRunningTime OBJECT-TYPE SYNTAX TimeTicks MAX-ACCESS read-only STATUS current DESCRIPTION "Represents the time since AP started to work, which is got from beacon/probe response frame." ::= { fsWIPSDctAPEntry 3 } fsWIPSDctAPRunTmLastUpdateTm OBJECT-TYPE SYNTAX TimeTicks MAX-ACCESS read-only STATUS current DESCRIPTION "Represents the time update fsWIPSDctAPRunningTime since system is up." ::= { fsWIPSDctAPEntry 4 } fsWIPSDctAPIsCountered OBJECT-TYPE SYNTAX TruthValue MAX-ACCESS read-only STATUS current DESCRIPTION "Represents whether the detected AP is countered by WIPS." ::= { fsWIPSDctAPEntry 5 } fsWIPSDctAPWorkChannel OBJECT-TYPE SYNTAX FsWIPSChannel MAX-ACCESS read-only STATUS current DESCRIPTION "Represents the radio channel which the detected AP work on." ::= { fsWIPSDctAPEntry 6 } fsWIPSDctAPRadioType OBJECT-TYPE SYNTAX FsWIPSRadioType MAX-ACCESS read-only STATUS current DESCRIPTION "Represents the radio type used by the detected AP." ::= { fsWIPSDctAPEntry 7 } fsWIPSDctAPAuthMethod OBJECT-TYPE SYNTAX FsWIPSAuthMethod MAX-ACCESS read-only STATUS current DESCRIPTION "Represents the authentication method used by the detected AP. none(1) - No key management mode configured, psk(2) - pre-shared key authentication, dot1x(3) - 802.1x authentication, other(4) - other authentication, psk/dot1x(5) - psk and dot1x authentication, psk/other(6) - psk and other authentication, dot1x/other(7) - dot1x and other authentication, psk/dot1x/other(8) - psk, dot1x and other authentication." ::= { fsWIPSDctAPEntry 8 } fsWIPSDctAPEncryptMethod OBJECT-TYPE SYNTAX FsWIPSEncryptMethod MAX-ACCESS read-only STATUS current DESCRIPTION "Represents the encrypt method used by the detected AP. none(1) - clear text or no cipher method is configure, wep(2) - WEP key, tkip(4) - WPA Temporal Key encryption, ccmp(8) - WPA AES CCMP encryption" ::= { fsWIPSDctAPEntry 9 } fsWIPSDctAPSecurity OBJECT-TYPE SYNTAX FsWIPSAPSecurityType MAX-ACCESS read-only STATUS current DESCRIPTION "Represents the security suites of the detected AP. clear 0x01 wpa2 0x02 wpa 0x04 wep 0x08" ::= { fsWIPSDctAPEntry 10 } fsWIPSDctAPSeverityLevel OBJECT-TYPE SYNTAX Unsigned32 (0..100) MAX-ACCESS read-only STATUS current DESCRIPTION "Represents the severity level of the detected AP." ::= { fsWIPSDctAPEntry 11 } fsWIPSDctAPLastDctTm OBJECT-TYPE SYNTAX TimeTicks MAX-ACCESS read-only STATUS current DESCRIPTION "Represents the time that AP was detected for the last time since system is up." ::= { fsWIPSDctAPEntry 12 } fsWIPSDctAPFirstDctTm OBJECT-TYPE SYNTAX TimeTicks MAX-ACCESS read-only STATUS current DESCRIPTION "Represents the time that AP was detected for the first time since system is up." ::= { fsWIPSDctAPEntry 13 } fsWIPSDctAPAdd2BlackList OBJECT-TYPE SYNTAX TruthValue MAX-ACCESS read-write STATUS current DESCRIPTION "Represents whether the AP will be taken as a rogue AP. If the value is true, the MAC address will be automatically added into fsWIPSBlockListTable and the category of the AP will be taken as rogue. If the value is false, the MAC address will be automatically deleted from fsWIPSBlockListTable." DEFVAL { false } ::= { fsWIPSDctAPEntry 14 } fsWIPSDctAPAdd2WhiteList OBJECT-TYPE SYNTAX TruthValue MAX-ACCESS read-write STATUS current DESCRIPTION "Represents whether the AP will be taken as an authorized AP. If the value is true, the MAC address will be automatically added into fsWIPSTrustListTable. If the value is false, the MAC address will be automatically deleted from fsWIPSTrustListTable" DEFVAL { false } ::= { fsWIPSDctAPEntry 15 } fsWIPSDctAPAdd2IgnoreList OBJECT-TYPE SYNTAX TruthValue MAX-ACCESS read-write STATUS current DESCRIPTION "Represents whether the AP will be taken as an ignored AP. If the value is true, the MAC address will be automatically added into fsWIPSIgnoreListTable. If the value is false, the MAC address will be automatically deleted from fsWIPSIgnoreListTable" DEFVAL { false } ::= { fsWIPSDctAPEntry 16 } fsWIPSDctAPAdd2CtmList OBJECT-TYPE SYNTAX TruthValue MAX-ACCESS read-write STATUS current DESCRIPTION "Represents whether the AP will be taken as a countered AP. If the value is true, the MAC address will be automatically added into fsWIPSCountermeasureListTable. If the value is false, the MAC address will be automatically deleted from fsWIPSCountermeasureListTable." DEFVAL { false } ::= { fsWIPSDctAPEntry 17 } fsWIPSDctAPCategory OBJECT-TYPE SYNTAX FsWIPSAPCategoryType MAX-ACCESS read-write STATUS current DESCRIPTION "Represents the categorized result of the AP. For set operation, only the following values are valid: authorized(2),rogue(3),misconfigured(4),external(5)" ::= { fsWIPSDctAPEntry 18 } fsWIPSDctAPCategoryWay OBJECT-TYPE SYNTAX FsWIPSDevCategoryWay MAX-ACCESS read-write STATUS current DESCRIPTION "Represents by which way the AP is categorized. manual(1) -categorized by user autoByNMS(2) -categorized by NMS(Network Management System) autoByDev(3) -categorized by WIPS" DEFVAL { autoByDev } ::= { fsWIPSDctAPEntry 19 } fsWIPSDctAPStatus OBJECT-TYPE SYNTAX FsWIPSDevStatus MAX-ACCESS read-only STATUS current DESCRIPTION "Represents the status of the AP detected by WIPS." ::= { fsWIPSDctAPEntry 20 } fsWIPSDctAPSSID OBJECT-TYPE SYNTAX OCTET STRING (SIZE (0..32)) MAX-ACCESS read-only STATUS current DESCRIPTION "Represents the SSID broadcasted by AP." ::= { fsWIPSDctAPEntry 21 } fsWIPSDctAPAttachStaNum OBJECT-TYPE SYNTAX Integer32 MAX-ACCESS read-only STATUS current DESCRIPTION "Represents the number of clients associated with the detected AP." ::= { fsWIPSDctAPEntry 22 } fsWIPSDctAPRptSensorNum OBJECT-TYPE SYNTAX Integer32 MAX-ACCESS read-only STATUS current DESCRIPTION "Represents the number of sensors detecting the AP." ::= { fsWIPSDctAPEntry 23 } fsWIPSDctAPVendor OBJECT-TYPE SYNTAX OCTET STRING (SIZE (0..64)) MAX-ACCESS read-only STATUS current DESCRIPTION "Represents the vendor of this AP detected by WIPS." ::= { fsWIPSDctAPEntry 24 } fsWIPSDctAPAttachStaTable OBJECT-TYPE SYNTAX SEQUENCE OF FsWIPSDctAPAttachStaEntry MAX-ACCESS not-accessible STATUS current DESCRIPTION "The table represents the list of station associated with APs detected by the WIPS." ::= { fsWIPSDetectGroup 2 } fsWIPSDctAPAttachStaEntry OBJECT-TYPE SYNTAX FsWIPSDctAPAttachStaEntry MAX-ACCESS not-accessible STATUS current DESCRIPTION "Each entry contains possible station information detected by WIPS." INDEX { fsWIPSDctAPVSD, fsWIPSDctAPBSSID, fsWIPSDctAPAttachStaMac } ::= { fsWIPSDctAPAttachStaTable 1 } FsWIPSDctAPAttachStaEntry ::= SEQUENCE { fsWIPSDctAPAttachStaMac MacAddress, fsWIPSDctAPAttachStaRowStatus RowStatus } fsWIPSDctAPAttachStaMac OBJECT-TYPE SYNTAX MacAddress MAX-ACCESS not-accessible STATUS current DESCRIPTION "Represents the MAC address of station associated with AP." ::= { fsWIPSDctAPAttachStaEntry 1 } fsWIPSDctAPAttachStaRowStatus OBJECT-TYPE SYNTAX RowStatus MAX-ACCESS read-only STATUS current DESCRIPTION "The status of this table entry. It is read-only and will return 'Not writable' for set operation." ::= { fsWIPSDctAPAttachStaEntry 2 } fsWIPSDctAPRptSensorTable OBJECT-TYPE SYNTAX SEQUENCE OF FsWIPSDctAPRptSensorEntry MAX-ACCESS not-accessible STATUS current DESCRIPTION "The table represents the list of sensors." ::= { fsWIPSDetectGroup 3 } fsWIPSDctAPRptSensorEntry OBJECT-TYPE SYNTAX FsWIPSDctAPRptSensorEntry MAX-ACCESS not-accessible STATUS current DESCRIPTION "Each entry contains possible sensor information of WIPS." INDEX { fsWIPSDctAPVSD, fsWIPSDctAPBSSID, fsWIPSDctAPRptSensorName } ::= { fsWIPSDctAPRptSensorTable 1 } FsWIPSDctAPRptSensorEntry ::= SEQUENCE { fsWIPSDctAPRptSensorName OCTET STRING, fsWIPSDctAPRptSensorRadioId Integer32, fsWIPSDctAPRptRSSI Integer32, fsWIPSDctAPLastRptTm TimeTicks } fsWIPSDctAPRptSensorName OBJECT-TYPE SYNTAX OCTET STRING (SIZE (1..64)) MAX-ACCESS not-accessible STATUS current DESCRIPTION "Represents the name of sensor." ::= { fsWIPSDctAPRptSensorEntry 1 } fsWIPSDctAPRptSensorRadioId OBJECT-TYPE SYNTAX Integer32 (1..4) MAX-ACCESS read-only STATUS current DESCRIPTION "Represents on which radio the sensor AP detected the AP." ::= { fsWIPSDctAPRptSensorEntry 2 } fsWIPSDctAPRptRSSI OBJECT-TYPE SYNTAX Integer32 (0..90) MAX-ACCESS read-only STATUS current DESCRIPTION "Represents the current value of signal strength that WIPS sensor AP received from the AP." ::= { fsWIPSDctAPRptSensorEntry 3 } fsWIPSDctAPLastRptTm OBJECT-TYPE SYNTAX TimeTicks MAX-ACCESS read-only STATUS current DESCRIPTION "Represents the time that AP was detected by this sensor for the last time since system is up." ::= { fsWIPSDctAPRptSensorEntry 4 } fsWIPSDctStaTable OBJECT-TYPE SYNTAX SEQUENCE OF FsWIPSDctStaEntry MAX-ACCESS not-accessible STATUS current DESCRIPTION "The table represents the list of possible information for stations detected by the WIPS." ::= { fsWIPSDetectGroup 4 } fsWIPSDctStaEntry OBJECT-TYPE SYNTAX FsWIPSDctStaEntry MAX-ACCESS not-accessible STATUS current DESCRIPTION "Each entry contains possible station information of each station detected by WIPS." INDEX { fsWIPSDctStaVSD, fsWIPSDctStaMac } ::= { fsWIPSDctStaTable 1 } FsWIPSDctStaEntry ::= SEQUENCE { fsWIPSDctStaVSD OCTET STRING, fsWIPSDctStaMac MacAddress, fsWIPSDctStaAssocBSSID MacAddress, fsWIPSDctStaStatus FsWIPSDevStatus, fsWIPSDctStaCategory FsWIPSClientCategoryType, fsWIPSDctStaRadioType FsWIPSRadioType, fsWIPSDctStaWorkChannel FsWIPSChannel, fsWIPSDctStaIsCountered TruthValue, fsWIPSDctStaAdd2BlackList TruthValue, fsWIPSDctStaAdd2WhiteList TruthValue, fsWIPSDctStaAdd2IgnoreList TruthValue, fsWIPSDctStaAdd2CtmList TruthValue, fsWIPSDctStaFirstDctTm TimeTicks, fsWIPSDctStaLastDctTm TimeTicks, fsWIPSDctStaRptSensorNum Integer32, fsWIPSDctStaState INTEGER, fsWIPSDctStaVendor OCTET STRING } fsWIPSDctStaVSD OBJECT-TYPE SYNTAX OCTET STRING (SIZE (1..32)) MAX-ACCESS not-accessible STATUS current DESCRIPTION "Represents the virtual security domain in which the station was detected." ::= { fsWIPSDctStaEntry 1 } fsWIPSDctStaMac OBJECT-TYPE SYNTAX MacAddress MAX-ACCESS not-accessible STATUS current DESCRIPTION "Represents the MAC address of station." ::= { fsWIPSDctStaEntry 2 } fsWIPSDctStaAssocBSSID OBJECT-TYPE SYNTAX MacAddress MAX-ACCESS read-only STATUS current DESCRIPTION "Represents the BSSID which station associates with." ::= { fsWIPSDctStaEntry 3 } fsWIPSDctStaStatus OBJECT-TYPE SYNTAX FsWIPSDevStatus MAX-ACCESS read-only STATUS current DESCRIPTION "Represents the status of this station detected by WIPS." ::= { fsWIPSDctStaEntry 4 } fsWIPSDctStaCategory OBJECT-TYPE SYNTAX FsWIPSClientCategoryType MAX-ACCESS read-only STATUS current DESCRIPTION "Represents the categorized result of the station." ::= { fsWIPSDctStaEntry 5 } fsWIPSDctStaRadioType OBJECT-TYPE SYNTAX FsWIPSRadioType MAX-ACCESS read-only STATUS current DESCRIPTION "Represents the radio type used by the detected station." ::= { fsWIPSDctStaEntry 6 } fsWIPSDctStaWorkChannel OBJECT-TYPE SYNTAX FsWIPSChannel MAX-ACCESS read-only STATUS current DESCRIPTION "Represents on which radio channel that WIPS sensor AP detected the station." ::= { fsWIPSDctStaEntry 7 } fsWIPSDctStaIsCountered OBJECT-TYPE SYNTAX TruthValue MAX-ACCESS read-only STATUS current DESCRIPTION "Represents whether the detected station is countered by WIPS." ::= { fsWIPSDctStaEntry 8 } fsWIPSDctStaAdd2BlackList OBJECT-TYPE SYNTAX TruthValue MAX-ACCESS read-write STATUS current DESCRIPTION "Represents whether the station will be taken as a rogue station. If the value is true, the MAC address will be automatically added into fsWIPSBlockListTable and the category of the station will be taken as rogue. If the value is false, the MAC address will be automatically deleted from fsWIPSBlockListTable." DEFVAL { false } ::= { fsWIPSDctStaEntry 9 } fsWIPSDctStaAdd2WhiteList OBJECT-TYPE SYNTAX TruthValue MAX-ACCESS read-write STATUS current DESCRIPTION "Represents whether the station will be taken as an authorized station. If the value is true, the MAC address will be automatically added into fsWIPSTrustListTable. If the value is false, the MAC address will be automatically deleted from fsWIPSTrustListTable." DEFVAL { false } ::= { fsWIPSDctStaEntry 10 } fsWIPSDctStaAdd2IgnoreList OBJECT-TYPE SYNTAX TruthValue MAX-ACCESS read-write STATUS current DESCRIPTION "Represents whether the station will be taken as an ignored station. If the value is true, the MAC address will be automatically added into fsWIPSIgnoreListTable. If the value is false, the MAC address will be automatically deleted from fsWIPSIgnoreListTable." DEFVAL { false } ::= { fsWIPSDctStaEntry 11 } fsWIPSDctStaAdd2CtmList OBJECT-TYPE SYNTAX TruthValue MAX-ACCESS read-write STATUS current DESCRIPTION "Represents whether the station will be taken as a countered station. If the value is true, the MAC address will be automatically added into fsWIPSCountermeasureListTable. If the value is false, the MAC address will be automatically deleted from fsWIPSCountermeasureListTable." DEFVAL { false } ::= { fsWIPSDctStaEntry 12 } fsWIPSDctStaFirstDctTm OBJECT-TYPE SYNTAX TimeTicks MAX-ACCESS read-only STATUS current DESCRIPTION "Represents the time that station was detected for the first time since system is up." ::= { fsWIPSDctStaEntry 13 } fsWIPSDctStaLastDctTm OBJECT-TYPE SYNTAX TimeTicks MAX-ACCESS read-only STATUS current DESCRIPTION "Represents the time that station was detected for the last time since system is up." ::= { fsWIPSDctStaEntry 14 } fsWIPSDctStaRptSensorNum OBJECT-TYPE SYNTAX Integer32 MAX-ACCESS read-only STATUS current DESCRIPTION "Represents the number of sensors detecting the station." ::= { fsWIPSDctStaEntry 15 } fsWIPSDctStaState OBJECT-TYPE SYNTAX INTEGER { authentication(1), association(2), eapSuccess(3), eapLogoff(4), disassociation(5), deauthentication(6), unassociation(7) } MAX-ACCESS read-only STATUS current DESCRIPTION "Represents the authentication state of station with AP." ::= { fsWIPSDctStaEntry 16 } fsWIPSDctStaVendor OBJECT-TYPE SYNTAX OCTET STRING (SIZE (0..64)) MAX-ACCESS read-only STATUS current DESCRIPTION "Represents the vendor of this station detected by WIPS." ::= { fsWIPSDctStaEntry 17 } fsWIPSDctStaRptSensorTable OBJECT-TYPE SYNTAX SEQUENCE OF FsWIPSDctStaRptSensorEntry MAX-ACCESS not-accessible STATUS current DESCRIPTION "The table represents the list of sensors detecting the station." ::= { fsWIPSDetectGroup 5 } fsWIPSDctStaRptSensorEntry OBJECT-TYPE SYNTAX FsWIPSDctStaRptSensorEntry MAX-ACCESS not-accessible STATUS current DESCRIPTION "Each entry contains possible sensor information of WIPS." INDEX { fsWIPSDctStaVSD, fsWIPSDctStaMac, fsWIPSDctStaRtpSensorName } ::= { fsWIPSDctStaRptSensorTable 1 } FsWIPSDctStaRptSensorEntry ::= SEQUENCE { fsWIPSDctStaRtpSensorName OCTET STRING, fsWIPSDctStaRptSensorRadioId Integer32, fsWIPSDctStaRptRSSI Integer32, fsWIPSDctStaLastRptTm TimeTicks } fsWIPSDctStaRtpSensorName OBJECT-TYPE SYNTAX OCTET STRING (SIZE (1..64)) MAX-ACCESS not-accessible STATUS current DESCRIPTION "Represents the name of sensor." ::= { fsWIPSDctStaRptSensorEntry 1 } fsWIPSDctStaRptSensorRadioId OBJECT-TYPE SYNTAX Integer32 (1..4) MAX-ACCESS read-only STATUS current DESCRIPTION "Represents on which radio the sensor AP detected the station." ::= { fsWIPSDctStaRptSensorEntry 2 } fsWIPSDctStaRptRSSI OBJECT-TYPE SYNTAX Integer32 MAX-ACCESS read-only STATUS current DESCRIPTION "Represents the current value of signal strength that WIPS sensor AP received from the station." ::= { fsWIPSDctStaRptSensorEntry 3 } fsWIPSDctStaLastRptTm OBJECT-TYPE SYNTAX TimeTicks MAX-ACCESS read-only STATUS current DESCRIPTION "Represents the time that station was detected by this sensor for the last time since system is up." ::= { fsWIPSDctStaRptSensorEntry 4 } fsWIPSDctSSIDTable OBJECT-TYPE SYNTAX SEQUENCE OF FsWIPSDctSSIDEntry MAX-ACCESS not-accessible STATUS current DESCRIPTION "The table represents the list of possible ESS information for networks detected by WIPS." ::= { fsWIPSDetectGroup 6 } fsWIPSDctSSIDEntry OBJECT-TYPE SYNTAX FsWIPSDctSSIDEntry MAX-ACCESS not-accessible STATUS current DESCRIPTION "Each entry contains possible ESS information of each ESS detected by WIPS." INDEX { fsWIPSDctNetworkVSD, fsWIPSDctNetworkSSID, fsWIPSDctNetworkCfg } ::= { fsWIPSDctSSIDTable 1 } FsWIPSDctSSIDEntry ::= SEQUENCE { fsWIPSDctNetworkVSD OCTET STRING, fsWIPSDctNetworkSSID OCTET STRING, fsWIPSDctNetworkCfg Unsigned32, fsWIPSDctNetworkFirstRptTm TimeTicks, fsWIPSDctNetworkLastRptTm TimeTicks, fsWIPSDctNetworkStatus FsWIPSDevStatus, fsWIPSDctNetworkSSIDHide TruthValue, fsWIPSDctNetworkBSSNum Integer32 } fsWIPSDctNetworkVSD OBJECT-TYPE SYNTAX OCTET STRING (SIZE (1..32)) MAX-ACCESS not-accessible STATUS current DESCRIPTION "Represents the virtual security domain in which the ESS was detected." ::= { fsWIPSDctSSIDEntry 1 } fsWIPSDctNetworkSSID OBJECT-TYPE SYNTAX OCTET STRING (SIZE (1..32)) MAX-ACCESS not-accessible STATUS current DESCRIPTION "Represents the service set identifier for the ESS. Using the ASCII value '1' represents that the SSID is not advertised in the beacon frames." ::= { fsWIPSDctSSIDEntry 2 } fsWIPSDctNetworkCfg OBJECT-TYPE SYNTAX Unsigned32 MAX-ACCESS not-accessible STATUS current DESCRIPTION "Represents the encrypt method, security suite and authentication method which are used by the detected ESS. The lowest 8 bits mean encrypt method. The higher 8 bits mean security suite. The third 8 bits stand for authentication method. The higerest 8 bits are reserved. The meaning is shown as follows: 31 23 15 7 0 + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + | reserved | auth method | security suite|encryptmethod| + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + For encrypt method, the following values are supported: 1: none - clear text or no cipher method is configure, 2: wep - WEP key, 4: tkip - WPA Temporal Key encryption, 8: ccmp - WPA AES CCMP encryption For security suite, the following values are supported: 0x01: clear 0x02: wpa2 0x04: wpa 0x08: wep For authentication method, the following values are supported: 1: none - No key management mode configured, 2: psk - pre-shared key authentication, 3: dot1x - 802.1x authentication, 4: other - other authentication, 5: psk/dot1x - psk and dot1x authentication, 6: psk/other - psk and other authentication, 7: dot1x/other - dot1x and other authentication, 8: psk/dot1x/other - psk, dot1x and other authentication." ::= { fsWIPSDctSSIDEntry 3 } fsWIPSDctNetworkFirstRptTm OBJECT-TYPE SYNTAX TimeTicks MAX-ACCESS read-only STATUS current DESCRIPTION "Represents the time that ESS was detected for the first time since system is up." ::= { fsWIPSDctSSIDEntry 4 } fsWIPSDctNetworkLastRptTm OBJECT-TYPE SYNTAX TimeTicks MAX-ACCESS read-only STATUS current DESCRIPTION "Represents the time that ESS was detected for the last time since system is up." ::= { fsWIPSDctSSIDEntry 5 } fsWIPSDctNetworkStatus OBJECT-TYPE SYNTAX FsWIPSDevStatus MAX-ACCESS read-only STATUS current DESCRIPTION "Represents the status of this ESS detected by WIPS." ::= { fsWIPSDctSSIDEntry 6 } fsWIPSDctNetworkSSIDHide OBJECT-TYPE SYNTAX TruthValue MAX-ACCESS read-only STATUS current DESCRIPTION "Represents whether the ESS broadcasted its SSID." DEFVAL { false } ::= { fsWIPSDctSSIDEntry 7 } fsWIPSDctNetworkBSSNum OBJECT-TYPE SYNTAX Integer32 MAX-ACCESS read-only STATUS current DESCRIPTION "Represents the number of APs using the same SSID in the ESS." ::= { fsWIPSDctSSIDEntry 8 } fsWIPSDctSSIDBSSTable OBJECT-TYPE SYNTAX SEQUENCE OF FsWIPSDctSSIDBSSEntry MAX-ACCESS not-accessible STATUS current DESCRIPTION "The table represents the list of APs using the same SSID in the ESS." ::= { fsWIPSDetectGroup 7 } fsWIPSDctSSIDBSSEntry OBJECT-TYPE SYNTAX FsWIPSDctSSIDBSSEntry MAX-ACCESS not-accessible STATUS current DESCRIPTION "Each entry contains possible BSS information of each AP detected by WIPS." INDEX { fsWIPSDctNetworkVSD, fsWIPSDctNetworkSSID, fsWIPSDctNetworkCfg, fsWIPSDctNetworkBSSID } ::= { fsWIPSDctSSIDBSSTable 1 } FsWIPSDctSSIDBSSEntry ::= SEQUENCE { fsWIPSDctNetworkBSSID MacAddress, fsWIPSDctNetworkBSSWorkChl FsWIPSChannel, fsWIPSDctNetworkBSSStaNum Integer32 } fsWIPSDctNetworkBSSID OBJECT-TYPE SYNTAX MacAddress MAX-ACCESS not-accessible STATUS current DESCRIPTION "Represents the Basic Service Set." ::= { fsWIPSDctSSIDBSSEntry 1 } fsWIPSDctNetworkBSSWorkChl OBJECT-TYPE SYNTAX FsWIPSChannel MAX-ACCESS read-only STATUS current DESCRIPTION "Represents on which radio channel that WIPS sensor AP detected the BSS." ::= { fsWIPSDctSSIDBSSEntry 2 } fsWIPSDctNetworkBSSStaNum OBJECT-TYPE SYNTAX Integer32 MAX-ACCESS read-only STATUS current DESCRIPTION "Represents the number of clients associated with the detected BSS." ::= { fsWIPSDctSSIDBSSEntry 3 } fsWIPSBlockListTable OBJECT-TYPE SYNTAX SEQUENCE OF FsWIPSBlockListEntry MAX-ACCESS not-accessible STATUS current DESCRIPTION "The table represents the list of block device MAC address." ::= { fsWIPSDetectGroup 8 } fsWIPSBlockListEntry OBJECT-TYPE SYNTAX FsWIPSBlockListEntry MAX-ACCESS not-accessible STATUS current DESCRIPTION "Each entry contains block device MAC address information." INDEX { fsWIPSBlockListMacAddress } ::= { fsWIPSBlockListTable 1 } FsWIPSBlockListEntry ::= SEQUENCE { fsWIPSBlockListMacAddress MacAddress, fsWIPSBlockListStatus INTEGER } fsWIPSBlockListMacAddress OBJECT-TYPE SYNTAX MacAddress MAX-ACCESS not-accessible STATUS current DESCRIPTION "Represents the MAC address of block device." ::= { fsWIPSBlockListEntry 1 } fsWIPSBlockListStatus OBJECT-TYPE SYNTAX INTEGER { static(1), dynamic(2), staticAndDynamic(3) } MAX-ACCESS read-only STATUS current DESCRIPTION "Represents the status of block device." ::= { fsWIPSBlockListEntry 2 } fsWIPSChannelTable OBJECT-TYPE SYNTAX SEQUENCE OF FsWIPSChannelEntry MAX-ACCESS not-accessible STATUS current DESCRIPTION "The table represents the list of channel information." ::= { fsWIPSDetectGroup 9 } fsWIPSChannelEntry OBJECT-TYPE SYNTAX FsWIPSChannelEntry MAX-ACCESS not-accessible STATUS current DESCRIPTION "Each entry contains channel information." INDEX { fsWIPSChannelNum } ::= { fsWIPSChannelTable 1 } FsWIPSChannelEntry ::= SEQUENCE { fsWIPSChannelNum FsWIPSChannel, fsWIPSChannelRadioType FsWIPSRadioType, fsWIPSChannelIsPermitted TruthValue, fsWIPSChannelLastRptTm TimeTicks } fsWIPSChannelNum OBJECT-TYPE SYNTAX FsWIPSChannel MAX-ACCESS not-accessible STATUS current DESCRIPTION "Represents the channel number." ::= { fsWIPSChannelEntry 1 } fsWIPSChannelRadioType OBJECT-TYPE SYNTAX FsWIPSRadioType MAX-ACCESS read-only STATUS current DESCRIPTION "Represents the radio type used in the specific channel." ::= { fsWIPSChannelEntry 2 } fsWIPSChannelIsPermitted OBJECT-TYPE SYNTAX TruthValue MAX-ACCESS read-only STATUS current DESCRIPTION "Represents whether the channel is permitted." ::= { fsWIPSChannelEntry 3 } fsWIPSChannelLastRptTm OBJECT-TYPE SYNTAX TimeTicks MAX-ACCESS read-only STATUS current DESCRIPTION "Represents the latest time that detecting the channel is active." ::= { fsWIPSChannelEntry 4 } fsWIPSCountermeasureListTable OBJECT-TYPE SYNTAX SEQUENCE OF FsWIPSCountermeasureListEntry MAX-ACCESS not-accessible STATUS current DESCRIPTION "The table represents the list of global static countermeasure device information." ::= { fsWIPSDetectGroup 10 } fsWIPSCountermeasureListEntry OBJECT-TYPE SYNTAX FsWIPSCountermeasureListEntry MAX-ACCESS not-accessible STATUS current DESCRIPTION "Each entry contains countermeasure device information." INDEX { fsWIPSCtmListMacAddress } ::= { fsWIPSCountermeasureListTable 1 } FsWIPSCountermeasureListEntry ::= SEQUENCE { fsWIPSCtmListMacAddress MacAddress, fsWIPSCtmListLastestWorkChl FsWIPSChannel, fsWIPSCtmListFirstTm TimeTicks, fsWIPSCtmListLastTm TimeTicks, fsWIPSCtmListQurCnt Integer32, fsWIPSCtmListSensorNum Integer32 } fsWIPSCtmListMacAddress OBJECT-TYPE SYNTAX MacAddress MAX-ACCESS not-accessible STATUS current DESCRIPTION "Represents the MAC address of the countered device." ::= { fsWIPSCountermeasureListEntry 1 } fsWIPSCtmListLastestWorkChl OBJECT-TYPE SYNTAX FsWIPSChannel MAX-ACCESS read-only STATUS current DESCRIPTION "Represents the channel on which the countermeasure device was working." ::= { fsWIPSCountermeasureListEntry 2 } fsWIPSCtmListFirstTm OBJECT-TYPE SYNTAX TimeTicks MAX-ACCESS read-only STATUS current DESCRIPTION "Represents the first time that the device was countered since system is up." ::= { fsWIPSCountermeasureListEntry 3 } fsWIPSCtmListLastTm OBJECT-TYPE SYNTAX TimeTicks MAX-ACCESS read-only STATUS current DESCRIPTION "Represents the last time that the device was countered since system is up." ::= { fsWIPSCountermeasureListEntry 4 } fsWIPSCtmListQurCnt OBJECT-TYPE SYNTAX Integer32 MAX-ACCESS read-only STATUS current DESCRIPTION "Represents how many times that the device was countered. " ::= { fsWIPSCountermeasureListEntry 5 } fsWIPSCtmListSensorNum OBJECT-TYPE SYNTAX Integer32 MAX-ACCESS read-only STATUS current DESCRIPTION "Represents the number of sensors detecting the device." ::= { fsWIPSCountermeasureListEntry 6 } fsWIPSIgnoreListTable OBJECT-TYPE SYNTAX SEQUENCE OF FsWIPSIgnoreListEntry MAX-ACCESS not-accessible STATUS current DESCRIPTION "The table represents the list of ignored device information." ::= { fsWIPSDetectGroup 11 } fsWIPSIgnoreListEntry OBJECT-TYPE SYNTAX FsWIPSIgnoreListEntry MAX-ACCESS not-accessible STATUS current DESCRIPTION "Each entry contains ignored device information." INDEX { fsWIPSIgnoreListMacAddress } ::= { fsWIPSIgnoreListTable 1 } FsWIPSIgnoreListEntry ::= SEQUENCE { fsWIPSIgnoreListMacAddress MacAddress, fsWIPSIgnoreListFirstIgnoreTm TimeTicks, fsWIPSIgnoreListLastIgnoreTm TimeTicks, fsWIPSIgnoreListIgnoreCnt Integer32 } fsWIPSIgnoreListMacAddress OBJECT-TYPE SYNTAX MacAddress MAX-ACCESS not-accessible STATUS current DESCRIPTION "Represents the MAC address of the ignored device." ::= { fsWIPSIgnoreListEntry 1 } fsWIPSIgnoreListFirstIgnoreTm OBJECT-TYPE SYNTAX TimeTicks MAX-ACCESS read-only STATUS current DESCRIPTION "Represents the first time when the event caused by the device was ignored since system is up." ::= { fsWIPSIgnoreListEntry 2 } fsWIPSIgnoreListLastIgnoreTm OBJECT-TYPE SYNTAX TimeTicks MAX-ACCESS read-only STATUS current DESCRIPTION "Represents the last time when the event caused by the device was ignored since system is up." ::= { fsWIPSIgnoreListEntry 3 } fsWIPSIgnoreListIgnoreCnt OBJECT-TYPE SYNTAX Integer32 MAX-ACCESS read-only STATUS current DESCRIPTION "Represents the number of times of the event caused by device has been ignored." ::= { fsWIPSIgnoreListEntry 4 } fsWIPSTrustListTable OBJECT-TYPE SYNTAX SEQUENCE OF FsWIPSTrustListEntry MAX-ACCESS not-accessible STATUS current DESCRIPTION "The table represents the list of trust device information." ::= { fsWIPSDetectGroup 12 } fsWIPSTrustListEntry OBJECT-TYPE SYNTAX FsWIPSTrustListEntry MAX-ACCESS not-accessible STATUS current DESCRIPTION "Each entry contains information of a trust device." INDEX { fsWIPSTrustListMacAddress } ::= { fsWIPSTrustListTable 1 } FsWIPSTrustListEntry ::= SEQUENCE { fsWIPSTrustListMacAddress MacAddress, fsWIPSTrustListStatus INTEGER } fsWIPSTrustListMacAddress OBJECT-TYPE SYNTAX MacAddress MAX-ACCESS not-accessible STATUS current DESCRIPTION "Represents the MAC address of the trust device." ::= { fsWIPSTrustListEntry 1 } fsWIPSTrustListStatus OBJECT-TYPE SYNTAX INTEGER { static(1), dynamic(2), staticAndDynamic(3) } MAX-ACCESS read-only STATUS current DESCRIPTION "Represents the status of the trust device." ::= { fsWIPSTrustListEntry 2 } fsWIPSChlStatTable OBJECT-TYPE SYNTAX SEQUENCE OF FsWIPSChlStatEntry MAX-ACCESS not-accessible STATUS current DESCRIPTION "The table represents the list of channel statistics information." ::= { fsWIPSDetectGroup 13 } fsWIPSChlStatEntry OBJECT-TYPE SYNTAX FsWIPSChlStatEntry MAX-ACCESS not-accessible STATUS current DESCRIPTION "Each entry contains information of channel statistics." INDEX { fsWIPSChlStatSensorMacAddr, fsWIPSChlStatChannel } ::= { fsWIPSChlStatTable 1 } FsWIPSChlStatEntry ::= SEQUENCE { fsWIPSChlStatSensorMacAddr MacAddress, fsWIPSChlStatChannel FsWIPSChannel, fsWIPSChlStatTotalPkt Counter64, fsWIPSChlStatTotalByte Counter64, fsWIPSChlStatBmcastPkt Counter64, fsWIPSChlStatBmcastByte Counter64, fsWIPSChlStatUnicastPkt Counter64, fsWIPSChlStatUnicastByte Counter64, fsWIPSChlStatManagement Counter64, fsWIPSChlStatControl Counter64, fsWIPSChlStatData Counter64, fsWIPSChlStatBeacon Counter64, fsWIPSChlStatRTS Counter64, fsWIPSChlStatCTS Counter64, fsWIPSChlStatProbeRequest Counter64, fsWIPSChlStatProbeResponse Counter64, fsWIPSChlStatFragment Counter64, fsWIPSChlStatRetry Counter64, fsWIPSChlStatEapSuccess Counter64, fsWIPSChlStatEapFailure Counter64, fsWIPSChlStatEapolStart Counter64, fsWIPSChlStatEapolLogoff Counter64, fsWIPSChlStatAssocRequest Counter64, fsWIPSChlStatAssocResponse Counter64, fsWIPSChlStatUnicastDisassoc Counter64, fsWIPSChlStatBroadcastDisassoc Counter64, fsWIPSChlStatAuthentication Counter64, fsWIPSChlStatUnicastDeauthen Counter64, fsWIPSChlStatBroadcastDeauthen Counter64, fsWIPSChlStatMalformed Counter64 } fsWIPSChlStatSensorMacAddr OBJECT-TYPE SYNTAX MacAddress MAX-ACCESS not-accessible STATUS current DESCRIPTION "Represents the MAC address of sensor." ::= { fsWIPSChlStatEntry 1 } fsWIPSChlStatChannel OBJECT-TYPE SYNTAX FsWIPSChannel MAX-ACCESS not-accessible STATUS current DESCRIPTION "Represents the statistics channel." ::= { fsWIPSChlStatEntry 2 } fsWIPSChlStatTotalPkt OBJECT-TYPE SYNTAX Counter64 MAX-ACCESS read-only STATUS current DESCRIPTION "Represents the count of total frames in the channel." DEFVAL { 0 } ::= { fsWIPSChlStatEntry 3 } fsWIPSChlStatTotalByte OBJECT-TYPE SYNTAX Counter64 MAX-ACCESS read-only STATUS current DESCRIPTION "Represents the length of total frames in the channel." DEFVAL { 0 } ::= { fsWIPSChlStatEntry 4 } fsWIPSChlStatBmcastPkt OBJECT-TYPE SYNTAX Counter64 MAX-ACCESS read-only STATUS current DESCRIPTION "Represents the count of broadcast and multicast frames in the channel." DEFVAL { 0 } ::= { fsWIPSChlStatEntry 5 } fsWIPSChlStatBmcastByte OBJECT-TYPE SYNTAX Counter64 MAX-ACCESS read-only STATUS current DESCRIPTION "Represents the total length of broadcast and multicast frames in the channel." DEFVAL { 0 } ::= { fsWIPSChlStatEntry 6 } fsWIPSChlStatUnicastPkt OBJECT-TYPE SYNTAX Counter64 MAX-ACCESS read-only STATUS current DESCRIPTION "Represents the count of unicast frames in the channel." DEFVAL { 0 } ::= { fsWIPSChlStatEntry 7 } fsWIPSChlStatUnicastByte OBJECT-TYPE SYNTAX Counter64 MAX-ACCESS read-only STATUS current DESCRIPTION "Represents the total length of unicast frames in the channel." DEFVAL { 0 } ::= { fsWIPSChlStatEntry 8 } fsWIPSChlStatManagement OBJECT-TYPE SYNTAX Counter64 MAX-ACCESS read-only STATUS current DESCRIPTION "Represents the count of management frames in the channel." DEFVAL { 0 } ::= { fsWIPSChlStatEntry 9 } fsWIPSChlStatControl OBJECT-TYPE SYNTAX Counter64 MAX-ACCESS read-only STATUS current DESCRIPTION "Represents the count of control frames in the channel." DEFVAL { 0 } ::= { fsWIPSChlStatEntry 10 } fsWIPSChlStatData OBJECT-TYPE SYNTAX Counter64 MAX-ACCESS read-only STATUS current DESCRIPTION "Represents the count of data frames in the channel." DEFVAL { 0 } ::= { fsWIPSChlStatEntry 11 } fsWIPSChlStatBeacon OBJECT-TYPE SYNTAX Counter64 MAX-ACCESS read-only STATUS current DESCRIPTION "Represents the count of beacon frames in the channel." DEFVAL { 0 } ::= { fsWIPSChlStatEntry 12 } fsWIPSChlStatRTS OBJECT-TYPE SYNTAX Counter64 MAX-ACCESS read-only STATUS current DESCRIPTION "Represents the count of RTS frames in the channel." DEFVAL { 0 } ::= { fsWIPSChlStatEntry 13 } fsWIPSChlStatCTS OBJECT-TYPE SYNTAX Counter64 MAX-ACCESS read-only STATUS current DESCRIPTION "Represents the count of CTS frames in the channel." DEFVAL { 0 } ::= { fsWIPSChlStatEntry 14 } fsWIPSChlStatProbeRequest OBJECT-TYPE SYNTAX Counter64 MAX-ACCESS read-only STATUS current DESCRIPTION "Represents the count of probe request frames in the channel." DEFVAL { 0 } ::= { fsWIPSChlStatEntry 15 } fsWIPSChlStatProbeResponse OBJECT-TYPE SYNTAX Counter64 MAX-ACCESS read-only STATUS current DESCRIPTION "Represents the count of probe response frames in the channel." DEFVAL { 0 } ::= { fsWIPSChlStatEntry 16 } fsWIPSChlStatFragment OBJECT-TYPE SYNTAX Counter64 MAX-ACCESS read-only STATUS current DESCRIPTION "Represents the count of fragment frames in the channel." DEFVAL { 0 } ::= { fsWIPSChlStatEntry 17 } fsWIPSChlStatRetry OBJECT-TYPE SYNTAX Counter64 MAX-ACCESS read-only STATUS current DESCRIPTION "Represents the count of retry frames in the channel." DEFVAL { 0 } ::= { fsWIPSChlStatEntry 18 } fsWIPSChlStatEapSuccess OBJECT-TYPE SYNTAX Counter64 MAX-ACCESS read-only STATUS current DESCRIPTION "Represents the count of EAP-Success frames in the channel." DEFVAL { 0 } ::= { fsWIPSChlStatEntry 19 } fsWIPSChlStatEapFailure OBJECT-TYPE SYNTAX Counter64 MAX-ACCESS read-only STATUS current DESCRIPTION "Represents the count of EAP-Failure frames in the channel." DEFVAL { 0 } ::= { fsWIPSChlStatEntry 20 } fsWIPSChlStatEapolStart OBJECT-TYPE SYNTAX Counter64 MAX-ACCESS read-only STATUS current DESCRIPTION "Represents the count of EAPOL-Start frames in the channel." DEFVAL { 0 } ::= { fsWIPSChlStatEntry 21 } fsWIPSChlStatEapolLogoff OBJECT-TYPE SYNTAX Counter64 MAX-ACCESS read-only STATUS current DESCRIPTION "Represents the count of EAPOL-Logoff frames in the channel." DEFVAL { 0 } ::= { fsWIPSChlStatEntry 22 } fsWIPSChlStatAssocRequest OBJECT-TYPE SYNTAX Counter64 MAX-ACCESS read-only STATUS current DESCRIPTION "Represents the count of association request frames in the channel." DEFVAL { 0 } ::= { fsWIPSChlStatEntry 23 } fsWIPSChlStatAssocResponse OBJECT-TYPE SYNTAX Counter64 MAX-ACCESS read-only STATUS current DESCRIPTION "Represents the count of association response frames in the channel." DEFVAL { 0 } ::= { fsWIPSChlStatEntry 24 } fsWIPSChlStatUnicastDisassoc OBJECT-TYPE SYNTAX Counter64 MAX-ACCESS read-only STATUS current DESCRIPTION "Represents the count of unicast disassociation frames in the channel." DEFVAL { 0 } ::= { fsWIPSChlStatEntry 25 } fsWIPSChlStatBroadcastDisassoc OBJECT-TYPE SYNTAX Counter64 MAX-ACCESS read-only STATUS current DESCRIPTION "Represents the count of broadcast disassociation frames in the channel." DEFVAL { 0 } ::= { fsWIPSChlStatEntry 26 } fsWIPSChlStatAuthentication OBJECT-TYPE SYNTAX Counter64 MAX-ACCESS read-only STATUS current DESCRIPTION "Represents the count of authentication frames in the channel." DEFVAL { 0 } ::= { fsWIPSChlStatEntry 27 } fsWIPSChlStatUnicastDeauthen OBJECT-TYPE SYNTAX Counter64 MAX-ACCESS read-only STATUS current DESCRIPTION "Represents the count of unicast deauthentication frames in the channel." DEFVAL { 0 } ::= { fsWIPSChlStatEntry 28 } fsWIPSChlStatBroadcastDeauthen OBJECT-TYPE SYNTAX Counter64 MAX-ACCESS read-only STATUS current DESCRIPTION "Represents the count of broadcast deauthentication frames in the channel." DEFVAL { 0 } ::= { fsWIPSChlStatEntry 29 } fsWIPSChlStatMalformed OBJECT-TYPE SYNTAX Counter64 MAX-ACCESS read-only STATUS current DESCRIPTION "Represents the count of malformed frames in the channel." DEFVAL { 0 } ::= { fsWIPSChlStatEntry 30 } fsWIPSDevStatTable OBJECT-TYPE SYNTAX SEQUENCE OF FsWIPSDevStatEntry MAX-ACCESS not-accessible STATUS current DESCRIPTION "The table represents the list of device statistics information." ::= { fsWIPSDetectGroup 14 } fsWIPSDevStatEntry OBJECT-TYPE SYNTAX FsWIPSDevStatEntry MAX-ACCESS not-accessible STATUS current DESCRIPTION "Each entry contains information of device statistics." INDEX { fsWIPSDevStatSensorMacAddr, fsWIPSDevStatDevMacAddress, fsWIPSDevStatChannel } ::= { fsWIPSDevStatTable 1 } FsWIPSDevStatEntry ::= SEQUENCE { fsWIPSDevStatSensorMacAddr MacAddress, fsWIPSDevStatDevMacAddress MacAddress, fsWIPSDevStatChannel FsWIPSChannel, fsWIPSDevStatTxTotalPkt Counter64, fsWIPSDevStatTxTotalByte Counter64, fsWIPSDevStatTxBMcastPkt Counter64, fsWIPSDevStatTxBMcastByte Counter64, fsWIPSDevStatTxUnicastPkt Counter64, fsWIPSDevStatTxUnicastByte Counter64, fsWIPSDevStatTxMgmt Counter64, fsWIPSDevStatTxCtrl Counter64, fsWIPSDevStatTxData Counter64, fsWIPSDevStatTxBeacon Counter64, fsWIPSDevStatTxRTS Counter64, fsWIPSDevStatTxProbeRequest Counter64, fsWIPSDevStatTxProbeResponse Counter64, fsWIPSDevStatTxFragment Counter64, fsWIPSDevStatTxRetry Counter64, fsWIPSDevStatTxAssocRequest Counter64, fsWIPSDevStatTxAssocResponse Counter64, fsWIPSDevStatTxUnicastDisassoc Counter64, fsWIPSDevStatTxBcastDisassoc Counter64, fsWIPSDevStatTxAuth Counter64, fsWIPSDevStatTxUnicastDeauth Counter64, fsWIPSDevStatTxBcastDeauth Counter64, fsWIPSDevStatTxEAPSuccess Counter64, fsWIPSDevStatTxEAPFailure Counter64, fsWIPSDevStatTxEAPOLStart Counter64, fsWIPSDevStatTxEAPOLLogOff Counter64, fsWIPSDevStatTxMalformed Counter64, fsWIPSDevStatRxTotalPkt Counter64, fsWIPSDevStatRxTotalByte Counter64, fsWIPSDevStatRxUnicastPkt Counter64, fsWIPSDevStatRxUnicastByte Counter64, fsWIPSDevStatRxMgmt Counter64, fsWIPSDevStatRxCtrl Counter64, fsWIPSDevStatRxData Counter64, fsWIPSDevStatRxRTS Counter64, fsWIPSDevStatRxCTS Counter64, fsWIPSDevStatRxProbeRequest Counter64, fsWIPSDevStatRxProbeResponse Counter64, fsWIPSDevStatRxFragment Counter64, fsWIPSDevStatRxRetry Counter64, fsWIPSDevStatRxAssoRequest Counter64, fsWIPSDevStatRxAssoResponse Counter64, fsWIPSDevStatRxDisassoc Counter64, fsWIPSDevStatRxAuth Counter64, fsWIPSDevStatRxDeauth Counter64, fsWIPSDevStatRxEAPSuccess Counter64, fsWIPSDevStatRxEAPFailure Counter64, fsWIPSDevStatRxEAPOLStart Counter64, fsWIPSDevStatRxEAPOLLogoff Counter64, fsWIPSDevStatRxMalformed Counter64 } fsWIPSDevStatSensorMacAddr OBJECT-TYPE SYNTAX MacAddress MAX-ACCESS not-accessible STATUS current DESCRIPTION "Represents the MAC address of sensor." ::= { fsWIPSDevStatEntry 1 } fsWIPSDevStatDevMacAddress OBJECT-TYPE SYNTAX MacAddress MAX-ACCESS not-accessible STATUS current DESCRIPTION "Represents the MAC address of the device detected by the sensor." ::= { fsWIPSDevStatEntry 2 } fsWIPSDevStatChannel OBJECT-TYPE SYNTAX FsWIPSChannel MAX-ACCESS not-accessible STATUS current DESCRIPTION "Represents the device working channel." ::= { fsWIPSDevStatEntry 3 } fsWIPSDevStatTxTotalPkt OBJECT-TYPE SYNTAX Counter64 MAX-ACCESS read-only STATUS current DESCRIPTION "Represents the count of total frames transmitted by the device in one channel." DEFVAL { 0 } ::= { fsWIPSDevStatEntry 4 } fsWIPSDevStatTxTotalByte OBJECT-TYPE SYNTAX Counter64 MAX-ACCESS read-only STATUS current DESCRIPTION "Represents the length of total frames transmitted by the device in one channel." DEFVAL { 0 } ::= { fsWIPSDevStatEntry 5 } fsWIPSDevStatTxBMcastPkt OBJECT-TYPE SYNTAX Counter64 MAX-ACCESS read-only STATUS current DESCRIPTION "Represents the count of broadcast and multicast frames transmitted by the device in one channel." DEFVAL { 0 } ::= { fsWIPSDevStatEntry 6 } fsWIPSDevStatTxBMcastByte OBJECT-TYPE SYNTAX Counter64 MAX-ACCESS read-only STATUS current DESCRIPTION "Represents the length of broadcast and multicast frames transmitted by the device in one channel." DEFVAL { 0 } ::= { fsWIPSDevStatEntry 7 } fsWIPSDevStatTxUnicastPkt OBJECT-TYPE SYNTAX Counter64 MAX-ACCESS read-only STATUS current DESCRIPTION "Represents the count of unicast frames transmitted by the device in one channel." DEFVAL { 0 } ::= { fsWIPSDevStatEntry 8 } fsWIPSDevStatTxUnicastByte OBJECT-TYPE SYNTAX Counter64 MAX-ACCESS read-only STATUS current DESCRIPTION "Represents the length of unicast frames transmitted by the device in one channel." DEFVAL { 0 } ::= { fsWIPSDevStatEntry 9 } fsWIPSDevStatTxMgmt OBJECT-TYPE SYNTAX Counter64 MAX-ACCESS read-only STATUS current DESCRIPTION "Represents the count of management frames transmitted by the device in one channel." DEFVAL { 0 } ::= { fsWIPSDevStatEntry 10 } fsWIPSDevStatTxCtrl OBJECT-TYPE SYNTAX Counter64 MAX-ACCESS read-only STATUS current DESCRIPTION "Represents the count of control frames transmitted by the device in one channel." DEFVAL { 0 } ::= { fsWIPSDevStatEntry 11 } fsWIPSDevStatTxData OBJECT-TYPE SYNTAX Counter64 MAX-ACCESS read-only STATUS current DESCRIPTION "Represents the count of data frames transmitted by the device in one channel." DEFVAL { 0 } ::= { fsWIPSDevStatEntry 12 } fsWIPSDevStatTxBeacon OBJECT-TYPE SYNTAX Counter64 MAX-ACCESS read-only STATUS current DESCRIPTION "Represents the count of beacon frames transmitted by the device in one channel." DEFVAL { 0 } ::= { fsWIPSDevStatEntry 13 } fsWIPSDevStatTxRTS OBJECT-TYPE SYNTAX Counter64 MAX-ACCESS read-only STATUS current DESCRIPTION "Represents the count of RTS frames transmitted by the device in one channel." DEFVAL { 0 } ::= { fsWIPSDevStatEntry 14 } fsWIPSDevStatTxProbeRequest OBJECT-TYPE SYNTAX Counter64 MAX-ACCESS read-only STATUS current DESCRIPTION "Represents the count of probe request frames transmitted by the device in one channel." DEFVAL { 0 } ::= { fsWIPSDevStatEntry 15 } fsWIPSDevStatTxProbeResponse OBJECT-TYPE SYNTAX Counter64 MAX-ACCESS read-only STATUS current DESCRIPTION "Represents the count of probe response frames transmitted by the device in one channel." DEFVAL { 0 } ::= { fsWIPSDevStatEntry 16 } fsWIPSDevStatTxFragment OBJECT-TYPE SYNTAX Counter64 MAX-ACCESS read-only STATUS current DESCRIPTION "Represents the count of fragment frames transmitted by the device in one channel." DEFVAL { 0 } ::= { fsWIPSDevStatEntry 17 } fsWIPSDevStatTxRetry OBJECT-TYPE SYNTAX Counter64 MAX-ACCESS read-only STATUS current DESCRIPTION "Represents the count of retry frames transmitted by the device in one channel." DEFVAL { 0 } ::= { fsWIPSDevStatEntry 18 } fsWIPSDevStatTxAssocRequest OBJECT-TYPE SYNTAX Counter64 MAX-ACCESS read-only STATUS current DESCRIPTION "Represents the count of association request frames transmitted by the device in one channel." DEFVAL { 0 } ::= { fsWIPSDevStatEntry 19 } fsWIPSDevStatTxAssocResponse OBJECT-TYPE SYNTAX Counter64 MAX-ACCESS read-only STATUS current DESCRIPTION "Represents the count of association response frames transmitted by the device in one channel." DEFVAL { 0 } ::= { fsWIPSDevStatEntry 20 } fsWIPSDevStatTxUnicastDisassoc OBJECT-TYPE SYNTAX Counter64 MAX-ACCESS read-only STATUS current DESCRIPTION "Represents the count of unicast disassociation frames transmitted by the device in one channel." DEFVAL { 0 } ::= { fsWIPSDevStatEntry 21 } fsWIPSDevStatTxBcastDisassoc OBJECT-TYPE SYNTAX Counter64 MAX-ACCESS read-only STATUS current DESCRIPTION "Represents the count of broadcast disassociation frames transmitted by the device in one channel." DEFVAL { 0 } ::= { fsWIPSDevStatEntry 22 } fsWIPSDevStatTxAuth OBJECT-TYPE SYNTAX Counter64 MAX-ACCESS read-only STATUS current DESCRIPTION "Represents the count of authentication frames transmitted by the device in one channel." DEFVAL { 0 } ::= { fsWIPSDevStatEntry 23 } fsWIPSDevStatTxUnicastDeauth OBJECT-TYPE SYNTAX Counter64 MAX-ACCESS read-only STATUS current DESCRIPTION "Represents the count of unicast deauthentication frames transmitted by the device in one channel." DEFVAL { 0 } ::= { fsWIPSDevStatEntry 24 } fsWIPSDevStatTxBcastDeauth OBJECT-TYPE SYNTAX Counter64 MAX-ACCESS read-only STATUS current DESCRIPTION "Represents the count of broadcast deauthentication frames transmitted by the device in one channel." DEFVAL { 0 } ::= { fsWIPSDevStatEntry 25 } fsWIPSDevStatTxEAPSuccess OBJECT-TYPE SYNTAX Counter64 MAX-ACCESS read-only STATUS current DESCRIPTION "Represents the count of EAP-Success frames transmitted by the device in one channel." DEFVAL { 0 } ::= { fsWIPSDevStatEntry 26 } fsWIPSDevStatTxEAPFailure OBJECT-TYPE SYNTAX Counter64 MAX-ACCESS read-only STATUS current DESCRIPTION "Represents the count of EAP-Failure frames transmitted by the device in one channel." DEFVAL { 0 } ::= { fsWIPSDevStatEntry 27 } fsWIPSDevStatTxEAPOLStart OBJECT-TYPE SYNTAX Counter64 MAX-ACCESS read-only STATUS current DESCRIPTION "Represents the count of EAPOL-Start frames transmitted by the device in one channel." DEFVAL { 0 } ::= { fsWIPSDevStatEntry 28 } fsWIPSDevStatTxEAPOLLogOff OBJECT-TYPE SYNTAX Counter64 MAX-ACCESS read-only STATUS current DESCRIPTION "Represents the count of EAPOL-Logoff frames transmitted by the device in one channel." DEFVAL { 0 } ::= { fsWIPSDevStatEntry 29 } fsWIPSDevStatTxMalformed OBJECT-TYPE SYNTAX Counter64 MAX-ACCESS read-only STATUS current DESCRIPTION "Represents the count of malformed frames transmitted by the device in one channel." DEFVAL { 0 } ::= { fsWIPSDevStatEntry 30 } fsWIPSDevStatRxTotalPkt OBJECT-TYPE SYNTAX Counter64 MAX-ACCESS read-only STATUS current DESCRIPTION "Represents the count of total frames received by the device in one channel." DEFVAL { 0 } ::= { fsWIPSDevStatEntry 31 } fsWIPSDevStatRxTotalByte OBJECT-TYPE SYNTAX Counter64 MAX-ACCESS read-only STATUS current DESCRIPTION "Represents the length of total frames received by the device in one channel." DEFVAL { 0 } ::= { fsWIPSDevStatEntry 32 } fsWIPSDevStatRxUnicastPkt OBJECT-TYPE SYNTAX Counter64 MAX-ACCESS read-only STATUS current DESCRIPTION "Represents the count of unicast frames received by the device in one channel." DEFVAL { 0 } ::= { fsWIPSDevStatEntry 33 } fsWIPSDevStatRxUnicastByte OBJECT-TYPE SYNTAX Counter64 MAX-ACCESS read-only STATUS current DESCRIPTION "Represents the length of unicast frames received by the device in one channel." DEFVAL { 0 } ::= { fsWIPSDevStatEntry 34 } fsWIPSDevStatRxMgmt OBJECT-TYPE SYNTAX Counter64 MAX-ACCESS read-only STATUS current DESCRIPTION "Represents the count of management frames received by the device in one channel." DEFVAL { 0 } ::= { fsWIPSDevStatEntry 35 } fsWIPSDevStatRxCtrl OBJECT-TYPE SYNTAX Counter64 MAX-ACCESS read-only STATUS current DESCRIPTION "Represents the count of control frames received by the device in one channel." DEFVAL { 0 } ::= { fsWIPSDevStatEntry 36 } fsWIPSDevStatRxData OBJECT-TYPE SYNTAX Counter64 MAX-ACCESS read-only STATUS current DESCRIPTION "Represents the count of data frames received by the device in one channel." DEFVAL { 0 } ::= { fsWIPSDevStatEntry 37 } fsWIPSDevStatRxRTS OBJECT-TYPE SYNTAX Counter64 MAX-ACCESS read-only STATUS current DESCRIPTION "Represents the count of RTS frames recieved by the device in one channel." DEFVAL { 0 } ::= { fsWIPSDevStatEntry 38 } fsWIPSDevStatRxCTS OBJECT-TYPE SYNTAX Counter64 MAX-ACCESS read-only STATUS current DESCRIPTION "Represents the count of CTS frames recieved by the device in one channel." DEFVAL { 0 } ::= { fsWIPSDevStatEntry 39 } fsWIPSDevStatRxProbeRequest OBJECT-TYPE SYNTAX Counter64 MAX-ACCESS read-only STATUS current DESCRIPTION "Represents the count of probe request frames received by the device in one channel." DEFVAL { 0 } ::= { fsWIPSDevStatEntry 40 } fsWIPSDevStatRxProbeResponse OBJECT-TYPE SYNTAX Counter64 MAX-ACCESS read-only STATUS current DESCRIPTION "Represents the count of probe response frames received by the device in one channel." DEFVAL { 0 } ::= { fsWIPSDevStatEntry 41 } fsWIPSDevStatRxFragment OBJECT-TYPE SYNTAX Counter64 MAX-ACCESS read-only STATUS current DESCRIPTION "Represents the count of fragment frames received by the device in one channel." DEFVAL { 0 } ::= { fsWIPSDevStatEntry 42 } fsWIPSDevStatRxRetry OBJECT-TYPE SYNTAX Counter64 MAX-ACCESS read-only STATUS current DESCRIPTION "Represents the count of retry frames received by the device in one channel." DEFVAL { 0 } ::= { fsWIPSDevStatEntry 43 } fsWIPSDevStatRxAssoRequest OBJECT-TYPE SYNTAX Counter64 MAX-ACCESS read-only STATUS current DESCRIPTION "Represents the count of association request frames received by the device in one channel." DEFVAL { 0 } ::= { fsWIPSDevStatEntry 44 } fsWIPSDevStatRxAssoResponse OBJECT-TYPE SYNTAX Counter64 MAX-ACCESS read-only STATUS current DESCRIPTION "Represents the count of association response frames received by the device in one channel." DEFVAL { 0 } ::= { fsWIPSDevStatEntry 45 } fsWIPSDevStatRxDisassoc OBJECT-TYPE SYNTAX Counter64 MAX-ACCESS read-only STATUS current DESCRIPTION "Represents the count of disassociation frames received by the device in one channel." DEFVAL { 0 } ::= { fsWIPSDevStatEntry 46 } fsWIPSDevStatRxAuth OBJECT-TYPE SYNTAX Counter64 MAX-ACCESS read-only STATUS current DESCRIPTION "Represents the count of authentication frames received by the device in one channel." DEFVAL { 0 } ::= { fsWIPSDevStatEntry 47 } fsWIPSDevStatRxDeauth OBJECT-TYPE SYNTAX Counter64 MAX-ACCESS read-only STATUS current DESCRIPTION "Represents the count of deauthentication frames received by the device in one channel." DEFVAL { 0 } ::= { fsWIPSDevStatEntry 48 } fsWIPSDevStatRxEAPSuccess OBJECT-TYPE SYNTAX Counter64 MAX-ACCESS read-only STATUS current DESCRIPTION "Represents the count of EAP-Success frames received by the device in one channel." DEFVAL { 0 } ::= { fsWIPSDevStatEntry 49 } fsWIPSDevStatRxEAPFailure OBJECT-TYPE SYNTAX Counter64 MAX-ACCESS read-only STATUS current DESCRIPTION "Represents the count of EAP-Failure frames received by the device in one channel." DEFVAL { 0 } ::= { fsWIPSDevStatEntry 50 } fsWIPSDevStatRxEAPOLStart OBJECT-TYPE SYNTAX Counter64 MAX-ACCESS read-only STATUS current DESCRIPTION "Represents the count of EAPOL-Start frames received by the device in one channel." DEFVAL { 0 } ::= { fsWIPSDevStatEntry 51 } fsWIPSDevStatRxEAPOLLogoff OBJECT-TYPE SYNTAX Counter64 MAX-ACCESS read-only STATUS current DESCRIPTION "Represents the count of EAPOL-Logoff frames received by the device in one channel." DEFVAL { 0 } ::= { fsWIPSDevStatEntry 52 } fsWIPSDevStatRxMalformed OBJECT-TYPE SYNTAX Counter64 MAX-ACCESS read-only STATUS current DESCRIPTION "Represents the count of malformed frames received by the device in one channel." DEFVAL { 0 } ::= { fsWIPSDevStatEntry 53 } fsWIPSCtmDeviceTable OBJECT-TYPE SYNTAX SEQUENCE OF FsWIPSCtmDeviceEntry MAX-ACCESS not-accessible STATUS current DESCRIPTION "The table represents the list of device information in static and dynamic countermeasure list." ::= { fsWIPSDetectGroup 15 } fsWIPSCtmDeviceEntry OBJECT-TYPE SYNTAX FsWIPSCtmDeviceEntry MAX-ACCESS not-accessible STATUS current DESCRIPTION "Each entry contains information of countermeasure device." INDEX { fsWIPSCtmDeviceVSD, fsWIPSCtmDeviceMAC } ::= { fsWIPSCtmDeviceTable 1 } FsWIPSCtmDeviceEntry ::= SEQUENCE { fsWIPSCtmDeviceVSD OCTET STRING, fsWIPSCtmDeviceMAC MacAddress, fsWIPSCtmDeviceType INTEGER, fsWIPSCtmDeviceState INTEGER, fsWIPSCtmDeviceStartTime TimeTicks, fsWIPSCtmDeviceCategory FsWIPSDeviceCategoryType, fsWIPSCtmDeviceChl Unsigned32, fsWIPSCtmDevicePrecedence Integer32 } fsWIPSCtmDeviceVSD OBJECT-TYPE SYNTAX OCTET STRING (SIZE (1..32)) MAX-ACCESS not-accessible STATUS current DESCRIPTION "Represents the VSD which the device belongs to." ::= { fsWIPSCtmDeviceEntry 1 } fsWIPSCtmDeviceMAC OBJECT-TYPE SYNTAX MacAddress MAX-ACCESS not-accessible STATUS current DESCRIPTION "Represents the MAC address of countermeasure device." ::= { fsWIPSCtmDeviceEntry 2 } fsWIPSCtmDeviceType OBJECT-TYPE SYNTAX INTEGER { static(1), dynamic(2), staticAnddynamic(3) } MAX-ACCESS read-only STATUS current DESCRIPTION "Represents the type of countermeasure device." ::= { fsWIPSCtmDeviceEntry 3 } fsWIPSCtmDeviceState OBJECT-TYPE SYNTAX INTEGER { none(0), idle(1), pending(2), action(3) } MAX-ACCESS read-only STATUS current DESCRIPTION "Represents the state of countermeasure device." ::= { fsWIPSCtmDeviceEntry 4 } fsWIPSCtmDeviceStartTime OBJECT-TYPE SYNTAX TimeTicks MAX-ACCESS read-only STATUS current DESCRIPTION "Represents the time when start to counter on the device." ::= { fsWIPSCtmDeviceEntry 5 } fsWIPSCtmDeviceCategory OBJECT-TYPE SYNTAX FsWIPSDeviceCategoryType MAX-ACCESS read-only STATUS current DESCRIPTION "Represents the category of the device." ::= { fsWIPSCtmDeviceEntry 6 } fsWIPSCtmDeviceChl OBJECT-TYPE SYNTAX Unsigned32 MAX-ACCESS read-only STATUS current DESCRIPTION "Represents the channel on which the device is countered." ::= { fsWIPSCtmDeviceEntry 7 } fsWIPSCtmDevicePrecedence OBJECT-TYPE SYNTAX Integer32 (0..10) MAX-ACCESS read-only STATUS current DESCRIPTION "Represents the precedence of the device." ::= { fsWIPSCtmDeviceEntry 8 } fsWIPSMalPktStatTable OBJECT-TYPE SYNTAX SEQUENCE OF FsWIPSMalPktStatEntry MAX-ACCESS not-accessible STATUS current DESCRIPTION "The table represents the list of malformed packet statistics information." ::= { fsWIPSDetectGroup 16 } fsWIPSMalPktStatEntry OBJECT-TYPE SYNTAX FsWIPSMalPktStatEntry MAX-ACCESS not-accessible STATUS current DESCRIPTION "Each entry contains information of malformed pakcet." INDEX { fsWIPSMalPktStatSensorName } ::= { fsWIPSMalPktStatTable 1 } FsWIPSMalPktStatEntry ::= SEQUENCE { fsWIPSMalPktStatSensorName OCTET STRING, fsWIPSMalPktStatInvalidIELength Counter64, fsWIPSMalPktStatDuplicatedIE Counter64, fsWIPSMalPktStatRedundantIE Counter64, fsWIPSMalPktStatInvalidPktLength Counter64, fsWIPSMalPktStatIllegalIBSSESS Counter64, fsWIPSMalPktStatInvalidSourceAddr Counter64, fsWIPSMalPktStatOverflowEAPOLKey Counter64, fsWIPSMalPktStatMalAuth Counter64, fsWIPSMalPktStatMalAssoReq Counter64, fsWIPSMalPktStatMalHTIE Counter64, fsWIPSMalPktStatLargeDuration Counter64, fsWIPSMalPktStatNULLProbeRes Counter64, fsWIPSMalPktStatInvalidDeAuthCode Counter64, fsWIPSMalPktStatInvalidDisAssoCode Counter64, fsWIPSMalPktStatOverflowSSID Counter64, fsWIPSMalPktStatFatajack Counter64, fsWIPSMalPktStatInvalidChannel Counter64 } fsWIPSMalPktStatSensorName OBJECT-TYPE SYNTAX OCTET STRING (SIZE (1..64)) MAX-ACCESS not-accessible STATUS current DESCRIPTION "Represents the name of sensor." ::= { fsWIPSMalPktStatEntry 1 } fsWIPSMalPktStatInvalidIELength OBJECT-TYPE SYNTAX Counter64 MAX-ACCESS read-only STATUS current DESCRIPTION "Represents the count of the invalid IE length malformed packets." DEFVAL { 0 } ::= { fsWIPSMalPktStatEntry 2 } fsWIPSMalPktStatDuplicatedIE OBJECT-TYPE SYNTAX Counter64 MAX-ACCESS read-only STATUS current DESCRIPTION "Represents the count of the duplicated IE malformed packets." DEFVAL { 0 } ::= { fsWIPSMalPktStatEntry 3 } fsWIPSMalPktStatRedundantIE OBJECT-TYPE SYNTAX Counter64 MAX-ACCESS read-only STATUS current DESCRIPTION "Represents the count of the redundant IE malformed packets." DEFVAL { 0 } ::= { fsWIPSMalPktStatEntry 4 } fsWIPSMalPktStatInvalidPktLength OBJECT-TYPE SYNTAX Counter64 MAX-ACCESS read-only STATUS current DESCRIPTION "Represents the count of the invalide packet length malformed packets." DEFVAL { 0 } ::= { fsWIPSMalPktStatEntry 5 } fsWIPSMalPktStatIllegalIBSSESS OBJECT-TYPE SYNTAX Counter64 MAX-ACCESS read-only STATUS current DESCRIPTION "Represents the count of the illegal bits of representing IBSS and ESS malformed packets." DEFVAL { 0 } ::= { fsWIPSMalPktStatEntry 6 } fsWIPSMalPktStatInvalidSourceAddr OBJECT-TYPE SYNTAX Counter64 MAX-ACCESS read-only STATUS current DESCRIPTION "Represents the count of invalid source address combination malformed pakcets." DEFVAL { 0 } ::= { fsWIPSMalPktStatEntry 7 } fsWIPSMalPktStatOverflowEAPOLKey OBJECT-TYPE SYNTAX Counter64 MAX-ACCESS read-only STATUS current DESCRIPTION "Represents the count of the overflow EAPOL key malformed packets." DEFVAL { 0 } ::= { fsWIPSMalPktStatEntry 8 } fsWIPSMalPktStatMalAuth OBJECT-TYPE SYNTAX Counter64 MAX-ACCESS read-only STATUS current DESCRIPTION "Represents the count of the malformed authentication packets." DEFVAL { 0 } ::= { fsWIPSMalPktStatEntry 9 } fsWIPSMalPktStatMalAssoReq OBJECT-TYPE SYNTAX Counter64 MAX-ACCESS read-only STATUS current DESCRIPTION "Represents the count of the malformed association request packets." DEFVAL { 0 } ::= { fsWIPSMalPktStatEntry 10 } fsWIPSMalPktStatMalHTIE OBJECT-TYPE SYNTAX Counter64 MAX-ACCESS read-only STATUS current DESCRIPTION "Represents the count of the malformed High Throughput IE segment packets." DEFVAL { 0 } ::= { fsWIPSMalPktStatEntry 11 } fsWIPSMalPktStatLargeDuration OBJECT-TYPE SYNTAX Counter64 MAX-ACCESS read-only STATUS current DESCRIPTION "Represents the count of the malformed large duration packets." DEFVAL { 0 } ::= { fsWIPSMalPktStatEntry 12 } fsWIPSMalPktStatNULLProbeRes OBJECT-TYPE SYNTAX Counter64 MAX-ACCESS read-only STATUS current DESCRIPTION "Represents the count of the malformed null probe response packets." DEFVAL { 0 } ::= { fsWIPSMalPktStatEntry 13 } fsWIPSMalPktStatInvalidDeAuthCode OBJECT-TYPE SYNTAX Counter64 MAX-ACCESS read-only STATUS current DESCRIPTION "Represents the count of the malformed invalid deauthentication reason code packets." DEFVAL { 0 } ::= { fsWIPSMalPktStatEntry 14 } fsWIPSMalPktStatInvalidDisAssoCode OBJECT-TYPE SYNTAX Counter64 MAX-ACCESS read-only STATUS current DESCRIPTION "Represents the count of the malformed invalid disassociation reason code packets." DEFVAL { 0 } ::= { fsWIPSMalPktStatEntry 15 } fsWIPSMalPktStatOverflowSSID OBJECT-TYPE SYNTAX Counter64 MAX-ACCESS read-only STATUS current DESCRIPTION "Represents the count of the malformed SSID length overflow packets." DEFVAL { 0 } ::= { fsWIPSMalPktStatEntry 16} fsWIPSMalPktStatFatajack OBJECT-TYPE SYNTAX Counter64 MAX-ACCESS read-only STATUS current DESCRIPTION "Represents the count of FATA-Jack attack pakcets." DEFVAL { 0 } ::= { fsWIPSMalPktStatEntry 17 } fsWIPSMalPktStatInvalidChannel OBJECT-TYPE SYNTAX Counter64 MAX-ACCESS read-only STATUS current DESCRIPTION "Represents the count of Invalid-Channel attack pakcets." DEFVAL { 0 } ::= { fsWIPSMalPktStatEntry 18 } fsWIPSDctUnassocStaTable OBJECT-TYPE SYNTAX SEQUENCE OF FsWIPSDctUnassocStaEntry MAX-ACCESS not-accessible STATUS current DESCRIPTION "The table represents the list of possible information for Unassociated stations detected by the WIPS." ::= { fsWIPSDetectGroup 17 } fsWIPSDctUnassocStaEntry OBJECT-TYPE SYNTAX FsWIPSDctUnassocStaEntry MAX-ACCESS not-accessible STATUS current DESCRIPTION "Each entry contains possible station information of each Unassociated station detected by WIPS." INDEX { fsWIPSDctUnassocStaVSD, fsWIPSDctUnassocStaMac } ::= { fsWIPSDctUnassocStaTable 1 } FsWIPSDctUnassocStaEntry ::= SEQUENCE { fsWIPSDctUnassocStaVSD OCTET STRING, fsWIPSDctUnassocStaMac MacAddress, fsWIPSDctUnassocStaCategory FsWIPSClientCategoryType, fsWIPSDctUnassocStaRadioType Unsigned32, fsWIPSDctUnassocStaIsCountered TruthValue, fsWIPSDctUnassocStaAdd2BlackList TruthValue, fsWIPSDctUnassocStaAdd2WhiteList TruthValue, fsWIPSDctUnassocStaAdd2IgnoreList TruthValue, fsWIPSDctUnassocStaAdd2CtmList TruthValue, fsWIPSDctUnassocStaFirstDctTm TimeTicks, fsWIPSDctUnassocStaLastDctTm TimeTicks, fsWIPSDctUnassocStaRptSensorNum Integer32, fsWIPSDctUnassocStaState INTEGER, fsWIPSDctUnassocStaVendor OCTET STRING } fsWIPSDctUnassocStaVSD OBJECT-TYPE SYNTAX OCTET STRING (SIZE (1..32)) MAX-ACCESS not-accessible STATUS current DESCRIPTION "Represents the virtual security domain in which the Unassociated station was detected." ::= { fsWIPSDctUnassocStaEntry 1 } fsWIPSDctUnassocStaMac OBJECT-TYPE SYNTAX MacAddress MAX-ACCESS not-accessible STATUS current DESCRIPTION "Represents the MAC address of Unassociated station." ::= { fsWIPSDctUnassocStaEntry 2 } fsWIPSDctUnassocStaCategory OBJECT-TYPE SYNTAX FsWIPSClientCategoryType MAX-ACCESS read-only STATUS current DESCRIPTION "Represents the categorized result of the Unassociated station." ::= { fsWIPSDctUnassocStaEntry 3 } fsWIPSDctUnassocStaRadioType OBJECT-TYPE SYNTAX Unsigned32 MAX-ACCESS read-only STATUS current DESCRIPTION "Represents the radio type used by the Unassociated station. dot11a 0x01 dot11b 0x02 dot11g 0x04 dot11n 0x08 dot11gn 0x10 dot11an 0x20 dot11ac 0x40" ::= { fsWIPSDctUnassocStaEntry 4 } fsWIPSDctUnassocStaIsCountered OBJECT-TYPE SYNTAX TruthValue MAX-ACCESS read-only STATUS current DESCRIPTION "Represents whether the Unassociated station is countered by WIPS." ::= { fsWIPSDctUnassocStaEntry 5 } fsWIPSDctUnassocStaAdd2BlackList OBJECT-TYPE SYNTAX TruthValue MAX-ACCESS read-write STATUS current DESCRIPTION "Represents whether the station will be taken as a rogue station. If the value is true, the MAC address will be automatically added into fsWIPSBlockListTable and the category of the station will be taken as rogue. If the value is false, the MAC address will be automatically deleted from fsWIPSBlockListTable." DEFVAL { false } ::= { fsWIPSDctUnassocStaEntry 6 } fsWIPSDctUnassocStaAdd2WhiteList OBJECT-TYPE SYNTAX TruthValue MAX-ACCESS read-write STATUS current DESCRIPTION "Represents whether the station will be taken as an authorized station. If the value is true, the MAC address will be automatically added into fsWIPSTrustListTable. If the value is false, the MAC address will be automatically deleted from fsWIPSTrustListTable." DEFVAL { false } ::= { fsWIPSDctUnassocStaEntry 7 } fsWIPSDctUnassocStaAdd2IgnoreList OBJECT-TYPE SYNTAX TruthValue MAX-ACCESS read-write STATUS current DESCRIPTION "Represents whether the station will be taken as an ignored station. If the value is true, the MAC address will be automatically added into fsWIPSIgnoreListTable. If the value is false, the MAC address will be automatically deleted from fsWIPSIgnoreListTable." DEFVAL { false } ::= { fsWIPSDctUnassocStaEntry 8 } fsWIPSDctUnassocStaAdd2CtmList OBJECT-TYPE SYNTAX TruthValue MAX-ACCESS read-write STATUS current DESCRIPTION "Represents whether the station will be taken as a countered station. If the value is true, the MAC address will be automatically added into fsWIPSCountermeasureListTable. If the value is false, the MAC address will be automatically deleted from fsWIPSCountermeasureListTable." DEFVAL { false } ::= { fsWIPSDctUnassocStaEntry 9 } fsWIPSDctUnassocStaFirstDctTm OBJECT-TYPE SYNTAX TimeTicks MAX-ACCESS read-only STATUS current DESCRIPTION "Represents the time that station was detected for the first time since system is up." ::= { fsWIPSDctUnassocStaEntry 10 } fsWIPSDctUnassocStaLastDctTm OBJECT-TYPE SYNTAX TimeTicks MAX-ACCESS read-only STATUS current DESCRIPTION "Represents the time that station was detected for the last time since system is up." ::= { fsWIPSDctUnassocStaEntry 11 } fsWIPSDctUnassocStaRptSensorNum OBJECT-TYPE SYNTAX Integer32 MAX-ACCESS read-only STATUS current DESCRIPTION "Represents the number of sensors detecting the Unassociated station." ::= { fsWIPSDctUnassocStaEntry 12 } fsWIPSDctUnassocStaState OBJECT-TYPE SYNTAX INTEGER { authentication(1), association(2), eapSuccess(3), eapLogoff(4), disassociation(5), deauthentication(6), unassociation(7) } MAX-ACCESS read-only STATUS current DESCRIPTION "Represents the authentication state of Unassociated station with AP." ::= { fsWIPSDctUnassocStaEntry 13 } fsWIPSDctUnassocStaVendor OBJECT-TYPE SYNTAX OCTET STRING (SIZE (0..64)) MAX-ACCESS read-only STATUS current DESCRIPTION "Represents the vendor of this Unassociated station detected by WIPS." ::= { fsWIPSDctUnassocStaEntry 14 } fsWIPSDctUnassocStaRptSensorTable OBJECT-TYPE SYNTAX SEQUENCE OF FsWIPSDctUnassocStaRptSensorEntry MAX-ACCESS not-accessible STATUS current DESCRIPTION "The table represents the list of sensors detecting the Unassociated station." ::= { fsWIPSDetectGroup 18 } fsWIPSDctUnassocStaRptSensorEntry OBJECT-TYPE SYNTAX FsWIPSDctUnassocStaRptSensorEntry MAX-ACCESS not-accessible STATUS current DESCRIPTION "Each entry contains possible sensor information of WIPS." INDEX { fsWIPSDctUnassocStaVSD, fsWIPSDctUnassocStaMac, fsWIPSDctUnassocStaRtpSensorName } ::= { fsWIPSDctUnassocStaRptSensorTable 1 } FsWIPSDctUnassocStaRptSensorEntry ::= SEQUENCE { fsWIPSDctUnassocStaRtpSensorName OCTET STRING, fsWIPSDctUnassocStaRptSensorRadioId Integer32, fsWIPSDctUnassocStaRptRSSI Integer32, fsWIPSDctUnassocStaLastRptTm TimeTicks } fsWIPSDctUnassocStaRtpSensorName OBJECT-TYPE SYNTAX OCTET STRING (SIZE (1..64)) MAX-ACCESS not-accessible STATUS current DESCRIPTION "Represents the name of sensor." ::= { fsWIPSDctUnassocStaRptSensorEntry 1 } fsWIPSDctUnassocStaRptSensorRadioId OBJECT-TYPE SYNTAX Integer32 (1..4) MAX-ACCESS read-only STATUS current DESCRIPTION "Represents on which radio the sensor AP detected the Unassociated station." ::= { fsWIPSDctUnassocStaRptSensorEntry 2 } fsWIPSDctUnassocStaRptRSSI OBJECT-TYPE SYNTAX Integer32 MAX-ACCESS read-only STATUS current DESCRIPTION "Represents the current value of signal strength that WIPS sensor AP received from the Unassociated station." ::= { fsWIPSDctUnassocStaRptSensorEntry 3 } fsWIPSDctUnassocStaLastRptTm OBJECT-TYPE SYNTAX TimeTicks MAX-ACCESS read-only STATUS current DESCRIPTION "Represents the time that Unassociated station was detected by this sensor for the last time since system is up." ::= { fsWIPSDctUnassocStaRptSensorEntry 4 } fsWIPSNotifyGroup OBJECT IDENTIFIER ::= { fsWIPS 3 } END