HPN-ICF-DOT11-WIDS-MIB
204 objects
This MIB provides information about WIDS feature. GLOSSARY Wireless Intrusion Detection Sensor (WIDS) WIDS is designed to be employed in an area that is serviced by an existing wireless network. It aids in the early detection of malicious outsider attacks and intrusions via wireless networks. Rogue AP A rogue access point is any Wi-Fi access point connected to the network without authorization. As it is not authorized, if there is any weakness in the AP, the hacker will have chance to compromise the network. Rogue Station It is similiar to Rogue AP, while it is a station. Monitor AP An AP will scan or listen to the air, and try to detect wireless attack in the network. Some AP products will work only in monitor role, while some AP products could switch between normal AP role (only provide wireless access service)and monitor AP role. Ad Hoc Mode Station could work under Ad hoc mode, then they could directly do peer-to-peer communication without other device support.
Imported Objects
| HPN-ICF-DOT11-REF-MIB | hpnicfDot11 HpnicfDot11ChannelScopeType HpnicfDot11ObjectIDType HpnicfDot11RadioScopeType HpnicfDot11RadioType HpnicfDot11SSIDStringType |
| SNMPv2-SMI | Integer32 MODULE-IDENTITY NOTIFICATION-TYPE OBJECT-TYPE TimeTicks Unsigned32 |
| SNMPv2-TC | DateAndTime MacAddress RowStatus TEXTUAL-CONVENTION TruthValue |
| OID | Name | Access | Status | Description |
|---|---|---|---|---|
| 1.3.6.1.4.1.11.2.14.11.15.2.75.5 | IdentityhpnicfDot11WIDS | This MIB provides information about WIDS feature. GLOSSARY Wireless Intrusion Detection Sensor (WIDS) WIDS is designed to be employed in an area that is servic… | ||
| 1.3.6.1.4.1.11.2.14.11.15.2.75.5.1 | NodehpnicfDot11WIDSConfigGroup | |||
| 1.3.6.1.4.1.11.2.14.11.15.2.75.5.1.1 | NodehpnicfDot11WIDSGlobalConfigGroup | |||
| 1.3.6.1.4.1.11.2.14.11.15.2.75.5.1.1.1 | ScalarhpnicfDot11WIDSScanMode | read-write | current | Represents the scope of channels to be scanned. The following value are supported all(1) - Do scan on all the channels. auto(2) - Do scan for the channels that… |
| 1.3.6.1.4.1.11.2.14.11.15.2.75.5.1.1.2 | ScalarhpnicfDot11WIDSScanChannelList | read-write | obsolete | Represents the channel scope to be scanned when hpnicfDot11WIDSScanMode is configurated as channelSpec mode. Each channel value will be separated by comma char… |
| 1.3.6.1.4.1.11.2.14.11.15.2.75.5.1.1.3 | ScalarhpnicfDot11CntMsrMode | read-write | current | Represents the countermeasures mode. |
| 1.3.6.1.4.1.11.2.14.11.15.2.75.5.1.1.4 | ScalarhpnicfDot11DevAgingTime | read-write | current | Represents the age time for entries in the detected device table. If an entry is not detected within the interval, it is deleted from the detected device table… |
| 1.3.6.1.4.1.11.2.14.11.15.2.75.5.1.1.5 | ScalarhpnicfDot11DynBlkListEnable | read-write | current | Represents whether the dynamic blacklist feature is enabled or not. 'true' : Enable the dynamic blacklist feature to filter out unwanted clients, which will no… |
| 1.3.6.1.4.1.11.2.14.11.15.2.75.5.1.1.6 | ScalarhpnicfDot11DynBlkListLifeTime | read-write | current | Represents the lifetime for dynamic blacklist entries. If a dynamic blacklist entry is not detected within the lifetime, the entry will be removed from the dyn… |
| 1.3.6.1.4.1.11.2.14.11.15.2.75.5.1.1.7 | ScalarhpnicfDot11FloodAtkDctEnable | read-write | current | Represents whether detection of flood attack is enabled or not. 'true' : Enable the detection of flood attack. 'false' : Disable the detection of flood attack. |
| 1.3.6.1.4.1.11.2.14.11.15.2.75.5.1.1.8 | ScalarhpnicfDot11SpoofAtkDctEnable | read-write | current | Represents whether detection of Spoof attack is enabled or not. 'true' : Enable the detection of Spoof attack. 'false' : Disable the detection of Spoof attack. |
| 1.3.6.1.4.1.11.2.14.11.15.2.75.5.1.1.9 | ScalarhpnicfDot11WeakIVAtkDctEnable | read-write | current | Represents whether detection of weak-iv attack is enabled or not. 'true' : Enable the detection of weak-iv attack. 'false' : Disable the detection of weak-iv a… |
| 1.3.6.1.4.1.11.2.14.11.15.2.75.5.1.1.10 | ScalarhpnicfDot11ResetWIDSRogueHistory | read-write | current | This object is used to clear all entries from the rogue history table. It will return false for get operation. |
| 1.3.6.1.4.1.11.2.14.11.15.2.75.5.1.1.11 | ScalarhpnicfDot11ResetWIDSHistroy | read-write | current | This object is used to clear the history information of attacks detected in the WLAN system. It will return false for get operation. |
| 1.3.6.1.4.1.11.2.14.11.15.2.75.5.1.1.12 | ScalarhpnicfDot11ResetWIDSStatistics | read-write | current | This object is used to clear the statistics of attacks detected in the WLAN system. It will return false for get operation. |
| 1.3.6.1.4.1.11.2.14.11.15.2.75.5.1.1.13 | ScalarhpnicfDot11ResetAllDynBlkList | read-write | current | This object is used to remove all entries from the dynamic blacklist. It will return false for get operation. |
| 1.3.6.1.4.1.11.2.14.11.15.2.75.5.1.1.14 | ScalarhpnicfDot11ResetAllStcBlkList | read-write | current | This object is used to remove all entries from the static blacklist. It will return false for get operation. |
| 1.3.6.1.4.1.11.2.14.11.15.2.75.5.1.1.15 | ScalarhpnicfDot11ResetAllWhtBlkList | read-write | current | This object is used to remove all entries from the static whitelist. It will return false for get operation. |
| 1.3.6.1.4.1.11.2.14.11.15.2.75.5.1.1.16 | ScalarhpnicfDot11ResetAllDctRogueAP | read-write | current | This object is used to clear the information of all detected rogue APs. It will return false for get operation. |
| 1.3.6.1.4.1.11.2.14.11.15.2.75.5.1.1.17 | ScalarhpnicfDot11ResetAllDctRogueSta | read-write | current | This object is used to clear the information of all detected rogue clients. It will return false for get operation. |
| 1.3.6.1.4.1.11.2.14.11.15.2.75.5.1.1.18 | ScalarhpnicfDot11ResetAllDctAdhoc | read-write | current | This object is used to clear the information of all detected ad hoc devices. It will return false for get operation. |
| 1.3.6.1.4.1.11.2.14.11.15.2.75.5.1.1.19 | ScalarhpnicfDot11ResetAllDctDevice | read-write | current | This object is used to clear the information of all detected devices. It will return false for get operation. |
| 1.3.6.1.4.1.11.2.14.11.15.2.75.5.1.1.20 | ScalarhpnicfDot11ResetAllDctSSID | read-write | current | This object is used to clear the information of all detected SSIDs. It will return false for get operation. |
| 1.3.6.1.4.1.11.2.14.11.15.2.75.5.1.1.21 | ScalarhpnicfDot11WidsFloodInterval | read-write | current | The interval of WIDS flood detection. |
| 1.3.6.1.4.1.11.2.14.11.15.2.75.5.1.1.22 | ScalarhpnicfDot11WidsBlackListThreshold | read-write | current | When flood attack exceeds the value of this node, the MAC address will be added into black list. |
| 1.3.6.1.4.1.11.2.14.11.15.2.75.5.1.1.23 | ScalarhpnicfDot11SSIDFilterOnOff | read-write | current | Represents whether the SSID permit feature is enabled or not. |
| 1.3.6.1.4.1.11.2.14.11.15.2.75.5.1.1.24 | ScalarhpnicfDot11BSSIDFilterOnOff | read-write | current | Represents whether the BSSID permit feature is enabled or not. |
| 1.3.6.1.4.1.11.2.14.11.15.2.75.5.1.2 | TablehpnicfDot11WIDSPermitVendorTable | not-accessible | current | The table provides the permitted vendor list, and each vendor will be identified by OUI. The legal device should be made by the permitted vendors. |
| 1.3.6.1.4.1.11.2.14.11.15.2.75.5.1.2.1 | RowhpnicfDot11WIDSPermitVendorEntry | not-accessible | current | Each entry provides the information of permitted vendor. |
| 1.3.6.1.4.1.11.2.14.11.15.2.75.5.1.2.1.1 | ColumnhpnicfDot11VendorOUI | not-accessible | current | Represents the vendor OUI information of the wireless device. |
| 1.3.6.1.4.1.11.2.14.11.15.2.75.5.1.2.1.2 | ColumnhpnicfDot11PermitVendorRowStatus | read-create | current | The status of this table entry. |
| 1.3.6.1.4.1.11.2.14.11.15.2.75.5.1.2.1.3 | ColumnhpnicfDot11VendorName | read-only | current | Represents the vendor name of the wireless device. |
| 1.3.6.1.4.1.11.2.14.11.15.2.75.5.1.3 | TablehpnicfDot11WIDSPermitSSIDTable | not-accessible | current | The table represents the list of SSID could be permitted in the wireless network. |
| 1.3.6.1.4.1.11.2.14.11.15.2.75.5.1.3.1 | RowhpnicfDot11WIDSPermitSSIDEntry | not-accessible | current | Each entry provides the information of permitted SSID. |
| 1.3.6.1.4.1.11.2.14.11.15.2.75.5.1.3.1.1 | ColumnhpnicfDot11PermitSSID | not-accessible | current | Represents the permitted SSID in the wireless network. |
| 1.3.6.1.4.1.11.2.14.11.15.2.75.5.1.3.1.2 | ColumnhpnicfDot11PermitSSIDRowStatus | read-create | current | The status of this table entry. |
| 1.3.6.1.4.1.11.2.14.11.15.2.75.5.1.3.1.3 | ColumnhpnicfDot11PermitSSIDDetected | read-only | current | Represents whether the permitted SSID is detected or not. |
| 1.3.6.1.4.1.11.2.14.11.15.2.75.5.1.4 | TablehpnicfDot11WIDSIgnoreListTable | not-accessible | current | The table provides the MAC address list of stations or APs, and WIDS always take them as legal stations or APs. |
| 1.3.6.1.4.1.11.2.14.11.15.2.75.5.1.4.1 | RowhpnicfDot11WIDSIgnoreListEntry | not-accessible | current | Each entry contains the MAC address of station or AP, and WIDS always take it as legal station or AP. |
| 1.3.6.1.4.1.11.2.14.11.15.2.75.5.1.4.1.1 | ColumnhpnicfDot11IgnoreMAC | not-accessible | current | Represents the MAC address of station or AP, and WIDS always take it as legal station or AP. |
| 1.3.6.1.4.1.11.2.14.11.15.2.75.5.1.4.1.2 | ColumnhpnicfDot11IgnoreListRowStatus | read-create | current | The status of this table entry. |
| 1.3.6.1.4.1.11.2.14.11.15.2.75.5.1.4.1.3 | ColumnhpnicfDot11IgnoreMACDetected | read-only | current | Represents whether the MAC address detected or not. |
| 1.3.6.1.4.1.11.2.14.11.15.2.75.5.1.4.1.4 | ColumnhpnicfDot11IgnoreDevType | read-only | current | Represents the type of the MAC address detected. The value of this object always is unknown if the MAC address is not detected. |
| 1.3.6.1.4.1.11.2.14.11.15.2.75.5.1.5 | TablehpnicfDot11WIDSAttackListTable | not-accessible | current | The table provides the MAC address list of rogue APs or rogue stations, the WIDS will take countermeasure as per the MAC address list. |
| 1.3.6.1.4.1.11.2.14.11.15.2.75.5.1.5.1 | RowhpnicfDot11WIDSAttackListEntry | not-accessible | current | Each entry contains the MAC address of rogue AP or rogue station, and the countermeasure will be taken for it. |
| 1.3.6.1.4.1.11.2.14.11.15.2.75.5.1.5.1.1 | ColumnhpnicfDot11AttackDeviceMac | not-accessible | current | Represents the MAC address of rogue AP or rogue station, and the countermeasure will be taken for it. |
| 1.3.6.1.4.1.11.2.14.11.15.2.75.5.1.5.1.2 | ColumnhpnicfDot11AttackListRowStatus | read-create | current | The status of this table entry. |
| 1.3.6.1.4.1.11.2.14.11.15.2.75.5.1.5.1.3 | ColumnhpnicfDot11AttackDevDetected | read-only | current | Represents whether the assigned MAC address in attack list is detected or not. |
| 1.3.6.1.4.1.11.2.14.11.15.2.75.5.1.5.1.4 | ColumnhpnicfDot11AttackDevType | read-only | current | Represents the type of detected MAC address in attack list. If the MAC address is not detected, it will return unknown(5) for get operation. |
| 1.3.6.1.4.1.11.2.14.11.15.2.75.5.1.6 | TablehpnicfDot11StaticWhiteListTable | not-accessible | current | The table provides the information of whitelist. |
| 1.3.6.1.4.1.11.2.14.11.15.2.75.5.1.6.1 | RowhpnicfDot11StaticWhiteListEntry | not-accessible | current | Each entry contains the information of whitelist. |
| 1.3.6.1.4.1.11.2.14.11.15.2.75.5.1.6.1.1 | ColumnhpnicfDot11StaticWhiteListMAC | not-accessible | current | Represents the MAC addresses in whitelist. |
| 1.3.6.1.4.1.11.2.14.11.15.2.75.5.1.6.1.2 | ColumnhpnicfDot11StaticWhiteListRowStatus | read-create | current | The status of this table entry. |
| 1.3.6.1.4.1.11.2.14.11.15.2.75.5.1.7 | TablehpnicfDot11StaticBlackListTable | not-accessible | current | The table provides the information of static blacklist. |
| 1.3.6.1.4.1.11.2.14.11.15.2.75.5.1.7.1 | RowhpnicfDot11StaticBlackListEntry | not-accessible | current | Each entry contains the information of static blacklist. |
| 1.3.6.1.4.1.11.2.14.11.15.2.75.5.1.7.1.1 | ColumnhpnicfDot11StaticBlackListMAC | not-accessible | current | Represents the MAC addresses in static blacklist. |
| 1.3.6.1.4.1.11.2.14.11.15.2.75.5.1.7.1.2 | ColumnhpnicfDot11StaticBlackListRowStatus | read-create | current | The status of this table entry. |
| 1.3.6.1.4.1.11.2.14.11.15.2.75.5.1.8 | TablehpnicfDot11WIDSPermitBSSIDTable | not-accessible | current | The table represents the list of BSSID could be permitted in the wireless network. |
| 1.3.6.1.4.1.11.2.14.11.15.2.75.5.1.8.1 | RowhpnicfDot11WIDSPermitBSSIDEntry | not-accessible | current | Each entry provides the information of permitted BSSID. |
| 1.3.6.1.4.1.11.2.14.11.15.2.75.5.1.8.1.1 | ColumnhpnicfDot11PermitBSSID | not-accessible | current | Represents the permitted BSSID in the wireless network. |
| 1.3.6.1.4.1.11.2.14.11.15.2.75.5.1.8.1.2 | ColumnhpnicfDot11PermitBSSIDDetected | read-only | current | Represents whether the permitted BSSID is detected or not. |
| 1.3.6.1.4.1.11.2.14.11.15.2.75.5.1.8.1.3 | ColumnhpnicfDot11PermitBSSIDRowStatus | read-create | current | Represents the row status of permit BSSID table. |
| 1.3.6.1.4.1.11.2.14.11.15.2.75.5.2 | NodehpnicfDot11WIDSDetectGroup | |||
| 1.3.6.1.4.1.11.2.14.11.15.2.75.5.2.1 | TablehpnicfDot11WIDSRogueAPTable | not-accessible | current | The table represents the list of possible BSS information for rogue APs detected by the WIDS. |
| 1.3.6.1.4.1.11.2.14.11.15.2.75.5.2.1.1 | RowhpnicfDot11WIDSRogueAPEntry | not-accessible | current | Each entry contains possible BSS information of each rogue AP detected by WIDS. |
| 1.3.6.1.4.1.11.2.14.11.15.2.75.5.2.1.1.1 | ColumnhpnicfDot11RogueAPBSSMAC | not-accessible | current | Represents the BSS MAC address of rogue AP. |
| 1.3.6.1.4.1.11.2.14.11.15.2.75.5.2.1.1.2 | ColumnhpnicfDot11RogueAPVendorName | read-only | current | Represents the vendor name of rogue AP. |
| 1.3.6.1.4.1.11.2.14.11.15.2.75.5.2.1.1.3 | ColumnhpnicfDot11RogueAPMonitorNum | read-only | current | Represents the number of monitor APs which detected the rogue AP. |
| 1.3.6.1.4.1.11.2.14.11.15.2.75.5.2.1.1.4 | ColumnhpnicfDot11RogueAPFirstDetectTm | read-only | current | Represents the time that AP was detected as a rogue AP for the first time. |
| 1.3.6.1.4.1.11.2.14.11.15.2.75.5.2.1.1.5 | ColumnhpnicfDot11RogueAPLastDetectTm | read-only | current | Represents the time that AP was detected as a rogue AP for the last time. |
| 1.3.6.1.4.1.11.2.14.11.15.2.75.5.2.1.1.6 | ColumnhpnicfDot11RogueAPSSID | read-only | current | Represents the SSID broadcasted by rogue AP. |
| 1.3.6.1.4.1.11.2.14.11.15.2.75.5.2.1.1.7 | ColumnhpnicfDot11RogueAPMaxSigStrength | read-only | current | Represents the maximal value of signal strength that WIDS received from the rogue AP. |
| 1.3.6.1.4.1.11.2.14.11.15.2.75.5.2.1.1.8 | ColumnhpnicfDot11RogueAPChannel | read-only | current | Represents on which radio channel of the rogue AP the maximal signal strength was received. |
| 1.3.6.1.4.1.11.2.14.11.15.2.75.5.2.1.1.9 | ColumnhpnicfDot11RogueAPBeaconInterval | read-only | current | Represents the interval for Beacon management frame of rogue AP. |
| 1.3.6.1.4.1.11.2.14.11.15.2.75.5.2.1.1.10 | ColumnhpnicfDot11RogueAPAttackedStatus | read-only | current | Represents whether the countermeasure have taken for the rogue AP. |
| 1.3.6.1.4.1.11.2.14.11.15.2.75.5.2.1.1.11 | ColumnhpnicfDot11RogueAPToIgnore | read-write | current | Represents whether the rogue AP will be taken as a rogue AP. If the value is true, NMS should not display the rogue AP as NMS display rogue AP list, and the MA… |
| 1.3.6.1.4.1.11.2.14.11.15.2.75.5.2.1.1.12 | ColumnhpnicfDot11RogueAPEncryptStatus | read-only | current | Represents whether the rogue AP encrypt the frame or not. |
| 1.3.6.1.4.1.11.2.14.11.15.2.75.5.2.1.1.13 | ColumnhpnicfDot11RogueAPReset | read-write | current | This object is used to clear information of assigned AP. The information of AP which detect assigned rogue AP will be cleared together. It will return false fo… |
| 1.3.6.1.4.1.11.2.14.11.15.2.75.5.2.1.1.14 | ColumnhpnicfDot11RogueAPFirstDetectTmStr | read-only | current | Represents the time that AP was detected as a rogue AP for the first time. |
| 1.3.6.1.4.1.11.2.14.11.15.2.75.5.2.1.1.15 | ColumnhpnicfDot11RogueAPLastDetectTmStr | read-only | current | Represents the time that AP was detected as a rogue AP for the last time. |
| 1.3.6.1.4.1.11.2.14.11.15.2.75.5.2.2 | TablehpnicfDot11WIDSRogueAPExtTable | not-accessible | current | As each rogue AP could be detected by multiple monitor APs, each monitor AP could have some kind of detailed information about a specific rogue AP. In the hpni… |
| 1.3.6.1.4.1.11.2.14.11.15.2.75.5.2.2.1 | RowhpnicfDot11WIDSRogueAPExtEntry | not-accessible | current | Each entry contains information of the rogue AP detected by each monitor AP. |
| 1.3.6.1.4.1.11.2.14.11.15.2.75.5.2.2.1.1 | ColumnhpnicfDot11WIDSAPID | not-accessible | current | To uniquely identify each AP, and relation-ship between hpnicfDot11WIDSAPID and AP device will be static. |
| 1.3.6.1.4.1.11.2.14.11.15.2.75.5.2.2.1.2 | ColumnhpnicfDot11DetectCurAPSigStrength | read-only | current | Represents the current value of signal strength that WIDS monitor AP received from the rogue AP. |
| 1.3.6.1.4.1.11.2.14.11.15.2.75.5.2.2.1.3 | ColumnhpnicfDot11DetectAPByChannel | read-only | current | Represents on which radio channel that WIDS monitor AP detected the rogue AP. |
| 1.3.6.1.4.1.11.2.14.11.15.2.75.5.2.2.1.4 | ColumnhpnicfDot11DetectAPByRadioID | read-only | current | Represents on which radio the monitor AP has detected the rogue AP. |
| 1.3.6.1.4.1.11.2.14.11.15.2.75.5.2.2.1.5 | ColumnhpnicfDot11AttackAPStatus | read-only | current | Represents whether monitor AP have taken countermeasure on the rogue AP. |
| 1.3.6.1.4.1.11.2.14.11.15.2.75.5.2.2.1.6 | ColumnhpnicfDot11DetectAPFirstTm | read-only | current | Represents the time that monitor AP detected the rogue AP for the first time. |
| 1.3.6.1.4.1.11.2.14.11.15.2.75.5.2.2.1.7 | ColumnhpnicfDot11DetectAPLastTm | read-only | current | Represents the time that monitor AP detected the rogue AP for the last time. |
| 1.3.6.1.4.1.11.2.14.11.15.2.75.5.2.3 | TablehpnicfDot11WIDSRogueStaTable | not-accessible | current | The table represents the list of rogue stations detected by the WIDS. |
| 1.3.6.1.4.1.11.2.14.11.15.2.75.5.2.3.1 | RowhpnicfDot11WIDSRogueStaEntry | not-accessible | current | Each entry contains information of each rogue station. |
| 1.3.6.1.4.1.11.2.14.11.15.2.75.5.2.3.1.1 | ColumnhpnicfDot11RogueStaMAC | not-accessible | current | Represents the MAC address of rogue station. |
| 1.3.6.1.4.1.11.2.14.11.15.2.75.5.2.3.1.2 | ColumnhpnicfDot11RogueStaVendorName | read-only | current | Represents the vendor name of rogue station. |
| 1.3.6.1.4.1.11.2.14.11.15.2.75.5.2.3.1.3 | ColumnhpnicfDot11RogueStaMonitorNum | read-only | current | Represents the number of monitor APs which detected the rogue station. |
| 1.3.6.1.4.1.11.2.14.11.15.2.75.5.2.3.1.4 | ColumnhpnicfDot11RogueStaFirstDetectTm | read-only | current | Represents the time that station was detected as a rogue station for the first time. |
| 1.3.6.1.4.1.11.2.14.11.15.2.75.5.2.3.1.5 | ColumnhpnicfDot11RogueStaLastDetectTm | read-only | current | Represents the time that station was detected as a rogue station for the last time. |
| 1.3.6.1.4.1.11.2.14.11.15.2.75.5.2.3.1.6 | ColumnhpnicfDot11RogueStaAccessBSSID | read-only | current | Represents BSS MAC address that rogue station try to access. |
| 1.3.6.1.4.1.11.2.14.11.15.2.75.5.2.3.1.7 | ColumnhpnicfDot11RogueStaMaxSigStrength | read-only | current | Represents the maximal value of signal strength that WIDS received from the rogue station. |
| 1.3.6.1.4.1.11.2.14.11.15.2.75.5.2.3.1.8 | ColumnhpnicfDot11RogueStaChannel | read-only | current | Represents on which radio channel the maximal signal strength was received. |
| 1.3.6.1.4.1.11.2.14.11.15.2.75.5.2.3.1.9 | ColumnhpnicfDot11RogueStaAttackedStatus | read-only | current | Represents whether the countermeasure have taken for the rogue station. |
| 1.3.6.1.4.1.11.2.14.11.15.2.75.5.2.3.1.10 | ColumnhpnicfDot11RogueStaToIgnore | read-write | current | Represents whether the rogue AP will be taken as a rogue station. If the value is true, NMS should not display the rogue station as NMS display rogue station l… |
| 1.3.6.1.4.1.11.2.14.11.15.2.75.5.2.3.1.11 | ColumnhpnicfDot11RogueStaAdHocStatus | read-only | current | Represents whether the rogue station work on the Ad Hoc mode or not. |
| 1.3.6.1.4.1.11.2.14.11.15.2.75.5.2.3.1.12 | ColumnhpnicfDot11RogueStaReset | read-write | current | This object is used to clear information of assigned station. The information of AP which detects assigned rogue station will be cleared together. It will retu… |
| 1.3.6.1.4.1.11.2.14.11.15.2.75.5.2.3.1.13 | ColumnhpnicfDot11RogueStaFirstDetectTmStr | read-only | current | Represents the time that station was detected as a rogue station for the first time. |
| 1.3.6.1.4.1.11.2.14.11.15.2.75.5.2.3.1.14 | ColumnhpnicfDot11RogueStaLastDetectTmStr | read-only | current | Represents the time that station was detected as a rogue station for the last time. |
| 1.3.6.1.4.1.11.2.14.11.15.2.75.5.2.4 | TablehpnicfDot11WIDSRogueStaExtTable | not-accessible | current | As each rogue station could be detected by multiple monitor APs, each monitor AP could have some kind of detailed information about a specific rogue station. I… |
| 1.3.6.1.4.1.11.2.14.11.15.2.75.5.2.4.1 | RowhpnicfDot11WIDSRogueStaExtEntry | not-accessible | current | Each entry contains information of rogue station detected by each monitor AP. |
| 1.3.6.1.4.1.11.2.14.11.15.2.75.5.2.4.1.1 | ColumnhpnicfDot11DetectCurStaSigStrength | read-only | current | Represents the current value of signal strength that WIDS monitor AP received from the rogue station. |
| 1.3.6.1.4.1.11.2.14.11.15.2.75.5.2.4.1.2 | ColumnhpnicfDot11DetectStaByChannel | read-only | current | Represents on which radio channel the maximal signal strength was received. |
| 1.3.6.1.4.1.11.2.14.11.15.2.75.5.2.4.1.3 | ColumnhpnicfDot11DetectStaByRadioID | read-only | current | Represents which radio on the monitor AP has detected the rogue station. |
| 1.3.6.1.4.1.11.2.14.11.15.2.75.5.2.4.1.4 | ColumnhpnicfDot11AttackStaStatus | read-only | current | Represents whether monitor AP have taken countermeasure for the rogue station. |
| 1.3.6.1.4.1.11.2.14.11.15.2.75.5.2.4.1.5 | ColumnhpnicfDot11DetectStaFirstTm | read-only | current | Represents the time that monitor AP detected the rogue station for the first time. |
| 1.3.6.1.4.1.11.2.14.11.15.2.75.5.2.4.1.6 | ColumnhpnicfDot11DetectStaLastTm | read-only | current | Represents the time that monitor AP detected the rogue station for the last time. |
| 1.3.6.1.4.1.11.2.14.11.15.2.75.5.2.5 | TablehpnicfDot11WIDSDetectedDevTable | not-accessible | current | This Table contains information of detected devices. |
| 1.3.6.1.4.1.11.2.14.11.15.2.75.5.2.5.1 | RowhpnicfDot11WIDSDetectedDevEntry | not-accessible | current | Each entry contains information of detected devices. |
| 1.3.6.1.4.1.11.2.14.11.15.2.75.5.2.5.1.1 | ColumnhpnicfDot11WIDSDevMAC | not-accessible | current | Represents MAC address of the device detected. |
| 1.3.6.1.4.1.11.2.14.11.15.2.75.5.2.5.1.2 | ColumnhpnicfDot11WIDSDevType | read-only | current | Represents type of the device detected. |
| 1.3.6.1.4.1.11.2.14.11.15.2.75.5.2.5.1.3 | ColumnhpnicfDot11WIDSDevPermitType | read-only | current | Represents whether the device detected is a rogue device or not. |
| 1.3.6.1.4.1.11.2.14.11.15.2.75.5.2.5.1.4 | ColumnhpnicfDot11WIDSDevVendor | read-only | current | Represents Vendor of the detected device. |
| 1.3.6.1.4.1.11.2.14.11.15.2.75.5.2.5.1.5 | ColumnhpnicfDot11WIDSDevMonitorNum | read-only | current | Represents the number of active APs that detect the device. |
| 1.3.6.1.4.1.11.2.14.11.15.2.75.5.2.5.1.6 | ColumnhpnicfDot11WIDSDevSSID | read-only | current | Represents the service set identifier for the ESS of the device. |
| 1.3.6.1.4.1.11.2.14.11.15.2.75.5.2.5.1.7 | ColumnhpnicfDot11WIDSDevBSSID | read-only | current | Represents the basic service set identifier of the detected device. |
| 1.3.6.1.4.1.11.2.14.11.15.2.75.5.2.5.1.8 | ColumnhpnicfDot11WIDSDevChannel | read-only | current | Represents the channel in which the device was last detected. |
| 1.3.6.1.4.1.11.2.14.11.15.2.75.5.2.5.1.9 | ColumnhpnicfDot11WIDSDevMaxRSSI | read-only | current | Represents the maximum detected RSSI of the device. |
| 1.3.6.1.4.1.11.2.14.11.15.2.75.5.2.5.1.10 | ColumnhpnicfDot11WIDSDevBeaconIntvl | read-only | current | Represents the beacon interval for the detected AP. |
| 1.3.6.1.4.1.11.2.14.11.15.2.75.5.2.5.1.11 | ColumnhpnicfDot11WIDSDevFstDctTime | read-only | current | Represents the time at which the device was first detected. |
| 1.3.6.1.4.1.11.2.14.11.15.2.75.5.2.5.1.12 | ColumnhpnicfDot11WIDSDevLstDctTime | read-only | current | Represents the time at which the rogue AP was detected last time. |
| 1.3.6.1.4.1.11.2.14.11.15.2.75.5.2.5.1.13 | ColumnhpnicfDot11WIDSDevReset | read-write | current | This object is used to clears the information of the device detected in the WLAN. It will return false for get operation. |
| 1.3.6.1.4.1.11.2.14.11.15.2.75.5.2.5.1.14 | ColumnhpnicfDot11WIDSDevSnr | read-only | current | Represents SNR of the device detected. |
| 1.3.6.1.4.1.11.2.14.11.15.2.75.5.2.6 | TablehpnicfDot11WIDSRptAPTable | not-accessible | current | This Table contains information of the AP which detected device in the WLAN. |
| 1.3.6.1.4.1.11.2.14.11.15.2.75.5.2.6.1 | RowhpnicfDot11WIDSRptAPEntry | not-accessible | current | Each entry contains information of the AP which detected device in the WLAN. |
| 1.3.6.1.4.1.11.2.14.11.15.2.75.5.2.6.1.1 | ColumnhpnicfDot11WIDSRptAPMAC | not-accessible | current | Represents the MAC address of the AP that detected the device. |
| 1.3.6.1.4.1.11.2.14.11.15.2.75.5.2.6.1.2 | ColumnhpnicfDot11WIDSRptAPName | read-only | current | Represents the name of the AP that detected the device. |
| 1.3.6.1.4.1.11.2.14.11.15.2.75.5.2.6.1.3 | ColumnhpnicfDot11WIDSRptAPRadioID | read-only | current | Represents the radio index of the AP that detected the device. |
| 1.3.6.1.4.1.11.2.14.11.15.2.75.5.2.6.1.4 | ColumnhpnicfDot11WIDSRptAPMaxRSSI | read-only | current | Represents the maximum detected RSSI of the device. |
| 1.3.6.1.4.1.11.2.14.11.15.2.75.5.2.6.1.5 | ColumnhpnicfDot11WIDSRptAPFstDctTime | read-only | current | Represents the time at which the rogue AP was detected first time. |
| 1.3.6.1.4.1.11.2.14.11.15.2.75.5.2.6.1.6 | ColumnhpnicfDot11WIDSRptAPLstDctTime | read-only | current | Represents the time at which the rogue AP was detected last time. |
| 1.3.6.1.4.1.11.2.14.11.15.2.75.5.2.7 | TablehpnicfDot11DynBlackListTable | not-accessible | current | This table contains information of dynamic blacklist entries. |
| 1.3.6.1.4.1.11.2.14.11.15.2.75.5.2.7.1 | RowhpnicfDot11DynBlackListEntry | not-accessible | current | Each entry contains information of dynamic blacklist. |
| 1.3.6.1.4.1.11.2.14.11.15.2.75.5.2.7.1.1 | ColumnhpnicfDot11DynBlackListMAC | not-accessible | current | Represents the MAC address of the device inserted into the dynamic blacklist. |
| 1.3.6.1.4.1.11.2.14.11.15.2.75.5.2.7.1.2 | ColumnhpnicfDot11DynBlackListTime | read-only | current | Represents the time elapsed since the entry was last updated. |
| 1.3.6.1.4.1.11.2.14.11.15.2.75.5.2.7.1.3 | ColumnhpnicfDot11DynBlackListReason | read-only | current | Represents the reason why the entry was added into the dynamic blacklist. |
| 1.3.6.1.4.1.11.2.14.11.15.2.75.5.2.7.1.4 | ColumnhpnicfDot11DynBlackListReset | read-write | current | This object is used to remove designated entry from the dynamic blacklist. The value which read from this object always is false. |
| 1.3.6.1.4.1.11.2.14.11.15.2.75.5.2.7.1.5 | ColumnhpnicfDot11DynBlackListTimeTicks | read-only | current | Represents the time elapsed since the entry was last updated in units TimeTicks. |
| 1.3.6.1.4.1.11.2.14.11.15.2.75.5.2.8 | TablehpnicfDot11WIDSRogueHistoryTable | not-accessible | current | This table contains information of all expired rogue devices which have been deleted from the list of detected rogue devices because they could not be detected… |
| 1.3.6.1.4.1.11.2.14.11.15.2.75.5.2.8.1 | RowhpnicfDot11WIDSRogueHistoryEntry | not-accessible | current | Each entry contains information of an expired rogue device which has been deleted from the list of detected rogue devices because they could not be detected wi… |
| 1.3.6.1.4.1.11.2.14.11.15.2.75.5.2.8.1.1 | ColumnhpnicfDot11WIDSRogueHisIndex | not-accessible | current | Represents index of this entry. |
| 1.3.6.1.4.1.11.2.14.11.15.2.75.5.2.8.1.2 | ColumnhpnicfDot11WIDSRogueHisMAC | read-only | current | Represents the MAC address of the device. |
| 1.3.6.1.4.1.11.2.14.11.15.2.75.5.2.8.1.3 | ColumnhpnicfDot11WIDSRogueHisVendor | read-only | current | Represents the vendor for the device. |
| 1.3.6.1.4.1.11.2.14.11.15.2.75.5.2.8.1.4 | ColumnhpnicfDot11WIDSRogueHisType | read-only | current | Represents the type of the device. |
| 1.3.6.1.4.1.11.2.14.11.15.2.75.5.2.8.1.5 | ColumnhpnicfDot11WIDSRogueHisChl | read-only | current | Represents the channel in which the device was last detected. |
| 1.3.6.1.4.1.11.2.14.11.15.2.75.5.2.8.1.6 | ColumnhpnicfDot11WIDSRogueHisSSID | read-only | current | Represents the service set identifier for the ESS of the device. |
| 1.3.6.1.4.1.11.2.14.11.15.2.75.5.2.8.1.7 | ColumnhpnicfDot11WIDSRogueHisLastDctTime | read-only | current | Represents the time at which the device was last detected. |
| 1.3.6.1.4.1.11.2.14.11.15.2.75.5.2.9 | TablehpnicfDot11WIDSAtkHistroyTable | not-accessible | current | This table contains information of the history of attacks detected in the WLAN system. |
| 1.3.6.1.4.1.11.2.14.11.15.2.75.5.2.9.1 | RowhpnicfDot11WIDSAtkHistroyEntry | not-accessible | current | Each entry contains information of the history of attacks detected in the WLAN system. |
| 1.3.6.1.4.1.11.2.14.11.15.2.75.5.2.9.1.1 | ColumnhpnicfDot11WIDSAtkHisIndex | not-accessible | current | Represents index of this entry. |
| 1.3.6.1.4.1.11.2.14.11.15.2.75.5.2.9.1.2 | ColumnhpnicfDot11WIDSAtkHisMAC | read-only | current | Represents the Mac address. In case of spoof attacks, this field provides the BSSID which was spoofed. In case of other attacks, this field provides the MAC ad… |
| 1.3.6.1.4.1.11.2.14.11.15.2.75.5.2.9.1.3 | ColumnhpnicfDot11WIDSAtkHisType | read-only | current | Represents the type of attack. |
| 1.3.6.1.4.1.11.2.14.11.15.2.75.5.2.9.1.4 | ColumnhpnicfDot11WIDSAtkHisChl | read-only | current | Represents the channel in which the attack was detected. |
| 1.3.6.1.4.1.11.2.14.11.15.2.75.5.2.9.1.5 | ColumnhpnicfDot11WIDSAtkHisRSSI | read-only | current | Represents the average RSSI of the designated attack. |
| 1.3.6.1.4.1.11.2.14.11.15.2.75.5.2.9.1.6 | ColumnhpnicfDot11WIDSAtkHisDctTime | read-only | current | Represents the time at which this attack was detected. |
| 1.3.6.1.4.1.11.2.14.11.15.2.75.5.2.9.1.7 | ColumnhpnicfDot11WIDSAtkHisAPName | read-only | current | Represents the name of the AP which detected this attack. |
| 1.3.6.1.4.1.11.2.14.11.15.2.75.5.2.10 | NodehpnicfDot11WIDSAtkStatis | |||
| 1.3.6.1.4.1.11.2.14.11.15.2.75.5.2.10.1 | ScalarhpnicfDot11WIDSAtkStasStartTime | read-only | current | Represents current attack tracking time. It is started at the system startup and is refreshed each hour subsequently. |
| 1.3.6.1.4.1.11.2.14.11.15.2.75.5.2.10.2 | TablehpnicfDot11WIDSAtkStasTable | not-accessible | current | This table contains information of the counts of attacks detected. |
| 1.3.6.1.4.1.11.2.14.11.15.2.75.5.2.10.2.1 | RowhpnicfDot11WIDSAtkStasEntry | not-accessible | current | Each entry contains information of the counts of attacks detected. |
| 1.3.6.1.4.1.11.2.14.11.15.2.75.5.2.10.2.1.1 | ColumnhpnicfDot11WIDSAtkStasType | not-accessible | current | Represents the type of attack. |
| 1.3.6.1.4.1.11.2.14.11.15.2.75.5.2.10.2.1.2 | ColumnhpnicfDot11WIDSAtkStasCurCnt | read-only | current | Represents the count of attacks detected since the time specified by the current attack tracking time. The current attack tracking time is started at the syste… |
| 1.3.6.1.4.1.11.2.14.11.15.2.75.5.2.10.2.1.3 | ColumnhpnicfDot11WIDSAtkStasTotalCnt | read-only | current | Represents the total count of the attacks detected since the system startup. |
| 1.3.6.1.4.1.11.2.14.11.15.2.75.5.2.11 | TablehpnicfDot11BlackListTable | not-accessible | current | This table contains information of blacklist entries, including dynamic and static. |
| 1.3.6.1.4.1.11.2.14.11.15.2.75.5.2.11.1 | RowhpnicfDot11BlackListEntry | not-accessible | current | Each entry contains information of blacklist. |
| 1.3.6.1.4.1.11.2.14.11.15.2.75.5.2.11.1.1 | ColumnhpnicfDot11BlackListMAC | not-accessible | current | This object represents the MAC address of the device inserted into the table. |
| 1.3.6.1.4.1.11.2.14.11.15.2.75.5.2.11.1.2 | ColumnhpnicfDot11BlackListTime | read-only | current | Represents the time elapsed since the entry was last updated. If it is static blacklist, the value is always 0. |
| 1.3.6.1.4.1.11.2.14.11.15.2.75.5.2.11.1.3 | ColumnhpnicfDot11BlackListReason | read-only | current | Represents the reason why the entry was added into the blacklist. |
| 1.3.6.1.4.1.11.2.14.11.15.2.75.5.2.11.1.4 | ColumnhpnicfDot11BlackListRowStatus | read-create | current | This object represents the status of this table entry. |
| 1.3.6.1.4.1.11.2.14.11.15.2.75.5.2.11.1.5 | ColumnhpnicfDot11BlackListTimeTicks | read-only | current | Represents the time elapsed since the entry was last updated in timetick. If it is static blacklist, the value is always 0. |
| 1.3.6.1.4.1.11.2.14.11.15.2.75.5.3 | NodehpnicfDot11WIDSNotifyGroup | |||
| 1.3.6.1.4.1.11.2.14.11.15.2.75.5.3.1 | NodehpnicfDot11WIDSTraps | |||
| 1.3.6.1.4.1.11.2.14.11.15.2.75.5.3.1.1 | NotificationhpnicfDot11WIDSDetectRogueTrap | current | The notification represents that a rogue AP or a station was detected by WIDS. The NMS would refer to MIB table under hpnicfDot11WIDSDetectGroup group to get m… | |
| 1.3.6.1.4.1.11.2.14.11.15.2.75.5.3.1.2 | NotificationhpnicfDot11WIDSAdHocTrap | current | The notification represents a rogue Ad hoc station was detected. | |
| 1.3.6.1.4.1.11.2.14.11.15.2.75.5.3.1.3 | NotificationhpnicfDot11WIDSUnauthorSSIDTrap | current | The notification represents which unauthorized SSID are accessed in the network. The notification will be sent to NMS when an unauthorized SSID is detected on … | |
| 1.3.6.1.4.1.11.2.14.11.15.2.75.5.3.1.4 | NotificationhpnicfDot11WIDSDisappearRogueTrap | current | The notification represents that a rogue device has aged out and moved to history table or the device type has been changed to friendly. The notification will … | |
| 1.3.6.1.4.1.11.2.14.11.15.2.75.5.3.1.5 | NotificationhpnicfDot11WIDSDetectAttack | current | This notification occurs when some type of attack is detected. | |
| 1.3.6.1.4.1.11.2.14.11.15.2.75.5.3.1.6 | NotificationhpnicfDot11WIDSDetectWBridge | current | This notification occurs whenever a detected device is classified as rogue wireless-bridge. | |
| 1.3.6.1.4.1.11.2.14.11.15.2.75.5.3.1.7 | NotificationhpnicfDot11WIDSFloodTrap | current | This notification occurs when flood attack is detected. | |
| 1.3.6.1.4.1.11.2.14.11.15.2.75.5.3.1.8 | NotificationhpnicfDot11WIDSSpoofTrap | current | This notification occurs when spoof attack is detected. | |
| 1.3.6.1.4.1.11.2.14.11.15.2.75.5.3.1.9 | NotificationhpnicfDot11WIDSWeakIVTrap | current | This notification occurs when weak IV attack is detected. | |
| 1.3.6.1.4.1.11.2.14.11.15.2.75.5.3.2 | NodehpnicfDot11WIDSTrapVarObjects | |||
| 1.3.6.1.4.1.11.2.14.11.15.2.75.5.3.2.1 | ScalarhpnicfDot11WIDSRogueMAC | accessible-for-notify | current | Represents which rogue AP or station. |
| 1.3.6.1.4.1.11.2.14.11.15.2.75.5.3.2.2 | ScalarhpnicfDot11WIDSRogueType | accessible-for-notify | current | Represents the rogue type. The following value are supported rogueAp(1) - A rogue AP rogueStation(2) - A rogue Station |
| 1.3.6.1.4.1.11.2.14.11.15.2.75.5.3.2.3 | ScalarhpnicfDot11WIDSMonitorMAC | accessible-for-notify | current | Represents which monitor detected the rogue AP or station. |
| 1.3.6.1.4.1.11.2.14.11.15.2.75.5.3.2.4 | ScalarhpnicfDot11WIDSAdHocMAC | accessible-for-notify | current | Represents the MAC address of Ad hoc station. |
| 1.3.6.1.4.1.11.2.14.11.15.2.75.5.3.2.5 | ScalarhpnicfDot11UnauthorSSIDName | accessible-for-notify | current | Represents an unauthorized SSID. |
| 1.3.6.1.4.1.11.2.14.11.15.2.75.5.3.2.6 | ScalarhpnicfDot11MonitorAPID | accessible-for-notify | current | Represents monitor AP's APID. |
| 1.3.6.1.4.1.11.2.14.11.15.2.75.5.3.2.7 | ScalarhpnicfDot11MonitorApRadioID | accessible-for-notify | current | Represents monitor AP's radio ID |
| 1.3.6.1.4.1.11.2.14.11.15.2.75.5.3.2.8 | ScalarhpnicfDot11WIDSAtkMac | accessible-for-notify | current | Represents mac address of attack source. |
| 1.3.6.1.4.1.11.2.14.11.15.2.75.5.3.2.9 | ScalarhpnicfDot11WIDSAtkFrameType | accessible-for-notify | current | Represents attack frame type. |
| 1.3.6.1.4.1.11.2.14.11.15.2.75.5.3.2.10 | ScalarhpnicfDot11WIDSAtkChannel | accessible-for-notify | current | Represents attack channel. |
| 1.3.6.1.4.1.11.2.14.11.15.2.75.5.3.2.11 | ScalarhpnicfDot11WIDSAtkTime | accessible-for-notify | current | Represents when attacking happened. |
| 1.3.6.1.4.1.11.2.14.11.15.2.75.5.3.2.12 | ScalarhpnicfDot11WIDSAtkDestMac | accessible-for-notify | current | Represents mac address of attack destination. |
| 1.3.6.1.4.1.11.2.14.11.15.2.75.5.3.2.13 | ScalarhpnicfDot11WIDSFirstTrapTime | accessible-for-notify | current | Represents the first trap time. |
Type Definitions
| Name | Syntax | Status | Description |
|---|---|---|---|
| HpnicfDot11WIDSAtkType | INTEGER { act(1), asr(2), aur(3), daf(4), dar(5), ndf(6), pbr(7), rar(8), saf(9), sdf(10), wiv(11), unknown(12) } | current | The type of attack. This object has following defined values: 'act': Action Frame 'asr': Association Request 'aur': Authentication Request 'daf': Deauthentication Frame 'dar': Disassociation Request 'ndf': Null Data Fra… |
| HpnicfDot11WIDSDevPermitType | INTEGER { permit(1), rogue(2) } | current | Represents whether the detected device is permitted or a rogue. |
| HpnicfDot11WIDSDevType | INTEGER { client(1), ap(2), adhoc(3), wirelessBridge(4), unknown(5) } | current | The type of device detected. |