CISCO-WIRELESS-P2P-BPI-MIB

TruthValue1 = true2 = falseRepresents a boolean value. · Integer32

This object identifies whether the Slave Radio is provisioned to use Encryption or not.

OCTET STRING SIZE (0..126)

Public key of the Radio Slave encoded as an ASN.1 SubjectPublicKeyInfo object as defined in the RSA Encryption Standard (PKCS #1) [RSA1].

INTEGER1 = start2 = authWait3 = authorized4 = reauthWait5 = authRejectWait · Integer32

The state of the Radio Slave authorization FSM. The start state indicates that FSM is in its initial state.

INTEGER (0..15) · Integer32

The authorization key sequence number for this FSM.

TimeIntervalA period of time, measured in units of 0.01 seconds. (0..2147483647) · Integer32

The number of seconds left before the current authorization for this FSM expires. If the Radio Slave does not have an active authorization, then this value is 0.

TruthValue1 = true2 = falseRepresents a boolean value. · Integer32

Setting this object to TRUE generates a Reauthorize event in the authorization FSM, as described in section 4.1.2.3.4 of the Baseline Privacy Interface Specification. Reading this object always returns FALSE.

INTEGER (1..1800) · Integer32 · seconds

Grace time for an authorization key. A Radio Slave is expected to start trying to get a new authorization key beginning AuthGraceTime seconds before the authorization key actually expires. The value of this object cannot be changed while the authorization state machine is running. NOTE: When installed in the field, this variable should NEVER be set below 300 which is the lower limit by standard. This variable accepts a wider range to facilitate testing.

INTEGER (1..1800) · Integer32 · seconds

Grace time for a TEK. A Radio Slave is expected to start trying to get a new TEK beginning TEKGraceTime seconds before the TEK actually expires. The value of this object cannot be changed while the authorization state machine is running. NOTE: When installed in the field, this variable should NEVER be set below 300 which is the lower limit by standard. This variable accepts a wider range to facilitate testing.

INTEGER (2..30) · Integer32 · seconds

Authorize Wait Timeout. The value of this object cannot be changed while the authorization state machine is running.

INTEGER (2..30) · Integer32 · seconds

Reauthorize Wait Timeout in seconds. The value of this object cannot be changed while the authorization state machine is running.

INTEGER (1..10) · Integer32 · seconds

Operational Wait Timeout in seconds. The value of this object cannot be changed while the authorization state machine is running.

INTEGER (1..10) · Integer32 · seconds

Rekey Wait Timeout in seconds. The value of this object cannot be changed while the authorization state machine is running.

Counter32

Count of times the Radio Slave has transmitted an Authorization Request message.

Counter32

Count of times the Radio Slave has received an Authorization Reply message.

Counter32

Count of times the Radio Slave has received an Authorization Invalid message.

INTEGER0 = noInformation1 = unauthorizedSlave2 = undefined3 = unsolicited4 = invalidKeySequence5 = keyRequestAuthenticationFailure · Integer32

Error-Code in most recent Authorization Invalid message received by the Radio Slave. On bootup, this has value no-information(0). At all other times, this object reflects the error code received

DisplayStringRepresents textual information taken from the NVT ASCII character set, as defined in pages 4, 10-11 of RFC 854. To summarize RFC 854, the NVT ASCII repertoire specifies: - the use of character codes 0-127 (decimal) - the graphics characters (32-126) are interpreted as US ASCII - NUL, LF, CR, BEL, BS, HT, VT and FF have the special meanings specified in RFC 854 - the other 25 codes have no standard interpretation - the sequence 'CR LF' means newline - the sequence 'CR NUL' means carriage-return - an 'LF' not preceded by a 'CR' means moving to the same column on the next line. - the sequence 'CR x' for any x other than LF or NUL is illegal. (Note that this also means that a string may end with either 'CR LF' or 'CR NUL', but not with CR.) Any object defined using this syntax may not exceed 255 characters in length. SIZE (0..255) · OCTET STRING · hint 255a

Display-String in most recent Authorization Invalid message received by the Radio Slave. This is a zero length string if no Authorization Invalid message has been received since reboot.

TruthValue1 = true2 = falseRepresents a boolean value. · Integer32

This identifies whether this TEK service is using encryption or not. Encryption may not be in use even though cwrBpiRsPrivacyEnable is provisioned. This is possible if the remote is not configured for privacy or it's not running an encryption capable image.

INTEGER1 = start2 = opWait3 = opReauthWait4 = operational5 = rekeyWait6 = rekeyReauthWait · Integer32

The state of the indicated TEK FSM. The start(1) state indicates that FSM is in its initial state.

TimeIntervalA period of time, measured in units of 0.01 seconds. (0..2147483647) · Integer32

The number of seconds left to expire for the oldest active key for this FSM. If this FSM has no active keys then this value will be zero.

TimeIntervalA period of time, measured in units of 0.01 seconds. (0..2147483647) · Integer32

The number of seconds left to expire for the newest active key for this FSM. If this FSM has no active keys then this value will be zero.

Counter32

Count of times the this TEK Service has transmitted a Key Request message.

Counter32

Count of times this TEK Service has received a Key Reply message.

Counter32

Count of times this TEK Service has received a TEK Invalid message.

Counter32

Count of times an Authorization Pending (Auth Pend) event occurred in this TEK Serivce FSM.

INTEGER0 = noInformation1 = unauthorizedSlave2 = undefined3 = unsolicited4 = invalidKeySequence5 = keyRequestAuthenticationFailure · Integer32

Error-Code in most recent TEK Invalid message received by this TEK service. On bootup, this has value no-information(0). At all other times, this object reflects the error code received

DisplayStringRepresents textual information taken from the NVT ASCII character set, as defined in pages 4, 10-11 of RFC 854. To summarize RFC 854, the NVT ASCII repertoire specifies: - the use of character codes 0-127 (decimal) - the graphics characters (32-126) are interpreted as US ASCII - NUL, LF, CR, BEL, BS, HT, VT and FF have the special meanings specified in RFC 854 - the other 25 codes have no standard interpretation - the sequence 'CR LF' means newline - the sequence 'CR NUL' means carriage-return - an 'LF' not preceded by a 'CR' means moving to the same column on the next line. - the sequence 'CR x' for any x other than LF or NUL is illegal. (Note that this also means that a string may end with either 'CR LF' or 'CR NUL', but not with CR.) Any object defined using this syntax may not exceed 255 characters in length. SIZE (0..255) · OCTET STRING · hint 255a

Display-String in most recent TEK Invalid message received by this TEK Service. This is a zero length string if no TEK Invalid message has been received since this TEK Service was started.

TruthValue1 = true2 = falseRepresents a boolean value. · Integer32

This object identifies whether the Master Radio is provisioned to use Encryption or not.

OCTET STRING SIZE (0..126)

Public key of the Radio Slave encoded as an ASN.1 SubjectPublicKeyInfo object as defined in the RSA Encryption Standard (PKCS #1) [RSA1]. This is a zero-length string if the Radio Master does not retain the public key.

INTEGER (0..15) · Integer32

The authorization key sequence number for this Radio Slave.

TimeIntervalA period of time, measured in units of 0.01 seconds. (0..2147483647) · Integer32

The number of seconds left before the current authorization for this Radio Slave expires. If this Radio Slave does not have an active authorization, then the value is zero.

INTEGER (1..6048000) · Integer32 · seconds

Lifetime, in seconds, the Radio Master assigns to an authorization key for this Radio Slave. NOTE: When installed in the field, this variable should NEVER be set below 86400 which is the lower limit by standard. This variable accepts a wider range to facilitate testing.

TruthValue1 = true2 = falseRepresents a boolean value. · Integer32

Setting this object to True(1) causes the Radio Master to invalidate the current Radio Slave authorization key, to transmit an Authorization Invalid message to the Radio Slave, and to invalidate the unicast TEK associated with this Radio Slave authorization. Reading this object always returns False

Counter32

Count of times the Radio Master has received an Authorization Request message from this Radio Slave.

Counter32

Count of times the Radio master has transmitted an Authorization Reply message to this Radio Slave.

Counter32

Count of times the Radio Master has transmitted an Authorization Invalid message to this Radio Slave.

INTEGER0 = noInformation1 = unauthorizedSlave2 = undefined3 = unsolicited4 = invalidKeySequence5 = keyRequestAuthenticationFailure · Integer32

Error-Code in most recent Authorization Invalid message transmitted to the Radio Slave. On bootup, this has value no-information(0). At all other times, this object reflects the error code transmitted

DisplayStringRepresents textual information taken from the NVT ASCII character set, as defined in pages 4, 10-11 of RFC 854. To summarize RFC 854, the NVT ASCII repertoire specifies: - the use of character codes 0-127 (decimal) - the graphics characters (32-126) are interpreted as US ASCII - NUL, LF, CR, BEL, BS, HT, VT and FF have the special meanings specified in RFC 854 - the other 25 codes have no standard interpretation - the sequence 'CR LF' means newline - the sequence 'CR NUL' means carriage-return - an 'LF' not preceded by a 'CR' means moving to the same column on the next line. - the sequence 'CR x' for any x other than LF or NUL is illegal. (Note that this also means that a string may end with either 'CR LF' or 'CR NUL', but not with CR.) Any object defined using this syntax may not exceed 255 characters in length. SIZE (0..255) · OCTET STRING · hint 255a

Display-String in most recent Authorization Invalid message transmitted to the Radio Slave. This is a zero length string if no Authorization Invalid message has been transmitted to the Radio Slave.

TruthValue1 = true2 = falseRepresents a boolean value. · Integer32

This identifies whether this TEK service is using encryption or not. Encryption may not be in use even though cwrBpiRmAuthPrivacyEnable is provisioned. This is possible if the master is not configured for privacy or it's not running an encryption capable image.

INTEGER (1..604800) · Integer32 · seconds

Lifetime, in seconds, the Radio Master assigns to keys for this TEK association. NOTE: When installed in the field, this variable should NEVER be set below 1800 which is the lower limit by standard. This variable accepts a wider range to facilitate testing.

TimeIntervalA period of time, measured in units of 0.01 seconds. (0..2147483647) · Integer32

The number of seconds left to expire for the oldest active key for this TEK association. If this TEK associateion has no active key then the value will be zero.

TimeIntervalA period of time, measured in units of 0.01 seconds. (0..2147483647) · Integer32

The number of seconds left to expire for the newest active key for this TEK association. If this TEK association has no active keys then this value will be zero.

TruthValue1 = true2 = falseRepresents a boolean value. · Integer32

Setting this object to TRUE causes the Radio Master to invalidate the current active TEK(s) (plural due to key transition periods), and to generate a new TEK. Reading this object always returns FALSE.

Counter32

Count of times the Radio Master has received a Key Request message.

Counter32

Count of times the Radio master has transmitted a Key Reply message.

Counter32

Count of times the Radio Master has transmitted a TEK Invalid message.

INTEGER0 = noInformation1 = unauthorizedSlave2 = undefined3 = unsolicited4 = invalidKeySequence5 = keyRequestAuthenticationFailure · Integer32

Error-Code in most recent TEK Invalid message sent in association with this TEK service. On bootup, this has value no-information(0). At all other times, this object reflects the error code received

DisplayStringRepresents textual information taken from the NVT ASCII character set, as defined in pages 4, 10-11 of RFC 854. To summarize RFC 854, the NVT ASCII repertoire specifies: - the use of character codes 0-127 (decimal) - the graphics characters (32-126) are interpreted as US ASCII - NUL, LF, CR, BEL, BS, HT, VT and FF have the special meanings specified in RFC 854 - the other 25 codes have no standard interpretation - the sequence 'CR LF' means newline - the sequence 'CR NUL' means carriage-return - an 'LF' not preceded by a 'CR' means moving to the same column on the next line. - the sequence 'CR x' for any x other than LF or NUL is illegal. (Note that this also means that a string may end with either 'CR LF' or 'CR NUL', but not with CR.) Any object defined using this syntax may not exceed 255 characters in length. SIZE (0..255) · OCTET STRING · hint 255a

Display-String in the most recent TEK Invalid message sent in ssociation with this BPI TEK service. This is a zero length string if no TEK Invalid message has been received since reboot.