1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
136
137
138
139
140
141
142
143
144
145
146
147
148
149
150
151
152
153
154
155
156
157
158
159
160
161
162
163
164
165
166
167
168
169
170
171
172
173
174
175
176
177
178
179
180
181
182
183
184
185
186
187
188
189
190
191
192
193
194
195
196
197
198
199
200
201
202
203
204
205
206
207
208
209
210
211
212
213
214
215
216
217
218
219
220
221
222
223
224
225
226
227
228
229
230
231
232
233
234
235
236
237
238
239
240
241
242
243
244
245
246
247
248
249
250
251
252
253
254
255
256
257
258
259
260
261
262
263
264
265
266
267
268
269
270
271
272
273
274
275
276
277
278
279
280
281
282
283
284
285
286
287
288
289
290
291
292
293
294
295
296
297
298
299
300
301
302
303
304
305
306
307
308
309
310
311
312
313
314
315
316
317
318
319
320
321
322
323
324
325
326
327
328
329
330
331
332
333
334
335
336
337
338
339
340
341
342
343
344
345
346
347
348
349
350
351
352
353
354
355
356
357
358
359
360
361
362
363
364
365
366
367
368
369
370
371
372
373
374
375
376
377
378
379
380
381
382
383
384
385
386
387
388
389
390
391
392
393
394
395
396
397
398
399
400
401
402
403
404
405
406
407
408
409
410
411
412
413
414
415
416
417
418
419
420
421
422
423
424
425
426
427
428
429
430
431
432
433
434
435
436
437
438
439
440
441
442
443
444
445
446
447
448
449
450
451
452
453
454
455
456
457
458
459
460
461
462
463
464
465
466
467
468
469
470
471
472
473
474
475
476
477
478
479
480
481
482
483
484
485
486
487
488
489
490
491
492
493
494
495
496
497
498
499
500
501
502
503
504
505
506
507
508
509
510
511
512
513
514
515
516
517
518
519
520
521
522
523
524
525
526
527
528
529
530
531
532
533
534
535
536
537
538
539
540
541
542
543
544
545
546
547
548
549
550
551
552
553
554
555
556
557
558
559
560
561
562
563
564
565
566
567
568
569
570
571
572
573
574
575
576
577
578
579
580
581
582
583
584
585
586
587
588
589
590
591
592
593
594
595
596
597
598
599
600
601
602
603
604
605
606
607
608
609
610
611
612
613
614
615
616
617
618
619
620
621
622
623
624
625
626
627
628
629
630
631
632
633
634
635
636
637
638
639
640
641
642
643
644
645
646
647
648
649
650
651
652
653
654
655
656
657
658
659
660
661
662
663
664
665
666
667
668
669
670
671
672
673
674
675
676
677
678
679
680
681
682
683
684
685
686
687
688
689
690
691
692
693
694
695
696
697
698
699
700
701
702
703
704
705
706
707
708
709
710
711
712
713
714
715
716
717
718
719
720
721
722
723
724
725
726
727
728
729
730
731
732
733
734
735
736
737
738
739
740
741
742
743
744
745
746
747
748
749
750
751
752
753
754
755
756
757
758
759
760
761
762
763
764
765
766
767
768
769
770
771
772
|
-- Dot1x Advanced Features MIB overview:
-- Dot1x Advanced Features MIB falls under lb6m MIB node of the private subtree.
NETGEAR-DOT1X-ADVANCED-FEATURES-MIB DEFINITIONS ::= BEGIN
-- Netgear Dot1x Advanced Features MIB
-- Copyright Netgear Inc (2003-2007) All rights reserved.
-- This SNMP Management Information Specification
-- embodies Netgear Inc's confidential and proprietary
-- intellectual property. Netgear Inc retains all title
-- and ownership in the Specification including any revisions.
-- This Specification is supplied "AS IS", Netgear Inc
-- makes no warranty, either expressed or implied,
-- as to the use, operation, condition, or performance of the
-- Specification.
IMPORTS
MODULE-IDENTITY, OBJECT-TYPE, NOTIFICATION-TYPE,
Unsigned32, TimeTicks FROM SNMPv2-SMI
dot1xPaePortNumber FROM IEEE8021-PAE-MIB
TEXTUAL-CONVENTION,
RowStatus,MacAddress,DateAndTime FROM SNMPv2-TC
DisplayString FROM RFC1213-MIB
lb6m FROM QUANTA-LB6M-REF-MIB;
fastPathdot1xAdvanced MODULE-IDENTITY
LAST-UPDATED "201101260000Z" -- 26 January 2011 12:00:00 GMT
ORGANIZATION "Netgear Inc"
CONTACT-INFO ""
DESCRIPTION
"The Netgear Private MIB for FastPath Dot1x Advanced Features "
-- Revision history.
REVISION
"201101260000Z" -- 26 January 2011 12:00:00 GMT
DESCRIPTION
"Postal address updated."
REVISION
"200705230000Z" -- 23 May 2007 12:00:00 GMT
DESCRIPTION
"Netgear branding related changes."
::= { lb6m 36 }
Dot1xPortControlMode ::= TEXTUAL-CONVENTION
STATUS current
DESCRIPTION
"The control values of the Authenticator PAE controlled
Port."
SYNTAX INTEGER {
forceUnauthorized(1),
auto(2),
forceAuthorized(3),
macBased(4)
}
Dot1xSessionTerminationAction ::= TEXTUAL-CONVENTION
STATUS current
DESCRIPTION
"The action to be taken on session termination ."
SYNTAX INTEGER {
default(1),
reauthenticate(2)
}
agentDot1xEnhancementConfigGroup OBJECT IDENTIFIER ::= { fastPathdot1xAdvanced 1 }
agentDot1xRadiusVlanAssignment OBJECT-TYPE
SYNTAX INTEGER {
enable(1),
disable(2)
}
MAX-ACCESS read-write
STATUS current
DESCRIPTION
"Enable/Disable dot1x Vlan Assignment Support on the switch."
DEFVAL { disable }
::= { agentDot1xEnhancementConfigGroup 1 }
agentDot1xDynamicVlanCreationMode OBJECT-TYPE
SYNTAX INTEGER {
enable(1),
disable(2)
}
MAX-ACCESS read-write
STATUS current
DESCRIPTION
"Enable/Disable dot1x dynamic vlan creation Support on the switch."
DEFVAL { disable }
::= { agentDot1xEnhancementConfigGroup 2 }
agentDot1xEapolFloodMode OBJECT-TYPE
SYNTAX INTEGER {
enable(1),
disable(2)
}
MAX-ACCESS read-write
STATUS current
DESCRIPTION
"Enable/Disable dot1x eapol flooding mode on the switch."
DEFVAL { disable }
::= { agentDot1xEnhancementConfigGroup 3 }
--**************************************************************************************
-- agentDot1xPortConfigGroup -> Contains MIB objects configuring/displaying Dot1x Port details
-- and associated Functionality
--
--**************************************************************************************
agentDot1xPortConfigGroup OBJECT IDENTIFIER ::= { fastPathdot1xAdvanced 2 }
--------------------------------------------------------------
-- The Dot1x Enhanced Port Table
--------------------------------------------------------------
agentDot1xPortConfigTable OBJECT-TYPE
SYNTAX SEQUENCE OF AgentDot1xPortConfigEntry
MAX-ACCESS not-accessible
STATUS current
DESCRIPTION "A table for dot1x enhanced Port details and associated functionality."
::= { agentDot1xPortConfigGroup 1 }
agentDot1xPortConfigEntry OBJECT-TYPE
SYNTAX AgentDot1xPortConfigEntry
MAX-ACCESS not-accessible
STATUS current
DESCRIPTION "Represents entry for port config table."
INDEX { dot1xPaePortNumber}
::= {agentDot1xPortConfigTable 1 }
AgentDot1xPortConfigEntry ::= SEQUENCE {
agentDot1xPortControlMode
Dot1xPortControlMode,
agentDot1xGuestVlanId
Unsigned32,
agentDot1xGuestVlanPeriod
Unsigned32,
agentDot1xUnauthenticatedVlan
Unsigned32,
agentDot1xMaxUsers
Unsigned32,
agentDot1xPortVlanAssigned
Unsigned32,
agentDot1xPortVlanAssignedReason
INTEGER,
agentDot1xPortSessionTimeout
Unsigned32,
agentDot1xPortTerminationAction
Dot1xSessionTerminationAction,
agentDot1xPortMABenabled
INTEGER,
agentDot1xPortMABenabledOperational
INTEGER
}
agentDot1xPortControlMode OBJECT-TYPE
SYNTAX Dot1xPortControlMode
MAX-ACCESS read-write
STATUS current
DESCRIPTION
"Dot1x port control mode of this port.The Port control mode .
The port control mode for this interface can take the following values ,
force-unauthorized - the port is in unauthorized mode,
auto-Port based mode. If a client authenticates suscessfully, then the interface is authorized .
Otherwise, the port is in unauthorized mode.
If more than one clients are attached to the port , then only one client needs to authenticate to allow other clients access.
force-authorized - The port is placed in authorized mode
macBased - If more than one client is attached to the port, then each client needs to authenticate separately.
This object depcreates dot1xAuthAuthControlledPortControl object in IEEE8021-PAE-MIB"
DEFVAL {auto}
::= { agentDot1xPortConfigEntry 1}
agentDot1xGuestVlanId OBJECT-TYPE
SYNTAX Unsigned32
MAX-ACCESS read-write
STATUS current
DESCRIPTION
"Specifies the Guest Vlan of the port. A port will
be moved to its Guest Vlan if no client sucessfully
authenticates on that port for the Guest Vlan Period.
A value of zero indicates no Guest Vlan is configured for the interface."
DEFVAL {0}
::= { agentDot1xPortConfigEntry 2}
agentDot1xGuestVlanPeriod OBJECT-TYPE
SYNTAX Unsigned32 (1..300)
MAX-ACCESS read-write
STATUS current
DESCRIPTION
"The value, in seconds, of the guestVlanPeriod constant
currently in use for Guest Vlan Assignment for the
port ."
DEFVAL { 90 }
::= { agentDot1xPortConfigEntry 3 }
agentDot1xUnauthenticatedVlan OBJECT-TYPE
SYNTAX Unsigned32
MAX-ACCESS read-write
STATUS current
DESCRIPTION
"Specifies the Unauthenticated Vlan of the port. A port will
be moved to its unauthenticated Vlan if the client authenticates unsucessfully
on that port .
A value of zero indicates no Unauthenticated Vlan is configured for the port. "
DEFVAL {0}
::= { agentDot1xPortConfigEntry 4}
agentDot1xMaxUsers OBJECT-TYPE
SYNTAX Unsigned32
MAX-ACCESS read-write
STATUS current
DESCRIPTION
" Specifies the maximum users or clients that can authenticate on this port when the port control mode is macBased. "
::= { agentDot1xPortConfigEntry 5}
agentDot1xPortVlanAssigned OBJECT-TYPE
SYNTAX Unsigned32
MAX-ACCESS read-only
STATUS current
DESCRIPTION
" Specifies the vlan the port is assigned to by Dot1x .
Only relevant if the port control mode of the port is auto. "
DEFVAL {0}
::= { agentDot1xPortConfigEntry 6}
agentDot1xPortVlanAssignedReason OBJECT-TYPE
SYNTAX INTEGER {
default(1),
radius(2),
unauthenticatedVlan(3),
guestVlan(4),
voiceVlan(5),
monitorVlan(6),
notAssigned(7)
}
MAX-ACCESS read-only
STATUS current
DESCRIPTION
" Reason the port is assigned to the vlan specified by agentDot1xPortVlanAssigned .
Only relevant if the port control mode of the port is auto. "
DEFVAL {5}
::= { agentDot1xPortConfigEntry 7}
agentDot1xPortSessionTimeout OBJECT-TYPE
SYNTAX Unsigned32
MAX-ACCESS read-only
STATUS current
DESCRIPTION
" Specifies the session timeout value assigned by the Radius server for this port .
Only relevant if the port control mode of the port is auto. "
::= { agentDot1xPortConfigEntry 8}
agentDot1xPortTerminationAction OBJECT-TYPE
SYNTAX Dot1xSessionTerminationAction
MAX-ACCESS read-only
STATUS current
DESCRIPTION
" Specifies the session termination action assigned by the Radius Server .This is the action taken when the session times out .
Only relevant if the port control mode of the port is auto. "
DEFVAL {1}
::= { agentDot1xPortConfigEntry 9}
agentDot1xPortMABenabled OBJECT-TYPE
SYNTAX INTEGER {
enable(1),
disable(2)
}
MAX-ACCESS read-write
STATUS current
DESCRIPTION
" Specifies if Mac-based bypass authentication is configured for the port. "
DEFVAL {2}
::= { agentDot1xPortConfigEntry 10}
agentDot1xPortMABenabledOperational OBJECT-TYPE
SYNTAX INTEGER {
enable(1),
disable(2)
}
MAX-ACCESS read-only
STATUS current
DESCRIPTION
" Displays the operational value of the Mac-based authentication bypass mode (MAB) on the port. "
DEFVAL {2}
::= { agentDot1xPortConfigEntry 11}
--**************************************************************************************
-- agentDot1xClientConfigGroup -> Contains MIB objects displaying Dot1x Client details and
-- associated Functionality
--
--**************************************************************************************
agentDot1xClientConfigGroup OBJECT IDENTIFIER ::= { fastPathdot1xAdvanced 3 }
agentDot1xClientConfigTable OBJECT-TYPE
SYNTAX SEQUENCE OF AgentDot1xClientConfigEntry
MAX-ACCESS not-accessible
STATUS current
DESCRIPTION "A table for dot1x Client details and associated functionality."
::= { agentDot1xClientConfigGroup 1 }
agentDot1xClientConfigEntry OBJECT-TYPE
SYNTAX AgentDot1xClientConfigEntry
MAX-ACCESS not-accessible
STATUS current
DESCRIPTION "Represents entry for port config table."
INDEX { agentDot1xClientMacAddress}
::= {agentDot1xClientConfigTable 1 }
AgentDot1xClientConfigEntry ::= SEQUENCE {
agentDot1xClientMacAddress
MacAddress,
agentDot1xLogicalPort
Unsigned32,
agentDot1xInterface
Unsigned32,
agentDot1xClientAuthPAEstate
INTEGER,
agentDot1xClientBackendState
INTEGER,
agentDot1xClientUserName
DisplayString,
agentDot1xClientSessionTime
Unsigned32,
agentDot1xClientFilterID
DisplayString,
agentDot1xClientVlanAssigned
Unsigned32,
agentDot1xClientVlanAssignedReason
INTEGER,
agentDot1xClientSessionTimeout
Unsigned32,
agentDot1xClientTerminationAction
Dot1xSessionTerminationAction
}
agentDot1xClientMacAddress OBJECT-TYPE
SYNTAX MacAddress
MAX-ACCESS read-only
STATUS current
DESCRIPTION
"Specifies the client MAC address of the client. "
::= { agentDot1xClientConfigEntry 1}
agentDot1xLogicalPort OBJECT-TYPE
SYNTAX Unsigned32
MAX-ACCESS read-only
STATUS current
DESCRIPTION
"Specifies the client MAC address of the client . "
::= { agentDot1xClientConfigEntry 2}
agentDot1xInterface OBJECT-TYPE
SYNTAX Unsigned32
MAX-ACCESS read-only
STATUS current
DESCRIPTION
"Specifies the physical interface to which the client is attached . "
::= { agentDot1xClientConfigEntry 3}
agentDot1xClientAuthPAEstate OBJECT-TYPE
SYNTAX INTEGER {
initialize(1),
disconnected(2),
connecting(3),
authenticating(4),
authenticated(5),
aborting(6),
held(7),
forceAuth(8),
forceUnauth(9)
}
MAX-ACCESS read-only
STATUS current
DESCRIPTION
"The current value of the Authenticator PAE state
machine for the client."
::={ agentDot1xClientConfigEntry 4}
agentDot1xClientBackendState OBJECT-TYPE
SYNTAX INTEGER {
request(1),
response(2),
success(3),
fail(4),
timeout(5),
idle(6),
initialize(7)
}
MAX-ACCESS read-only
STATUS current
DESCRIPTION
"The current state of the Backend Authentication
state machine."
::={ agentDot1xClientConfigEntry 5}
agentDot1xClientUserName OBJECT-TYPE
SYNTAX DisplayString
MAX-ACCESS read-only
STATUS current
DESCRIPTION
"Specifies the username with which the client is authenticated to the Radius server .
This value is only valid when the client is in authenticated state. "
::= { agentDot1xClientConfigEntry 6}
agentDot1xClientSessionTime OBJECT-TYPE
SYNTAX Unsigned32
MAX-ACCESS read-only
STATUS current
DESCRIPTION
"Specifies the time elapsed in seconds since the client was authenticated in this session.
This value is only valid when the client is in authenticated state. "
::= { agentDot1xClientConfigEntry 7}
agentDot1xClientFilterID OBJECT-TYPE
SYNTAX DisplayString
MAX-ACCESS read-only
STATUS current
DESCRIPTION
"Specifies the Filter ID or Diffserv Policy name to be applied to the session .
This vlaue is populated only if it has been assigned by the RADIUS server.
This value is only valid when the client is in authenticated state."
::= { agentDot1xClientConfigEntry 8}
agentDot1xClientVlanAssigned OBJECT-TYPE
SYNTAX Unsigned32
MAX-ACCESS read-only
STATUS current
DESCRIPTION
"Specifies the vlan the client is associated with by Dot1x .
This value is only valid when the client is in authenticated state."
::= { agentDot1xClientConfigEntry 9}
agentDot1xClientVlanAssignedReason OBJECT-TYPE
SYNTAX INTEGER {
default(1),
radius(2),
unauthenticatedVlan(3),
monitorVlan(6),
invalid(7)
}
MAX-ACCESS read-only
STATUS current
DESCRIPTION
" Reason the client is associated to the vlan specified by agentDot1xClientVlanAssigned .
This value is only valid when the client is in authenticated state."
::= { agentDot1xClientConfigEntry 10}
agentDot1xClientSessionTimeout OBJECT-TYPE
SYNTAX Unsigned32
MAX-ACCESS read-only
STATUS current
DESCRIPTION
"Specifies the session time remaining for the client if assigned by the Radius server .
A value of 0 indicates that no session timeout was assigned by the RADIUS server.
This value is only valid when the client is in authenticated state. "
::= { agentDot1xClientConfigEntry 11}
agentDot1xClientTerminationAction OBJECT-TYPE
SYNTAX Dot1xSessionTerminationAction
MAX-ACCESS read-only
STATUS current
DESCRIPTION
"Specifies the session termination action assigned by the Radius Server .
This is the action taken when the session times out .
This value is only valid when the client is in authenticated state. "
::= { agentDot1xClientConfigEntry 12}
--**************************************************************************************
-- agentDot1xMonitorModeConfigGroup -> Contains MIB objects configuring/displaying Dot1x
-- Monitor Mode details and associated Functionality
--
--**************************************************************************************
agentDot1xMonitorModeConfigGroup OBJECT IDENTIFIER ::= { fastPathdot1xAdvanced 4 }
agentDot1xMonitorModeEnabled OBJECT-TYPE
SYNTAX INTEGER {
enable(1),
disable(2)
}
MAX-ACCESS read-write
STATUS current
DESCRIPTION "Enable/Disable Dot1x Monitor mode
Support on the switch."
DEFVAL { disable }
::= { agentDot1xMonitorModeConfigGroup 1 }
agentDot1xMonitorModeClients OBJECT-TYPE
SYNTAX Unsigned32
MAX-ACCESS read-only
STATUS current
DESCRIPTION "Retrieves the number of clients that got
authenticated by Monitor mode globally."
::= { agentDot1xMonitorModeConfigGroup 2 }
agentDot1xNonMonitorModeClients OBJECT-TYPE
SYNTAX Unsigned32
MAX-ACCESS read-only
STATUS current
DESCRIPTION "Retrieves the number of clients that are granted access by Dot1x with no monitor mode enabled."
::= { agentDot1xMonitorModeConfigGroup 3 }
--**************************************************************************************
-- agentDot1xMonitorModeConfigGroup -> Contains MIB objects configuring/displaying Dot1x
-- Monitor Mode details and associated Functionality
--
--**************************************************************************************
agentDot1xAuthHistoryResultsGroup OBJECT IDENTIFIER ::= { fastPathdot1xAdvanced 5 }
agentDot1xPortAuthHistoryResultTable OBJECT-TYPE
SYNTAX SEQUENCE OF AgentDot1xPortAuthHistoryResultEntry
MAX-ACCESS not-accessible
STATUS current
DESCRIPTION "A table to display the dot1x monitor mode results."
::= { agentDot1xAuthHistoryResultsGroup 1 }
agentDot1xPortAuthHistoryResultEntry OBJECT-TYPE
SYNTAX AgentDot1xPortAuthHistoryResultEntry
MAX-ACCESS not-accessible
STATUS current
DESCRIPTION "Represents Dot1x Authentication results for a Dot1x Authentication History table."
INDEX { agentDot1xAuthHistoryResultIfaceIndex,
agentDot1xAuthHistoryResultIndex}
::= {agentDot1xPortAuthHistoryResultTable 1 }
AgentDot1xPortAuthHistoryResultEntry ::= SEQUENCE {
agentDot1xAuthHistoryResultIfaceIndex Unsigned32,
agentDot1xAuthHistoryResultIndex Unsigned32,
agentDot1xAuthHistoryResultTimeStamp DateAndTime,
agentDot1xAuthHistoryResultAge TimeTicks,
agentDot1xAuthHistoryResultMacAddress MacAddress,
agentDot1xAuthHistoryResultVlanId Unsigned32,
agentDot1xAuthHistoryResultAuthStatus INTEGER,
agentDot1xAuthHistoryResultAccessStatus INTEGER,
agentDot1xAuthHistoryResultFilterID DisplayString,
agentDot1xAuthHistoryResultVlanAssigned Unsigned32,
agentDot1xAuthHistoryResultVlanAssignedType INTEGER,
agentDot1xAuthHistoryResultReasonCode INTEGER
}
agentDot1xAuthHistoryResultIfaceIndex OBJECT-TYPE
SYNTAX Unsigned32
MAX-ACCESS read-only
STATUS current
DESCRIPTION
"This object represents the physical Bridge Port on which dot1x Auth event
might be received."
::= { agentDot1xPortAuthHistoryResultEntry 1 }
agentDot1xAuthHistoryResultIndex OBJECT-TYPE
SYNTAX Unsigned32
MAX-ACCESS read-only
STATUS current
DESCRIPTION
"Reference to the Dot1x Authentication history table maintained."
::= { agentDot1xPortAuthHistoryResultEntry 2 }
agentDot1xAuthHistoryResultTimeStamp OBJECT-TYPE
SYNTAX DateAndTime
MAX-ACCESS read-only
STATUS current
DESCRIPTION
"Specifies the exact time of Dot1x Authentication
event information occurred maintained in the
history table."
::= { agentDot1xPortAuthHistoryResultEntry 3 }
agentDot1xAuthHistoryResultAge OBJECT-TYPE
SYNTAX TimeTicks
MAX-ACCESS read-only
STATUS current
DESCRIPTION
"Time since the authentication entry was added to the history table. It is displayed in days, hours, minutes, and seconds."
::= { agentDot1xPortAuthHistoryResultEntry 4 }
agentDot1xAuthHistoryResultMacAddress OBJECT-TYPE
SYNTAX MacAddress
MAX-ACCESS read-only
STATUS current
DESCRIPTION
"Specifies the client MAC Address maintained in
the Dot1x Authentication history table."
::= { agentDot1xPortAuthHistoryResultEntry 5 }
agentDot1xAuthHistoryResultVlanId OBJECT-TYPE
SYNTAX Unsigned32
MAX-ACCESS read-only
STATUS current
DESCRIPTION
"Specifies the VLANID maintained in the history
table. It is the VLANID which is failed to
associate to the port during authentication process.
The VLANID is identified distinctly by the Reason
code for the respective entry. Valid only when the
reason code is set to 13 (VLAN assignment failure).
In all the other cases, VLANID is set to 0. "
::= { agentDot1xPortAuthHistoryResultEntry 6 }
agentDot1xAuthHistoryResultAuthStatus OBJECT-TYPE
SYNTAX INTEGER {
success(1),
failure(2)
}
MAX-ACCESS read-only
STATUS current
DESCRIPTION
"Specifies the Dot1x Authentication status (Success or Failure) for the Dot1x Authentication event takes place. "
::= { agentDot1xPortAuthHistoryResultEntry 7 }
agentDot1xAuthHistoryResultAccessStatus OBJECT-TYPE
SYNTAX INTEGER {
granted(1),
denied(2)
}
MAX-ACCESS read-only
STATUS current
DESCRIPTION
" Authentication access status indicates the exact status of the dot1x client.
Granted means the client is allowed access to the network using dot1x or monitor mode.
Denied means the client is not allowed access to the network."
::= { agentDot1xPortAuthHistoryResultEntry 8 }
agentDot1xAuthHistoryResultFilterID OBJECT-TYPE
SYNTAX DisplayString
MAX-ACCESS read-only
STATUS current
DESCRIPTION
"Specifies the Filter ID or Diffserv Policy name assigned by the RADIUS server.
This value is only valid when the client is in authenticated state."
::= { agentDot1xPortAuthHistoryResultEntry 9 }
agentDot1xAuthHistoryResultVlanAssigned OBJECT-TYPE
SYNTAX Unsigned32
MAX-ACCESS read-only
STATUS current
DESCRIPTION
"Specifies the VLANID maintained in the history
table (It is the VLANID Assigned to a Port or Client authenticate)."
::= { agentDot1xPortAuthHistoryResultEntry 10 }
agentDot1xAuthHistoryResultVlanAssignedType OBJECT-TYPE
SYNTAX INTEGER {
default(1),
radius(2),
unauthenticatedVlan(3),
guestVlan(4),
voiceVlan(5),
monitorVlan(6),
notAssigned(7)
}
MAX-ACCESS read-only
STATUS current
DESCRIPTION
"Specifies the VLAN Assigned Reason maintained in the history
table."
::= { agentDot1xPortAuthHistoryResultEntry 11 }
agentDot1xAuthHistoryResultReasonCode OBJECT-TYPE
SYNTAX INTEGER {
supplicant-timeout(1),
eapol-timeout(2),
radius-request-timeout(3),
radius-auth-failure(4),
radius-auth-comm-failure(5),
radius-challenge-process-invalid-nas-port(6),
radius-challenge-process-wrong-eap-msg(7),
radius-request-send-msg-error(8),
radius-accept-process-invalid-nas-port(9),
radius-accept-process-wrong-eap-msg(10),
radius-accept-filter-assignment-failure(11),
radius-accept-diffserv-not-present(12),
radius-accept-vlan-assignment-failure(13),
vlan-assignment-feature-not-enabled(14),
radius-success(15),
local-auth-user-not-found(16),
local-auth-user-no-access(17),
local-auth-md5-validation-failure(18),
local-auth-invalid-eap-type(19),
local-failure(20),
local-success(21),
radius-invalid-radius-status(22),
guest-vlan-timer-expiry(23),
undefined-auth-method(24),
reject-auth-method(25),
invalid-auth-method(26),
auth-method-not-configured(27),
unauth-vlan-not-created(28),
guest-vlan-not-created(29),
radius-accept-invalid-vlan-failure(30)
}
MAX-ACCESS read-only
STATUS current
DESCRIPTION "Specifies the Dot1x authentication reason
refered by the result index on a port."
::= { agentDot1xPortAuthHistoryResultEntry 12 }
agentDot1xAuthHistoryResultsClear OBJECT-TYPE
SYNTAX INTEGER {
enable(1),
disable(2)
}
MAX-ACCESS read-write
STATUS current
DESCRIPTION
"When set to enable(1), all Dot1x Authentication History information will be reset."
DEFVAL { disable }
::= { agentDot1xAuthHistoryResultsGroup 2 }
--**************************************************************************************
-- agentDot1xPortAuthHistoryResultClearTable
--
--**************************************************************************************
agentDot1xPortAuthHistoryResultClearTable OBJECT-TYPE
SYNTAX SEQUENCE OF AgentDot1xPortAuthHistoryResultClearEntry
MAX-ACCESS not-accessible
STATUS current
DESCRIPTION "A table to clear the dot1x monitor mode results per interface."
::= { agentDot1xAuthHistoryResultsGroup 3 }
agentDot1xPortAuthHistoryResultClearEntry OBJECT-TYPE
SYNTAX AgentDot1xPortAuthHistoryResultClearEntry
MAX-ACCESS not-accessible
STATUS current
DESCRIPTION "Represents to clear the Dot1x Authentication results for a Dot1x Authentication History table."
INDEX { agentDot1xAuthHistoryResultIfIndex }
::= {agentDot1xPortAuthHistoryResultClearTable 1 }
AgentDot1xPortAuthHistoryResultClearEntry ::= SEQUENCE {
agentDot1xAuthHistoryResultIfIndex Unsigned32,
agentDot1xPortAuthHistoryResultsClear INTEGER
}
agentDot1xAuthHistoryResultIfIndex OBJECT-TYPE
SYNTAX Unsigned32
MAX-ACCESS read-only
STATUS current
DESCRIPTION
"This object represents the physical Bridge Port on which dot1x Auth event
might be received."
::= { agentDot1xPortAuthHistoryResultClearEntry 1 }
agentDot1xPortAuthHistoryResultsClear OBJECT-TYPE
SYNTAX INTEGER {
enable(1),
disable(2)
}
MAX-ACCESS read-write
STATUS current
DESCRIPTION
"When set to enable(1), all Dot1x Authentication History information for
the given port will be reset. The value is write-only. Attempt to read
will return disable(2)."
DEFVAL { disable }
::= { agentDot1xPortAuthHistoryResultClearEntry 2 }
END
|
