MIBs Depot

BRCD-DOT1X-MIB

Registered at
1.3.6.1.4.1.1991.1.1.3.38
Last updated
2010-09-30 00:00
Organization
Brocade Communications Systems, Inc.
Revisions
2010-09-30 00:00
Namespace
extreme
Source file
BRCD-DOT1X-MIB
Digest
sha256:03e96359a3ed6d94bde8de2c3baa757de78028123edc896031d33c74e03e1cb1

Description

Management Information for configuration /querying of 802.1x authentication It is grouped into five MIBs - 1. Global level configurable admin /status 802.1x information 2. Port level EAPOL statistics information 3. Port level configuration information 4. Different Port state information and 5. 802.1x mac session information Copyright 1996-2010 Brocade Communications Systems, Inc. All rights reserved. This Brocade Communications Systems SNMP Management Information Base Specification embodies Brocade Communications Systems' confidential and proprietary intellectual property. Brocade Communications Systems retains all title and ownership in the Specification, including any revisions. This Specification is supplied AS IS, and Brocade Communications Systems makes no warranty, either express or implied, as to the use, operation, condition, or performance of the specification, and any unintended consequence it may on the user environment.

Contact

Technical Support Center 130 Holger Way, San Jose, CA 95134 Email: ipsupport@brocade.com Phone: 1-800-752-8061 URL: www.brocade.com

Imports

FromSymbols
IF-MIBifIndex
INET-ADDRESS-MIBInetAddress, InetAddressType
P-BRIDGE-MIBEnabledStatus
SNMP-FRAMEWORK-MIBSnmpAdminString
SNMPv2-CONFMODULE-COMPLIANCE, NOTIFICATION-GROUP
SNMPv2-SMICounter32, Integer32, MODULE-IDENTITY, NOTIFICATION-TYPE, OBJECT-IDENTITY, OBJECT-TYPE, Unsigned32, iso
SNMPv2-TCDisplayString, MacAddress, TEXTUAL-CONVENTION

Imported by

Nothing in this corpus imports this module.

Load order

Every file a consumer needs in order to load this module, dependencies first.

BRCD-DOT1X-MIB
BRIDGE-MIB
IANAifType-MIB
IF-MIB
INET-ADDRESS-MIB
P-BRIDGE-MIB
SNMP-FRAMEWORK-MIB
SNMPv2-CONF
SNMPv2-MIB
SNMPv2-SMI
SNMPv2-TC

Textual conventions

NameOIDSyntaxAccessStatus
VlanId
TEXTUAL-CONVENTION
A 12-bit VLAN ID used in the VLAN Tag header.
current

Objects

NameOIDSyntaxAccessStatus
brcdDot1xAuthGlobalConfigGroup
OBJECT-IDENTITY
1.3.6.1.4.1.1991.1.1.3.38.1
brcdDot1xAuthGlobalConfigQuietperiod
OBJECT-TYPE
When the Brocade device is unable to authenticate a Client, the amount of time the Brocade device waits before trying again.. The allowed range is from 1 to 4294967294
1.3.6.1.4.1.1991.1.1.3.38.1.1Unsigned32 (1..4294967294)read-writecurrent
brcdDot1xAuthGlobalConfigTxPeriod
OBJECT-TYPE
When a Client does not send back an EAP(Extensible Authentication Protocol)-response/identity frame, the amount of time the Brocade device waits before retransmitting the EAP-request/identity frame to a Client The allowed range is from 1 to 4294967294
1.3.6.1.4.1.1991.1.1.3.38.1.2Unsigned32 (1..4294967294)read-writecurrent
brcdDot1xAuthGlobalConfigSuppTimeOut
OBJECT-TYPE
When a supplicant (Client) does not respond to an EAP-request frame, the amount of time before the Brocade device retransmits the frame The allowed range is from 1 to 4294967294
1.3.6.1.4.1.1991.1.1.3.38.1.3Unsigned32 (1..4294967294)read-writecurrent
brcdDot1xAuthGlobalConfigAuthServerTimeOut
OBJECT-TYPE
When the Authentication Server (RADIUS) does not respond to a message sent from the Client, the amount of time before the Brocade device retransmits the message. The allowed range is from 1 to 4294967294
1.3.6.1.4.1.1991.1.1.3.38.1.4Unsigned32 (1..4294967294)read-writecurrent
brcdDot1xAuthGlobalConfigMaxReq
OBJECT-TYPE
The number of times the Brocade device retransmits an EAP-request/identity request frame if it does not receive an EAP-response/identity response frame from a Client
1.3.6.1.4.1.1991.1.1.3.38.1.5Unsigned32read-writecurrent
brcdDot1xAuthGlobalConfigReAuthMax
OBJECT-TYPE
The number of re-authentication attempts that are permitted before the port becomes Unauthorized
1.3.6.1.4.1.1991.1.1.3.38.1.6Unsigned32read-writecurrent
brcdDot1xAuthGlobalConfigReAuthPeriod
OBJECT-TYPE
How often the device automatically re-authenticates clients when periodic re-authentication is enabled The allowed range is from 1 to 4294967294
1.3.6.1.4.1.1991.1.1.3.38.1.7Unsigned32 (1..4294967294)read-writecurrent
brcdDot1xAuthGlobalConfigProtocolVersion
OBJECT-TYPE
The EAP protocol version
1.3.6.1.4.1.1991.1.1.3.38.1.8Unsigned32read-onlycurrent
brcdDot1xAuthGlobalConfigTotalPortsEnabled
OBJECT-TYPE
The total number of ports that have 802.1x enabled
1.3.6.1.4.1.1991.1.1.3.38.1.9Unsigned32read-onlycurrent
brcdDot1xAuthGlobalConfigReauthStatus
OBJECT-TYPE
Used to enable / disable Reauthentication globally
1.3.6.1.4.1.1991.1.1.3.38.1.10EnabledStatusread-writecurrent
brcdDot1xAuthGlobalConfigMacSessionMaxAge
OBJECT-TYPE
The Max-Age of the 802.1x mac session- A value between 0 and 65535
1.3.6.1.4.1.1991.1.1.3.38.1.11Unsigned32read-writecurrent
brcdDot1xAuthGlobalConfigNoAgingDeniedSessions
OBJECT-TYPE
Enable / Disable Mac-Session-No Aging for Denied sessions
1.3.6.1.4.1.1991.1.1.3.38.1.12EnabledStatusread-writecurrent
brcdDot1xAuthGlobalConfigNoAgingPermittedSessions
OBJECT-TYPE
Enable / Disable Mac-Session-No Aging for Permitted sessions
1.3.6.1.4.1.1991.1.1.3.38.1.13EnabledStatusread-writecurrent
brcdDot1xAuthGlobalConfigAuthFailAction
OBJECT-TYPE
To Configure the action to take when the authentication fails
1.3.6.1.4.1.1991.1.1.3.38.1.14INTEGER {blockTraffic(1), restrictedVlan(2)}read-writecurrent
brcdDot1xAuthPortStatistics
OBJECT-IDENTITY
1.3.6.1.4.1.1991.1.1.3.38.2
brcdDot1xAuthPortStatTable
OBJECT-TYPE
A table that contains port EAP(Extensible Authentication Protocol) frames statistics for 802.1x authentication
1.3.6.1.4.1.1991.1.1.3.38.2.1not-accessiblecurrent
brcdDot1xAuthPortStatEntry
OBJECT-TYPE
An entry of EAP frames statistics indexed by ifIndex
1.3.6.1.4.1.1991.1.1.3.38.2.1.1not-accessiblecurrent
brcdDot1xAuthPortStatRxEAPFrames
OBJECT-TYPE
The total number of EAPOL frames received on the port It includes EAP frames -
1.3.6.1.4.1.1991.1.1.3.38.2.1.1.1Counter32read-onlycurrent
brcdDot1xAuthPortStatTxEAPFrames
OBJECT-TYPE
The no of EAPOL frames transmitted on the port
1.3.6.1.4.1.1991.1.1.3.38.2.1.1.2Counter32read-onlycurrent
brcdDot1xAuthPortStatRxEAPStartFrames
OBJECT-TYPE
The number of EAPOL-Start frames received on the port
1.3.6.1.4.1.1991.1.1.3.38.2.1.1.3Counter32read-onlycurrent
brcdDot1xAuthPortStatRxEAPLogOffFrames
OBJECT-TYPE
The number of EAPOL-Logoff frames received on the port
1.3.6.1.4.1.1991.1.1.3.38.2.1.1.4Counter32read-onlycurrent
brcdDot1xAuthPortStatRxEAPRespIdFrames
OBJECT-TYPE
The number of EAP frames other than Response/Identity frames received on the port
1.3.6.1.4.1.1991.1.1.3.38.2.1.1.5Counter32read-onlycurrent
brcdDot1xAuthPortStatTxEAPReqIdFrames
OBJECT-TYPE
The number of EAP-Request/Identity frames transmitted on the port
1.3.6.1.4.1.1991.1.1.3.38.2.1.1.6Counter32read-onlycurrent
brcdDot1xAuthPortStatRxEAPInvalidFrames
OBJECT-TYPE
The number of invalid EAPOL frames received on the port
1.3.6.1.4.1.1991.1.1.3.38.2.1.1.7Counter32read-onlycurrent
brcdDot1xAuthPortStatEAPLastFrameVersionRx
OBJECT-TYPE
The version of last EAP frame received
1.3.6.1.4.1.1991.1.1.3.38.2.1.1.8Unsigned32read-onlycurrent
brcdDot1xAuthPortStatRxEAPRespOrIdFrames
OBJECT-TYPE
The number of received EAP response or Id frames on the port
1.3.6.1.4.1.1991.1.1.3.38.2.1.1.9Counter32read-onlycurrent
brcdDot1xAuthPortStatRxLengthErrorFrame
OBJECT-TYPE
The received EAP Length Error frame
1.3.6.1.4.1.1991.1.1.3.38.2.1.1.10Integer32read-onlycurrent
brcdDot1xAuthPortStatTxRequestFrames
OBJECT-TYPE
The number of transmitted EAP request frames on the port
1.3.6.1.4.1.1991.1.1.3.38.2.1.1.11Counter32read-onlycurrent
brcdDot1xAuthPortStatLastEAPFrameSource
OBJECT-TYPE
The MAC address of the source from which the last EAP frame came
1.3.6.1.4.1.1991.1.1.3.38.2.1.1.12MacAddressread-onlycurrent
brcdDot1xAuthPortConfig
OBJECT-IDENTITY
1.3.6.1.4.1.1991.1.1.3.38.3
brcdDot1xAuthPortConfigTable
OBJECT-TYPE
A table that allows configuration of dot1x values for a given port
1.3.6.1.4.1.1991.1.1.3.38.3.1not-accessiblecurrent
brcdDot1xAuthPortConfigEntry
OBJECT-TYPE
An entry of 802.1x config values
1.3.6.1.4.1.1991.1.1.3.38.3.1.1not-accessiblecurrent
brcdDot1xAuthPortConfigPortControl
OBJECT-TYPE
The configured port control type for the interface which can be 1. force-unauthorized - port's controlled port is placed unconditionally in the unauthorized state 2. control-auto - the controlled port is unauthorized until authentication takes place between client and RADIUS 3. force-authorized - the port's controlled port is placed unconditionally in the authorized state
1.3.6.1.4.1.1991.1.1.3.38.3.1.1.1INTEGER {forceUnauthorized(1), controlauto(2), forceAuthorized(3)}read-writecurrent
brcdDot1xAuthPortConfigFilterStrictSec
OBJECT-TYPE
To configure filter strict security on the interface - enable(1) or disable(0)
1.3.6.1.4.1.1991.1.1.3.38.3.1.1.2EnabledStatusread-writecurrent
brcdDot1xAuthPortConfigDot1xOnPort
OBJECT-TYPE
To Configure (enable / disable) 802.1x on an interface level
1.3.6.1.4.1.1991.1.1.3.38.3.1.1.3EnabledStatusread-writecurrent
brcdDot1xAuthPortState
OBJECT-IDENTITY
1.3.6.1.4.1.1991.1.1.3.38.4
brcdDot1xAuthPortStateTable
OBJECT-TYPE
A table that contains entries of port dot1x values
1.3.6.1.4.1.1991.1.1.3.38.4.1not-accessiblecurrent
brcdDot1xAuthPortStateEntry
OBJECT-TYPE
An entry of 802.1x config values indexed by ifIndex to be able to have port values
1.3.6.1.4.1.1991.1.1.3.38.4.1.1not-accessiblecurrent
brcdDot1xAuthPortStateMacSessions
OBJECT-TYPE
Number of 802.1x MAC sessions per port
1.3.6.1.4.1.1991.1.1.3.38.4.1.1.1Unsigned32read-onlycurrent
brcdDot1xAuthPortStateAuthMacSessions
OBJECT-TYPE
Number of Authorized MAC sessions per port
1.3.6.1.4.1.1991.1.1.3.38.4.1.1.2Unsigned32read-onlycurrent
brcdDot1xAuthPortStateOriginalPVID
OBJECT-TYPE
Originally configured(not dynamically assigned) PVID(port's default VLAN ID) for the port
1.3.6.1.4.1.1991.1.1.3.38.4.1.1.3Unsigned32read-onlycurrent
brcdDot1xAuthPortStatePVIDMacTotal
OBJECT-TYPE
The number of devices transmitting untagged traffic on the port's PVID
1.3.6.1.4.1.1991.1.1.3.38.4.1.1.4Unsigned32read-onlycurrent
brcdDot1xAuthPortStatePVIDMacAuthorized
OBJECT-TYPE
The number of devices transmitting untagged traffic on the port's PVID as a result of dynamic VLAN assignment
1.3.6.1.4.1.1991.1.1.3.38.4.1.1.5Unsigned32read-onlycurrent
brcdDot1xAuthPortStatePortVlanState
OBJECT-TYPE
The Current Vlan state the port is in, which can be RADIUS -The port's PVID was dynamically assigned by a RADIUS server Restricted - The port's PVID is the restricted VLAN Normal - The port's PVID is not set by a RADIUS server, nor is it the restricted VLAN
1.3.6.1.4.1.1991.1.1.3.38.4.1.1.6INTEGER {radius(1), restricted(2), normal(3)}read-onlycurrent
brcdDot1xAuthPortStatePVID
OBJECT-TYPE
The Dot1x Authentication default Port VLAN Id
1.3.6.1.4.1.1991.1.1.3.38.4.1.1.7Unsigned32read-onlycurrent
brcdDot1xAuthPortStateRestrictPVID
OBJECT-TYPE
Restrict PVID
1.3.6.1.4.1.1991.1.1.3.38.4.1.1.8Unsigned32read-onlycurrent
brcdDot1xAuthPortStateRadiusAssignPVID
OBJECT-TYPE
RADIUS assign PVID
1.3.6.1.4.1.1991.1.1.3.38.4.1.1.9Unsigned32read-onlycurrent
brcdDot1xAuthMacSession
OBJECT-IDENTITY
1.3.6.1.4.1.1991.1.1.3.38.5
brcdDot1xAuthMacSessionTable
OBJECT-TYPE
A table that contains 802.1x MAC sessions
1.3.6.1.4.1.1991.1.1.3.38.5.1not-accessiblecurrent
brcdDot1xAuthMacSessionEntry
OBJECT-TYPE
An entry containing information applicable to a particular interface and client MAC ie., dot1x-mac-session
1.3.6.1.4.1.1991.1.1.3.38.5.1.1not-accessiblecurrent
brcdDot1xAuthMacSessionAuthMac
OBJECT-TYPE
Mac address of the client - which basically represents the username used for RADIUS authentication
1.3.6.1.4.1.1991.1.1.3.38.5.1.1.1MacAddressnot-accessiblecurrent
brcdDot1xAuthMacSessionUserName
OBJECT-TYPE
User name of the 802.1x mac session
1.3.6.1.4.1.1991.1.1.3.38.5.1.1.2SnmpAdminStringread-onlycurrent
brcdDot1xAuthMacSessionIncomingVlanId
OBJECT-TYPE
Incoming VLAN ID
1.3.6.1.4.1.1991.1.1.3.38.5.1.1.3VlanIdread-onlycurrent
brcdDot1xAuthMacSessionCurrentVlanId
OBJECT-TYPE
The VLAN to which the port is currently assigned
1.3.6.1.4.1.1991.1.1.3.38.5.1.1.4VlanIdread-onlycurrent
brcdDot1xAuthMacSessionAccessStatus
OBJECT-TYPE
The authentication state of the dot1x-mac-session - which can be permitted, denied, restricted or in the Init state
1.3.6.1.4.1.1991.1.1.3.38.5.1.1.5INTEGER {permit(1), blocked(2), restrict(3), init(4)}read-onlycurrent
brcdDot1xAuthMacSessionMaxAge
OBJECT-TYPE
MAX Age of the mac session in which the MAC address is authenticated.
1.3.6.1.4.1.1991.1.1.3.38.5.1.1.6Unsigned32read-onlycurrent
brcdDot1xAuthMacSessionAddrType
OBJECT-TYPE
Client(supplicant) IP address Type. Supported address types are ipv4(1) and ipv6(2)
1.3.6.1.4.1.1991.1.1.3.38.5.1.1.7InetAddressTyperead-onlycurrent
brcdDot1xAuthMacSessionIpAddr
OBJECT-TYPE
The IP Address of the client
1.3.6.1.4.1.1991.1.1.3.38.5.1.1.8InetAddressread-onlycurrent
brcdDot1xAuthMacSessionAging
OBJECT-TYPE
The age's type - Hardware or Software aging, Ena in which case the aging hasn't started, or notapplicable when there is a fake 802.1x mac session
1.3.6.1.4.1.1991.1.1.3.38.5.1.1.9INTEGER {software(1), hardware(2), ena(3), notapplicable(4)}read-onlycurrent
brcdDot1xAuthGlobalAdminGroup
OBJECT-IDENTITY
1.3.6.1.4.1.1991.1.1.3.38.6
brcdDot1xAuthGlobalAdminConfigStatus
OBJECT-TYPE
Used to enable /disable 802.1x authentication globally
1.3.6.1.4.1.1991.1.1.3.38.6.1EnabledStatusread-writecurrent