MIBs Depot

DLINKSW-NETWORK-ACCESS-MIB

Registered at
1.3.6.1.4.1.171.14.151
Last updated
2013-07-18 00:00
Organization
D-Link Corp.
Revisions
2013-07-18 00:00
Namespace
dlink
Source file
DLINKSW-NETWORK-ACCESS-MIB
Digest
sha256:3a9a45f15e89bf085d874c8cb1dd57163101a608a3288192ff97db8160d2b5d8

Description

This MIB module defines objects for Network Access Authentication in the system. Network Access Authentication provides generic configurations for authentication methods in the system and manages the failover sequence of these methods in a flexible manner.

Contact

D-Link Corporation Postal: No. 289, Sinhu 3rd Rd., Neihu District, Taipei City 114, Taiwan, R.O.C Tel: +886-2-66000123 E-mail: tsd@dlink.com.tw

Imports

FromSymbols
DLINK-ID-REC-MIBdlinkIndustrialCommon
DLINKSW-TC-MIBDlink2kVlanList
IF-MIBifIndex
INET-ADDRESS-MIBInetAddress, InetAddressType
Q-BRIDGE-MIBVlanIdOrNone
SNMP-FRAMEWORK-MIBSnmpAdminString
SNMPv2-CONFMODULE-COMPLIANCE, NOTIFICATION-GROUP, OBJECT-GROUP
SNMPv2-SMIInteger32, MODULE-IDENTITY, NOTIFICATION-TYPE, OBJECT-IDENTITY, OBJECT-TYPE, Unsigned32, iso
SNMPv2-TCDisplayString, MacAddress, RowStatus, TEXTUAL-CONVENTION, TruthValue

Imported by

3 module(s) in this corpus import this one.

Load order

Every file a consumer needs in order to load this module, dependencies first.

BRIDGE-MIB
DLINK-ID-REC-MIB
DLINKSW-NETWORK-ACCESS-MIB
DLINKSW-TC-MIB
IANAifType-MIB
IF-MIB
INET-ADDRESS-MIB
P-BRIDGE-MIB
Q-BRIDGE-MIB
RFC1158-MIB
RFC1271-MIB
RMON-MIB
RMON2-MIB
SNMP-FRAMEWORK-MIB
SNMPv2-CONF
SNMPv2-MIB
SNMPv2-SMI
SNMPv2-TC
TOKEN-RING-RMON-MIB

Textual conventions

NameOIDSyntaxAccessStatus
DlinkAuthHostMode
TEXTUAL-CONVENTION
The authentication mode of a controlled port. multiHost : If a port is operated in multi-host mode, once a host is authenticated, all remaining hosts are also authenticated in a single domain. multiAuth : If a port is operated in multi-auth mode, each host is authenticated separately in a single domain.
current
DlinkAuthMethod
TEXTUAL-CONVENTION
The authentication methods and protocols supported in Network Access Authentication. other : other methods no defined here. 'other' is a read-only value and cannot be used in set operation. dot1x : 802.1X Protocol. macAuth : MAC-based Access Control. webAuth : Web-based Access Control. jwac : Japanese Web Authentication.
current
DlinkAuthMethodList
TEXTUAL-CONVENTION
The authentication methods being used by Network Access Authentication. This object is a bit map, with each bit representing a different authentication type as identified below. A 1-bit indicates the authentication method is used. A 0-bit indicates the authentication method is not used. dot1x : 802.1X Protocol. macAuth : MAC-based Access Control. webAuth : Web-based Access Control. jwac : Japanese Web Authentication.
current
DlinkCompAuthMode
TEXTUAL-CONVENTION
The compound authentication mode of a controlled port. any : The host needs pass one of the authentication methods (802.1X, MAC-based Access Control, WAC and JWAC). macJwac : MAC-based Access Control will be verified first. If a client passed MAC authentication, JWAC will be verified. The host needs pass both authentication methods. macWac : MAC-based Access Control will be verified first. If a client passed MAC authentication, WAC will be verified. The host needs pass both authentication methods.
current

Objects

NameOIDSyntaxAccessStatus
dNetAccessAuthMIBNotifications
OBJECT-IDENTITY
1.3.6.1.4.1.171.14.151.0
dNetAccessAuthMIBObjects
OBJECT-IDENTITY
1.3.6.1.4.1.171.14.151.1
dNetAuthSystem
OBJECT-IDENTITY
1.3.6.1.4.1.171.14.151.1.1
dnaMacMoveMode
OBJECT-TYPE
This object controls whether to allow authenticated hosts to do roaming across different switch ports. deny : When a host is authenticated on one port, that address is not allowed to move on another authenticated manager-enabled port of the device. permit: Authenticated hosts are allowed to move from one port to another on the same device. When a host moves to a new port, the authenticated session on the original port is deleted, and the host is re-authenticated on the new port.
1.3.6.1.4.1.171.14.151.1.1.1INTEGER {deny(1), permit(2)}read-writecurrent
dnaAuthorizationEnabled
OBJECT-TYPE
This object indicates the state of acceptance of the authorized configuration. When authorization is enabled for authentication, the authorized attributes (for example VLAN, 802.1p default priority, bandwidth, and ACL) will be accepted.
1.3.6.1.4.1.171.14.151.1.1.2TruthValueread-writecurrent
dnaMacFormatCase
OBJECT-TYPE
This object indicates the format of the authentication MAC address. uppercase: Using uppercase format, the formatted is: AA-BB-CC-DD-EE-FF. lowercase: Using lowercase format, the formatted is: aa-bb-cc-dd-ee-ff.
1.3.6.1.4.1.171.14.151.1.1.3INTEGER {uppercase(1), lowercase(2)}read-writecurrent
dnaMacFormatDelimiter
OBJECT-TYPE
This object indicates the delimiter format of authentication MAC address. none: Not using any delimiter, the format is: AABBCCDDEEFF hyphen: Using '-' as delimiter, the format is: AA-BB-CC-DD-EE-FF colon: Using ':' as delimiter, the format is: AA:BB:CC:DD:EE:FF dot: Using '.' as delimiter, the format is: AA.BB.CC.DD.EE.FF
1.3.6.1.4.1.171.14.151.1.1.4INTEGER {none(1), hyphen(2), colon(3), dot(4)}read-writecurrent
dnaMacFormatDelimiterNumber
OBJECT-TYPE
This object indicates the delimiter number of authentication MAC address. 1: single delimiter, the format is: AABBCC.DDEEFF 2: double delimiter, the format is: AABB.CCDD.EEFF 5: multiple delimiter, the format is: AA.BB.CC.DD.EE.FF Note: while dnaMacFormatDelimiter is none(1), the delimiter number will not take effect.
1.3.6.1.4.1.171.14.151.1.1.5Integer32 (1 | 2 | 5)read-writecurrent
dNetAuthAuthenticator
OBJECT-IDENTITY
1.3.6.1.4.1.171.14.151.1.2
dnaMaxAuthedUserLimit
OBJECT-TYPE
This object indicates the maximum authenticated users of the system.
1.3.6.1.4.1.171.14.151.1.2.1Unsigned32read-writecurrent
dnaPortConfigTable
OBJECT-TYPE
This table is a list of configurations for ports. An entry will exist for every interface which supports Network Access Authentication feature.
1.3.6.1.4.1.171.14.151.1.2.2not-accessiblecurrent
dnaPortConfigEntry
OBJECT-TYPE
An entry contains port-specific configuration for Network Access Authentication.
1.3.6.1.4.1.171.14.151.1.2.2.1not-accessiblecurrent
dnaPortMaxAuthedUserLimit
OBJECT-TYPE
This object indicates the maximum authenticated users of this port.
1.3.6.1.4.1.171.14.151.1.2.2.1.1Unsigned32read-writecurrent
dnaPortAuthHostMode
OBJECT-TYPE
This object indicates the authentication host mode of the entry.
1.3.6.1.4.1.171.14.151.1.2.2.1.2DlinkAuthHostModeread-writecurrent
dnaPortAuthVlansFirst2K
OBJECT-TYPE
This object specifies the authentication VLAN(s) in a string of octets containing one bit per VLAN for VLANs 1 to 2048. If the bit is set to '1', then the VLAN needs authentication.
1.3.6.1.4.1.171.14.151.1.2.2.1.3Dlink2kVlanListread-writecurrent
dnaPortAuthVlansSecond2K
OBJECT-TYPE
This object specifies the authentication VLAN(s) in a string of octets containing one bit per VLAN for VLANs 2049 to 4094. If the bit is set to '1', then the VLAN needs authentication.
1.3.6.1.4.1.171.14.151.1.2.2.1.4Dlink2kVlanListread-writecurrent
dnaPortReauthEnabled
OBJECT-TYPE
This object indicates whether the periodic re-authentication is enabled.
1.3.6.1.4.1.171.14.151.1.2.2.1.5TruthValueread-writecurrent
dnaPortReauthInterval
OBJECT-TYPE
Specifies the re-authentication interval, after which the port will be re-authenticated if value of the corresponding instance of dnaPortReauthEnabled is 'true'. A value of zero indicates that the re-authentication interval is based on AAA server when this port is authenticated. Besides, the action (re-authenticate or initialize) to take after expiration of the timer is also based on server.
1.3.6.1.4.1.171.14.151.1.2.2.1.6Unsigned32read-writecurrent
dnaPortRestartInterval
OBJECT-TYPE
Specifies the interval after which a further authentication attempt should be made to this port if it is not authorized.
1.3.6.1.4.1.171.14.151.1.2.2.1.7Unsigned32 (1..65535)read-writecurrent
dnaPortInactivityTimeout
OBJECT-TYPE
Specifies the period of time that a client associating with this port is allowed to be inactive before being terminated. A value of zero indicates that inactivity timeout is disabled on this port. A value of -1 indicates that inactivity timeout is based on AAA server when this port is authenticated.
1.3.6.1.4.1.171.14.151.1.2.2.1.8Integer32 (-1 | 0 | 1..65535)read-writecurrent
dnaPortGuestVlanid
OBJECT-TYPE
Specifies the VLAN ID of guest VLAN on the interface. The guest VLAN allows the user access within the guest VLAN before it is authenticated. A value of zero for this object indicates guest VLAN is not configured for the interface.
1.3.6.1.4.1.171.14.151.1.2.2.1.9VlanIdOrNoneread-writecurrent
dnaPortMethodTable
OBJECT-TYPE
The table contains a list of authentication methods information on ports. An entry will exist for every port which supports Network Access Authentication feature.
1.3.6.1.4.1.171.14.151.1.2.3not-accessiblecurrent
dnaPortMethodEntry
OBJECT-TYPE
An entry contains configuration and information of authentication methods for a particular port.
1.3.6.1.4.1.171.14.151.1.2.3.1not-accessiblecurrent
dnaPortMethodAvailable
OBJECT-TYPE
This object indicates the currently effective authentication methods on the port. e.g: The dnaPortMethodCompAuthMode of the interface is set to any(1), but only dot1x is running on this interface, macAuth, webAuth and jwac are disabled, only the bit of dot1x is '1'.
1.3.6.1.4.1.171.14.151.1.2.3.1.1DlinkAuthMethodListread-onlycurrent
dnaPortMethodCompAuthMode
OBJECT-TYPE
This object indicates the compound authentication mode on the port.
1.3.6.1.4.1.171.14.151.1.2.3.1.2DlinkCompAuthModeread-writecurrent
dNetAuthSession
OBJECT-IDENTITY
1.3.6.1.4.1.171.14.151.1.3
dnaSessionTable
OBJECT-TYPE
The table contains a list of authentication sessions. An entry is created when an authentication session has been successfully created within Network Access Authentication. An entry is deleted when an authentication session has been removed.
1.3.6.1.4.1.171.14.151.1.3.1not-accessiblecurrent
dnaSessionEntry
OBJECT-TYPE
An entry contains management information for a particular authentication session.
1.3.6.1.4.1.171.14.151.1.3.1.1not-accessiblecurrent
dnaSessionId
OBJECT-TYPE
This object indicates a unique identifier of the authentication session.
1.3.6.1.4.1.171.14.151.1.3.1.1.1Unsigned32 (0..4294967295)not-accessiblecurrent
dnaSessionClientMacAddress
OBJECT-TYPE
This object indicates the MAC address of the device associates with the authentication session.
1.3.6.1.4.1.171.14.151.1.3.1.1.2MacAddressread-onlycurrent
dnaSessionClientAddrType
OBJECT-TYPE
This object indicates the type of Internet address of the client associates with the authentication session. This object is meaningful only when the corresponding dnaSessionAuthorizedBy is webAuth or jwac.
1.3.6.1.4.1.171.14.151.1.3.1.1.3InetAddressTyperead-onlycurrent
dnaSessionClientAddress
OBJECT-TYPE
This object indicates the Internet address of the client associates with the authentication session. This object is meaningful only when the corresponding dnaSessionAuthorizedBy is webAuth or jwac.
1.3.6.1.4.1.171.14.151.1.3.1.1.4InetAddressread-onlycurrent
dnaSessionStatus
OBJECT-TYPE
This object indicates the current status of the authentication session. idle : the session has been initialized and no method has run yet. authenticating : an authentication method is running for this session. noMethod : no authentication method has provided a result for this session. authenticationSuccess: an authentication method has resulted in authentication success for this session. authenticationFailed: an authentication method has resulted in authentication failed for this session.
1.3.6.1.4.1.171.14.151.1.3.1.1.5INTEGER {idle(1), authenticating(2), noMethod(3), authenticationSuccess(4), authenticationFailed(5)}read-onlycurrent
dnaSessionAuthUserName
OBJECT-TYPE
This object indicates the user name of the authentication session. This object is meaningless when the corresponding dnaSessionAuthorizedBy is macAuth and a zero length string will be returned.
1.3.6.1.4.1.171.14.151.1.3.1.1.6SnmpAdminStringread-onlycurrent
dnaSessionAuthorizedBy
OBJECT-TYPE
This object indicates the method which authorizes the authentication session.
1.3.6.1.4.1.171.14.151.1.3.1.1.7DlinkAuthMethodread-onlycurrent
dnaSessionAuthVlan
OBJECT-TYPE
This object indicates the authorized VLAN applied to the authentication session. Value zero indicates that no authorized VLAN has been applied, or it is not applicable.
1.3.6.1.4.1.171.14.151.1.3.1.1.8VlanIdOrNoneread-onlycurrent
dnaSessionAccountingID
OBJECT-TYPE
This object indicates the accounting session ID that using to accounting after authenticated.
1.3.6.1.4.1.171.14.151.1.3.1.1.9SnmpAdminStringread-onlycurrent
dnaSessionAssignVid
OBJECT-TYPE
This object indicates the effectively assigned VLAN ID that are authorized after host pass authenticated. A value of zero indicates that no valid VLAN ID is authorized.
1.3.6.1.4.1.171.14.151.1.3.1.1.10VlanIdOrNoneread-onlycurrent
dnaSessionAssignPriority
OBJECT-TYPE
This object indicates the effectively assigned priority that is authorized after host pass authenticated. A value of -1 indicates that no valid priority is authorized.
1.3.6.1.4.1.171.14.151.1.3.1.1.11Integer32read-onlycurrent
dnaSessionAssignIngressBandwidth
OBJECT-TYPE
This object indicates the effectively assigned ingress bandwidth that is authorized after host pass authenticated. A value of -1 indicates that no valid ingress is authorized.
1.3.6.1.4.1.171.14.151.1.3.1.1.12Integer32read-onlycurrent
dnaSessionAssignEgressBandwidth
OBJECT-TYPE
This object indicates the effectively assigned egress bandwidth that is authorized after host pass authenticated. A value of -1 indicates that no valid egress is authorized.
1.3.6.1.4.1.171.14.151.1.3.1.1.13Integer32read-onlycurrent
dnaSessionTimeout
OBJECT-TYPE
Indicates the session timeout used by Network Access Authentication for the authentication session.
1.3.6.1.4.1.171.14.151.1.3.1.1.14Unsigned32read-onlycurrent
dnaSessionTimeLeft
OBJECT-TYPE
Indicates the leftover time of the authentication session.
1.3.6.1.4.1.171.14.151.1.3.1.1.15Unsigned32read-onlycurrent
dnaSessionInactivityTimeout
OBJECT-TYPE
Indicates the inactivity timeout used by Network Access Authentication for the authentication session.
1.3.6.1.4.1.171.14.151.1.3.1.1.16Unsigned32read-onlycurrent
dnaSessionInactivityTimeLeft
OBJECT-TYPE
Indicates the leftover time of the inactivity timer of the authentication session.
1.3.6.1.4.1.171.14.151.1.3.1.1.17Unsigned32read-onlycurrent
dnaSessionTerminateSession
OBJECT-TYPE
This object terminates the authentication session, when set to 'terminate'. Setting this object to 'false' has no effect. No action is taken if this object is set to 'noOp'. When read, the value 'noOp' is returned.
1.3.6.1.4.1.171.14.151.1.3.1.1.99INTEGER {terminate(1), noOp(2)}read-writecurrent
dnaSessionMethodInfoTable
OBJECT-TYPE
The table contains a list of authenticating state information of methods for every authentication session. An entry exists for every authentication method that can initiate the authentication session within Network Access Authentication.
1.3.6.1.4.1.171.14.151.1.3.2not-accessiblecurrent
dnaSessionMethodInfoEntry
OBJECT-TYPE
An entry contains information for a particular effective authentication method which is associated with a session on an interface.
1.3.6.1.4.1.171.14.151.1.3.2.1not-accessiblecurrent
dnaSessionMethod
OBJECT-TYPE
Indicates the authentication method of the entry.
1.3.6.1.4.1.171.14.151.1.3.2.1.1DlinkAuthMethodnot-accessiblecurrent
dnaSessionMethodState
OBJECT-TYPE
Indicates the state of this authentication method. notInitiated : The method hasn't initiated the authentication process yet. inProgress : The authentication method is in progress. authcSuccess: The session has been authenticated by the method. authcFailed : The session has failed to be authenticated by the method.
1.3.6.1.4.1.171.14.151.1.3.2.1.2INTEGER {notInitiated(1), inProgress(2), authcSuccess(3), authcFailed(4)}read-onlycurrent
dnaSessionTerminateIfTable
OBJECT-TYPE
The table is used to terminate authentication sessions by interface.
1.3.6.1.4.1.171.14.151.1.3.3not-accessiblecurrent
dnaSessionTerminateIfEntry
OBJECT-TYPE
An entry is used to terminate authentication sessions by specifying authentication methods per Network Access Authentication managed port.
1.3.6.1.4.1.171.14.151.1.3.3.1not-accessiblecurrent
dnaSessionTerminateIfMethodList
OBJECT-TYPE
This object is used to terminate authentication sessions by methods on an interface by setting the corresponding bit to '1'. This object always returns '00'H when read.
1.3.6.1.4.1.171.14.151.1.3.3.1.1DlinkAuthMethodListread-writecurrent
dnaSessionTerminateMethod
OBJECT-TYPE
This object is used to terminate the authentication sessions by setting this object to valid value. Setting this object to 'other' has no effect. When read, the value 'other' is returned.
1.3.6.1.4.1.171.14.151.1.3.4DlinkAuthMethodread-writecurrent
dnaSessionTerminateAll
OBJECT-TYPE
This object is used to terminate all authentication sessions by setting this object to 'terminateAll'. Setting this object to 'noOp' has no effect. When read, the value 'noOp' is returned.
1.3.6.1.4.1.171.14.151.1.3.5INTEGER {terminateAll(1), noOp(2)}read-writecurrent
dNetAuthUser
OBJECT-IDENTITY
1.3.6.1.4.1.171.14.151.1.4
dnaUserTable
OBJECT-TYPE
A table contains a list of users in the local database for authentication.
1.3.6.1.4.1.171.14.151.1.4.1not-accessiblecurrent
dnaUserEntry
OBJECT-TYPE
An entry consists of information for an account.
1.3.6.1.4.1.171.14.151.1.4.1.1not-accessiblecurrent
dnaUserName
OBJECT-TYPE
This object indicates the username for this user account.
1.3.6.1.4.1.171.14.151.1.4.1.1.1DisplayString (SIZE(1..32))not-accessiblecurrent
dnaUserPassword
OBJECT-TYPE
This object indicates the password in clear text form for this user account. When read, a zero length string will be returned for security reasons.
1.3.6.1.4.1.171.14.151.1.4.1.1.2DisplayString (SIZE(0..32))read-createcurrent
dnaUserTargetVlanid
OBJECT-TYPE
This object indicates the VLAN ID to be assigned for this user account.
1.3.6.1.4.1.171.14.151.1.4.1.1.3VlanIdOrNoneread-createcurrent
dnaUserRowStatus
OBJECT-TYPE
This object manages this user account.
1.3.6.1.4.1.171.14.151.1.4.1.1.99RowStatusread-createcurrent
dNetAccessAuthMIBConformance
OBJECT-IDENTITY
1.3.6.1.4.1.171.14.151.2
dnaMIBCompliances
OBJECT-IDENTITY
1.3.6.1.4.1.171.14.151.2.1
dnaMIBGroups
OBJECT-IDENTITY
1.3.6.1.4.1.171.14.151.2.2

Conformance

NameOIDStatus
dnaCompliance
MODULE-COMPLIANCE
The compliance statement for entities which implement DLINKSW-NETWORK-ACCESS-MIB.
1.3.6.1.4.1.171.14.151.2.1.1current
dnaAuthPortConfigGroup
OBJECT-GROUP
A collection of objects that provides port-specific configuration of Network Access Authentication.
1.3.6.1.4.1.171.14.151.2.2.1current
dnaPortMethodGroup
OBJECT-GROUP
A collection of objects provides authentication methods configuration for Network Access Authentication.
1.3.6.1.4.1.171.14.151.2.2.2current
dnaSessionGroup
OBJECT-GROUP
A collection of objects that provides authentication session management information for Network Access Authentication.
1.3.6.1.4.1.171.14.151.2.2.3current
dnaSessionMethodInfoGroup
OBJECT-GROUP
A collection of objects that provides authentication session state information per authentication methods.
1.3.6.1.4.1.171.14.151.2.2.4current
dnaMacMoveConfigGroup
OBJECT-GROUP
A collection of objects providing MAC move configuration for Network Access Authentication on the device.
1.3.6.1.4.1.171.14.151.2.2.5current
dnaAuthzConfigGroup
OBJECT-GROUP
A collection of objects provides authorization configuration for Network Access Authentication on the device.
1.3.6.1.4.1.171.14.151.2.2.6current
dnaMacFormatGroup
OBJECT-GROUP
A collection of objects provides MAC format configuration for Network Access Authentication on the device.
1.3.6.1.4.1.171.14.151.2.2.7current
dnaMaxAuthedUserLimitGroup
OBJECT-GROUP
A collection of objects provides configuration of upper limits for authenticated user.
1.3.6.1.4.1.171.14.151.2.2.8current
dnaGuestVlanGroup
OBJECT-GROUP
A collection of objects providing guest VLAN configuration for Network Access Authentication on the device.
1.3.6.1.4.1.171.14.151.2.2.9current
dnaAuthenticationVlanGroup
OBJECT-GROUP
A collection of objects provides for the platform which supports the feature of per VLAN authentication.
1.3.6.1.4.1.171.14.151.2.2.10current
dnaSessionTerminateGroup
OBJECT-GROUP
A collection of objects providing terminate authentication session information for Network Access Authentication on the device.
1.3.6.1.4.1.171.14.151.2.2.11current
dnaAccountUserGroup
OBJECT-GROUP
A collection of objects providing local account information for Network Access Authentication on the device.
1.3.6.1.4.1.171.14.151.2.2.12current