MIBs Depot

HP-USER-AUTH

Registered at
1.3.6.1.4.1.11.2.14.11.5.1.19
Last updated
2011-08-29 00:00
Organization
HP Networking
Revisions
2011-08-29 00:00, 2011-07-21 00:00, 2010-01-28 00:00, 2009-12-15 00:00, 2009-07-08 00:00, 2009-03-09 00:00, 2008-08-06 12:00, 2007-08-29 00:00, 2007-06-22 12:00, 2005-08-05 00:00, 2003-05-23 10:20
Namespace
hp
Source file
HP-USER-AUTH
Digest
sha256:1670cc637c942e82ec03d977e4aaae4f92cc20d2aff6f336c7701c333bc690fe

Description

This MIB module contains the definitions of Managed Objects for various subsystems that perform user authentication. The subsystems under control by this MIB are: 'WebAuth' - Web-based login authentication 'MacAuth' - MAC address-based authentication 'CLI Password' - CLI-based login authentication

Contact

Hewlett-Packard Company 8000 Foothills Blvd. Roseville, CA 95747

Imports

FromSymbols
HP-ICF-OIDhpSwitch
IF-MIBInterfaceIndex
INET-ADDRESS-MIBInetAddress, InetAddressType
Q-BRIDGE-MIBVlanIndex
SNMP-FRAMEWORK-MIBSnmpAdminString
SNMPv2-CONFMODULE-COMPLIANCE, NOTIFICATION-GROUP, OBJECT-GROUP
SNMPv2-SMICounter32, Integer32, IpAddress, MODULE-IDENTITY, NOTIFICATION-TYPE, OBJECT-IDENTITY, OBJECT-TYPE, Unsigned32, iso
SNMPv2-TCDisplayString, MacAddress, RowStatus, TEXTUAL-CONVENTION, TruthValue

Imported by

Nothing in this corpus imports this module.

Load order

Every file a consumer needs in order to load this module, dependencies first.

BRIDGE-MIB
HP-ICF-OID
HP-USER-AUTH
IANAifType-MIB
IF-MIB
INET-ADDRESS-MIB
P-BRIDGE-MIB
Q-BRIDGE-MIB
RFC1158-MIB
RFC1271-MIB
RMON-MIB
RMON2-MIB
SNMP-FRAMEWORK-MIB
SNMPv2-CONF
SNMPv2-MIB
SNMPv2-SMI
SNMPv2-TC
TOKEN-RING-RMON-MIB

Objects

NameOIDSyntaxAccessStatus
hpicfUsrAuthNotifications
OBJECT-IDENTITY
1.3.6.1.4.1.11.2.14.11.5.1.19.0
hpicfUsrAuthSystem
OBJECT-IDENTITY
1.3.6.1.4.1.11.2.14.11.5.1.19.1
hpicfUsrAuthWebAuthDhcpBaseAddress
OBJECT-TYPE
For all ports running with web authentication enabled: Specifies the base address that should be used by the switch DHCP server for web-based authentication purposes.
1.3.6.1.4.1.11.2.14.11.5.1.19.1.1IpAddressread-writecurrent
hpicfUsrAuthWebAuthDhcpMask
OBJECT-TYPE
For all ports running with web authentication enabled: Specifies the subnet mask to be used in conjunction with the DHCP base address when servicing DHCP requests. Allowable mask range is 255.255.240.0 (20) to 255.255.255.0 (24).
1.3.6.1.4.1.11.2.14.11.5.1.19.1.2IpAddressread-writecurrent
hpicfUsrAuthWebAuthDhcpLease
OBJECT-TYPE
For all ports running with web authentication enabled: Specifies the DHCP lease length in seconds.
1.3.6.1.4.1.11.2.14.11.5.1.19.1.3Integer32 (1..30)read-writecurrent
hpicfUsrAuthMacAuthAddrFormat
OBJECT-TYPE
For all ports running with MAC authentication enabled: Specifies the MAC address format to use in the RADIUS access-request, as follows: 'noDelimiter' - Sends MAC address in aabbccddeeff format 'singleDash' - Sends MAC address in aabbcc-ddeeff format 'multiDash' - Sends MAC address in aa-bb-cc-dd-ee-ff format 'multiColon' - Sends MAC address in aa:bb:cc:dd:ee:ff format 'noDelimiterUppercase' - Sends MAC address in AABBCCDDEEFF format 'singleDashUppercase' - Sends MAC address in AABBCC-DDEEFF format 'multiDashUppercase' - Sends MAC address in AA-BB-CC-DD-EE-FF format 'multiColonUppercase' - Sends MAC address in AA:BB:CC:DD:EE:FF format The default value is noDelimiter(1).
1.3.6.1.4.1.11.2.14.11.5.1.19.1.4INTEGER {noDelimiter(1), singleDash(2), multiDash(3), multiColon(4), noDelimiterUppercase(5), singleDashUppercase(6), multiDashUppercase(7), multiColonUppercase(8)}read-writecurrent
hpicfUsrAuthCliNotifyEnable
OBJECT-TYPE
The operational status of hpicfUsrAuthCliAuthFail notifications. The default value is 1 (Enabled). A value of 2 represents Disabled. Writing this object requires authentication, such as provided by SNMPv3.
1.3.6.1.4.1.11.2.14.11.5.1.19.1.5INTEGER {enabled(1), disabled(2)}read-writecurrent
hpicfUsrAuthCLIInterface
OBJECT-TYPE
Denotes the interface that is generating the notification.
1.3.6.1.4.1.11.2.14.11.5.1.19.1.6INTEGER {serial(1), telnet(2), ssh(3), other(9)}accessible-for-notifycurrent
hpicfUsrAuthCLIPasswdSet
OBJECT-TYPE
Indicates whether the CLI manager password is set. 1 indicates True while 2 indicates False.
1.3.6.1.4.1.11.2.14.11.5.1.19.1.7TruthValueaccessible-for-notifycurrent
hpicfUsrAuthCLIFailCnt
OBJECT-TYPE
The count of hpicfUsrAuthPasswdFail notifications sent by the hpicfUsrAuth entity to the SNMP entity. The actual count of notifications sent by SNMP may be lower due to rate limiting or configuration.
1.3.6.1.4.1.11.2.14.11.5.1.19.1.8Integer32accessible-for-notifycurrent
hpicfUsrAuthCLIPwdNotifyCnt
OBJECT-TYPE
A count of CLI password change notifications sent from the Auth entity to the SNMP entity within the switch. This count may therefore differ from the count of notifications actually sent by the SNMP entity due to switch configuration (e.g., the value of hpicfUsrAuthNotifyEnable.)
1.3.6.1.4.1.11.2.14.11.5.1.19.1.9Unsigned32accessible-for-notifycurrent
hpicfUsrAuthWMAFailCnt
OBJECT-TYPE
The count of hpicfPortSecAuthFailure notifications sent by the hpicfUsrAuth entity to the SNMP entity. The actual count of notifications sent by SNMP may be lower due to rate limiting or configuration.
1.3.6.1.4.1.11.2.14.11.5.1.19.1.10Unsigned32accessible-for-notifycurrent
hpicfUsrAuthWMAFailMAC
OBJECT-TYPE
The MAC address supplied in the failed authentication request.
1.3.6.1.4.1.11.2.14.11.5.1.19.1.11MacAddressaccessible-for-notifycurrent
hpicfUsrAuthWMAFailPort
OBJECT-TYPE
The port index of the failed authentication request.
1.3.6.1.4.1.11.2.14.11.5.1.19.1.12Integer32accessible-for-notifycurrent
hpicfUsrAuthWMAFailVlan
OBJECT-TYPE
The VLAN ID associated with the failed authentication request.
1.3.6.1.4.1.11.2.14.11.5.1.19.1.13Integer32accessible-for-notifycurrent
hpicfUsrAuthPortSecNotifyEnable
OBJECT-TYPE
Provides operational control of hpicfPortSecAuthFailure notification. When enabled (1), the notification will be sent. When disabled (2), the notification will not be sent. Setting this object requires authentication, such as provided by SNMPv3.
1.3.6.1.4.1.11.2.14.11.5.1.19.1.14INTEGER {enabled(1), disabled(2)}read-writecurrent
hpicfUsrAuthPasswdNotifyEnable
OBJECT-TYPE
Provides operational control of hpicfUsrAuthPasswdChng notification. When enabled (1), the notification will be sent. When disabled (2), the notification will not be sent. Setting this object requires authentication, such as provided by SNMPv3.
1.3.6.1.4.1.11.2.14.11.5.1.19.1.15INTEGER {enabled(1), disabled(2)}read-writecurrent
hpicfUsrAuthWMAEWAServerTable
OBJECT-TYPE
A table of the Enhanced Web Auth servers.
1.3.6.1.4.1.11.2.14.11.5.1.19.1.16not-accessiblecurrent
hpicfUsrAuthWMAEWAServerEntry
OBJECT-TYPE
Addresses for an Enhanced Web Auth server.
1.3.6.1.4.1.11.2.14.11.5.1.19.1.16.1not-accessiblecurrent
hpicfUsrAuthWMAeWAServerIndex
OBJECT-TYPE
Index into hpicfUsrAuthWMAEWAServerTable.
1.3.6.1.4.1.11.2.14.11.5.1.19.1.16.1.1Integer32not-accessiblecurrent
hpicfUsrAuthWMAeWAServerIPAddressType
OBJECT-TYPE
The type of Enhanced Web Auth Server Address.
1.3.6.1.4.1.11.2.14.11.5.1.19.1.16.1.2InetAddressTyperead-createcurrent
hpicfUsrAuthWMAeWAServerIPAddress
OBJECT-TYPE
The IP address of the Enhanced Web Auth Server. If set to 0.0.0.0 or URL not configured no Enhanced Web Auth Server will run.
1.3.6.1.4.1.11.2.14.11.5.1.19.1.16.1.3InetAddressread-createcurrent
hpicfUsrAuthWMAeWAServerPath
OBJECT-TYPE
The Enhanced Web Auth Server Path for the location of the Enhanced Web Auth Pages. If not configured the default path will be used.
1.3.6.1.4.1.11.2.14.11.5.1.19.1.16.1.4OCTET STRINGread-createcurrent
hpicfUsrAUthWMAeWAServerRowStatus
OBJECT-TYPE
This marks the row as active/inactive.
1.3.6.1.4.1.11.2.14.11.5.1.19.1.16.1.5RowStatusread-createcurrent
hpicfUsrAuthRedirectServerTable
OBJECT-TYPE
A table of the authentication Redirect Servers.
1.3.6.1.4.1.11.2.14.11.5.1.19.1.17not-accessiblecurrent
hpicfUsrAuthRedirectServerEntry
OBJECT-TYPE
Attributes of an authentication Redirect Server.
1.3.6.1.4.1.11.2.14.11.5.1.19.1.17.1not-accessiblecurrent
hpicfUsrAuthRedirectServerIndex
OBJECT-TYPE
Index into hpicfUsrAuthRedirectServerTable.
1.3.6.1.4.1.11.2.14.11.5.1.19.1.17.1.1Integer32not-accessiblecurrent
hpicfUsrAuthRedirectServerURL
OBJECT-TYPE
This object represents the authentication Redirect Server's complete URL for the location of the redirect server login or warning page. This value must begin with 'http://' or 'https://' and should include the DNS name, TCP port of the server if not 80 or SSL's 443, and the page path, if necessary.
1.3.6.1.4.1.11.2.14.11.5.1.19.1.17.1.2OCTET STRINGread-createcurrent
hpicfUsrAuthRedirectServerRowStatus
OBJECT-TYPE
This object indicates the status of this entry. Must NOT be active in order to modify some other column of this config entry.
1.3.6.1.4.1.11.2.14.11.5.1.19.1.17.1.3RowStatusread-createcurrent
hpicfUsrAuthRedirectServerRestrictiveFilter
OBJECT-TYPE
If enabled, only the configured initial web page will be returned for all client requests. The enabled state would generally be used to simply display an informative warning message to failed macAuth clients. If disabled, all client/redirect-server http traffic will be permitted.
1.3.6.1.4.1.11.2.14.11.5.1.19.1.18INTEGER {enabled(1), disabled(2)}read-writecurrent
hpicfUsrAuthRedirectServerClientTimeout
OBJECT-TYPE
The time (in seconds) that a client will be left in the unauthorized authentication redirection state before being removed from the state tables, temporarily suspending further client/redirect-server http traffic. After state table removal, client is free to initiate authentication.
1.3.6.1.4.1.11.2.14.11.5.1.19.1.19Integer32read-writecurrent
hpicfUsrAuthRedirectServerAuthFailureStats
OBJECT-TYPE
The total number of times clients fail authentication and initiate the authentication Redirect Server process since reboot. A single client can be counted multiple times.
1.3.6.1.4.1.11.2.14.11.5.1.19.1.20Counter32read-onlycurrent
hpicfUsrAuthCacheCredTimeOut
OBJECT-TYPE
Specifies the time in seconds, that the switch should remove the credentials. Reauthentication should take place with in small amount of time.
1.3.6.1.4.1.11.2.14.11.5.1.19.1.21Integer32read-writecurrent
hpicfUsrAuthClientReauthenticateTable
OBJECT-TYPE
A table containing configuration/control variables indexed by port and client MAC.
1.3.6.1.4.1.11.2.14.11.5.1.19.1.22not-accessiblecurrent
hpicfUsrAuthClientReauthenticateEntry
OBJECT-TYPE
The table entry provides the means by which a client on an authentication interface can be forced to reauthenticate.
1.3.6.1.4.1.11.2.14.11.5.1.19.1.22.1not-accessiblecurrent
hpicfUsrAuthClientReauthenticateInterfaceIndex
OBJECT-TYPE
Index of client interfaces.
1.3.6.1.4.1.11.2.14.11.5.1.19.1.22.1.1InterfaceIndexnot-accessiblecurrent
hpicfUsrAuthClientReauthenticateMacAddress
OBJECT-TYPE
Specifies the MAC address of the client.
1.3.6.1.4.1.11.2.14.11.5.1.19.1.22.1.2MacAddressnot-accessiblecurrent
hpicfUsrAuthClientReauthenticate
OBJECT-TYPE
The reauthentication control for this client on this authentication interface. Setting this attribute TRUE forces this authenticated client to re-authenticate. That is, the client is deauthenticated and must transmit traffic in order to trigger reauthentication. Setting this attribute FALSE has no effect.
1.3.6.1.4.1.11.2.14.11.5.1.19.1.22.1.3TruthValueread-writecurrent
hpicfUsrAuthMacAuthPassword
OBJECT-TYPE
This object represents the secret password value used by all MAC auth clients. The default value of password is NULL. The password if set(non NULL) will be used instead of MAC address while constructing Radius request packet. The current maximum length of password is 16.
1.3.6.1.4.1.11.2.14.11.5.1.19.1.23OCTET STRINGread-writecurrent
hpicfUsrAuthWebAuthAccessDeniedMode
OBJECT-TYPE
Specifies the access denied mode that applies to the custom message embedded into the login failure page. The values: disabled (1) - the feature is disabled. custom (2) - use the string configured by administrator via CLI or SNMP. radius (3) - use the string in the 'reply-message' attribute of the received RADIUS response message.
1.3.6.1.4.1.11.2.14.11.5.1.19.1.24INTEGER {disabled(1), custom(2), radius(3)}read-writecurrent
hpicfUsrAuthWebAuthAccessDeniedMessage
OBJECT-TYPE
Text of the access denied message that will be embedded into the custom web auth login failure page. This message will only be used when the access denied mode is set to 'custom'. It can take up to 250 characters
1.3.6.1.4.1.11.2.14.11.5.1.19.1.25OCTET STRING (SIZE(1..1024))read-writecurrent
hpicfUsrAuthPorts
OBJECT-IDENTITY
1.3.6.1.4.1.11.2.14.11.5.1.19.2
hpicfUsrAuthPortTable
OBJECT-TYPE
A table of system level information about Web- MAC-based authentication for each port in the switch.
1.3.6.1.4.1.11.2.14.11.5.1.19.2.1not-accessiblecurrent
hpicfUsrAuthPortEntry
OBJECT-TYPE
The port number, operational mode and re-authentication control for each switch port.
1.3.6.1.4.1.11.2.14.11.5.1.19.2.1.1not-accessiblecurrent
hpicfUsrAuthPortNumber
OBJECT-TYPE
The port number associated with this switch port.
1.3.6.1.4.1.11.2.14.11.5.1.19.2.1.1.1InterfaceIndexaccessible-for-notifycurrent
hpicfUsrAuthWebAuthAdminStatus
OBJECT-TYPE
Setting this attribute TRUE enables web-based authentication services. A value of FALSE disabled web-based authentication. This attribute cannot be set TRUE concurrently with hpicfUsrAuthMacAuthAdminStatus.
1.3.6.1.4.1.11.2.14.11.5.1.19.2.1.1.2TruthValueread-writecurrent
hpicfUsrAuthMacAuthAdminStatus
OBJECT-TYPE
Setting this attribute TRUE enables MAC-based authentication services. A value of FALSE disabled MAC-based authentication. This attribute cannot be set TRUE concurrently with hpicfUsrAuthWebAuthAdminStatus.
1.3.6.1.4.1.11.2.14.11.5.1.19.2.1.1.3TruthValueread-writecurrent
hpicfUsrAuthPortReauthenticate
OBJECT-TYPE
The reauthentication control for this port. Setting this attribute TRUE forces all authenticated clients to re-authenticate themselves. Setting this attribute FALSE has no effect. This attribute always returns FALSE when read.
1.3.6.1.4.1.11.2.14.11.5.1.19.2.1.1.4TruthValueread-writecurrent
hpicfUsrAuthWebAuthConfig
OBJECT-IDENTITY
1.3.6.1.4.1.11.2.14.11.5.1.19.3
hpicfUsrAuthWebAuthConfigTable
OBJECT-TYPE
A table that contains the configuration objects for Web-based Authentication associated with each port. An entry appears in this table for each port that may authenticate access to itself.
1.3.6.1.4.1.11.2.14.11.5.1.19.3.1not-accessiblecurrent
hpicfUsrAuthWebAuthConfigEntry
OBJECT-TYPE
The configuration information for Web-based authentication.
1.3.6.1.4.1.11.2.14.11.5.1.19.3.1.1not-accessiblecurrent
hpicfUsrAuthWebAuthClientLimit
OBJECT-TYPE
The maximum number of authenticated clients to allow on the port.
1.3.6.1.4.1.11.2.14.11.5.1.19.3.1.1.1Integer32 (1..256)read-writecurrent
hpicfUsrAuthWebAuthClientMoves
OBJECT-TYPE
Specifies whether client may roam across ports under web authentication control. Setting this attribute 'enabled'allows authenticated clients to roam to other ports under web authentication control (that also have this attribute set to 'enabled') without requiring a re-authentication. Setting this attribute 'disabled' disallows authenticated clients from roaming to other ports (regardless of that port's attribute value). The client has to re- authenticate, if it attempts to roam.
1.3.6.1.4.1.11.2.14.11.5.1.19.3.1.1.2INTEGER {disabled(1), enabled(2)}read-writecurrent
hpicfUsrAuthWebAuthSSLState
OBJECT-TYPE
Specifies whether web-based authentication should use an SSL connection (i.e. https://) to switch to collect client credentials. Note: A valid certificate must be configured on switch before SSL connections are enabled.
1.3.6.1.4.1.11.2.14.11.5.1.19.3.1.1.3INTEGER {disabled(1), enabled(2)}read-writecurrent
hpicfUsrAuthWebAuthRedirectUrl
OBJECT-TYPE
Specifies the URL, to which an authenticated client should be re-directed, after successful authentication.
1.3.6.1.4.1.11.2.14.11.5.1.19.3.1.1.4OCTET STRING (SIZE(0..127))read-writecurrent
hpicfUsrAuthWebAuthQuietPeriod
OBJECT-TYPE
Specifies the time, in seconds, that the switch should refrain from re-attempting an authentication request for a client whose credentials were rejected.
1.3.6.1.4.1.11.2.14.11.5.1.19.3.1.1.5Integer32 (1..65535)read-writecurrent
hpicfUsrAuthWebAuthServerTimeout
OBJECT-TYPE
Specifies the time, in seconds, that the switch should wait for an authentication reply to return before considering it as timed out.
1.3.6.1.4.1.11.2.14.11.5.1.19.3.1.1.6Integer32 (1..300)read-writecurrent
hpicfUsrAuthWebAuthServerMaxReq
OBJECT-TYPE
Specifies the number of authentication requests that must time out before failing authentication.
1.3.6.1.4.1.11.2.14.11.5.1.19.3.1.1.7Integer32 (1..10)read-writecurrent
hpicfUsrAuthWebAuthMaxRetries
OBJECT-TYPE
Specifies the number of authentication requests that must fail (i.e. invalid credentials) before failing authentication.
1.3.6.1.4.1.11.2.14.11.5.1.19.3.1.1.8Integer32 (1..10)read-writecurrent
hpicfUsrAuthWebAuthLogoffPeriod
OBJECT-TYPE
Specifies the period, in seconds, at which an authenticated client will be considered unauthenticated for a lack of activity (i.e. traffic originating from client).
1.3.6.1.4.1.11.2.14.11.5.1.19.3.1.1.9Integer32 (1..999999999)read-writecurrent
hpicfUsrAuthWebAuthReAuthPeriod
OBJECT-TYPE
Specifies the period, in seconds, at which an authenticated client must re-authenticate. A value of 0 signifies that an authenticated client will never have to re-authenticate.
1.3.6.1.4.1.11.2.14.11.5.1.19.3.1.1.10Integer32 (0..999999999)read-writecurrent
hpicfUsrAuthWebAuthAuthVid
OBJECT-TYPE
Specifies the port VID (PVID) that should be used for an authenticated client.
1.3.6.1.4.1.11.2.14.11.5.1.19.3.1.1.11VlanIndexread-writecurrent
hpicfUsrAuthWebAuthUnauthVid
OBJECT-TYPE
Specifies the port VID (PVID) that should be used for an unauthenticated client.
1.3.6.1.4.1.11.2.14.11.5.1.19.3.1.1.12VlanIndexread-writecurrent
hpicfUsrAuthWebAuthCacheCredentials
OBJECT-TYPE
Specifies whether to cache client credentials or not. Setting this variable 'enabled' allows to cache authenticated clients credentials. Setting this variable 'disabled' disallows to cache authenticated clients credentials.
1.3.6.1.4.1.11.2.14.11.5.1.19.3.1.1.13INTEGER {disabled(1), enabled(2)}read-writecurrent
hpicfUsrAuthWebAuthCachedReauthPeriod
OBJECT-TYPE
The value indicates the period in seconds, during which cached re-authentication is allowed on the port.If value is zero then the period of cached re-authentication is unlimited.
1.3.6.1.4.1.11.2.14.11.5.1.19.3.1.1.14Unsigned32 (0..2147483647)read-writecurrent
hpicfUsrAuthWebAuthClientReauthenticateTable
OBJECT-TYPE
A table containing WebAuth configuration/control variables indexed by port and client MAC.
1.3.6.1.4.1.11.2.14.11.5.1.19.3.2not-accessiblecurrent
hpicfUsrAuthWebAuthClientReauthenticateEntry
OBJECT-TYPE
The table entry provides the means by which a WebAuth client on an authentication interface can be forced to reauthenticate.
1.3.6.1.4.1.11.2.14.11.5.1.19.3.2.1not-accessiblecurrent
hpicfUsrAuthWebAuthClientReauthenticateInterfaceIndex
OBJECT-TYPE
Index of WebAuth client interfaces.
1.3.6.1.4.1.11.2.14.11.5.1.19.3.2.1.1InterfaceIndexnot-accessiblecurrent
hpicfUsrAuthWebAuthClientReauthenticateMacAddress
OBJECT-TYPE
Specifies the MAC address of the client.
1.3.6.1.4.1.11.2.14.11.5.1.19.3.2.1.2MacAddressnot-accessiblecurrent
hpicfUsrAuthWebAuthClientReauthenticate
OBJECT-TYPE
The reauthentication control for this client on this authentication interface. Setting this attribute TRUE forces this authenticated WebAuth client to re-authenticate. That is, the client is deauthenticated and must transmit traffic in order to trigger reauthentication. Setting this attribute FALSE has no effect.
1.3.6.1.4.1.11.2.14.11.5.1.19.3.2.1.3TruthValueread-writecurrent
hpicfUsrAuthMacAuthConfig
OBJECT-IDENTITY
1.3.6.1.4.1.11.2.14.11.5.1.19.4
hpicfUsrAuthMacAuthConfigTable
OBJECT-TYPE
A table that contains the configuration objects for Mac-based Authentication associated with each port. An entry appears in this table for each port that may authenticate access to itself.
1.3.6.1.4.1.11.2.14.11.5.1.19.4.1not-accessiblecurrent
hpicfUsrAuthMacAuthConfigEntry
OBJECT-TYPE
The configuration information for Mac-based authentication.
1.3.6.1.4.1.11.2.14.11.5.1.19.4.1.1not-accessiblecurrent
hpicfUsrAuthMacAuthClientLimit
OBJECT-TYPE
The maximum number of authenticated clients to allow on the port.
1.3.6.1.4.1.11.2.14.11.5.1.19.4.1.1.1Integer32 (1..256)read-writecurrent
hpicfUsrAuthMacAuthClientMoves
OBJECT-TYPE
Specifies whether client may roam across ports under web authentication control. Setting this attribute 'enabled'allows authenticated clients to roam to other ports under web authentication control (that also have this attribute set to 'enabled') without requiring a re-authentication. Setting this attribute 'disabled' disallows authenticated clients from roaming to other ports (regardless of that port's attribute value). The client has to re- authenticate, if it attempts to roam.
1.3.6.1.4.1.11.2.14.11.5.1.19.4.1.1.2INTEGER {disabled(1), enabled(2)}read-writecurrent
hpicfUsrAuthMacAuthQuietPeriod
OBJECT-TYPE
Specifies the time, in seconds, that the switch should refrain from re-attempting an authentication request for a client whose credentials were rejected.
1.3.6.1.4.1.11.2.14.11.5.1.19.4.1.1.3Integer32 (1..65535)read-writecurrent
hpicfUsrAuthMacAuthServerTimeout
OBJECT-TYPE
Specifies the time, in seconds, that the switch should wait for an authentication reply to return before considering it as timed out.
1.3.6.1.4.1.11.2.14.11.5.1.19.4.1.1.4Integer32 (1..300)read-writecurrent
hpicfUsrAuthMacAuthServerMaxReq
OBJECT-TYPE
Specifies the number of authentication requests that must time out before failing authentication.
1.3.6.1.4.1.11.2.14.11.5.1.19.4.1.1.5Integer32 (1..10)read-writecurrent
hpicfUsrAuthMacAuthLogoffPeriod
OBJECT-TYPE
Specifies the period, in seconds, at which an authenticated client will be considered unauthenticated for a lack of activity (i.e. traffic originating from client).
1.3.6.1.4.1.11.2.14.11.5.1.19.4.1.1.6Integer32 (1..999999999)read-writecurrent
hpicfUsrAuthMacAuthReAuthPeriod
OBJECT-TYPE
Specifies the period, in seconds, at which an authenticated client must re-authenticate. A value of 0 signifies that an authenticated client will never have to re-authenticate.
1.3.6.1.4.1.11.2.14.11.5.1.19.4.1.1.7Integer32 (0..999999999)read-writecurrent
hpicfUsrAuthMacAuthAuthVid
OBJECT-TYPE
Specifies the port VID (PVID) that should be used for an authenticated client.
1.3.6.1.4.1.11.2.14.11.5.1.19.4.1.1.8VlanIndexread-writecurrent
hpicfUsrAuthMacAuthUnauthVid
OBJECT-TYPE
Specifies the port VID (PVID) that should be used for an unauthenticated client.
1.3.6.1.4.1.11.2.14.11.5.1.19.4.1.1.9VlanIndexread-writecurrent
hpicfUsrAuthMacAuthCachedReauthPeriod
OBJECT-TYPE
The value indicates the period in seconds, during which cached re-authentication is allowed on the port.If value is zero then the period of cached re-authentication is unlimited.
1.3.6.1.4.1.11.2.14.11.5.1.19.4.1.1.10Unsigned32 (0..2147483647)read-writecurrent
hpicfUsrAuthMacAuthUnAuthPeriod
OBJECT-TYPE
Specifies the period, in seconds, at which an authenticated client must re-authenticate. A value of 0 signifies that an authenticated client will never have to re-authenticate.
1.3.6.1.4.1.11.2.14.11.5.1.19.4.1.1.11Integer32 (0..65535)read-writecurrent
hpicfUsrAuthMacAuthClientReauthenticateTable
OBJECT-TYPE
A table containing macAuth configuration/control variables indexed by port and client MAC.
1.3.6.1.4.1.11.2.14.11.5.1.19.4.2not-accessiblecurrent
hpicfUsrAuthMacAuthClientReauthenticateEntry
OBJECT-TYPE
The table entry provides the means by which a macAuth client on an authentication interface can be forced to reauthenticate.
1.3.6.1.4.1.11.2.14.11.5.1.19.4.2.1not-accessiblecurrent
hpicfUsrAuthMacAuthClientReauthenticateInterfaceIndex
OBJECT-TYPE
Index of macAuth client interfaces.
1.3.6.1.4.1.11.2.14.11.5.1.19.4.2.1.1InterfaceIndexnot-accessiblecurrent
hpicfUsrAuthMacAuthClientReauthenticateMacAddress
OBJECT-TYPE
Specifies the MAC address of the client.
1.3.6.1.4.1.11.2.14.11.5.1.19.4.2.1.2MacAddressnot-accessiblecurrent
hpicfUsrAuthMacAuthClientReauthenticate
OBJECT-TYPE
The reauthentication control for this client on this authentication interface. Setting this attribute TRUE forces this authenticated macAuth client to re-authenticate. That is, the client is deauthenticated and must transmit traffic in order to trigger reauthentication. Setting this attribute FALSE has no effect.
1.3.6.1.4.1.11.2.14.11.5.1.19.4.2.1.3TruthValueread-writecurrent
hpicfUsrAuthWebAuthStats
OBJECT-IDENTITY
1.3.6.1.4.1.11.2.14.11.5.1.19.5
hpicfUsrAuthWebAuthSessionStatsTable
OBJECT-TYPE
A table that contains session statistic objects for each client (i.e. user) attempting to authenticate to a port with Web-authentication enabled. An entry appears in this table for each port in the switch.
1.3.6.1.4.1.11.2.14.11.5.1.19.5.1not-accessiblecurrent
hpicfUsrAuthWebAuthSessionStatsEntry
OBJECT-TYPE
The session statistics information for a port with Web-based authentication enabled. This shows the current values being collected for active sessions.
1.3.6.1.4.1.11.2.14.11.5.1.19.5.1.1not-accessiblecurrent
hpicfUsrAuthWebAuthSessionMacAddr
OBJECT-TYPE
Specifies the MAC address of the client.
1.3.6.1.4.1.11.2.14.11.5.1.19.5.1.1.1MacAddressread-onlycurrent
hpicfUsrAuthWebAuthSessionName
OBJECT-TYPE
Specifies the username of the client.
1.3.6.1.4.1.11.2.14.11.5.1.19.5.1.1.2SnmpAdminStringread-onlycurrent
hpicfUsrAuthWebAuthSessionState
OBJECT-TYPE
Specifies the state of the client as follows: 'authenticated' - authenticated client 'unauthenticated' - unauthenticated client, waiting for credentials 'authenticating' - credentials have been sent for verification, waiting for response 'authReqRejectNoVlan' - credentials invalid; client does not have access to unauthenticated VLAN 'authReqRejectUnauthVlan - credentials invalid; client does have access to unauthenticated VLAN 'authReqTimeoutNoVlan' - credentials could not be verified; client is still unauthenticated and does not have access to unauthenticated VLAN 'authReqTimeoutUnauthVlan' - credentials could not be verified; client is still unauthenticated, but has access to unauthenticated VLAN
1.3.6.1.4.1.11.2.14.11.5.1.19.5.1.1.3INTEGER {authenticated(1), unauthenticated(2), authenticating(3), authReqRejectNoVlan(4), authReqRejectUnauthVlan(5), authReqTimeoutNoVlan(6), authReqTimeoutUnauthVlan(7)}read-onlycurrent
hpicfUsrAuthWebAuthSessionStateTime
OBJECT-TYPE
The duration, in seconds, a client has spent in the state specified by hpicfUsrAuthSessionState.
1.3.6.1.4.1.11.2.14.11.5.1.19.5.1.1.4Unsigned32read-onlycurrent
hpicfUsrAuthWebAuthSessionAuthVid
OBJECT-TYPE
Specifies the PVID that the authenticated client is utilizing. If client is unauthenticated, this object has no meaning.
1.3.6.1.4.1.11.2.14.11.5.1.19.5.1.1.5VlanIndexread-onlycurrent
hpicfUsrAuthWebAuthSessionUnauthVid
OBJECT-TYPE
Specifies the PVID that the unauthenticated client is utilizing. If client is authenticated, this object has no meaning.
1.3.6.1.4.1.11.2.14.11.5.1.19.5.1.1.6VlanIndexread-onlycurrent
hpicfUsrAuthWebAuthSessionTimeout
OBJECT-TYPE
Specifies the RADIUS Server set session timeout for reauthentication of the user. When ST = 0, user gets reauthenticated at reauth-period secs, ST < 60 it is set to 60 secs and then user is reauthenticated, ST > 60 user is reauthenticated at ST secs.
1.3.6.1.4.1.11.2.14.11.5.1.19.5.1.1.7Unsigned32 (0..4294967295)read-onlycurrent
hpicfUsrAuthMacAuthStats
OBJECT-IDENTITY
1.3.6.1.4.1.11.2.14.11.5.1.19.6
hpicfUsrAuthMacAuthSessionStatsTable
OBJECT-TYPE
A table that contains session statistic objects for each client (i.e. user) attempting to authenticate to a port with MAC-authentication enabled. An entry appears in this table for each port in the switch.
1.3.6.1.4.1.11.2.14.11.5.1.19.6.1not-accessiblecurrent
hpicfUsrAuthMacAuthSessionStatsEntry
OBJECT-TYPE
The session statistics information for a port with Mac-based authentication enabled. This shows the current values being collected for active sessions.
1.3.6.1.4.1.11.2.14.11.5.1.19.6.1.1not-accessiblecurrent
hpicfUsrAuthMacAuthSessionMacAddr
OBJECT-TYPE
Specifies the MAC address of the client.
1.3.6.1.4.1.11.2.14.11.5.1.19.6.1.1.1MacAddressread-onlycurrent
hpicfUsrAuthMacAuthSessionState
OBJECT-TYPE
Specifies the state of the client as follows: 'authenticated' - authenticated client 'unauthenticated' - unauthenticated client, waiting for credentials 'authenticating' - credentials have been sent for verification, waiting for response 'authReqRejectNoVlan' - credentials invalid; client does not have access to unauthenticated VLAN 'authReqRejectUnauthVlan - credentials invalid; client does have access to unauthenticated VLAN 'authReqTimeoutNoVlan' - credentials could not be verified; client is still unauthenticated and does not have access to unauthenticated VLAN 'authReqTimeoutUnauthVlan' - credentials could not be verified; client is still unauthenticated, but has access to unauthenticated VLAN
1.3.6.1.4.1.11.2.14.11.5.1.19.6.1.1.2INTEGER {authenticated(1), unauthenticated(2), authenticating(3), authReqRejectNoVlan(4), authReqRejectUnauthVlan(5), authReqTimeoutNoVlan(6), authReqTimeoutUnauthVlan(7)}read-onlycurrent
hpicfUsrAuthMacAuthSessionStateTime
OBJECT-TYPE
The duration, in seconds, a client has spent in the state specified by hpicfUsrAuthSessionState.
1.3.6.1.4.1.11.2.14.11.5.1.19.6.1.1.3Unsigned32read-onlycurrent
hpicfUsrAuthMacAuthSessionAuthVid
OBJECT-TYPE
Specifies the PVID that the authenticated client is utilizing. If client is unauthenticated, this object has no meaning.
1.3.6.1.4.1.11.2.14.11.5.1.19.6.1.1.4VlanIndexread-onlycurrent
hpicfUsrAuthMacAuthSessionUnauthVid
OBJECT-TYPE
Specifies the PVID that the unauthenticated client is utilizing. If client is authenticated, this object has no meaning.
1.3.6.1.4.1.11.2.14.11.5.1.19.6.1.1.5VlanIndexread-onlycurrent
hpicfUsrAuthMacAuthSessionTimeout
OBJECT-TYPE
Specifies the RADIUS Server set session timeout for reauthentication of the user. When ST = 0, user gets reauthenticated at reauth-period secs, ST < 60 it is set to 60 secs and then user is reauthenticated, ST > 60 user is reauthenticated at ST secs.
1.3.6.1.4.1.11.2.14.11.5.1.19.6.1.1.6Unsigned32 (0..4294967295)read-onlycurrent
hpicfUsrAuthConformance
OBJECT-IDENTITY
1.3.6.1.4.1.11.2.14.11.5.1.19.7
hpicfUsrAuthGroups
OBJECT-IDENTITY
1.3.6.1.4.1.11.2.14.11.5.1.19.7.2
hpicfUsrAuthCompliances
OBJECT-IDENTITY
1.3.6.1.4.1.11.2.14.11.5.1.19.7.4
hpicfUsrAuthNotifyConformance
OBJECT-IDENTITY
1.3.6.1.4.1.11.2.14.11.5.1.19.8
hpicfUsrAuthMacGlobalConformance
OBJECT-IDENTITY
1.3.6.1.4.1.11.2.14.11.5.1.19.9
hpicfUsrAuthWebAuthAccessDeniedConformance
OBJECT-IDENTITY
1.3.6.1.4.1.11.2.14.11.5.1.19.10

Notifications

NameOIDStatus
hpicfUsrAuthCLIAuthFail
NOTIFICATION-TYPE
An hpicfUsrAuthCLIPasswd notification signifies that CLI password authentication has failed. Operational control of this notification is provided using hpicfUsrAuthCliNotifyEnable.
1.3.6.1.4.1.11.2.14.11.5.1.19.0.1current
hpicfUsrAuthPasswdChng
NOTIFICATION-TYPE
An hpicfUsrAuthPasswdChng notification signifies that the manager password has been changed. The value of hpicfUsrAuthCLIPasswdSet can be used to determine whether the password has been set or cleared by this action.
1.3.6.1.4.1.11.2.14.11.5.1.19.0.2current
hpicfPortSecAuthFailure
NOTIFICATION-TYPE
This notification indicates a failed Port Security (network access) authentication event.
1.3.6.1.4.1.11.2.14.11.5.1.19.0.3current

Conformance

NameOIDStatus
hpicfUsrAuthSystemGroup
OBJECT-GROUP
A collection of objects providing system information about, and control over, Web- and MAC-based authentication.
1.3.6.1.4.1.11.2.14.11.5.1.19.7.2.1current
hpicfUsrAuthPortsGroup
OBJECT-GROUP
A collection of objects providing system level information about Web and MAC based authentication for each port in the switch.
1.3.6.1.4.1.11.2.14.11.5.1.19.7.2.2current
hpicfUsrAuthWebAuthConfigGroup
OBJECT-GROUP
A collection of objects providing configuration objects for Web-based authentication associated with each port.
1.3.6.1.4.1.11.2.14.11.5.1.19.7.2.3current
hpicfUsrAuthMacAuthConfigGroup
OBJECT-GROUP
A collection of objects providing configuration objects for MAC-based authentication associated with each port.
1.3.6.1.4.1.11.2.14.11.5.1.19.7.2.4current
hpicfUsrAuthWebAuthSessionStatsGroup
OBJECT-GROUP
A collection of objects providing statistics about current sessions for Web-based authentication.
1.3.6.1.4.1.11.2.14.11.5.1.19.7.2.5current
hpicfUsrAuthMacAuthSessionStatsGroup
OBJECT-GROUP
A collection of objects providing statistics about current sessions for MAC-based authentication.
1.3.6.1.4.1.11.2.14.11.5.1.19.7.2.6current
hpicfUsrAuthWebAuthConfigGroup1
OBJECT-GROUP
A collection of objects providing configuration objects for Web-based authentication associated with each port.
1.3.6.1.4.1.11.2.14.11.5.1.19.7.2.7current
hpicfUsrAuthMacAuthConfigGroup1
OBJECT-GROUP
A collection of objects providing configuration objects for MAC-based authentication associated with each port.
1.3.6.1.4.1.11.2.14.11.5.1.19.7.2.8current
hpicfUsrAuthMacAuthConfigGroup2
OBJECT-GROUP
A collection of objects providing configuration objects for MAC-based authentication associated with each port.
1.3.6.1.4.1.11.2.14.11.5.1.19.7.2.9current
hpicfUsrAuthRedirectServerGroup
OBJECT-GROUP
A collection of objects for authentication Redirect Server.
1.3.6.1.4.1.11.2.14.11.5.1.19.7.2.10current
hpicfUsrAuthWMAeWAServerGroup
OBJECT-GROUP
A collection of objects for Enhanced Web Auth servers.
1.3.6.1.4.1.11.2.14.11.5.1.19.7.2.11current
hpicfUsrAuthClientReauthenticateGroup
OBJECT-GROUP
A collection of objects for Reauthentication settings .
1.3.6.1.4.1.11.2.14.11.5.1.19.7.2.12current
hpicfUsrAuthMacAuthSessionStatsGroup1
OBJECT-GROUP
A collection of objects providing RADIUS server set session timeout for MAC-based user reauthentication.
1.3.6.1.4.1.11.2.14.11.5.1.19.7.2.13current
hpicfUsrAuthWebAuthSessionStatsGroup1
OBJECT-GROUP
A collection of objects providing RADIUS server set session timeout for Web-based user reauthentication.
1.3.6.1.4.1.11.2.14.11.5.1.19.7.2.14current
hpicfUsrAuthCompliance
MODULE-COMPLIANCE
********* THIS COMPLIANCE IS DEPRECATED ********* The compliance statement for devices support of HP-USER-AUTH MIB.
1.3.6.1.4.1.11.2.14.11.5.1.19.7.4.1deprecated
hpicfUsrAuthCompliance1
MODULE-COMPLIANCE
The compliance statement for devices support of HP-USER-AUTH MIB.
1.3.6.1.4.1.11.2.14.11.5.1.19.7.4.2deprecated
hpicfUsrAuthCompliance2
MODULE-COMPLIANCE
The compliance statement for devices support of HP-USER-AUTH MIB.
1.3.6.1.4.1.11.2.14.11.5.1.19.7.4.3current
hpicfUsrAuthCompliance3
MODULE-COMPLIANCE
The compliance statement for devices support of HP-USER-AUTH MIB.
1.3.6.1.4.1.11.2.14.11.5.1.19.7.4.4current
hpicfUsrAuthCompliance4
MODULE-COMPLIANCE
The compliance statement for devices support of HP-USER-AUTH MIB.
1.3.6.1.4.1.11.2.14.11.5.1.19.7.4.5current
hpicfUsrAuthCompliance5
MODULE-COMPLIANCE
The compliance statement for devices support of HP-USER-AUTH MIB.
1.3.6.1.4.1.11.2.14.11.5.1.19.7.4.6current
hpicfUsrAuthNotificationGroup
NOTIFICATION-GROUP
A group of authorization notifications.
1.3.6.1.4.1.11.2.14.11.5.1.19.8.1current
hpicfNotifcationConfigDataGroup
OBJECT-GROUP
A group of notification data and configuration objects.
1.3.6.1.4.1.11.2.14.11.5.1.19.8.2current
hpicfUsrAuthMacGroup
OBJECT-GROUP
A group of Mac auth global configuration objects.
1.3.6.1.4.1.11.2.14.11.5.1.19.9.1current
hpicfUsrAuthWebAuthAccessDeniedGroup
OBJECT-GROUP
A group of web-auth access denied configuration objects.
1.3.6.1.4.1.11.2.14.11.5.1.19.10.1current