Observium_CE/mibs/dell/DNOS-DOT1X-ADVANCED-FEATURES-MIB

1122 lines
51 KiB
Plaintext

-- Dot1x Advanced Features MIB overview:
-- Dot1x Advanced Features MIB falls under dnOS MIB node of the private subtree.
DNOS-DOT1X-ADVANCED-FEATURES-MIB DEFINITIONS ::= BEGIN
-- Broadcom FastPath Dot1x Advanced Features MIB
-- Copyright 2016-2022 Broadcom.
-- This SNMP Management Information Specification
-- embodies Broadcom's confidential and proprietary
-- intellectual property. Broadcom retains all title
-- and ownership in the Specification including any revisions.
-- This Specification is supplied "AS IS", Broadcom
-- makes no warranty, either expressed or implied,
-- as to the use, operation, condition, or performance of the
-- Specification.
IMPORTS
MODULE-IDENTITY, OBJECT-TYPE, NOTIFICATION-TYPE,
Unsigned32, TimeTicks FROM SNMPv2-SMI
ieee8021XPaePortNumber FROM IEEE8021X-PAE-MIB
TEXTUAL-CONVENTION,
RowStatus,MacAddress,DateAndTime FROM SNMPv2-TC
DisplayString FROM RFC1213-MIB
dnOS FROM DELL-REF-MIB;
fastPathdot1xAdvanced MODULE-IDENTITY
LAST-UPDATED "202112300000Z" -- 30 December 2021 12:00:00 GMT
ORGANIZATION "Dell"
CONTACT-INFO ""
DESCRIPTION
"The Dell Networking Private MIB for Dot1x Advanced Features"
-- Revision history.
REVISION
"202112300000Z" -- 30 December 2021 12:00:00 GMT
DESCRIPTION
"Added New table agentDot1xAuthenticatorPortConfigTable to support two objects. The objects
dot1xAuthTxPeriod and dot1xAuthServerTimeout are defined in earlier 802.1x standards (2001 and 2004 respectively)
but removed in latest standards. However, latest DNOS code (even with 802.1x 2010 version)
continues to use these timers and provides configurability for these timers via other UI."
REVISION
"202011030000Z" -- 03 November 2020 12:00:00 GMT
DESCRIPTION
"Added New OID agentDot1xPortEapolAnnouncements to agentDot1xPortConfigTable."
REVISION
"201806150000Z" -- 15 June 2018 12:00:00 GMT
DESCRIPTION
"Obsoleted objects. Most have relocated to DNOS Authentication Manager MIB
due to Dot1x/AuthManager code re-architecture. Minor changes so as to better
conform to SMIv2"
REVISION
"201712150000Z" -- 15 December 2017 12:00:00 GMT
DESCRIPTION
"Change some DEFVAL statements to use enumeration name instead of number."
REVISION
"201708170000Z" -- 17 August 2017 12:00:00 GMT
DESCRIPTION
"Deprecated the values radius-challenge-process-invalid-nas-port(6) and
radius-accept-process-invalid-nas-port(9) of the object agentDot1xAuthHistoryResultReasonCode."
REVISION
"201708020000Z" -- 02 August 2017 12:00:00 GMT
DESCRIPTION
"Added new authentication types for MAB object agentDot1xPortMABAuthType."
REVISION
"201707250000Z" -- 25 July 2017 12:00:00 GMT
DESCRIPTION
"Added group agentMABConfigGroup to support attribute1 formatting for MAB clients."
REVISION
"201705260000Z" -- 26 May 2017 12:00:00 GMT
DESCRIPTION
"Critical Voice VLAN authentication related changes."
REVISION
"201703300000Z" -- 30 March 2017 12:00:00 GMT
DESCRIPTION
"Critical VLAN authentication related changes."
REVISION
"201703280000Z" -- 28 March 2017 12:00:00 GMT
DESCRIPTION
"agentDot1xPortMaxReAuthReq, agentDot1xPortAuthViolationMode objects added."
REVISION
"201101260000Z" -- 26 January 2011 12:00:00 GMT
DESCRIPTION
"Postal address updated."
REVISION
"200705230000Z" -- 23 May 2007 12:00:00 GMT
DESCRIPTION
"Dell branding related changes."
::= { dnOS 36 }
Dot1xPortControlMode ::= TEXTUAL-CONVENTION
STATUS obsolete
DESCRIPTION
"The control values of the Authenticator PAE controlled
Port."
SYNTAX INTEGER {
forceUnauthorized(1),
auto(2),
forceAuthorized(3),
macBased(4)
}
Dot1xSessionTerminationAction ::= TEXTUAL-CONVENTION
STATUS obsolete
DESCRIPTION
"The action to be taken on session termination ."
SYNTAX INTEGER {
default(1),
reauthenticate(2)
}
agentDot1xEnhancementConfigGroup OBJECT IDENTIFIER ::= { fastPathdot1xAdvanced 1 }
agentDot1xRadiusVlanAssignment OBJECT-TYPE
SYNTAX INTEGER {
enable(1),
disable(2)
}
MAX-ACCESS read-write
STATUS obsolete
DESCRIPTION
"Enable/Disable dot1x Vlan Assignment Support on the switch.
This object is obsolete.
Refer to agentAuthMgrRadiusVlanAssignment"
::= { agentDot1xEnhancementConfigGroup 1 }
agentDot1xEapolFloodMode OBJECT-TYPE
SYNTAX INTEGER {
enable(1),
disable(2)
}
MAX-ACCESS read-write
STATUS current
DESCRIPTION
"Enable/Disable dot1x eapol flooding mode on the switch."
::= { agentDot1xEnhancementConfigGroup 3 }
agentDot1xCriticalRecoveryMaxReauth OBJECT-TYPE
SYNTAX Unsigned32
MAX-ACCESS read-write
STATUS obsolete
DESCRIPTION
"Specifies the maximum number of client reauthentications that
can be triggered per second when the the Dead or Alive server
actions are configured to 'reinitialze' and a RADIUS server
state change happens, i.e. all servers are marked dead or one
server comes back alive after all were marked dead.
This object is obsolete.
Refer to agentAuthMgrCriticalRecoveryMaxReauth."
::= { agentDot1xEnhancementConfigGroup 4}
--**************************************************************************************
-- agentDot1xPortConfigGroup -> Contains MIB objects configuring/displaying
-- Dot1x Port details and associated Functionality
--
--**************************************************************************************
agentDot1xPortConfigGroup OBJECT IDENTIFIER ::= { fastPathdot1xAdvanced 2 }
--------------------------------------------------------------
-- The Dot1x Enhanced Port Table
--------------------------------------------------------------
agentDot1xPortConfigTable OBJECT-TYPE
SYNTAX SEQUENCE OF AgentDot1xPortConfigEntry
MAX-ACCESS not-accessible
STATUS current
DESCRIPTION "A table for dot1x enhanced Port details and associated
functionality."
::= { agentDot1xPortConfigGroup 1 }
agentDot1xPortConfigEntry OBJECT-TYPE
SYNTAX AgentDot1xPortConfigEntry
MAX-ACCESS not-accessible
STATUS current
DESCRIPTION "Represents entry for port config table."
INDEX { ieee8021XPaePortNumber }
::= {agentDot1xPortConfigTable 1 }
AgentDot1xPortConfigEntry ::= SEQUENCE {
agentDot1xPortControlMode
Dot1xPortControlMode,
agentDot1xGuestVlanId
Unsigned32,
agentDot1xGuestVlanPeriod
Unsigned32,
agentDot1xUnauthenticatedVlan
Unsigned32,
agentDot1xMaxUsers
Unsigned32,
agentDot1xPortVlanAssigned
Unsigned32,
agentDot1xPortVlanAssignedReason
INTEGER,
agentDot1xPortSessionTimeout
Unsigned32,
agentDot1xPortTerminationAction
Dot1xSessionTerminationAction,
agentDot1xPortMABenabled
INTEGER,
agentDot1xPortMABenabledOperational
INTEGER,
agentDot1xPortMABAuthType
INTEGER,
agentDot1xPortMaxReAuthReq
Unsigned32,
agentDot1xPortAuthViolationMode
INTEGER,
agentDot1xPortCriticalVlan
Unsigned32,
agentDot1xPortAuthServerDeadAction
INTEGER,
agentDot1xPortAuthServerAliveAction
INTEGER
,agentDot1xPortAuthServerDeadVoiceAction
INTEGER
,agentDot1xPortEapolAnnouncements
INTEGER
}
agentDot1xPortControlMode OBJECT-TYPE
SYNTAX Dot1xPortControlMode
MAX-ACCESS read-write
STATUS obsolete
DESCRIPTION
"Dot1x port control mode of this port.The Port control mode .
The port control mode for this interface can take the
following values ,
force-unauthorized - the port is in unauthorized mode,
auto - Port based mode. If a client authenticates successfully,
then the interface is authorized . Otherwise, the port is in
unauthorized mode. If more than one clients are attached to
the port , then only one client needs to authenticate
to allow other clients access.
force-authorized - The port is placed in authorized mode
macBased - If more than one client is attached to the port,
then each client needs to authenticate separately.
This object is obsolete.
Refer to agentAuthMgrPortControlMode."
DEFVAL {auto}
::= { agentDot1xPortConfigEntry 1}
agentDot1xGuestVlanId OBJECT-TYPE
SYNTAX Unsigned32
MAX-ACCESS read-write
STATUS obsolete
DESCRIPTION
"Specifies the Guest Vlan of the port. A port will
be moved to its Guest Vlan if no client sucessfully
authenticates on that port for the Guest Vlan Period.
A value of zero indicates no Guest Vlan is configured
for the interface.
This object is obsolete.
Refer to agentAuthMgrNoResponseVlanId."
DEFVAL {0}
::= { agentDot1xPortConfigEntry 2}
agentDot1xGuestVlanPeriod OBJECT-TYPE
SYNTAX Unsigned32 (1..300)
MAX-ACCESS read-write
STATUS obsolete
DESCRIPTION
"The value, in seconds, of the guestVlanPeriod constant
currently in use for Guest Vlan Assignment for the
port .
This object is obsolete.
Refer to agentAuthMgrNoResponseVlanId"
DEFVAL { 90 }
::= { agentDot1xPortConfigEntry 3 }
agentDot1xUnauthenticatedVlan OBJECT-TYPE
SYNTAX Unsigned32
MAX-ACCESS read-write
STATUS obsolete
DESCRIPTION
"Specifies the Unauthenticated Vlan of the port. A port
will be moved to its unauthenticated Vlan if the client
authenticates unsuccessfully on that port .
A value of zero indicates no Unauthenticated Vlan is
configured for the port.
This object is obsolete.
Refer to agentAuthMgrAuthFailVlan."
DEFVAL {0}
::= { agentDot1xPortConfigEntry 4}
agentDot1xMaxUsers OBJECT-TYPE
SYNTAX Unsigned32
MAX-ACCESS read-write
STATUS obsolete
DESCRIPTION
"Specifies the maximum users or clients that can
authenticate on this port when the port control mode
is macBased.
This object is obsolete.
Refer to agentAuthMgrMaxUsers."
::= { agentDot1xPortConfigEntry 5}
agentDot1xPortVlanAssigned OBJECT-TYPE
SYNTAX Unsigned32
MAX-ACCESS read-only
STATUS obsolete
DESCRIPTION
"Specifies the vlan the port is assigned to by Dot1x.
Only relevant if the port control mode of the port
is auto.
This object is obsolete.
Refer to agentAuthMgrClientVlanAssigned."
DEFVAL {0}
::= { agentDot1xPortConfigEntry 6}
agentDot1xPortVlanAssignedReason OBJECT-TYPE
SYNTAX INTEGER {
default(1),
radius(2),
unauthenticatedVlan(3),
guestVlan(4),
voiceVlan(5),
monitorVlan(6),
notAssigned(7),
criticalVlan(8)
}
MAX-ACCESS read-only
STATUS obsolete
DESCRIPTION
"Reason the port is assigned to the vlan specified by
agentDot1xPortVlanAssigned . Only relevant if the port
control mode of the port is auto.
This object is obsolete.
Refer to agentAuthMgrClientAuthVlanAssignedReason."
DEFVAL {voiceVlan}
::= { agentDot1xPortConfigEntry 7}
agentDot1xPortSessionTimeout OBJECT-TYPE
SYNTAX Unsigned32
MAX-ACCESS read-only
STATUS obsolete
DESCRIPTION
"Specifies the session timeout value assigned by the
Radius server for this port. Only relevant if the
port control mode of the port is auto.
This object is obsolete.
Refer to agentAuthMgClientSessionTimeout."
::= { agentDot1xPortConfigEntry 8}
agentDot1xPortTerminationAction OBJECT-TYPE
SYNTAX Dot1xSessionTerminationAction
MAX-ACCESS read-only
STATUS obsolete
DESCRIPTION
"Specifies the session termination action assigned by
the Radius Server .This is the action taken when the
session times out . Only relevant if the port control
mode of the port is auto.
This object is obsolete.
Refer to agentAuthMgrClientTerminationAction."
DEFVAL {default}
::= { agentDot1xPortConfigEntry 9}
agentDot1xPortMABenabled OBJECT-TYPE
SYNTAX INTEGER {
enable(1),
disable(2)
}
MAX-ACCESS read-write
STATUS obsolete
DESCRIPTION
"Specifies if Mac-based bypass authentication is
configured for the port.
This object is obsolete.
Refer to agentMABPortEnabled."
DEFVAL {disable}
::= { agentDot1xPortConfigEntry 10}
agentDot1xPortMABenabledOperational OBJECT-TYPE
SYNTAX INTEGER {
enable(1),
disable(2)
}
MAX-ACCESS read-only
STATUS obsolete
DESCRIPTION
"Displays the operational value of the Mac-based
authentication bypass mode (MAB) on the port.
This object is obsolete.
Refer to agentMabPortOperational."
DEFVAL {disable}
::= { agentDot1xPortConfigEntry 11}
agentDot1xPortMABAuthType OBJECT-TYPE
SYNTAX INTEGER {
eap-md5(1),
pap(2),
chap(3)
}
MAX-ACCESS read-write
STATUS obsolete
DESCRIPTION
"Sets/Displays the authentication type used by Mac-based
authentication bypass mode (MAB) on the port.
This object is obsolete.
Refer to agentMabPortAuthType."
DEFVAL { eap-md5 }
::= { agentDot1xPortConfigEntry 12}
agentDot1xPortMaxReAuthReq OBJECT-TYPE
SYNTAX Unsigned32 (1..20)
MAX-ACCESS read-write
STATUS obsolete
DESCRIPTION
"The value is the maximum number of times (attempts) EAP
request-identity frames are sent for re-authentication."
DEFVAL { 2 }
::= { agentDot1xPortConfigEntry 13}
agentDot1xPortAuthViolationMode OBJECT-TYPE
SYNTAX INTEGER {
protect(1),
restrict(2),
shutdown(3)
}
MAX-ACCESS read-write
STATUS obsolete
DESCRIPTION
"Sets the authentication violation mode that occur when
a new device connects to a port after the maximum number
of devices are connected to that port.
This object is obsolete.
Refer to agentAuthMgrPortAuthViolationMode."
DEFVAL {restrict}
::= { agentDot1xPortConfigEntry 14}
agentDot1xPortCriticalVlan OBJECT-TYPE
SYNTAX Unsigned32
MAX-ACCESS read-write
STATUS obsolete
DESCRIPTION
"Specifies the critical vlan of the port. A port will be
moved to its critical vlan if all RADIUS authentication
servers are found to be Dead. A value of zero indicates
no critical vlan is configured for the port and the port
pvid is used as the critical vlan.
This object is obsolete.
Refer to agentAuthMgrPortCriticalVlan."
DEFVAL {0}
::= { agentDot1xPortConfigEntry 15}
agentDot1xPortAuthServerDeadAction OBJECT-TYPE
SYNTAX INTEGER {
reinitialize(1),
authorize(2),
none(3)
}
MAX-ACCESS read-write
STATUS obsolete
DESCRIPTION
"Specifies the action to take on authenticating supplicants
when all RADIUS servers are found dead.
This object is obsolete.
Refer to agentAuthMgrPortAuthServerDeadAction."
DEFVAL {none}
::= { agentDot1xPortConfigEntry 16}
agentDot1xPortAuthServerAliveAction OBJECT-TYPE
SYNTAX INTEGER {
reinitialize(1),
none(2)
}
MAX-ACCESS read-write
STATUS obsolete
DESCRIPTION
"Specifies the action to take on authenticating
supplicants when one RADIUS server comes back
Alive after all of them were found dead earlier.
This object is obsolete.
Refer to agentAuthMgrPortAuthServerAliveAction."
DEFVAL {none}
::= { agentDot1xPortConfigEntry 17}
agentDot1xPortAuthServerDeadVoiceAction OBJECT-TYPE
SYNTAX INTEGER {
authorize(1),
none(2)
}
MAX-ACCESS read-write
STATUS obsolete
DESCRIPTION
"Specifies the action to take on authenticating VoIP
supplicants when all RADIUS servers are found dead.
This object is obsolete.
Refer to agentAuthMgrPortAuthServerDeadVoiceAction."
DEFVAL {none}
::= { agentDot1xPortConfigEntry 18}
agentDot1xPortEapolAnnouncements OBJECT-TYPE
SYNTAX INTEGER {
enable(1),
disable(2)
}
MAX-ACCESS read-write
STATUS current
DESCRIPTION
"Enable or Disable eapol announcements on the port."
DEFVAL {disable}
::= { agentDot1xPortConfigEntry 19}
--------------------------------------------------------------
-- The Dot1x PAE Authenticator Port Table
--------------------------------------------------------------
agentDot1xAuthenticatorPortConfigTable OBJECT-TYPE
SYNTAX SEQUENCE OF AgentDot1xAuthenticatorPortConfigEntry
MAX-ACCESS not-accessible
STATUS current
DESCRIPTION "A table for dot1x Authenticator port configuration
of 802.1X-2001 and 802.1X-2004 ."
::= { agentDot1xPortConfigGroup 2 }
agentDot1xAuthenticatorPortConfigEntry OBJECT-TYPE
SYNTAX AgentDot1xAuthenticatorPortConfigEntry
MAX-ACCESS not-accessible
STATUS current
DESCRIPTION "Represents entry for port config table."
AUGMENTS { ieee8021XAuthenticatorEntry }
::= {agentDot1xAuthenticatorPortConfigTable 1 }
AgentDot1xAuthenticatorPortConfigEntry ::= SEQUENCE {
agentDot1xAuthTxPeriod Unsigned32,
agentDot1xAuthServerTimeout Unsigned32
}
agentDot1xAuthTxPeriod OBJECT-TYPE
SYNTAX Unsigned32 (1..65535)
MAX-ACCESS read-write
STATUS current
DESCRIPTION
"The value, in seconds, of the txPeriod constant
currently in use by the Authenticator PAE state
machine."
REFERENCE
"802.1X-2001 9.4.1, dot1xAuthTxPeriod"
DEFVAL { 30 }
::= { agentDot1xAuthenticatorPortConfigEntry 1 }
agentDot1xAuthServerTimeout OBJECT-TYPE
SYNTAX Unsigned32 (1..65535)
MAX-ACCESS read-write
STATUS current
DESCRIPTION
"The value, in seconds, of the serverTimeout constant
currently in use by the Backend Authentication state
machine."
REFERENCE
"802.1X-2001 9.4.1, dot1xAuthServerTimeout,
802.1X-2004 9.4.1, dot1xAuthServerTimeout"
DEFVAL { 30 }
::= { agentDot1xAuthenticatorPortConfigEntry 2 }
--**************************************************************************************
-- agentDot1xClientConfigGroup -> Contains MIB objects displaying Dot1x Client
-- details and associated Functionality
--
--**************************************************************************************
agentDot1xClientConfigGroup OBJECT IDENTIFIER ::= { fastPathdot1xAdvanced 3 }
agentDot1xClientConfigTable OBJECT-TYPE
SYNTAX SEQUENCE OF AgentDot1xClientConfigEntry
MAX-ACCESS not-accessible
STATUS obsolete
DESCRIPTION "A table for dot1x Client details and associated
functionality.
This table is obsolete.
Refer to agentAuthMgrClientStatusTable"
::= { agentDot1xClientConfigGroup 1 }
agentDot1xClientConfigEntry OBJECT-TYPE
SYNTAX AgentDot1xClientConfigEntry
MAX-ACCESS not-accessible
STATUS obsolete
DESCRIPTION "Represents entry for port config table."
INDEX { agentDot1xClientMacAddress}
::= {agentDot1xClientConfigTable 1 }
AgentDot1xClientConfigEntry ::= SEQUENCE {
agentDot1xClientMacAddress
MacAddress,
agentDot1xLogicalPort
Unsigned32,
agentDot1xInterface
Unsigned32,
agentDot1xClientAuthPAEstate
INTEGER,
agentDot1xClientBackendState
INTEGER,
agentDot1xClientUserName
DisplayString,
agentDot1xClientSessionTime
Unsigned32,
agentDot1xClientFilterID
DisplayString,
agentDot1xClientVlanAssigned
Unsigned32,
agentDot1xClientVlanAssignedReason
INTEGER,
agentDot1xClientSessionTimeout
Unsigned32,
agentDot1xClientTerminationAction
Dot1xSessionTerminationAction
}
agentDot1xClientMacAddress OBJECT-TYPE
SYNTAX MacAddress
MAX-ACCESS read-only
STATUS obsolete
DESCRIPTION
"Specifies the client MAC address of the client.
This object is obsolete.
Refer to agentAuthMgrClientMacAddress"
::= { agentDot1xClientConfigEntry 1}
agentDot1xLogicalPort OBJECT-TYPE
SYNTAX Unsigned32
MAX-ACCESS read-only
STATUS obsolete
DESCRIPTION
"Specifies the client MAC address of the client .
This object is obsolete.
Refer to agentAuthMgrLogicalPort"
::= { agentDot1xClientConfigEntry 2}
agentDot1xInterface OBJECT-TYPE
SYNTAX Unsigned32
MAX-ACCESS read-only
STATUS obsolete
DESCRIPTION
"Specifies the physical interface to which the client is attached .
This object is obsolete.
Refer to agentAuthMgrInterface"
::= { agentDot1xClientConfigEntry 3}
agentDot1xClientAuthPAEstate OBJECT-TYPE
SYNTAX INTEGER {
initialize(1),
disconnected(2),
connecting(3),
authenticating(4),
authenticated(5),
aborting(6),
held(7),
forceAuth(8),
forceUnauth(9)
}
MAX-ACCESS read-only
STATUS obsolete
DESCRIPTION
"The current value of the Authenticator PAE state
machine for the client.
This object is obsolete."
::={ agentDot1xClientConfigEntry 4}
agentDot1xClientBackendState OBJECT-TYPE
SYNTAX INTEGER {
request(1),
response(2),
success(3),
fail(4),
timeout(5),
idle(6),
initialize(7)
}
MAX-ACCESS read-only
STATUS obsolete
DESCRIPTION
"The current state of the Backend Authentication
state machine.
This object is obsolete."
::={ agentDot1xClientConfigEntry 5}
agentDot1xClientUserName OBJECT-TYPE
SYNTAX DisplayString
MAX-ACCESS read-only
STATUS obsolete
DESCRIPTION
"Specifies the username with which the client is
authenticated to the Radius server. This value is
only valid when the client is in authenticated state.
This object is obsolete.
Refer to agentAuthMgrClientUserName"
::= { agentDot1xClientConfigEntry 6}
agentDot1xClientSessionTime OBJECT-TYPE
SYNTAX Unsigned32
MAX-ACCESS read-only
STATUS obsolete
DESCRIPTION
"Specifies the time elapsed in seconds since the client
was authenticated in this session. This value is only
valid when the client is in authenticated state.
This object is obsolete.
Refer to agentAuthMgClientSessionTime"
::= { agentDot1xClientConfigEntry 7}
agentDot1xClientFilterID OBJECT-TYPE
SYNTAX DisplayString
MAX-ACCESS read-only
STATUS obsolete
DESCRIPTION
"Specifies the Filter ID or Diffserv Policy name to be
applied to the session. This value is populated only
if it has been assigned by the RADIUS server.
This value is only valid when the client is in
authenticated state.
This object is obsolete.
Refer to agentAuthMgClientFilterID"
::= { agentDot1xClientConfigEntry 8}
agentDot1xClientVlanAssigned OBJECT-TYPE
SYNTAX Unsigned32
MAX-ACCESS read-only
STATUS obsolete
DESCRIPTION
"Specifies the vlan the client is associated with by Dot1x.
This value is only valid when the client is in
authenticated state.
This object is obsolete.
Refer to agentAuthMgrClientVlanAssigned"
::= { agentDot1xClientConfigEntry 9}
agentDot1xClientVlanAssignedReason OBJECT-TYPE
SYNTAX INTEGER {
default(1),
radius(2),
unauthenticatedVlan(3),
monitorVlan(6),
invalid(7)
}
MAX-ACCESS read-only
STATUS obsolete
DESCRIPTION
"Reason the client is associated to the vlan specified
by agentDot1xClientVlanAssigned. This value is only
valid when the client is in authenticated state.
This object is obsolete.
Refer to agentAuthMgrClientAuthVlanAssignedReason"
::= { agentDot1xClientConfigEntry 10}
agentDot1xClientSessionTimeout OBJECT-TYPE
SYNTAX Unsigned32
MAX-ACCESS read-only
STATUS obsolete
DESCRIPTION
"Specifies the session time remaining for the client
if assigned by the Radius server. A value of 0
indicates that no session timeout was assigned by the
RADIUS server. This value is only valid when the
client is in authenticated state.
This object is obsolete.
Refer to agentAuthMgClientSessionTimeout"
::= { agentDot1xClientConfigEntry 11}
agentDot1xClientTerminationAction OBJECT-TYPE
SYNTAX Dot1xSessionTerminationAction
MAX-ACCESS read-only
STATUS obsolete
DESCRIPTION
"Specifies the session termination action assigned by
the Radius Server. This is the action taken when the
session times out. This value is only valid when the
client is in authenticated state.
This object is obsolete.
Refer to agentAuthMgClientTerminationAction"
::= { agentDot1xClientConfigEntry 12}
--**************************************************************************************
-- agentDot1xMonitorModeConfigGroup -> Contains MIB objects configuring/displaying
-- Dot1x Monitor Mode details and associated Functionality
--
--**************************************************************************************
agentDot1xMonitorModeConfigGroup OBJECT IDENTIFIER ::= { fastPathdot1xAdvanced 4 }
agentDot1xMonitorModeEnabled OBJECT-TYPE
SYNTAX INTEGER {
enable(1),
disable(2)
}
MAX-ACCESS read-write
STATUS obsolete
DESCRIPTION "Enable/Disable Dot1x Monitor mode Support on the switch.
This object is obsolete.
Refer to agentAuthMgrMonitorModeEnabled"
::= { agentDot1xMonitorModeConfigGroup 1 }
agentDot1xMonitorModeClients OBJECT-TYPE
SYNTAX Unsigned32
MAX-ACCESS read-only
STATUS obsolete
DESCRIPTION "Retrieves the number of clients that got
authenticated by Monitor mode globally.
This object is obsolete.
Refer to agentAuthMgrMonitorModeClients"
::= { agentDot1xMonitorModeConfigGroup 2 }
agentDot1xNonMonitorModeClients OBJECT-TYPE
SYNTAX Unsigned32
MAX-ACCESS read-only
STATUS obsolete
DESCRIPTION "Retrieves the number of clients that are granted
access by Dot1x with no monitor mode enabled.
This object is obsolete.
Refer to agentAuthMgrNonMonitorModeClients"
::= { agentDot1xMonitorModeConfigGroup 3 }
agentDot1xAuthHistoryResultsGroup OBJECT IDENTIFIER ::= { fastPathdot1xAdvanced 5 }
agentDot1xPortAuthHistoryResultTable OBJECT-TYPE
SYNTAX SEQUENCE OF AgentDot1xPortAuthHistoryResultEntry
MAX-ACCESS not-accessible
STATUS obsolete
DESCRIPTION "A table to display the dot1x monitor mode results.
Refer to agentAuthMgrPortAuthHistoryResultTable"
::= { agentDot1xAuthHistoryResultsGroup 1 }
agentDot1xPortAuthHistoryResultEntry OBJECT-TYPE
SYNTAX AgentDot1xPortAuthHistoryResultEntry
MAX-ACCESS not-accessible
STATUS obsolete
DESCRIPTION "Represents Dot1x Authentication results for a Dot1x Authentication History table."
INDEX { agentDot1xAuthHistoryResultIfaceIndex,
agentDot1xAuthHistoryResultIndex}
::= {agentDot1xPortAuthHistoryResultTable 1 }
AgentDot1xPortAuthHistoryResultEntry ::= SEQUENCE {
agentDot1xAuthHistoryResultIfaceIndex Unsigned32,
agentDot1xAuthHistoryResultIndex Unsigned32,
agentDot1xAuthHistoryResultTimeStamp DateAndTime,
agentDot1xAuthHistoryResultAge TimeTicks,
agentDot1xAuthHistoryResultMacAddress MacAddress,
agentDot1xAuthHistoryResultVlanId Unsigned32,
agentDot1xAuthHistoryResultAuthStatus INTEGER,
agentDot1xAuthHistoryResultAccessStatus INTEGER,
agentDot1xAuthHistoryResultFilterID DisplayString,
agentDot1xAuthHistoryResultVlanAssigned Unsigned32,
agentDot1xAuthHistoryResultVlanAssignedType INTEGER,
agentDot1xAuthHistoryResultReasonCode INTEGER
}
agentDot1xAuthHistoryResultIfaceIndex OBJECT-TYPE
SYNTAX Unsigned32 (1..65535)
MAX-ACCESS read-only
STATUS obsolete
DESCRIPTION
"This object represents the physical Bridge Port on which
dot1x Auth event might be received.
This object is obsolete.
Refer to agentAuthMgrAuthHistoryResultIfaceIndex"
::= { agentDot1xPortAuthHistoryResultEntry 1 }
agentDot1xAuthHistoryResultIndex OBJECT-TYPE
SYNTAX Unsigned32 (1..65535)
MAX-ACCESS read-only
STATUS obsolete
DESCRIPTION
"Reference to the Dot1x Authentication history table
maintained.
This object is obsolete.
Refer to agentAuthMgrAuthHistoryResultIndex"
::= { agentDot1xPortAuthHistoryResultEntry 2 }
agentDot1xAuthHistoryResultTimeStamp OBJECT-TYPE
SYNTAX DateAndTime
MAX-ACCESS read-only
STATUS obsolete
DESCRIPTION
"Specifies the exact time of Dot1x Authentication
event information occurred maintained in the
history table.
This object is obsolete.
Refer to agentAuthMgrAuthHistoryResultTimeStamp"
::= { agentDot1xPortAuthHistoryResultEntry 3 }
agentDot1xAuthHistoryResultAge OBJECT-TYPE
SYNTAX TimeTicks
MAX-ACCESS read-only
STATUS obsolete
DESCRIPTION
"Time since the authentication entry was added to the
history table. It is displayed in days, hours,
minutes, and seconds.
This object is obsolete.
Refer to agentDot1xAuthHistoryResultAge"
::= { agentDot1xPortAuthHistoryResultEntry 4 }
agentDot1xAuthHistoryResultMacAddress OBJECT-TYPE
SYNTAX MacAddress
MAX-ACCESS read-only
STATUS obsolete
DESCRIPTION
"Specifies the client MAC Address maintained in
the Dot1x Authentication history table.
This object is obsolete.
Refer to agentAuthMgrAuthHistoryResultMacAddress"
::= { agentDot1xPortAuthHistoryResultEntry 5 }
agentDot1xAuthHistoryResultVlanId OBJECT-TYPE
SYNTAX Unsigned32
MAX-ACCESS read-only
STATUS obsolete
DESCRIPTION
"Specifies the VLANID maintained in the history
table. It is the VLANID which is failed to
associate to the port during authentication process.
The VLANID is identified distinctly by the Reason
code for the respective entry. Valid only when the
reason code is set to 13 (VLAN assignment failure).
In all the other cases, VLANID is set to 0.
This object is obsolete.
Refer to agentDot1xAuthHistoryResultVlanId"
::= { agentDot1xPortAuthHistoryResultEntry 6 }
agentDot1xAuthHistoryResultAuthStatus OBJECT-TYPE
SYNTAX INTEGER {
success(1),
failure(2)
}
MAX-ACCESS read-only
STATUS obsolete
DESCRIPTION
"Specifies the Dot1x Authentication status (Success
or Failure) for the Dot1x Authentication event takes
place.
This object is obsolete.
Refer to agentAuthMgrAuthHistoryResultAuthStatus"
::= { agentDot1xPortAuthHistoryResultEntry 7 }
agentDot1xAuthHistoryResultAccessStatus OBJECT-TYPE
SYNTAX INTEGER {
granted(1),
denied(2)
}
MAX-ACCESS read-only
STATUS obsolete
DESCRIPTION
"Authentication access status indicates the exact
status of the dot1x client. Granted means the
client is allowed access to the network using dot1x
or monitor mode. Denied means the client is not
allowed access to the network.
This object is obsolete.
Refer to agentDot1xAuthHistoryResultAccessStatus"
::= { agentDot1xPortAuthHistoryResultEntry 8 }
agentDot1xAuthHistoryResultFilterID OBJECT-TYPE
SYNTAX DisplayString
MAX-ACCESS read-only
STATUS obsolete
DESCRIPTION
"Specifies the Filter ID or Diffserv Policy name
assigned by the RADIUS server. This value is only
valid when the client is in authenticated state.
This object is obsolete.
Refer to agentDot1xAuthHistoryResultFilterID"
::= { agentDot1xPortAuthHistoryResultEntry 9 }
agentDot1xAuthHistoryResultVlanAssigned OBJECT-TYPE
SYNTAX Unsigned32
MAX-ACCESS read-only
STATUS obsolete
DESCRIPTION
"Specifies the VLANID maintained in the history
table (It is the VLANID Assigned to a Port or Client
authenticate).
This object is obsolete.
Refer to agentDot1xAuthHistoryResultVlanAssigned"
::= { agentDot1xPortAuthHistoryResultEntry 10 }
agentDot1xAuthHistoryResultVlanAssignedType OBJECT-TYPE
SYNTAX INTEGER {
default(1),
radius(2),
unauthenticatedVlan(3),
guestVlan(4),
voiceVlan(5),
monitorVlan(6),
notAssigned(7)
}
MAX-ACCESS read-only
STATUS obsolete
DESCRIPTION
"Specifies the VLAN Assigned Reason maintained in the
history table.
This object is obsolete.
Refer to agentDot1xAuthHistoryResultVlanAssignedType"
::= { agentDot1xPortAuthHistoryResultEntry 11 }
agentDot1xAuthHistoryResultReasonCode OBJECT-TYPE
SYNTAX INTEGER {
supplicant-timeout(1),
eapol-timeout(2),
radius-request-timeout(3),
radius-auth-failure(4),
radius-auth-comm-failure(5),
radius-challenge-process-invalid-nas-port(6), -- obsolete, radius-challenge-process-invalid-nas-port no longer supported
radius-challenge-process-wrong-eap-msg(7),
radius-request-send-msg-error(8),
radius-accept-process-invalid-nas-port(9), -- obsolete, radius-accept-process-invalid-nas-port no longer supported
radius-accept-process-wrong-eap-msg(10),
radius-accept-filter-assignment-failure(11),
radius-accept-diffserv-not-present(12),
radius-accept-vlan-assignment-failure(13),
vlan-assignment-feature-not-enabled(14),
radius-success(15),
local-auth-user-not-found(16),
local-auth-user-no-access(17),
local-auth-md5-validation-failure(18),
local-auth-invalid-eap-type(19),
local-failure(20),
local-success(21),
radius-invalid-radius-status(22),
guest-vlan-timer-expiry(23),
undefined-auth-method(24),
reject-auth-method(25),
invalid-auth-method(26),
auth-method-not-configured(27),
unauth-vlan-not-created(28),
guest-vlan-not-created(29),
radius-accept-invalid-vlan-failure(30)
}
MAX-ACCESS read-only
STATUS obsolete
DESCRIPTION
"Specifies the Dot1x authentication reason
referred by the result index on a port.
This object is obsolete.
Refer to agentDot1xAuthHistoryResultReasonCode"
::= { agentDot1xPortAuthHistoryResultEntry 12 }
agentDot1xAuthHistoryResultsClear OBJECT-TYPE
SYNTAX INTEGER {
enable(1),
disable(2)
}
MAX-ACCESS read-write
STATUS obsolete
DESCRIPTION
"When set to enable(1), all Dot1x Authentication History
information will be reset.
This object is obsolete.
Refer to agentAuthMgrAuthHistoryResultsClear"
::= { agentDot1xAuthHistoryResultsGroup 2 }
--**************************************************************************************
-- agentDot1xPortAuthHistoryResultClearTable
--
--**************************************************************************************
agentDot1xPortAuthHistoryResultClearTable OBJECT-TYPE
SYNTAX SEQUENCE OF AgentDot1xPortAuthHistoryResultClearEntry
MAX-ACCESS not-accessible
STATUS obsolete
DESCRIPTION "A table to clear the dot1x monitor mode results per interface.
This table is obsolete.
Refer to agentAuthMgrPortAuthHistoryResultClearTable"
::= { agentDot1xAuthHistoryResultsGroup 3 }
agentDot1xPortAuthHistoryResultClearEntry OBJECT-TYPE
SYNTAX AgentDot1xPortAuthHistoryResultClearEntry
MAX-ACCESS not-accessible
STATUS obsolete
DESCRIPTION "Represents to clear the Dot1x Authentication results for a
Dot1x Authentication History table.
This entry is obsolete.
Refer to agentAuthMgrPortAuthHistoryResultClearEntry"
INDEX { agentDot1xAuthHistoryResultIfIndex }
::= {agentDot1xPortAuthHistoryResultClearTable 1 }
AgentDot1xPortAuthHistoryResultClearEntry ::= SEQUENCE {
agentDot1xAuthHistoryResultIfIndex Unsigned32,
agentDot1xPortAuthHistoryResultsClear INTEGER
}
agentDot1xAuthHistoryResultIfIndex OBJECT-TYPE
SYNTAX Unsigned32 (1..65535)
MAX-ACCESS read-only
STATUS obsolete
DESCRIPTION
"This object represents the physical Bridge Port on which dot1x Auth event
might be received.
This object is obsolete.
Refer to agentAuthMgrAuthHistoryResultIfIndex"
::= { agentDot1xPortAuthHistoryResultClearEntry 1 }
agentDot1xPortAuthHistoryResultsClear OBJECT-TYPE
SYNTAX INTEGER {
enable(1),
disable(2)
}
MAX-ACCESS read-write
STATUS obsolete
DESCRIPTION
"When set to enable(1), all Dot1x Authentication History
information for the given port will be reset. The value
is write-only. Attempt to read will return disable(2).
This object is obsolete.
Refer to agentAuthMgrPortAuthHistoryResultsClear"
DEFVAL { disable }
::= { agentDot1xPortAuthHistoryResultClearEntry 2 }
END