ALVARION-DEVICE-DOT1X-MIB

All MIBs › ALVARION-DEVICE-DOT1X-MIB

Organization: Alvarion Ltd.

Last Updated: 2007-10-31

Category: Vendor: Alvarion

Description: Alvarion wireless device 802.1X MIB for managing device-level port authentication and supplicant state machines.

Start monitoring vendor-neutral, standards-based MIB, any SNMPv3-capable network device (SNMP engine identity/boot/clock status) with a free 30-day trial of IPNetwork Monitor. Import MIBs, browse SNMP OIDs, create custom SNMP monitors, configure alerts, and monitor any SNMP-enabled network device from a single console.

What Is ALVARION-DEVICE-DOT1X-MIB?

ALVARION-DEVICE-DOT1X-MIB is a proprietary MIB from Alvarion (wireless broadband access equipment, now part of Cambium Networks) for managing IEEE 802.1X port-based authentication at the device level on wireless access equipment. It exposes per-supplicant session data -- MAC address, username, PAE state-machine status, backend authentication state, port authorization status, session duration, and termination cause -- plus related statistics counters. Monitoring here targets the software/service status of the authentication process: PaeState and BackendAuthState reveal whether a client is authenticated, still negotiating, or has failed, PortStatus shows whether the port is authorized to pass traffic, and TerminateCause diagnoses why a session ended, such as timeout or repeated failure. It implements IEEE 802.1X standard state-machine concepts within Alvarion's proprietary MIB framework, so it depends on that standard for its semantics. It is deployed on Alvarion BreezeACCESS wireless broadband subscriber units and base stations enforcing port-based network access control for connected devices. Engineers can download the ALVARION-DEVICE-DOT1X-MIB file directly to load it into their MIB browser.

IPNetwork Monitor allows you to monitor SNMP objects defined in ALVARION-DEVICE-DOT1X-MIB. Use the built-in SNMP Monitoring Browser to explore available variables, view their current values and descriptions, and select the objects you want to monitor. You can then create SNMP monitors, configure thresholds, and receive alerts when monitored values change.

Supported Devices

Alvarion (Cambium) wireless broadband access/subscriber device

Monitoring Examples

An administrator would poll coDeviceDot1xStatusTable indexed by coDev1xStaIndex to check coDev1xStaPaeState and coDev1xStaBackendAuthState for a given coDev1xStaMacAddress, spotting a client stuck perpetually in an authenticating state. Reviewing coDev1xStaTerminateCause on a recently ended session reveals whether disconnects stem from repeated authentication failures versus normal logoff. Aggregating coDeviceDot1xStatsTable counters over time helps trend 802.1X failure rates across the device.

What Can Be Monitored

802.1X PAE state per client
backend authentication state
port authorization status
session duration
session termination cause

Imported Objects

From ALVARION-DEVICE-MIB

coDevDisIndex

OBJECT-TYPE

From ALVARION-SMI

alvarionMgmtV2

OBJECT-IDENTITY

From SNMPv2-CONF

MODULE-COMPLIANCE
OBJECT-GROUP

From SNMPv2-SMI

Counter32
Integer32
MODULE-IDENTITY
OBJECT-TYPE

From SNMPv2-TC

DisplayString
MacAddress

How to Use in IPNetwork Monitor

Example using coDev1xStaSessionTime OID:

Select an Alvarion (Cambium) wireless broadband access points/base station (legacy) as the target host to create a monitor — the SNMP service should be up and running on it. Click New Monitor, then check SNMP Custom on the Favorites tab, click Next, and confirm the host. On the next page, click Select... to open the built-in SNMP MIB Browser and type coDev1xStaSessionTime into the Find box to locate it in the OID tree, selecting the specific row/instance you want to monitor since this is a table column, then select it and click OK. The duration of the session in seconds. On the monitor's Main parameters page you can set the target's SNMP port (default 161), credentials, polling interval, and other settings — see the SNMP Monitor help for details. On the State conditions and Alerting tabs, configure when the monitor should change state and trigger an alert; since this is a Counter32-type OID, Value bounds is the most useful condition here — trigger an alert if the counter increases sharply between polls relative to its normal baseline (in seconds), since an unexpected spike often reflects a real change in traffic or activity. Click Finish to create the monitor; you can adjust any parameter later.

OIDs

OID symbolic	OID numeric	Type	Access	Description
alvarionDeviceDot1xMIB	1.3.6.1.4.1.12394.1.10.5.32			Alvarion Device IEEE 802.1x MIB.
alvarionDeviceDot1xMIBObjects	1.3.6.1.4.1.12394.1.10.5.32.1
coDeviceDot1xConfigGroup	1.3.6.1.4.1.12394.1.10.5.32.1.1
coDeviceDot1xStatusGroup	1.3.6.1.4.1.12394.1.10.5.32.1.2
coDeviceDot1xStatusTable	1.3.6.1.4.1.12394.1.10.5.32.1.2.1		not-accessible	Device IEEE 802.1x wireless station status attributes.
coDeviceDot1xStatusEntry	1.3.6.1.4.1.12394.1.10.5.32.1.2.1.1		not-accessible	An entry in the coDeviceDot1xStatusTable. coDevDisIndex - Uniquely identifies a device on the MultiService Controller. coDev1xStaIndex - Uniquely identifies a 802.1x station on the device.
I32 coDev1xStaIndex	1.3.6.1.4.1.12394.1.10.5.32.1.2.1.1.1	Integer32	not-accessible	Specifies the index of a 802.1x station on the device.
MAC coDev1xStaMacAddress	1.3.6.1.4.1.12394.1.10.5.32.1.2.1.1.2	MacAddress	read-only	Wireless MAC address of the 802.1x station.
STR coDev1xStaUserName	1.3.6.1.4.1.12394.1.10.5.32.1.2.1.1.3	DisplayString	read-only	The User-Name representing the identity of the Supplicant PAE.
INT coDev1xStaPaeState	1.3.6.1.4.1.12394.1.10.5.32.1.2.1.1.4	INTEGER	read-only	The current value of the Authenticator PAE state machine.
INT coDev1xStaBackendAuthState	1.3.6.1.4.1.12394.1.10.5.32.1.2.1.1.5	INTEGER	read-only	The current state of the Backend Authentication state machine.
INT coDev1xStaPortStatus	1.3.6.1.4.1.12394.1.10.5.32.1.2.1.1.6	INTEGER	read-only	The current value of the controlled Port status parameter for the Port.
C32 coDev1xStaSessionTimeEx	1.3.6.1.4.1.12394.1.10.5.32.1.2.1.1.7	Counter32	read-only	The duration of the session in seconds.
INT coDev1xStaTerminateCause	1.3.6.1.4.1.12394.1.10.5.32.1.2.1.1.8	INTEGER	read-only	The reason for session termination.
coDeviceDot1xStatsGroup	1.3.6.1.4.1.12394.1.10.5.32.1.3
coDeviceDot1xStatsTable	1.3.6.1.4.1.12394.1.10.5.32.1.3.1		not-accessible	Device IEEE 802.1x wireless client statistic attributes.
coDeviceDot1xStatsEntry	1.3.6.1.4.1.12394.1.10.5.32.1.3.1.1		not-accessible	An entry in the coDeviceDot1xStatsTable. coDevDisIndex - Uniquely identify a device in the MultiService Controller. coDev1xStaIndex - Uniquely identify a 802.1x station on the device.
C32 coDev1xStaEapolRxFrame	1.3.6.1.4.1.12394.1.10.5.32.1.3.1.1.1	Counter32	read-only	The number of valid EAPOL frames of any type that have been received by this Authenticator.
C32 coDev1xStaEapolTxFrame	1.3.6.1.4.1.12394.1.10.5.32.1.3.1.1.2	Counter32	read-only	The number of EAPOL frames of any type that have been transmitted by this Authenticator.
C32 coDev1xStaBackendResponses	1.3.6.1.4.1.12394.1.10.5.32.1.3.1.1.3	Counter32	read-only	Counts the number of times that the state machine sends an initial Access-Request packet to the Authentication server (i.e., executes sendRespToServer on entry to the RESPONSE state). Indicates that the Authenticator attempted communication with the Authentication Server.
C32 coDev1xStaBackendChallenges	1.3.6.1.4.1.12394.1.10.5.32.1.3.1.1.4	Counter32	read-only	Counts the number of times that the state machine receives an initial Access-Challenge packet from the Authentication server (i.e., aReq becomes TRUE, causing exit from the RESPONSE state). Indicates that the Authentication Server has communication with the Authenticator.
C32 coDev1xStaBackendAuthSuccesses	1.3.6.1.4.1.12394.1.10.5.32.1.3.1.1.5	Counter32	read-only	Counts the number of times that the state machine receives an EAP-Success message from the Authentication Server (i.e., aSuccess becomes TRUE, causing a transition from RESPONSE to SUCCESS). Indicates that the Supplicant has successfully authenticated to the Authentication Server.
C32 coDev1xStaBackendAuthFails	1.3.6.1.4.1.12394.1.10.5.32.1.3.1.1.6	Counter32	read-only	Counts the number of times that the state machine receives an EAP-Failure message from the Authentication Server (i.e., aFail becomes TRUE, causing a transition from RESPONSE to FAIL). Indicates that the Supplicant has not authenticated to the Authentication Server.
alvarionDeviceDot1xMIBConformance	1.3.6.1.4.1.12394.1.10.5.32.2
alvarionDeviceDot1xMIBCompliances	1.3.6.1.4.1.12394.1.10.5.32.2.1
alvarionDeviceDot1xMIBCompliance	1.3.6.1.4.1.12394.1.10.5.32.2.1.1			The compliance statement for the Device MIB.
alvarionDeviceDot1xMIBGroups	1.3.6.1.4.1.12394.1.10.5.32.2.2
alvarionDeviceDot1xStatusMIBGroup	1.3.6.1.4.1.12394.1.10.5.32.2.2.1			A collection of status objects for IEEE 802.1x stations connected to Alvarion devices.
alvarionDeviceDot1xStatsMIBGroup	1.3.6.1.4.1.12394.1.10.5.32.2.2.2			A collection of statistical objects for IEEE 802.1x stations connected to Alvarion devices.

RFC description

Manages IEEE 802.1x port-based network access control for Alvarion wireless devices.

Start monitoring Alvarion (Cambium) wireless broadband access points/base stations (legacy) with a free 30-day trial of IPNetwork Monitor. Import MIBs, browse SNMP OIDs, create custom SNMP monitors, configure alerts, and monitor any SNMP-enabled network device from a single console.

Download ALVARION-DEVICE-DOT1X-MIB