AUTH-MIB

MIB Reference — IPNetwork Monitor · Updated September 09, 2026

All MIBsAUTH-MIB

Last Updated: 2007-11-27

Category: RADIUS and AAA

Description: Provides authentication configuration and session tracking objects for user login management on network devices.

Start monitoring vendor-neutral, standards-based MIB, any SNMPv3-capable network device (SNMP engine identity/boot/clock status) with a free 30-day trial of IPNetwork Monitor. Import MIBs, browse SNMP OIDs, create custom SNMP monitors, configure alerts, and monitor any SNMP-enabled network device from a single console.

What Is AUTH-MIB?

AUTH-MIB is a vendor-specific MIB from D-Link that provides authentication configuration and session tracking for network switches, covering both centralized RADIUS-based authentication and IEEE 802.1X/MAC-based port authentication. It exposes authProtocol and swAuthMode scalars for selecting the authentication method and mode (port-based vs. MAC-based), a swRadiusServerTable for configuring up to three RADIUS servers (address, shared key, auth/accounting UDP ports), and a set of per-supplicant tables under swMacAuthBaseStatsInfo: swMacAuthStateTable (current PAE and backend authentication state machine status), swMacAuthStatsTable and swMacAuthDiagTable (EAPOL frame counters and state-transition diagnostics per RFC 802.1X clause 9.4.2), and swMacAuthSessionStatsTable (per-session octet/frame counts, session ID, authentication method, duration, and termination cause). This blend of configuration and live session-state objects makes it useful for both auditing authentication policy and diagnosing why a specific client failed or was disconnected. It depends on IEEE8021-PAE-MIB for PaeControlledPortStatus and DLINK-ID-REC-MIB for its OID placement, and is deployed on D-Link switches enforcing 802.1X/MAC authentication at the network edge. Network administrators use the AUTH-MIB MIB to track per-port authentication state and diagnose failed 802.1X client sessions.

IPNetwork Monitor allows you to monitor SNMP objects defined in AUTH-MIB. Use the built-in SNMP Monitoring Browser to explore available variables, view their current values and descriptions, and select the objects you want to monitor. You can then create SNMP monitors, configure thresholds, and receive alerts when monitored values change.

Supported Devices

  • D-Link managed switches

Monitoring Examples

An operator polls swMacAuthStateTable (indexed by swPaeMacAddr and swPaePortNumber) to check swAuthPaeState and swAuthAuthControlledPortStatus for a given client, then reviews swMacAuthSessionStatsTable's swAuthSessionTerminateCause; a port stuck in held(7) state with a reauthFailed(4) termination cause would indicate the client is failing RADIUS authentication and being denied network access.

What Can Be Monitored

  • RADIUS server configuration and reachability
  • 802.1X/MAC authenticator PAE state per port
  • EAPOL frame counters (start/logoff/request/response)
  • authentication session statistics and termination cause
  • authentication protocol and mode configuration
Imported Objects

From DLINK-ID-REC-MIB

dlink-common-mgmt

From IEEE8021-PAE-MIB

PaeControlledPortStatus

From IF-MIB

InterfaceIndex

From RFC1155-SMI

IpAddress

From SNMP-FRAMEWORK-MIB

SnmpAdminString

From SNMPv2-SMI

Counter32
Counter64
Integer32
MODULE-IDENTITY
OBJECT-TYPE
TimeTicks
Unsigned32

From SNMPv2-TC

MacAddress
RowStatus
TruthValue

How to Use in IPNetwork Monitor

Example using swAuthEapolFramesRx OID:

Select a D-Link managed switch as the target host to create a monitor — the SNMP service should be up and running on it. Click New Monitor, then check SNMP Custom on the Favorites tab, click Next, and confirm the host. On the next page, click Select... to open the built-in SNMP MIB Browser and type swAuthEapolFramesRx into the Find box to locate it in the OID tree, selecting the specific row/instance you want to monitor since this is a table column, then select it and click OK. The number of valid EAPOL frames of any type that have been received by this Authenticator. On the monitor's Main parameters page you can set the target's SNMP port (default 161), credentials, polling interval, and other settings — see the SNMP Monitor help for details. On the State conditions and Alerting tabs, configure when the monitor should change state and trigger an alert; since this is a Counter32-type OID, Value bounds is the most useful condition here — trigger an alert if the counter increases sharply between polls relative to its normal baseline, since an unexpected spike often reflects a real change in traffic or activity. Click Finish to create the monitor; you can adjust any parameter later.
OIDs

RFC description

D-Link authentication control for RADIUS/TACACS user authentication, MAC authentication, and security management.

Start monitoring D-Link managed switches with a free 30-day trial of IPNetwork Monitor. Import MIBs, browse SNMP OIDs, create custom SNMP monitors, configure alerts, and monitor any SNMP-enabled network device from a single console.

Download AUTH-MIB