BAY-STACK-EAPOL-EXTENSION-MIB

All MIBs › BAY-STACK-EAPOL-EXTENSION-MIB

Organization: Avaya

Last Updated: 2015-09-10

Category: RADIUS and AAA, Vendor: Avaya

Description: Extends IEEE 802.1X EAPOL authentication configuration and per-port supplicant status on Avaya/Nortel ERS.

Start monitoring vendor-neutral, standards-based MIB, any SNMPv3-capable network device (SNMP engine identity/boot/clock status) with a free 30-day trial of IPNetwork Monitor. Import MIBs, browse SNMP OIDs, create custom SNMP monitors, configure alerts, and monitor any SNMP-enabled network device from a single console.

What Is BAY-STACK-EAPOL-EXTENSION-MIB?

BAY-STACK-EAPOL-EXTENSION-MIB is an Avaya/Nortel (BayStack/ERS switch family) proprietary extension to standard IEEE 802.1X EAPOL port-based authentication, adding vendor-specific policy controls. It exposes configuration objects for guest and remediation VLAN assignment, maximum EAP/non-EAP client MAC counts per port, multi-host authentication behavior, and user-based policy filtering by MAC address, plus a notifications group for authentication-related events. Its monitoring/management emphasis is on network access control state rather than hardware health: it lets an admin verify whether guest-VLAN or remediation-VLAN redirection is enabled and correctly configured, and whether ports are enforcing single-auth versus multi-host client limits. It explicitly builds on and extends the standard IEEE8021-PAE-MIB (802.1X EAPOL) rather than replacing it, so it is always used alongside that base MIB. It is typically deployed on Avaya/Nortel Ethernet Routing Switches in enterprise networks, where BAY-STACK-EAPOL-EXTENSION-MIB SNMP monitoring supports 802.1X port authentication with guest/remediation VLAN workflows.

IPNetwork Monitor allows you to monitor SNMP objects defined in BAY-STACK-EAPOL-EXTENSION-MIB. Use the built-in SNMP Monitoring Browser to explore available variables, view their current values and descriptions, and select the objects you want to monitor. You can then create SNMP monitors, configure thresholds, and receive alerts when monitored values change.

Supported Devices

Avaya/Nortel BayStack Ethernet Routing Switch (ERS)

Monitoring Examples

A network admin would check bseeGuestVlanEnabled and bseeGuestVlanId together with bseeRemediationVlanEnabled and bseeRemediationVlanId to confirm unauthenticated or failed-posture clients land on the correct VLAN, and bseeMaximumEapClientMacs/bseeMaximumNonEapClientMacs to verify per-port client-count limits are enforced as configured. If bseeMultiHostSingleAuthEnabled is set but multiple non-EAP MACs are appearing, bseeMultiHostAllowNonEapClient and bseeMultiHostRadiusAuthNonEapClient help explain why, and bseeNotifications events would flag authentication state changes for real-time alerting. bseeUserBasedPoliciesFilterOnMac indicates whether MAC-based policy filtering is active on the port.

What Can Be Monitored

guest VLAN enable/ID
remediation VLAN enable/ID
max EAP client MACs per port
max non-EAP client MACs per port
multi-host authentication mode
user-based policy MAC filtering state

Imported Objects

From IF-MIB

InterfaceIndex

From Q-BRIDGE-MIB

VlanId
VlanIdOrAny
VlanIdOrNone

From RAPID-CITY

LPortSet

From SNMP-FRAMEWORK-MIB

SnmpAdminString

From SNMPv2-SMI

Integer32
MODULE-IDENTITY
OBJECT-TYPE
TimeTicks

From SNMPv2-TC

MacAddress
RowStatus
TruthValue

From SYNOPTICS-ROOT-MIB

bayStackMibs

OBJECT-IDENTITY

OIDs

OID symbolic	OID numeric	Type	Access	Description
bayStackEapExtMib	1.3.6.1.4.1.45.5.3			BayStack EAPOL Extension MIB Copyright 2003-2010 Avaya All rights reserved. This Avaya SNMP Management Information Base Specification (Specification) embodies Avaya's confidential and proprietary intellectual property. Avaya retains all title and ownership in the Specification, including any revisions. This Specification is supplied 'AS IS,' and Avaya makes no warranty, either express or implied, as to the use, operation, condition, or performance of the Specification.
T/F bseeAllowPortMirroringOnEap	1.3.6.1.4.1.45.5.3.1.28	TruthValue	read-write	This object specifies whether EAP enabled ports can be involved in port mirroring
LPO bseeAutoPortConfigModeSwitchToMHMV	1.3.6.1.4.1.45.5.3.1.35	LPortSet	read-write	This object specifies the port list on which is applied the configuration.
INT bseeAutoPortConfigModeSwitchToMHMVAction	1.3.6.1.4.1.45.5.3.1.36	INTEGER	read-write	This object specifies the action that is going to be made on the indicated port. At retrieval, the value is always none(1).
INT bseeAutoPortConfigModeSwitchToMHMVStatus	1.3.6.1.4.1.45.5.3.1.37	INTEGER	read-only	This object specifies the action result on the indicated port
T/F bseeDefaultEapAll	1.3.6.1.4.1.45.5.3.1.34	TruthValue	read-write	This object specifies whether to default all global EAP settings.
T/F bseeGuestVlanEnabled	1.3.6.1.4.1.45.5.3.1.6	TruthValue	read-write	This object specifies whether access to the global default guest VLAN is allowed.
VLA bseeGuestVlanId	1.3.6.1.4.1.45.5.3.1.2	VlanId	read-write	This object specifies the ID of the global default guest VLAN. This VLAN is used for ports which do not have a configured guest VLAN. Access to the guest VLAN is allowed for MAC addresses before EAP authentication has been performed. However, if the value of bseeGuestVlanEnabled is false(2), then access to the guest VLAN is not allowed for ports that do not have a configured guest VLAN.
I32 bseeMaximumEapClientMacs	1.3.6.1.4.1.45.5.3.1.4	Integer32	read-write	This object specifies the global maximum number of EAP authenticated MAC addresses allowed.
I32 bseeMaximumNonEapClientMacs	1.3.6.1.4.1.45.5.3.1.5	Integer32	read-write	This object specifies the global maximum number of non-EAP authenticated MAC addresses allowed.
T/F bseeMultiHostAdacDummyRadiusRequests	1.3.6.1.4.1.45.5.3.1.27	TruthValue	read-write	This object specifies whether to send or not dummy RADIUS requests for NEAP users authenticated as ADAC NEAP
T/F bseeMultiHostAdacNonEapEnabled	1.3.6.1.4.1.45.5.3.1.29	TruthValue	read-write	This object specifies whether the authentication of Non-EAP phones using ADAC is allowed.
T/F bseeMultiHostAllowNonEapClient	1.3.6.1.4.1.45.5.3.1.8	TruthValue	read-write	This object controls whether non-EAP clients (MAC addresses) are allowed. This is the system-wide setting. The associated per-port setting (bseePortConfigMultiHostAllowNonEapClient) must also be true for non-EAP clients to be allowed on a particular port.
T/F bseeMultiHostAllowNonEapPhones	1.3.6.1.4.1.45.5.3.1.15	TruthValue	read-write	This object indicates whether IP phones will be allowed access based on DHCP.
T/F bseeMultiHostAllowNonEapRadiusAssignedVlan	1.3.6.1.4.1.45.5.3.1.19	TruthValue	read-write	This object indicates whether to allow the use of RADIUS-assigned VLANs in multihost-eap mode for non-EAP clients.
T/F bseeMultiHostAllowRadiusAssignedVlan	1.3.6.1.4.1.45.5.3.1.16	TruthValue	read-write	This object indicates whether to allow the use of RADIUS-assigned VLANs in multihost-eap mode.
T/F bseeMultiHostBlockDifferentVlanAuth	1.3.6.1.4.1.45.5.3.1.26	TruthValue	read-write	This object specifies whether to block authentication of clients which have an associated RADIUS assigned VLAN with an invalid value or different from first client authenticated on the same port
MAC bseeMultiHostDhcpAuthPhoneClientMACAddr	1.3.6.1.4.1.45.5.3.11.1.2	MacAddress	not-accessible	The MAC address of the DHCP authenticated IP phone.
bseeMultiHostDhcpAuthPhoneEntry	1.3.6.1.4.1.45.5.3.11.1		not-accessible	The DHCP authenticated IP phone for a port.
NUM bseeMultiHostDhcpAuthPhonePortNumber	1.3.6.1.4.1.45.5.3.11.1.1	InterfaceIndex	not-accessible	The port number associated with the DHCP authenticated IP phone.
bseeMultiHostDhcpAuthPhoneTable	1.3.6.1.4.1.45.5.3.11		not-accessible	This table provides the list of DHCP authenticated IP phones per-MAC address per-port.
STR bseeMultiHostDhcpAuthPhoneUserName	1.3.6.1.4.1.45.5.3.11.1.3	SnmpAdminString	read-only	The user name currently in use by the DHCP authenticated IP phone.
INT bseeMultiHostEapPacketMode	1.3.6.1.4.1.45.5.3.1.17	INTEGER	read-write	This object indicates whether to use unicast or multicast packets for Eap-ReqId packets. Normally, multicast packets are used.
T/F bseeMultiHostEapProtocolEnabled	1.3.6.1.4.1.45.5.3.1.20	TruthValue	read-write	This object controls whether processing of EAP protocol packets is enabled.
INT bseeMultiHostEapRadiusTimeoutMode	1.3.6.1.4.1.45.5.3.1.18	INTEGER	read-write	This object indicates whether or not to fail authentication of EAP users on a RADIUS timeout.
T/F bseeMultiHostFailOpenVlanContinuityModeEnabled	1.3.6.1.4.1.45.5.3.1.30	TruthValue	read-write	This object specifies whether to use the fail-over Vlan continuity mode.
T/F bseeMultiHostFailOpenVlanDisableEapMode	1.3.6.1.4.1.45.5.3.1.32	TruthValue	read-write	This object specifies whether to use the Fail Open VLAN Disable EAP Mode.
T/F bseeMultiHostFailOpenVlanEnabled	1.3.6.1.4.1.45.5.3.1.23	TruthValue	read-write	This object specifies whether to use the fail-over Vlan.
VLA bseeMultiHostFailOpenVlanId	1.3.6.1.4.1.45.5.3.1.22	VlanId	read-write	This object specifies the ID of the global fail-over Vlan.
T/F bseeMultiHostMultiVlan	1.3.6.1.4.1.45.5.3.1.24	TruthValue	read-write	This object specifies whether to use the multi-VLAN functionality with MHMA mode.
T/F bseeMultiHostNeapReauthenticationEnabled	1.3.6.1.4.1.45.5.3.1.25	TruthValue	read-write	This object specifies whether to use 'NEAP re-authentication' feature
MAC bseeMultiHostNonEapMacClientMACAddr	1.3.6.1.4.1.45.5.3.6.1.2	MacAddress	not-accessible	The MAC address allowed on the port.
bseeMultiHostNonEapMacEntry	1.3.6.1.4.1.45.5.3.6.1		not-accessible	An allowed non-EAP MAC address.
NUM bseeMultiHostNonEapMacPortNumber	1.3.6.1.4.1.45.5.3.6.1.1	InterfaceIndex	not-accessible	The Port number on which the MAC address is allowed.
ROW bseeMultiHostNonEapMacRowStatus	1.3.6.1.4.1.45.5.3.6.1.3	RowStatus	read-create	This is used to control creation/deletion of entries in this table.
bseeMultiHostNonEapMacTable	1.3.6.1.4.1.45.5.3.6		not-accessible	A table that contains the non-EAP MAC addresses that are allowed access to EAP-enabled interfaces.
BIT bseeMultihostNonEapRadiusPasswordAttributeFormat	1.3.6.1.4.1.45.5.3.1.14	Bits	read-write	This object controls the format of the RADIUS password attribute that is included in requests to the RADIUS server for authenticating non-EAP clients (MAC addresses). If the ipAddr(0) bit is set, the password attribute will contain the switch's IP address encoded as a string of four 3-digit 0-padded integers. For example, the encoding for the IP address 47.80.225.1 would be '047080225001'. If the macAddr(1) bit is set, the password attribute will contain the MAC address to be authenticated as a string of six 2-digit hex numbers. For example, the MAC address 00:08:01:0a:33:34 would be encoded as '0008010a3334'. If the portNumber(2) bit is set, the password attribute will contain the port number on which the MAC address was seen, encoded as a string of two 2-digit 0-padded integers. The first integer is the unit/slot number, and the second number is the port number on that unit/slot. For a standalone stackable unit, the unit/slot number will be 0. For example, the encoding for unit/port 1/23 would be '0123', and the encoding for port 7 on a standalone stackable unit would be '0007'. If the key(3) bit is set, the password attribute will contain a custom configured string of up to 32 characters in length. If padding(4) bit is set, the password will contain dots even if fields in the password are blank. For instance, IP and Key will be represented as IP...Key. If the bit is not set, there will be dots only to separate fields. IP and Key will be IP.Key, while IP, Mac, Port or Key alone will be as they are, with no dots. The fields in the password attribute will appear in the order of the bits defined in this object, i.e., IP addr, followed by MAC addr, followed by port number, and finally by the key. Fields are separated by a '.' character. The separators are present regardless of whether a field is present if padding is used. So, for example, if all four fields are present, the password attribute might contain: 047080225001.0008010a3334.0123.ERS4000isGreat If none of the three fields are present, the password attribute will be '...' with padding used, or '' with no padding.
OCT bseeMultiHostNonEapRadiusPasswordFreeformKey	1.3.6.1.4.1.45.5.3.1.31	OCTET STRING	read-write	This command specifies a custom string to be put in the password used to authenticate Non-EAP clients via RADIUS server.
MAC bseeMultiHostNonEapStatusClientMACAddr	1.3.6.1.4.1.45.5.3.7.1.2	MacAddress	not-accessible	The MAC address of the client.
bseeMultiHostNonEapStatusEntry	1.3.6.1.4.1.45.5.3.7.1		not-accessible	The status of authentication of a non-EAP client for a port.
OCT bseeMultiHostNonEapStatusFaBindings	1.3.6.1.4.1.45.5.3.7.1.7	OCTET STRING	read-only	The NEAP vlan:isid bindings. Vlan is represented on 2 bytes. Isid is represented on 4 bytes. The output OctetString would be a continuous hexadecimal representation of VLAN followed by corresponding ISID. Example: Length(bytes): \|--2--\|--4--\|--2--\|--4--\|--2--\|--4--\|---2--\|---4--\| OctetString: VLAN0 ISID0 VLAN1 ISID1 ... ... VLAN15 ISID15 . There are no spaces between VLANx and ISIDx.
NUM bseeMultiHostNonEapStatusPortNumber	1.3.6.1.4.1.45.5.3.7.1.1	InterfaceIndex	not-accessible	The Port number associated with this client.
I32 bseeMultiHostNonEapStatusPri	1.3.6.1.4.1.45.5.3.7.1.6	Integer32	read-only	The Vlan priority value associated with this client for MultiVlan capabilities. If MultiVlan is not enabled for this client, the value of this object will be 8.
INT bseeMultiHostNonEapStatusReauthenticate	1.3.6.1.4.1.45.5.3.7.1.4	INTEGER	read-write	Setting this object to reauthenticate(2) will force the MAC address to be reauthenticated. When retrieved, the value of this object is always other(1).
INT bseeMultiHostNonEapStatusState	1.3.6.1.4.1.45.5.3.7.1.3	INTEGER	read-only	The authentication status. Values are: rejected(1) - the MAC address could not be authenticated on this port locallyAuthenticated(2) - the MAC address was authenticated using the local table of allowed clients radiusPending(3) - the MAC address is awaiting authentication by a RADIUS server radiusAuthenticated(4) - the MAC address was authenticated by a RADIUS server adacAuthenticated(5) - the MAC address was authenticated using ADAC configuration tables mhsaAuthenticated(6) - the MAC address was auto-authenticated on a port following a successful authentication of an EAP client lldpAuthenticated(7) - the MAC address was authenticated using the LLDP mechanism
bseeMultiHostNonEapStatusTable	1.3.6.1.4.1.45.5.3.7		not-accessible	This table provides the authentication status of non-EAP clients per-MAC address per-port.
VLA bseeMultiHostNonEapStatusVid	1.3.6.1.4.1.45.5.3.7.1.5	VlanIdOrAny	read-only	The Vlan ID associated with this client for MultiVlan capabilities. If MultiVlan is not enabled for this client, the value of this object will be 4095.
T/F bseeMultiHostNonEapUserBasedPoliciesEnabled	1.3.6.1.4.1.45.5.3.1.12	TruthValue	read-write	This object indicates whether non-EAPOL User-based policies are enabled or disabled.
T/F bseeMultiHostNonEapUserBasedPoliciesFilterOnMac	1.3.6.1.4.1.45.5.3.1.13	TruthValue	read-write	This object indicates whether the non-EAPOL User-based policy filters that are installed on ports will be dynamically modified to include the MAC address for which the filters are installed.
T/F bseeMultiHostRadiusAuthNonEapClient	1.3.6.1.4.1.45.5.3.1.9	TruthValue	read-write	This object controls whether non-EAP clients (MAC addresses) may be authenticated using RADIUS. This is the system-wide setting. The associated per-port setting (bseePortConfigMultiHostRadiusAuthNonEapClient) must also be true for non-EAP clients to be authenticated using RADIUS on a particular port.
INT bseeMultiHostSessionAuthenticMethod	1.3.6.1.4.1.45.5.3.5.1.4	INTEGER	read-only	The authentication method used to establish the session.
STR bseeMultiHostSessionId	1.3.6.1.4.1.45.5.3.5.1.3	SnmpAdminString	read-only	A unique identifier for the session, in the form of a printable ASCII string of at least three characters.
MAC bseeMultiHostSessionStatsClientMACAddr	1.3.6.1.4.1.45.5.3.5.1.2	MacAddress	not-accessible	The MAC address of this client.
bseeMultiHostSessionStatsEntry	1.3.6.1.4.1.45.5.3.5.1		not-accessible	The session statistics information for an Authenticator PAE. This shows the current values being collected for each session that is still in progress, or the final values for the last valid session for each client where there is no session currently active. This is similar to the dot1xAuthSessionStatsTable, except that it provides information per-port-per-MAC, rather than just per-port.
NUM bseeMultiHostSessionStatsPortNumber	1.3.6.1.4.1.45.5.3.5.1.1	InterfaceIndex	not-accessible	The Port number associated with this client.
bseeMultiHostSessionStatsTable	1.3.6.1.4.1.45.5.3.5		not-accessible	A table that contains the session statistics objects for the Authenticator PAE associated with each EAP client on each Port. An entry appears in this table for each client MAC address on each port that may authenticate access to itself.
INT bseeMultiHostSessionTerminateCause	1.3.6.1.4.1.45.5.3.5.1.6	INTEGER	read-only	The reason for the session termination.
TIK bseeMultiHostSessionTime	1.3.6.1.4.1.45.5.3.5.1.5	TimeTicks	read-only	The duration of the session in seconds.
STR bseeMultiHostSessionUserName	1.3.6.1.4.1.45.5.3.5.1.7	SnmpAdminString	read-only	The User-Name representing the identity of the Supplicant PAE.
T/F bseeMultiHostSingleAuthEnabled	1.3.6.1.4.1.45.5.3.1.10	TruthValue	read-write	This object controls whether non-EAP clients (MAC addresses) may be automatically authenticated on a port after an EAP client has been authenticated (known as MHSA). This is the system-wide setting. The associated per-port setting must also be true for non-EAP clients to be authenticated in this way.
INT bseeMultiHostStatusBackendAuthState	1.3.6.1.4.1.45.5.3.4.1.4	INTEGER	read-only	The current state of the Backend Authentication state machine.
MAC bseeMultiHostStatusClientMACAddr	1.3.6.1.4.1.45.5.3.4.1.2	MacAddress	not-accessible	The MAC address of the client.
bseeMultiHostStatusEntry	1.3.6.1.4.1.45.5.3.4.1		not-accessible	The status of EAP authentication of clients for a port.
OCT bseeMultiHostStatusFaBindings	1.3.6.1.4.1.45.5.3.4.1.8	OCTET STRING	read-only	The EAP vlan:isid bindings. Vlan is represented on 2 bytes. Isid is represented on 4 bytes. The output OctetString would be a continuous hexadecimal representation of VLAN followed by corresponding ISID. Example: Length(bytes): \|--2--\|--4--\|--2--\|--4--\|--2--\|--4--\|---2--\|---4--\| OctetString: VLAN0 ISID0 VLAN1 ISID1 ... ... VLAN15 ISID15 . There are no spaces between VLANx and ISIDx.
INT bseeMultiHostStatusPaeState	1.3.6.1.4.1.45.5.3.4.1.3	INTEGER	read-only	The current value of the Authenticator PAE state machine.
NUM bseeMultiHostStatusPortNumber	1.3.6.1.4.1.45.5.3.4.1.1	InterfaceIndex	not-accessible	The Port number associated with this client.
I32 bseeMultiHostStatusPri	1.3.6.1.4.1.45.5.3.4.1.7	Integer32	read-only	The Vlan priority value associated with this client for MultiVlan capabilities. If MultiVlan is not enabled for this client, the value of this object will be 8.
INT bseeMultiHostStatusReauthenticate	1.3.6.1.4.1.45.5.3.4.1.5	INTEGER	read-write	Setting this object to reauthenticate(2) will force the client to be reauthenticated. When retrieved, the value of this object is always other(1).
bseeMultiHostStatusTable	1.3.6.1.4.1.45.5.3.4		not-accessible	This table provides the EAP authentication status per-MAC address per-port.
VLA bseeMultiHostStatusVid	1.3.6.1.4.1.45.5.3.4.1.6	VlanIdOrAny	read-only	The Vlan ID associated with this client for MultiVlan capabilities. If MultiVlan is not enabled for this client, the value of this object will be 4095.
T/F bseeMultiHostUseMostRecentRadiusAssignedVlan	1.3.6.1.4.1.45.5.3.1.21	TruthValue	read-write	Controls whether to use most recent RADIUS-assigned VLAN.
T/F bseeMultiHostVoipVlanEnabled	1.3.6.1.4.1.45.5.3.10.1.3	TruthValue	read-write	This object specifies whether to use this VoIP Vlan.
bseeMultiHostVoipVlanEntry	1.3.6.1.4.1.45.5.3.10.1		not-accessible	The configuration information for an EAP VoIP Vlan.
VLA bseeMultiHostVoipVlanId	1.3.6.1.4.1.45.5.3.10.1.2	VlanId	read-write	This object specifies the Vlan ID of the VoIP Vlan.
I32 bseeMultiHostVoipVlanIndex	1.3.6.1.4.1.45.5.3.10.1.1	Integer32	not-accessible	A unique identifier for each entry.
bseeMultiHostVoipVlanTable	1.3.6.1.4.1.45.5.3.10		not-accessible	A table that contains EAP VoIP Vlan settings.
bseeNotifications	1.3.6.1.4.1.45.5.3.2
bseeNotifications0	1.3.6.1.4.1.45.5.3.2.0
bseeObjects	1.3.6.1.4.1.45.5.3.1
INT bseePaeSystemOperState	1.3.6.1.4.1.45.5.3.1.33	INTEGER	read-only	The oper state of EAP when ports are in Fail Open VLAN Disable EAP Mode.
T/F bseePortConfigDefaultEapAll	1.3.6.1.4.1.45.5.3.3.1.22	TruthValue	read-write	This object specifies whether to default all EAP settings on this port.
T/F bseePortConfigEapProtocolEnabled	1.3.6.1.4.1.45.5.3.3.1.17	TruthValue	read-write	This object controls whether EAP protocol packets are processed on this port.
bseePortConfigEntry	1.3.6.1.4.1.45.5.3.3.1		not-accessible	The EAP multihost configuration for a port.
T/F bseePortConfigFailOpenVlanEnabled	1.3.6.1.4.1.45.5.3.3.1.26	TruthValue	read-write	This object controls whether fail-open is enabled for a port.
I32 bseePortConfigFailOpenVlanId	1.3.6.1.4.1.45.5.3.3.1.25	Integer32	read-write	This object specifies the ID of the fail-open VLAN for this port in the following format: -1 : Port PVID is used as Fail Open VLAN 0 : the global fail-open VLAN ID is used for this port, as specified in bseeMultiHostFailOpenVlanId. 1-4094 : range of values used for fail-open VLAN ID on this port However, if the value of the associated instance of bseePortConfigFailOpenVlanEnabled is false(2), then access to the fail-open VLAN is not allowed for the port, regardless of the value of bseePortConfigFailOpenVlanId.
OCT bseePortConfigFailOpenVlanUBP	1.3.6.1.4.1.45.5.3.3.1.27	OCTET STRING	read-write	This object represents the UBP filter name of the fail-open policy
T/F bseePortConfigGuestVlanEnabled	1.3.6.1.4.1.45.5.3.3.1.8	TruthValue	read-write	This object controls whether access to the guest VLAN is allowed for a port.
VLA bseePortConfigGuestVlanId	1.3.6.1.4.1.45.5.3.3.1.2	VlanIdOrNone	read-write	This object specifies the ID of the guest VLAN for this port. Access to the guest VLAN is allowed for MAC addresses before EAP authentication has been performed. If the value of this object is 0, then the global guest VLAN ID is used for this port, as specified in bseeGuestVlanId. However, if the value of the associated instance of bseePortConfigGuestVlanEnabled is false(2), then access to the guest VLAN is not allowed for the port, regardless of the value of bseePortConfigGuestVlanId.
T/F bseePortConfigMultiHostAdacNonEapEnabled	1.3.6.1.4.1.45.5.3.3.1.21	TruthValue	read-write	This object specifies whether the authentication of Non-EAP phones using ADAC is allowed on this port.
T/F bseePortConfigMultiHostAllowNonEapClient	1.3.6.1.4.1.45.5.3.3.1.5	TruthValue	read-write	This object controls whether non-EAP clients (MAC addresses) are allowed on the port.
T/F bseePortConfigMultiHostAllowNonEapPhones	1.3.6.1.4.1.45.5.3.3.1.11	TruthValue	read-write	This object indicates whether IP phones will be allowed access based on DHCP.
T/F bseePortConfigMultiHostAllowNonEapRadiusAssignedVlan	1.3.6.1.4.1.45.5.3.3.1.15	TruthValue	read-write	This object indicates whether to allow the use of RADIUS-assigned VLANs in multihost-eap mode for non-EAP clients.
T/F bseePortConfigMultiHostAllowRadiusAssignedVlan	1.3.6.1.4.1.45.5.3.3.1.12	TruthValue	read-write	This object indicates whether to allow the use of RADIUS-assigned VLANs in multihost-eap mode.
T/F bseePortConfigMultiHostBlockDifferentVlanAuth	1.3.6.1.4.1.45.5.3.3.1.20	TruthValue	read-write	Controls whether to block authentication of clients which have an associated RADIUS assigned VLAN with an invalid value or different from first client authenticated on the same port.
MAC bseePortConfigMultiHostClearNeap	1.3.6.1.4.1.45.5.3.3.1.19	MacAddress	read-write	Setting this object will clear NEAP authenticated clients from the authentication list. If the value is set to 00:00:00:00:00:00, all clients will be cleared from this port. Otherwise, only a specific client will be cleared.
I32 bseePortConfigMultiHostEapMaxNumMacs	1.3.6.1.4.1.45.5.3.3.1.4	Integer32	read-write	This object specifies the maximum number of EAP-authentication MAC addresses allowed on this port. A value of 0 indicates that there is no port-specific limit.
INT bseePortConfigMultiHostEapPacketMode	1.3.6.1.4.1.45.5.3.3.1.13	INTEGER	read-write	This object indicates whether to use unicast or multicast packets for Eap-ReqId packets. Normally, multicast packets are used.
INT bseePortConfigMultiHostEapRadiusTimeoutMode	1.3.6.1.4.1.45.5.3.3.1.14	INTEGER	read-write	This object indicates whether or not to fail authentication of EAP users on a RADIUS timeout.
T/F bseePortConfigMultiHostEnabled	1.3.6.1.4.1.45.5.3.3.1.3	TruthValue	read-write	This object controls whether EAP multihost is enabled for a port.
I32 bseePortConfigMultiHostMaxMacs	1.3.6.1.4.1.45.5.3.3.1.23	Integer32	read-write	This object specifies the maximum number of EAP and NEAP clients allowed on this port.
INT bseePortConfigMultiHostNonEapMacSource	1.3.6.1.4.1.45.5.3.3.1.6	INTEGER	read-write	This object controls the source for finding allowed non-EAP MAC addresses.
I32 bseePortConfigMultiHostNonEapMaxNumMacs	1.3.6.1.4.1.45.5.3.3.1.7	Integer32	read-write	This object specifies the maximum number of non-EAP authenticated MAC addresses allowed on this port.
T/F bseePortConfigMultiHostRadiusAuthNonEapClient	1.3.6.1.4.1.45.5.3.3.1.9	TruthValue	read-write	This object controls whether non-EAP clients (MAC addresses) may authenticated using RADIUS on the port.
T/F bseePortConfigMultiHostSingleAuthEnabled	1.3.6.1.4.1.45.5.3.3.1.10	TruthValue	read-write	This object controls whether non-EAP clients (MAC addresses) may be automatically authenticated on the port after an EAP client has been authenticated (known as MHSA).
T/F bseePortConfigMultiHostSingleAuthNoLimit	1.3.6.1.4.1.45.5.3.3.1.24	TruthValue	read-write	This object specifies if we limit the number of non-eap clients on a port authenticated in MHSA.
T/F bseePortConfigMultiHostUseMostRecentRadiusAssignedVlan	1.3.6.1.4.1.45.5.3.3.1.18	TruthValue	read-write	Controls whether to use most recent RADIUS-assigned VLAN.
NUM bseePortConfigPortNumber	1.3.6.1.4.1.45.5.3.3.1.1	InterfaceIndex	not-accessible	The Port number associated with this Port.
T/F bseePortConfigProcessRadiusRequestsServerPackets	1.3.6.1.4.1.45.5.3.3.1.16	TruthValue	read-write	This object indicates whether to process any RADIUS requests-server packets that are received on this port.
bseePortConfigTable	1.3.6.1.4.1.45.5.3.3		not-accessible	This table is used to control the EAP multihost configuration for each port in the system.
T/F bseeRemediationVlanEnabled	1.3.6.1.4.1.45.5.3.1.7	TruthValue	read-write	This object specifies whether access to the remediation VLAN is allowed.
VLA bseeRemediationVlanId	1.3.6.1.4.1.45.5.3.1.3	VlanId	read-write	This object specifies the ID of the remediation VLAN. If EAP authentication fails for a port, MAC addresses on that port are restricted to access only the remediation VLAN. However, if the value of bseeRemediationVlanEnabled is false(2), then access is not allowed at all for a port when EAP authentication fails.
T/F bseeSupplicantEnabled	1.3.6.1.4.1.45.5.3.8.1	TruthValue	read-write	Indicates whether supplicant functionality is enabled or disabled. A value of true(1) means enabled.
bseeSupplicantObjects	1.3.6.1.4.1.45.5.3.8
STR bseeSupplicantPassword	1.3.6.1.4.1.45.5.3.9.1.3	SnmpAdminString	read-write	The password currently in use by the Supplicant PAE state machine.
NUM bseeSupplicantPortNumber	1.3.6.1.4.1.45.5.3.9.1.1	InterfaceIndex	not-accessible	A unique value for each interface. Its value ranges between 1 and the value of ifNumber. The value for each interface must remain constant at least from one re-initialization of the entity's network management system to the next re- initialization.
bseeSupplicantUserEntry	1.3.6.1.4.1.45.5.3.9.1		not-accessible	The configuration information for a Supplicant PAE.
STR bseeSupplicantUserName	1.3.6.1.4.1.45.5.3.9.1.2	SnmpAdminString	read-write	The user name currently in use by the Supplicant PAE state machine.
INT bseeSupplicantUserState	1.3.6.1.4.1.45.5.3.9.1.4	INTEGER	read-write	Input the user state to logoff.
bseeSupplicantUserTable	1.3.6.1.4.1.45.5.3.9		not-accessible	A table that contains the user name and password for the Supplicant PAE associated with each port. An entry appears in this table for each port that may authenticate itself when challenged by a remote system.
T/F bseeUserBasedPoliciesEnabled	1.3.6.1.4.1.45.5.3.1.1	TruthValue	read-write	This object indicates whether EAPOL User-based policies are enabled or disabled.
T/F bseeUserBasedPoliciesFilterOnMac	1.3.6.1.4.1.45.5.3.1.11	TruthValue	read-write	This object indicates whether the EAPOL User-based policy filters that are installed on ports will be dynamically modified to include the MAC address for which the filters are installed.

RFC description

Avaya/BayStack EAPOL extension for port-based network access control and multi-host authentication.

Start monitoring Avaya/Nortel BayStack Ethernet Routing Switch (ERS) (legacy) with a free 30-day trial of IPNetwork Monitor. Import MIBs, browse SNMP OIDs, create custom SNMP monitors, configure alerts, and monitor any SNMP-enabled network device from a single console.

Download BAY-STACK-EAPOL-EXTENSION-MIB

What Is BAY-STACK-EAPOL-EXTENSION-MIB?

Supported Devices

Monitoring Examples

What Can Be Monitored

This MIB depends on

Related MIBs

RFC description