BRCD-DOT1X-MIB

All MIBs › BRCD-DOT1X-MIB

Organization: Brocade Communications Systems, Inc.

Last Updated: 2010-09-30

Category: VPN and Security, Vendor: Foundry/Brocade

Description: Manages IEEE 802.1X port-based network access control configuration on Brocade network switches.

Start monitoring vendor-neutral, standards-based MIB, any SNMPv3-capable network device (SNMP engine identity/boot/clock status) with a free 30-day trial of IPNetwork Monitor. Import MIBs, browse SNMP OIDs, create custom SNMP monitors, configure alerts, and monitor any SNMP-enabled network device from a single console.

What Is BRCD-DOT1X-MIB?

BRCD-DOT1X-MIB is a Brocade Communications Systems, Inc. proprietary MIB configuring and monitoring IEEE 802.1X authentication on Brocade switches. Its objects cover global settings (quiet period, TX period, supplicant/auth-server timeout, max requests, re-auth max/period, protocol version, total enabled ports, re-auth status, MAC-session max age, no-aging denied/permitted sessions, auth-fail action), and a per-port EAPOL statistics table (received/transmitted EAP frames, start/logoff/response-ID frames, invalid frames, and last-frame EAPOL version). As a configuration/status MIB it lets an administrator confirm 802.1X timers and watch per-port EAPOL frame exchange to diagnose an authentication failure. It is deployed on Brocade Communications managed switches. Engineers can download the BRCD-DOT1X-MIB file directly to load it into their MIB browser.

IPNetwork Monitor allows you to monitor SNMP objects defined in BRCD-DOT1X-MIB. Use the built-in SNMP Monitoring Browser to explore available variables, view their current values and descriptions, and select the objects you want to monitor. You can then create SNMP monitors, configure thresholds, and receive alerts when monitored values change.

Supported Devices

Brocade Communications managed switches

Monitoring Examples

An administrator checks brcdDot1xAuthPortStatRxEAPInvalidFrames to diagnose a malformed 802.1X supplicant on a Brocade switch port.

What Can Be Monitored

802.1X global configuration and per-port EAPOL statistics

Imported Objects

From IF-MIB

ifIndex

OBJECT-TYPE

From INET-ADDRESS-MIB

InetAddress
InetAddressType

From P-BRIDGE-MIB

EnabledStatus

From SNMP-FRAMEWORK-MIB

SnmpAdminString

From SNMPv2-SMI

Counter32
Integer32
MODULE-IDENTITY
OBJECT-TYPE
Unsigned32

From SNMPv2-TC

MacAddress

How to Use in IPNetwork Monitor

Example using brcdDot1xAuthPortStatRxEAPFrames OID:

Select a Brocade Communications managed switch as the target host to create a monitor — the SNMP service should be up and running on it. Click New Monitor, then check SNMP Custom on the Favorites tab, click Next, and confirm the host. On the next page, click Select... to open the built-in SNMP MIB Browser and type brcdDot1xAuthPortStatRxEAPFrames into the Find box to locate it in the OID tree, selecting the specific row/instance you want to monitor since this is a table column, then select it and click OK. The total number of EAPOL frames received on the port It includes EAP frames -. On the monitor's Main parameters page you can set the target's SNMP port (default 161), credentials, polling interval, and other settings — see the SNMP Monitor help for details. On the State conditions and Alerting tabs, configure when the monitor should change state and trigger an alert; since this is a Counter32-type OID, Value bounds is the most useful condition here — trigger an alert if the counter increases sharply between polls relative to its normal baseline, since an unexpected spike often reflects a real change in traffic or activity. Click Finish to create the monitor; you can adjust any parameter later.

OIDs

OID symbolic	OID numeric	Type	Access	Description
brcdDot1xAuth	1.3.6.1.4.1.1991.1.1.3.38			Management Information for configuration /querying of 802.1x authentication It is grouped into five MIBs - 1. Global level configurable admin /status 802.1x information 2. Port level EAPOL statistics information 3. Port level configuration information 4. Different Port state information and 5. 802.1x mac session information Copyright 1996-2010 Brocade Communications Systems, Inc. All rights reserved. This Brocade Communications Systems SNMP Management Information Base Specification embodies Brocade Communications Systems' confidential and proprietary intellectual property. Brocade Communications Systems retains all title and ownership in the Specification, including any revisions. This Specification is supplied AS IS, and Brocade Communications Systems makes no warranty, either express or implied, as to the use, operation, condition, or performance of the specification, and any unintended consequence it may on the user environment.
ENA brcdDot1xAuthGlobalAdminConfigStatus	1.3.6.1.4.1.1991.1.1.3.38.6.1	EnabledStatus	read-write	Used to enable /disable 802.1x authentication globally
brcdDot1xAuthGlobalAdminGroup	1.3.6.1.4.1.1991.1.1.3.38.6
INT brcdDot1xAuthGlobalConfigAuthFailAction	1.3.6.1.4.1.1991.1.1.3.38.1.14	INTEGER	read-write	To Configure the action to take when the authentication fails
U32 brcdDot1xAuthGlobalConfigAuthServerTimeOut	1.3.6.1.4.1.1991.1.1.3.38.1.4	Unsigned32	read-write	When the Authentication Server (RADIUS) does not respond to a message sent from the Client, the amount of time before the Brocade device retransmits the message. The allowed range is from 1 to 4294967294
brcdDot1xAuthGlobalConfigGroup	1.3.6.1.4.1.1991.1.1.3.38.1
U32 brcdDot1xAuthGlobalConfigMacSessionMaxAge	1.3.6.1.4.1.1991.1.1.3.38.1.11	Unsigned32	read-write	The Max-Age of the 802.1x mac session- A value between 0 and 65535
U32 brcdDot1xAuthGlobalConfigMaxReq	1.3.6.1.4.1.1991.1.1.3.38.1.5	Unsigned32	read-write	The number of times the Brocade device retransmits an EAP-request/identity request frame if it does not receive an EAP-response/identity response frame from a Client
ENA brcdDot1xAuthGlobalConfigNoAgingDeniedSessions	1.3.6.1.4.1.1991.1.1.3.38.1.12	EnabledStatus	read-write	Enable / Disable Mac-Session-No Aging for Denied sessions
ENA brcdDot1xAuthGlobalConfigNoAgingPermittedSessions	1.3.6.1.4.1.1991.1.1.3.38.1.13	EnabledStatus	read-write	Enable / Disable Mac-Session-No Aging for Permitted sessions
U32 brcdDot1xAuthGlobalConfigProtocolVersion	1.3.6.1.4.1.1991.1.1.3.38.1.8	Unsigned32	read-only	The EAP protocol version
U32 brcdDot1xAuthGlobalConfigQuietperiod	1.3.6.1.4.1.1991.1.1.3.38.1.1	Unsigned32	read-write	When the Brocade device is unable to authenticate a Client, the amount of time the Brocade device waits before trying again.. The allowed range is from 1 to 4294967294
U32 brcdDot1xAuthGlobalConfigReAuthMax	1.3.6.1.4.1.1991.1.1.3.38.1.6	Unsigned32	read-write	The number of re-authentication attempts that are permitted before the port becomes Unauthorized
U32 brcdDot1xAuthGlobalConfigReAuthPeriod	1.3.6.1.4.1.1991.1.1.3.38.1.7	Unsigned32	read-write	How often the device automatically re-authenticates clients when periodic re-authentication is enabled The allowed range is from 1 to 4294967294
ENA brcdDot1xAuthGlobalConfigReauthStatus	1.3.6.1.4.1.1991.1.1.3.38.1.10	EnabledStatus	read-write	Used to enable / disable Reauthentication globally
U32 brcdDot1xAuthGlobalConfigSuppTimeOut	1.3.6.1.4.1.1991.1.1.3.38.1.3	Unsigned32	read-write	When a supplicant (Client) does not respond to an EAP-request frame, the amount of time before the Brocade device retransmits the frame The allowed range is from 1 to 4294967294
U32 brcdDot1xAuthGlobalConfigTotalPortsEnabled	1.3.6.1.4.1.1991.1.1.3.38.1.9	Unsigned32	read-only	The total number of ports that have 802.1x enabled
U32 brcdDot1xAuthGlobalConfigTxPeriod	1.3.6.1.4.1.1991.1.1.3.38.1.2	Unsigned32	read-write	When a Client does not send back an EAP(Extensible Authentication Protocol)-response/identity frame, the amount of time the Brocade device waits before retransmitting the EAP-request/identity frame to a Client The allowed range is from 1 to 4294967294
brcdDot1xAuthMacSession	1.3.6.1.4.1.1991.1.1.3.38.5
INT brcdDot1xAuthMacSessionAccessStatus	1.3.6.1.4.1.1991.1.1.3.38.5.1.1.5	INTEGER	read-only	The authentication state of the dot1x-mac-session - which can be permitted, denied, restricted or in the Init state
IPt brcdDot1xAuthMacSessionAddrType	1.3.6.1.4.1.1991.1.1.3.38.5.1.1.7	InetAddressType	read-only	Client(supplicant) IP address Type. Supported address types are ipv4(1) and ipv6(2)
INT brcdDot1xAuthMacSessionAging	1.3.6.1.4.1.1991.1.1.3.38.5.1.1.9	INTEGER	read-only	The age's type - Hardware or Software aging, Ena in which case the aging hasn't started, or notapplicable when there is a fake 802.1x mac session
MAC brcdDot1xAuthMacSessionAuthMac	1.3.6.1.4.1.1991.1.1.3.38.5.1.1.1	MacAddress	not-accessible	Mac address of the client - which basically represents the username used for RADIUS authentication
VLA brcdDot1xAuthMacSessionCurrentVlanId	1.3.6.1.4.1.1991.1.1.3.38.5.1.1.4	VlanId	read-only	The VLAN to which the port is currently assigned
brcdDot1xAuthMacSessionEntry	1.3.6.1.4.1.1991.1.1.3.38.5.1.1		not-accessible	An entry containing information applicable to a particular interface and client MAC ie., dot1x-mac-session
VLA brcdDot1xAuthMacSessionIncomingVlanId	1.3.6.1.4.1.1991.1.1.3.38.5.1.1.3	VlanId	read-only	Incoming VLAN ID
IP brcdDot1xAuthMacSessionIpAddr	1.3.6.1.4.1.1991.1.1.3.38.5.1.1.8	InetAddress	read-only	The IP Address of the client
U32 brcdDot1xAuthMacSessionMaxAge	1.3.6.1.4.1.1991.1.1.3.38.5.1.1.6	Unsigned32	read-only	MAX Age of the mac session in which the MAC address is authenticated.
brcdDot1xAuthMacSessionTable	1.3.6.1.4.1.1991.1.1.3.38.5.1		not-accessible	A table that contains 802.1x MAC sessions
STR brcdDot1xAuthMacSessionUserName	1.3.6.1.4.1.1991.1.1.3.38.5.1.1.2	SnmpAdminString	read-only	User name of the 802.1x mac session
brcdDot1xAuthPortConfig	1.3.6.1.4.1.1991.1.1.3.38.3
ENA brcdDot1xAuthPortConfigDot1xOnPort	1.3.6.1.4.1.1991.1.1.3.38.3.1.1.3	EnabledStatus	read-write	To Configure (enable / disable) 802.1x on an interface level
brcdDot1xAuthPortConfigEntry	1.3.6.1.4.1.1991.1.1.3.38.3.1.1		not-accessible	An entry of 802.1x config values
ENA brcdDot1xAuthPortConfigFilterStrictSec	1.3.6.1.4.1.1991.1.1.3.38.3.1.1.2	EnabledStatus	read-write	To configure filter strict security on the interface - enable(1) or disable(0)
INT brcdDot1xAuthPortConfigPortControl	1.3.6.1.4.1.1991.1.1.3.38.3.1.1.1	INTEGER	read-write	The configured port control type for the interface which can be 1. force-unauthorized - port's controlled port is placed unconditionally in the unauthorized state 2. control-auto - the controlled port is unauthorized until authentication takes place between client and RADIUS 3. force-authorized - the port's controlled port is placed unconditionally in the authorized state
brcdDot1xAuthPortConfigTable	1.3.6.1.4.1.1991.1.1.3.38.3.1		not-accessible	A table that allows configuration of dot1x values for a given port
brcdDot1xAuthPortState	1.3.6.1.4.1.1991.1.1.3.38.4
U32 brcdDot1xAuthPortStatEAPLastFrameVersionRx	1.3.6.1.4.1.1991.1.1.3.38.2.1.1.8	Unsigned32	read-only	The version of last EAP frame received
U32 brcdDot1xAuthPortStateAuthMacSessions	1.3.6.1.4.1.1991.1.1.3.38.4.1.1.2	Unsigned32	read-only	Number of Authorized MAC sessions per port
brcdDot1xAuthPortStateEntry	1.3.6.1.4.1.1991.1.1.3.38.4.1.1		not-accessible	An entry of 802.1x config values indexed by ifIndex to be able to have port values
U32 brcdDot1xAuthPortStateMacSessions	1.3.6.1.4.1.1991.1.1.3.38.4.1.1.1	Unsigned32	read-only	Number of 802.1x MAC sessions per port
brcdDot1xAuthPortStatEntry	1.3.6.1.4.1.1991.1.1.3.38.2.1.1		not-accessible	An entry of EAP frames statistics indexed by ifIndex
U32 brcdDot1xAuthPortStateOriginalPVID	1.3.6.1.4.1.1991.1.1.3.38.4.1.1.3	Unsigned32	read-only	Originally configured(not dynamically assigned) PVID(port's default VLAN ID) for the port
INT brcdDot1xAuthPortStatePortVlanState	1.3.6.1.4.1.1991.1.1.3.38.4.1.1.6	INTEGER	read-only	The Current Vlan state the port is in, which can be RADIUS -The port's PVID was dynamically assigned by a RADIUS server Restricted - The port's PVID is the restricted VLAN Normal - The port's PVID is not set by a RADIUS server, nor is it the restricted VLAN
U32 brcdDot1xAuthPortStatePVID	1.3.6.1.4.1.1991.1.1.3.38.4.1.1.7	Unsigned32	read-only	The Dot1x Authentication default Port VLAN Id
U32 brcdDot1xAuthPortStatePVIDMacAuthorized	1.3.6.1.4.1.1991.1.1.3.38.4.1.1.5	Unsigned32	read-only	The number of devices transmitting untagged traffic on the port's PVID as a result of dynamic VLAN assignment
U32 brcdDot1xAuthPortStatePVIDMacTotal	1.3.6.1.4.1.1991.1.1.3.38.4.1.1.4	Unsigned32	read-only	The number of devices transmitting untagged traffic on the port's PVID
U32 brcdDot1xAuthPortStateRadiusAssignPVID	1.3.6.1.4.1.1991.1.1.3.38.4.1.1.9	Unsigned32	read-only	RADIUS assign PVID
U32 brcdDot1xAuthPortStateRestrictPVID	1.3.6.1.4.1.1991.1.1.3.38.4.1.1.8	Unsigned32	read-only	Restrict PVID
brcdDot1xAuthPortStateTable	1.3.6.1.4.1.1991.1.1.3.38.4.1		not-accessible	A table that contains entries of port dot1x values
brcdDot1xAuthPortStatistics	1.3.6.1.4.1.1991.1.1.3.38.2
MAC brcdDot1xAuthPortStatLastEAPFrameSource	1.3.6.1.4.1.1991.1.1.3.38.2.1.1.12	MacAddress	read-only	The MAC address of the source from which the last EAP frame came
C32 brcdDot1xAuthPortStatRxEAPFramesEx	1.3.6.1.4.1.1991.1.1.3.38.2.1.1.1	Counter32	read-only	The total number of EAPOL frames received on the port It includes EAP frames -
C32 brcdDot1xAuthPortStatRxEAPInvalidFrames	1.3.6.1.4.1.1991.1.1.3.38.2.1.1.7	Counter32	read-only	The number of invalid EAPOL frames received on the port
C32 brcdDot1xAuthPortStatRxEAPLogOffFrames	1.3.6.1.4.1.1991.1.1.3.38.2.1.1.4	Counter32	read-only	The number of EAPOL-Logoff frames received on the port
C32 brcdDot1xAuthPortStatRxEAPRespIdFrames	1.3.6.1.4.1.1991.1.1.3.38.2.1.1.5	Counter32	read-only	The number of EAP frames other than Response/Identity frames received on the port
C32 brcdDot1xAuthPortStatRxEAPRespOrIdFrames	1.3.6.1.4.1.1991.1.1.3.38.2.1.1.9	Counter32	read-only	The number of received EAP response or Id frames on the port
C32 brcdDot1xAuthPortStatRxEAPStartFrames	1.3.6.1.4.1.1991.1.1.3.38.2.1.1.3	Counter32	read-only	The number of EAPOL-Start frames received on the port
I32 brcdDot1xAuthPortStatRxLengthErrorFrame	1.3.6.1.4.1.1991.1.1.3.38.2.1.1.10	Integer32	read-only	The received EAP Length Error frame
brcdDot1xAuthPortStatTable	1.3.6.1.4.1.1991.1.1.3.38.2.1		not-accessible	A table that contains port EAP(Extensible Authentication Protocol) frames statistics for 802.1x authentication
C32 brcdDot1xAuthPortStatTxEAPFrames	1.3.6.1.4.1.1991.1.1.3.38.2.1.1.2	Counter32	read-only	The no of EAPOL frames transmitted on the port
C32 brcdDot1xAuthPortStatTxEAPReqIdFrames	1.3.6.1.4.1.1991.1.1.3.38.2.1.1.6	Counter32	read-only	The number of EAP-Request/Identity frames transmitted on the port
C32 brcdDot1xAuthPortStatTxRequestFrames	1.3.6.1.4.1.1991.1.1.3.38.2.1.1.11	Counter32	read-only	The number of transmitted EAP request frames on the port

RFC description

802.1X authentication configuration and port-level EAPOL statistics for Brocade network switches.

Start monitoring Brocade Communications managed switches with a free 30-day trial of IPNetwork Monitor. Import MIBs, browse SNMP OIDs, create custom SNMP monitors, configure alerts, and monitor any SNMP-enabled network device from a single console.

Download BRCD-DOT1X-MIB