CIENA-CES-8021X-MIB

All MIBs › CIENA-CES-8021X-MIB

Organization: Ciena Corp.

Last Updated: 2017-08-22

Category: Vendor: Ciena

Description: Manages IEEE 802.1X port-based network access control on Ciena CES Carrier Ethernet switches.

Start monitoring vendor-neutral, standards-based MIB, any SNMPv3-capable network device (SNMP engine identity/boot/clock status) with a free 30-day trial of IPNetwork Monitor. Import MIBs, browse SNMP OIDs, create custom SNMP monitors, configure alerts, and monitor any SNMP-enabled network device from a single console.

What Is CIENA-CES-8021X-MIB?

CIENA-CES-8021X-MIB is a Ciena vendor MIB that manages IEEE 802.1X port-based network access control on Ciena's Carrier Ethernet Switch (CES) platform, covering both supplicant and authenticator roles for a port. It exposes 802.1X authentication state and configuration for switch ports, governing whether a connected device/client has been authenticated before being granted network access. Its monitoring value is chiefly software/protocol status: tracking per-port authentication state (authorized/unauthorized), supplicant identity, and authenticator configuration to detect ports stuck in an unauthenticated state or unexpected authentication failures. It closely parallels and likely extends the standard IEEE8021-PAE-MIB used for generic 802.1X management, adding Ciena CES-specific table structures. It is deployed on Ciena CES Carrier Ethernet switches in service-provider or enterprise networks that enforce port-based network access control. Engineers can download the CIENA-CES-8021X-MIB file directly to load it into their MIB browser.

IPNetwork Monitor allows you to monitor SNMP objects defined in CIENA-CES-8021X-MIB. Use the built-in SNMP Monitoring Browser to explore available variables, view their current values and descriptions, and select the objects you want to monitor. You can then create SNMP monitors, configure thresholds, and receive alerts when monitored values change.

Supported Devices

Ciena CES (Carrier Ethernet Switch)

Monitoring Examples

No object or table names were provided in the available source excerpt, so a concrete polling scenario with grounded object names cannot be given; based on its stated purpose, an operator would typically expect to poll per-port supplicant and authenticator state tables (analogous to dot1xAuthConfigTable/dot1xAuthStatsTable) to identify a port where a client repeatedly fails 802.1X authentication.

Imported Objects

From CIENA-GLOBAL-MIB

cienaGlobalMacAddress	OBJECT-TYPE
cienaGlobalSeverity	OBJECT-TYPE

From CIENA-SMI

cienaCesConfig	OBJECT-IDENTITY
cienaCesNotifications	OBJECT-IDENTITY

From IEEE8021-PAE-MIB

dot1xPaeSystemAuthControl

OBJECT-TYPE

From SNMPv2-SMI

Integer32
MODULE-IDENTITY
NOTIFICATION-TYPE
OBJECT-TYPE

From SNMPv2-TC

DisplayString
TruthValue

OIDs

OID symbolic	OID numeric	Type	Access	Description
cienaCes8021xMIB	1.3.6.1.4.1.1271.2.1.42			The MIB module is for 802.1x supplicant and authenticator information.
cienaCes8021xConf	1.3.6.1.4.1.1271.2.1.42.1
cienaCes8021xGroups	1.3.6.1.4.1.1271.2.1.42.1.1
cienaCes8021xCompls	1.3.6.1.4.1.1271.2.1.42.1.2
cienaCes8021xObjs	1.3.6.1.4.1.1271.2.1.42.2
cienaCes8021xPortTable	1.3.6.1.4.1.1271.2.1.42.2.1		not-accessible	Table with an entry for every port on the switch
cienaCes8021xPortEntry	1.3.6.1.4.1.1271.2.1.42.2.1.1		not-accessible	An entry (conceptual row) in the cienaCes8021xPortTable.
U32 cienaCes8021xPort	1.3.6.1.4.1.1271.2.1.42.2.1.1.1	Unsigned32	not-accessible	Pgid of the port
INT cienaCes8021xRole	1.3.6.1.4.1.1271.2.1.42.2.1.1.2	INTEGER	read-write	802.1x role of the Port.
T/F cienaCes8021xAuthPortStatsClear	1.3.6.1.4.1.1271.2.1.42.2.1.1.3	TruthValue	read-write	Setting this MIB object to 'true' clears the authenticator port statistics.
INT cienaCes8021xNotificationAuthenticationEvent	1.3.6.1.4.1.1271.2.1.42.2.1.1.4	INTEGER	accessible-for-notify	This object identifies the type of authentication event being communicated in the notification in which this object is located.
cienaCes8021xSuppTable	1.3.6.1.4.1.1271.2.1.42.2.2		not-accessible	A table that contains the configuration objects for the Supplicant PAE associated with each port. An entry appears in this table for each port that may authenticate itself when challenged by a remote system.
cienaCes8021xSuppEntry	1.3.6.1.4.1.1271.2.1.42.2.2.1		not-accessible	The configuration information for a Supplicant PAE.
U32 cienaCes8021xSuppPort	1.3.6.1.4.1.1271.2.1.42.2.2.1.1	Unsigned32	not-accessible	The MIB object is used as an index in the table and specifies the pgid of the port.
STR cienaCes8021xSuppUserName	1.3.6.1.4.1.1271.2.1.42.2.2.1.2	DisplayString	read-write	Username for authenticating this supplicant, also used as the 802.1x identity. Setting this object to zero length string resets the username.
STR cienaCes8021xSuppPassword	1.3.6.1.4.1.1271.2.1.42.2.2.1.3	DisplayString	read-write	The password used with cienaCes8021xSuppUserName for EAP-MD5 authentication. Doing a get on this object always returns a zero length string for security reasons.
T/F cienaCes8021xSuppPortStatsClear	1.3.6.1.4.1.1271.2.1.42.2.2.1.5	TruthValue	read-write	Setting this MIB object to 'true' clears the supplicant port statistics.
INT cienaCes8021xSuppEAPMethod	1.3.6.1.4.1.1271.2.1.42.2.2.1.10	INTEGER	read-write	Obsolete. Use cienaCes8021xSuppEAPAllowedMethods instead.
BIT cienaCes8021xSuppEAPAllowedMethods	1.3.6.1.4.1.1271.2.1.42.2.2.1.11	Bits	read-write	Extensible Authentication Protocol methods allowed for this supplicant.
INT cienaCes8021xSuppOperationalState	1.3.6.1.4.1.1271.2.1.42.2.2.1.12	INTEGER	read-only	Returns the operational state of this supplicant.
INT cienaCes8021xSuppMutualAuthenticationAdminState	1.3.6.1.4.1.1271.2.1.42.2.2.1.13	INTEGER	read-write	Administratively enables/disables authentication of the server by the supplicant. Applies to EAP-TLS.
INT cienaCes8021xSuppCheckCertificateTimeAdminState	1.3.6.1.4.1.1271.2.1.42.2.2.1.14	INTEGER	read-write	Administratively enables/disables checking of the server's certificate timestamp when doing mutual authentication. Applies to EAP-TLS.
INT cienaCes8021xSuppMutualAuthenticationOperState	1.3.6.1.4.1.1271.2.1.42.2.2.1.15	INTEGER	read-only	Returns the operative state of mutual authentication checking. Applies to EAP-TLS.
INT cienaCes8021xSuppCheckCertificateTimeOperState	1.3.6.1.4.1.1271.2.1.42.2.2.1.16	INTEGER	read-only	Returns the operative state of certificate time stamp checking when doing mutual authentication. Applies to EAP-TLS.
INT cienaCes8021xSuppDeviceCertificateStatus	1.3.6.1.4.1.1271.2.1.42.2.2.1.17	INTEGER	read-only	Returns the state of the supplicant device certificate. Applies to EAP-TLS.
OCT cienaCes8021xSuppSecret	1.3.6.1.4.1.1271.2.1.42.2.2.1.18	OCTET STRING	read-write	Sets the pre-encrypted secret that shall be used along with the username specified by cienaCes8021xSuppUserName to gain access on a port. A get returns the encrypted secret for the supplicant.
INT cienaCes8021xSuppAdminState	1.3.6.1.4.1.1271.2.1.42.2.2.1.19	INTEGER	read-write	This object is used to specify the user administrative state of the supplicant port.
I32 cienaCes8021xSuppEAPVersion	1.3.6.1.4.1.1271.2.1.42.2.2.1.20	Integer32	read-write	This object is used to specify the EAPoL version of the supplicant port.
INT cienaCes8021xSuppOCSPAdminState	1.3.6.1.4.1.1271.2.1.42.2.2.1.21	INTEGER	read-write	Administratively enables/disables OCSP checking of the server's certificate when doing mutual authentication. Applies to EAP-TLS.
STR cienaCes8021xSuppCertificateName	1.3.6.1.4.1.1271.2.1.42.2.2.1.22	DisplayString	read-write	Name of the certificate to be used for authenticating this supplicant. Applies to EAP-TLS.
INT cienaCes8021xSuppMinimumTlsVersion	1.3.6.1.4.1.1271.2.1.42.2.2.1.23	INTEGER	read-write	This object is used to specify the minimum TLS version that can be used by the supplicant port. Applies to EAP-TLS.
INT cienaCes8021xSuppPeerCertReauthAdminState	1.3.6.1.4.1.1271.2.1.42.2.2.1.24	INTEGER	read-write	Administratively enables/disables peer certificate reauthentication on this supplicant. Applies to EAP-TLS.
cienaCes8021xGlobalAttrs	1.3.6.1.4.1.1271.2.1.42.2.3
T/F cienaCes8021xAuthStatsClear	1.3.6.1.4.1.1271.2.1.42.2.3.1	TruthValue	read-write	Setting this MIB object to 'true' clears the authenticator global statistics.
T/F cienaCes8021xSuppStatsClear	1.3.6.1.4.1.1271.2.1.42.2.3.2	TruthValue	read-write	Setting this MIB object to 'true' clears the supplicant global statistics.
cienaCes8021xEvents	1.3.6.1.4.1.1271.2.1.42.3
cienaCes8021xEventsV2	1.3.6.1.4.1.1271.2.1.42.3.0
cienaCes8021xMIBNotificationPrefix	1.3.6.1.4.1.1271.2.2.101
cienaCes8021xMIBNotification	1.3.6.1.4.1.1271.2.2.101.0
NTF cienaCes8021xSuppAuthenticationEvent	1.3.6.1.4.1.1271.2.2.101.0.1			This notification is generated when a supplicant authentication event, as identified by the value of cienaCes8021xNotificationAuthenticationEvent has occurred on the port identified by cienaCes8021xPort.
NTF cienaCes8021xAuthAuthenticationEvent	1.3.6.1.4.1.1271.2.2.101.0.2			This notification is generated when a authenticator authentication event, as identified by the value of cienaCes8021xNotificationAuthenticationEvent has occurred on the port identified by cienaCes8021xPort.
NTF cienaCes8021xGlobalStateChangeEvent	1.3.6.1.4.1.1271.2.2.101.0.3			This notification is generated when the dot1x global state is changed.
NTF cienaCes8021xAuthConfigChangeEvent	1.3.6.1.4.1.1271.2.2.101.0.4			This notification is generated when a configuration change is made in a dot1x authentication port.
NTF cienaCes8021xSuppConfigChangeEvent	1.3.6.1.4.1.1271.2.2.101.0.5			This notification is generated when a configuration change is made in a dot1x supplicant port.

RFC description

Ciena 802.1X supplicant and authenticator MIB for port-based network access control on carrier ethernet platforms.

Start monitoring Ciena CES (Carrier Ethernet Switch) platforms with a free 30-day trial of IPNetwork Monitor. Import MIBs, browse SNMP OIDs, create custom SNMP monitors, configure alerts, and monitor any SNMP-enabled network device from a single console.

Download CIENA-CES-8021X-MIB

What Is CIENA-CES-8021X-MIB?

Supported Devices

Monitoring Examples

This MIB depends on

Related MIBs

RFC description