All MIBs › CIENA-CES-8021X-MIB › cienaCes8021xSuppMinimumTlsVersion
cienaCes8021xSuppMinimumTlsVersion
Module: CIENA-CES-8021X-MIB
OID (symbolic): CIENA-CES-8021X-MIB::cienaCes8021xSuppMinimumTlsVersion
OID (numeric): 1.3.6.1.4.1.1271.2.1.42.2.2.1.23
Node type: OBJECT-TYPE
Type: INTEGER
Access: read-write
Description: This object is used to specify the minimum TLS version that can be used by the supplicant port. Applies to EAP-TLS.
What is cienaCes8021xSuppMinimumTlsVersion?
This sets the floor below which the switch, as an EAP-TLS supplicant, will refuse to negotiate a TLS session with the upstream authentication server, preventing a downgrade to an older, weaker TLS version even if the server offers or prefers one. An admin raises this to version1dot2(3) specifically in security-hardened environments to close off known weaknesses in TLS 1.0 and 1.1, accepting the tradeoff that authentication will simply fail against any legacy authentication server that can't negotiate at least TLS 1.2. For example, an admin hardening supplicant configuration ahead of an internal security audit would set this to version1dot2(3), which would immediately reveal, via authentication failures, any upstream authentication server in the environment still stuck on an older TLS stack that needs its own upgrade.
Examples
Walk all instances (SNMPv2c):
snmpwalk -v2c -c public <target> 1.3.6.1.4.1.1271.2.1.42.2.2.1.23 snmpwalk -v2c -c public <target> CIENA-CES-8021X-MIB::cienaCes8021xSuppMinimumTlsVersion
Get a specific instance (index 1):
snmpget -v2c -c public <target> 1.3.6.1.4.1.1271.2.1.42.2.2.1.23.1 snmpget -v2c -c public <target> CIENA-CES-8021X-MIB::cienaCes8021xSuppMinimumTlsVersion.1
Set instance 1 (SNMPv2c):
snmpset -v2c -c private <target> 1.3.6.1.4.1.1271.2.1.42.2.2.1.23.1 i <value>
Start monitoring Ciena CES (Carrier Ethernet Switch) platforms with a free 30-day trial of IPNetwork Monitor. Create custom SNMP monitor using the CIENA-CES-8021X-MIB::cienaCes8021xSuppMinimumTlsVersion OID value, configure state conditions and alerts, and monitor any Ciena CES (Carrier Ethernet Switch) platforms from a single console.
OID Breakdown
Upper-level ancestors (9 from the standard OID tree / other modules)
| Numeric OID | Name | Module |
|---|---|---|
| 1 | iso | LANART-AGENT |
| 1.3 | org | AirPair-MIB |
| 1.3.6 | dod | AirPair-MIB |
| 1.3.6.1 | internet | AirPair-MIB |
| 1.3.6.1.4 | private | AirPair-MIB |
| 1.3.6.1.4.1 | enterprises | AirPair-MIB |
| 1.3.6.1.4.1.1271 | ciena | CIENA-SMI |
| 1.3.6.1.4.1.1271.2 | cienaCes | CIENA-SMI |
| 1.3.6.1.4.1.1271.2.1 | cienaCesConfig | CIENA-SMI |
| Numeric OID | Name | Module |
|---|---|---|
| 1.3.6.1.4.1.1271.2.1.42 | cienaCes8021xMIB | CIENA-CES-8021X-MIB |
| 1.3.6.1.4.1.1271.2.1.42.2 | cienaCes8021xObjs | CIENA-CES-8021X-MIB |
| 1.3.6.1.4.1.1271.2.1.42.2.2 | cienaCes8021xSuppTable | CIENA-CES-8021X-MIB |
| 1.3.6.1.4.1.1271.2.1.42.2.2.1 | cienaCes8021xSuppEntry | CIENA-CES-8021X-MIB |
| 1.3.6.1.4.1.1271.2.1.42.2.2.1.23 | cienaCes8021xSuppMinimumTlsVersion | CIENA-CES-8021X-MIB |