CISCO-AUTH-FRAMEWORK-MIB

MIB Reference — IPNetwork Monitor · Updated September 14, 2026

All MIBsCISCO-AUTH-FRAMEWORK-MIB

Organization: Cisco Systems Inc.

Last Updated: 2013-08-23

Category: Cisco Devices, RADIUS and AAA, VPN and Security

Description: Manages Cisco 802.1X port-based authentication framework configuration and session state.

Start monitoring vendor-neutral, standards-based MIB, any SNMPv3-capable network device (SNMP engine identity/boot/clock status) with a free 30-day trial of IPNetwork Monitor. Import MIBs, browse SNMP OIDs, create custom SNMP monitors, configure alerts, and monitor any SNMP-enabled network device from a single console.

What Is CISCO-AUTH-FRAMEWORK-MIB?

CISCO-AUTH-FRAMEWORK-MIB is a Cisco enterprise MIB for the Authentication Framework (CAF) subsystem on Cisco switches, which provides generic configuration for 802.1X and other port-based authentication methods and manages failover ordering between them, part of the network access control/security technology area. It exposes registered authentication method priorities and execution order, per-port authentication configuration including controlled direction, MAC move mode, and behavior around Change-of-Authorization (CoA) commands like port bounce and port disable. For status monitoring, this MIB is centered on the software/control-plane state of the authentication process rather than physical hardware health: an operator can verify which authentication method is currently prioritized for a port, whether CoA-triggered port bounce/disable actions are being ignored (which could indicate a misconfigured NAC policy), and the recovery delay after AAA server non-response, which affects how quickly a port resumes normal authentication after an AAA outage. It explicitly depends on and complements IEEE 802.1X and Cisco's broader AAA/RADIUS framework MIBs for actual session and identity data. It is deployed on Cisco access switches implementing 802.1X/MAB/webauth network access control in enterprise and campus networks. Network engineers searching for cisco-auth-framework-mib specifically look this module up when auditing Cisco's unified 802.1X/MAB/web-auth session framework.

IPNetwork Monitor allows you to monitor SNMP objects defined in CISCO-AUTH-FRAMEWORK-MIB. Use the built-in SNMP Monitoring Browser to explore available variables, view their current values and descriptions, and select the objects you want to monitor. You can then create SNMP monitors, configure thresholds, and receive alerts when monitored values change.

Supported Devices

  • Cisco access/campus switch

Monitoring Examples

A security administrator would check cafPortConfigTable/cafPortConfigEntry to verify cafPortControlledDirection for a port matches policy, and review cafAuthMethodRegTable/cafAuthMethodRegEntry to confirm cafAuthMethodDefaultPriority and cafAuthMethodDefaultExecOrder reflect the intended 802.1X-then-MAB fallback sequence. If cafCoABouncePortCommandIgnoreEnabled or cafCoADisablePortCommandIgnoreEnabled is unexpectedly true, it would explain why a RADIUS CoA-triggered port bounce/disable is not taking effect, and cafAaaNoRespRecoveryDelay would be checked if ports are slow to recover after an AAA server outage.

What Can Be Monitored

  • authentication method priority/order
  • per-port authentication control direction
  • CoA port bounce/disable command handling
  • MAC move mode
  • AAA no-response recovery delay
Imported Objects

From CISCO-NAC-TC-MIB

CnnEouPostureTokenString

From CISCO-PRIVATE-VLAN-MIB

VlanIndexOrZero

From CISCO-SMI

ciscoMgmtOBJECT-IDENTITY

From IF-MIB

ifIndexOBJECT-TYPE
ifNameOBJECT-TYPE

From INET-ADDRESS-MIB

InetAddress
InetAddressType

From SNMP-FRAMEWORK-MIB

SnmpAdminString

From SNMPv2-CONF

MODULE-COMPLIANCE
NOTIFICATION-GROUP
OBJECT-GROUP

From SNMPv2-SMI

Integer32
MODULE-IDENTITY
NOTIFICATION-TYPE
OBJECT-TYPE
Unsigned32

From SNMPv2-TC

MacAddress
TEXTUAL-CONVENTION
TruthValue
OIDs

RFC description

Cisco authentication framework MIB for managing network access control, 802.1X, and authentication policies.

Start monitoring Cisco access/campus switches (802.1X auth framework) with a free 30-day trial of IPNetwork Monitor. Import MIBs, browse SNMP OIDs, create custom SNMP monitors, configure alerts, and monitor any SNMP-enabled network device from a single console.

Download CISCO-AUTH-FRAMEWORK-MIB