CISCO-MAC-AUTH-BYPASS-MIB

All MIBs › CISCO-MAC-AUTH-BYPASS-MIB

Organization: Cisco Systems Inc.

Last Updated: 2008-04-18

Category: Cisco Devices, RADIUS and AAA, VPN and Security

Description: Manages MAC Authentication Bypass configuration allowing non-802.1X devices to authenticate via MAC address.

Start monitoring vendor-neutral, standards-based MIB, any SNMPv3-capable network device (SNMP engine identity/boot/clock status) with a free 30-day trial of IPNetwork Monitor. Import MIBs, browse SNMP OIDs, create custom SNMP monitors, configure alerts, and monitor any SNMP-enabled network device from a single console.

What Is CISCO-MAC-AUTH-BYPASS-MIB?

The CISCO-MAC-AUTH-BYPASS-MIB manages and monitors MAC Authentication Bypass, a Cisco feature that grants non-802.1X-capable devices controlled network access authenticated solely by their MAC address, often used as part of Network Access Control posture assessment or as a VMPS replacement. It exposes per-interface MAB enablement/method configuration and a client table tracking each client's MAC address, session ID, MAB state, and authentication status. Administrators use it to monitor the software-level authentication status of connected endpoints, checking cmabClientAuthStatus and cmabClientMabState to confirm devices like printers or IP phones are being authenticated and granted access as expected, with notifications alerting on authentication state changes that could indicate a rogue device or failed authentication. It is a Cisco-specific complement to IEEE 802.1X authentication, working alongside it rather than replacing the underlying standard. It is deployed on Cisco switches in networks requiring NAC for legacy or non-802.1X devices such as printers, IP phones, and IoT devices. Network engineers evaluating or troubleshooting this functionality can download the CISCO-MAC-AUTH-BYPASS-MIB file directly to load it into their MIB browser.

IPNetwork Monitor allows you to monitor SNMP objects defined in CISCO-MAC-AUTH-BYPASS-MIB. Use the built-in SNMP Monitoring Browser to explore available variables, view their current values and descriptions, and select the objects you want to monitor. You can then create SNMP monitors, configure thresholds, and receive alerts when monitored values change.

Supported Devices

Cisco switch (access layer, supporting MAC Authentication Bypass)

Monitoring Examples

cmabIfConfigTable/Entry show cmabIfAuthEnabled and cmabIfAuthMethod per interface, confirming MAB is turned on for ports connecting non-802.1X devices. cmabClientInfoTable/Entry track each connected device by cmabClientMacAddress and cmabClientSessionId, with cmabClientMabState and cmabClientAuthStatus revealing whether a specific client successfully authenticated via MAC bypass; an admin seeing a client stuck in a pending or failed state can quickly identify an authentication server or endpoint misconfiguration.

What Can Be Monitored

per-interface MAB enable state
client authentication status
client MAB state
connected client MAC address and session ID
MAB state-change notifications

Imported Objects

From CISCO-SMI

ciscoMgmt

OBJECT-IDENTITY

From IF-MIB

ifIndex

OBJECT-TYPE

From SNMPv2-CONF

MODULE-COMPLIANCE
OBJECT-GROUP

From SNMPv2-SMI

MODULE-IDENTITY
OBJECT-TYPE

From SNMPv2-TC

MacAddress
TruthValue

OIDs

OID symbolic	OID numeric	Type	Access	Description
ciscoMabMIB	1.3.6.1.4.1.9.9.654			MIB module for monitoring and configuring MAC Authentication Bypass (MAB) feature in the system. MAC Auth Bypass feature provides controlled access to devices based on their MAC addresses. MAB allows non-dot1x compliant end devices controlled access to network and also provides a replacement technology for VLAN Management Policy Server (VMPS) environments. MAB is also an intergal part of the Network Access Control (NAC) program which enables network access for the clients and subsequently carry out a posture assessment of these clients. MAC Authentication Bypass feature provides a mechanism that uses the MAC address of the connecting device to grant or deny network access for it.
cmabNotification	1.3.6.1.4.1.9.9.654.0
cmabMIBObjects	1.3.6.1.4.1.9.9.654.1
cmabInterfaceConfig	1.3.6.1.4.1.9.9.654.1.1
cmabIfConfigTable	1.3.6.1.4.1.9.9.654.1.1.1		not-accessible	A list of interfaces which supports MAC Authentication Bypass.
cmabIfConfigEntry	1.3.6.1.4.1.9.9.654.1.1.1.1		not-accessible	Entry containing Mac Authentication Bypass configuration for a particular interface.
T/F cmabIfAuthEnabled	1.3.6.1.4.1.9.9.654.1.1.1.1.1	TruthValue	read-write	Specifies if MAC Authentication Bypass feature is enabled on the interface.
INT cmabIfAuthMethod	1.3.6.1.4.1.9.9.654.1.1.1.1.2	INTEGER	read-write	Specifies the authentication method used by MAC Authentication Bypass. radius(1) : communication with authentication server is performed via RADIUS messages. eap(2) : communication with authentication server is performed via EAP messages.
cmabSession	1.3.6.1.4.1.9.9.654.1.2
cmabClientInfoTable	1.3.6.1.4.1.9.9.654.1.2.1		not-accessible	A list of active MAC Authentication Bypass clients in the system. An entry exists for each MAC Authentication Bypass session in the system. An entry is deleted if the MAC Authentication Bypass session is removed from the system.
cmabClientInfoEntry	1.3.6.1.4.1.9.9.654.1.2.1.1		not-accessible	Entry containing management information of MAC Authentication Bypass for a particular session.
OCT cmabClientSessionId	1.3.6.1.4.1.9.9.654.1.2.1.1.1	OCTET STRING	not-accessible	A unique identifier of the MAC Authentication Bypass session.
MAC cmabClientMacAddress	1.3.6.1.4.1.9.9.654.1.2.1.1.2	MacAddress	read-only	The MAC address of the MAB client.
INT cmabClientMabState	1.3.6.1.4.1.9.9.654.1.2.1.1.3	INTEGER	read-only	Indicates the session state of the MAB state machine for the MAB client. other : None of the below. initialize : Initializing the authentication session. acquiring : Acquiring client's MAC address for the authentication process. authorizing: Authorization is in progress. terminate : Authorization is completed.
INT cmabClientAuthStatus	1.3.6.1.4.1.9.9.654.1.2.1.1.4	INTEGER	read-only	This object indicates whether the MAB client is authorized. authorized : the session is authorized. unauthorized: the session is not authorized.
cmabMIBConformance	1.3.6.1.4.1.9.9.654.2
cmabMIBCompliances	1.3.6.1.4.1.9.9.654.2.1
cmabCompliance	1.3.6.1.4.1.9.9.654.2.1.1			The compliance statement for entities which implement CISCO-MAB-MIB.
cmabMIBGroups	1.3.6.1.4.1.9.9.654.2.2
cmabIfConfigGroup	1.3.6.1.4.1.9.9.654.2.2.1			A collection of objects that provides per interface configuration of MAC Authentication Bypass feature.
cmabClientInfoGroup	1.3.6.1.4.1.9.9.654.2.2.2			A collection of objects that provides information of MAC Authentication Bypass sessions in the devices.

RFC description

Cisco MAC Authentication Bypass (MAB) feature MIB for monitoring and configuring MAC address-based network access control on switches.

Start monitoring Cisco switch (access layer, MAC Authentication Bypass) with a free 30-day trial of IPNetwork Monitor. Import MIBs, browse SNMP OIDs, create custom SNMP monitors, configure alerts, and monitor any SNMP-enabled network device from a single console.

Download CISCO-MAC-AUTH-BYPASS-MIB

What Is CISCO-MAC-AUTH-BYPASS-MIB?

Supported Devices

Monitoring Examples

What Can Be Monitored

This MIB depends on

Related MIBs

RFC description