CISCO-PAE-MIB :: cpaeWebAuthHostState

MIB Reference — IPNetwork Monitor · Updated September 14, 2026

All MIBsCISCO-PAE-MIBcpaeWebAuthHostState

cpaeWebAuthHostState

Module: CISCO-PAE-MIB

OID (symbolic): CISCO-PAE-MIB::cpaeWebAuthHostState

OID (numeric): 1.3.6.1.4.1.9.9.220.1.9.8.1.5

Node type: OBJECT-TYPE

Type: INTEGER

Access: read-only

Description: Indicates the current state of the Web Proxy Authentication state machine.

initialize : Initial state of the Web Proxy Authentication state machine.

connecting : Login page is sent to the client, waiting for response from the client.

authenticating: Credentials are extracted from client's response and authenticating with the AAA server.

authenticated : Web Proxy Authentication succeeded. Session timer is started, policies are applied, and success page is sent back to client.

authFailed : Web Proxy Authentication failed. Login page is resent with authentication failure information embedded, if retry count has not exceeded the maximum number of retry attempts. Otherwise, move to 'blackListed' state.

parseError : Failed to extract user's credentials from the client's response.

sessionTimeout: Session timer expired, user's policies are removed, state machine will moves to 'initialize' state after that.

blackListed : Web Proxy Authentication retry count has exceeded the maximum number of retry attempts. Only setting the state machine to 'initialize' will take it out of this state.

aaaFail : AAA server is not reachable after sending the authentication request, or after host has been in 'blackListed' state for the period of time specified by cpaeWebAuthQuietPeriod, with IAB (Inaccessible Authentication Bypass) enabled on the corresponding port connected to the host.

What is cpaeWebAuthHostState?

This read-only value reports the current state of a host's Web Proxy Authentication state machine, such as initializing or awaiting a client response to the login page.

Examples

Walk all instances (SNMPv2c):

snmpwalk -v2c -c public <target> 1.3.6.1.4.1.9.9.220.1.9.8.1.5
snmpwalk -v2c -c public <target> CISCO-PAE-MIB::cpaeWebAuthHostState

Get a specific instance (index 1):

snmpget -v2c -c public <target> 1.3.6.1.4.1.9.9.220.1.9.8.1.5.1
snmpget -v2c -c public <target> CISCO-PAE-MIB::cpaeWebAuthHostState.1

Start monitoring Cisco Catalyst switches / access-layer platforms (802.1X) with a free 30-day trial of IPNetwork Monitor. Create custom SNMP monitor using the CISCO-PAE-MIB::cpaeWebAuthHostState OID value, configure state conditions and alerts, and monitor any Cisco Catalyst switches / access-layer platforms (802.1X) from a single console.

OID Breakdown

Upper-level ancestors (8 from the standard OID tree / other modules)
Numeric OIDNameModule
1isoLANART-AGENT
1.3orgAirPair-MIB
1.3.6dodAirPair-MIB
1.3.6.1internetAirPair-MIB
1.3.6.1.4privateAirPair-MIB
1.3.6.1.4.1enterprisesAirPair-MIB
1.3.6.1.4.1.9ciscoCAT2600-MIB
1.3.6.1.4.1.9.9ciscoMgmtCISCO-SMI
Numeric OIDNameModule
1.3.6.1.4.1.9.9.220ciscoPaeMIBCISCO-PAE-MIB
1.3.6.1.4.1.9.9.220.1cpaeMIBObjectCISCO-PAE-MIB
1.3.6.1.4.1.9.9.220.1.9cpaeWebAuthCISCO-PAE-MIB
1.3.6.1.4.1.9.9.220.1.9.8cpaeWebAuthHostTableCISCO-PAE-MIB
1.3.6.1.4.1.9.9.220.1.9.8.1cpaeWebAuthHostEntryCISCO-PAE-MIB
1.3.6.1.4.1.9.9.220.1.9.8.1.5cpaeWebAuthHostStateCISCO-PAE-MIB