DLINK-3100-DOT1X-MIB

All MIBs › DLINK-3100-DOT1X-MIB

Organization: Dlink, Inc. Dlink Semiconductor, Inc.

Last Updated: 2007-01-02

Category: Domain: Security, Protocol: 802.1X, Standard: IEEE 802, Vendor: D-Link

Description: D-Link 3100 802.1X MIB providing objects for port-based network access control configuration and authentication status.

Start monitoring vendor-neutral, standards-based MIB, any SNMPv3-capable network device (SNMP engine identity/boot/clock status) with a free 30-day trial of IPNetwork Monitor. Import MIBs, browse SNMP OIDs, create custom SNMP monitors, configure alerts, and monitor any SNMP-enabled network device from a single console.

What Is DLINK-3100-DOT1X-MIB?

DLINK-3100-DOT1X-MIB is a D-Link proprietary MIB module for the DES/DGS-3100 switch series, providing configuration and status objects for IEEE 802.1X port-based network access control beyond what the standard 802.1X MIB defines. It exposes per-session authentication statistics, guest-VLAN and unauthenticated-VLAN configuration, and per-user VLAN assignment support for ports running 802.1X. This is primarily a software/security-status monitoring MIB: administrators track per-port authentication session statistics and the authentication method used, and check guest/unauthenticated VLAN assignment to confirm unauthenticated clients are being properly quarantined rather than granted full network access. It extends the base IEEE 802.1X port-access-control model, likely importing from a companion standard dot1x MIB, with D-Link-specific guest-VLAN and user-based VLAN features. It is typically deployed on D-Link DES-3100/DGS-3100 series managed switches in enterprise or campus networks using 802.1X for port security. Engineers can download the DLINK-3100-DOT1X-MIB file directly to load it into their MIB browser.

IPNetwork Monitor allows you to monitor SNMP objects defined in DLINK-3100-DOT1X-MIB. Use the built-in SNMP Monitoring Browser to explore available variables, view their current values and descriptions, and select the objects you want to monitor. You can then create SNMP monitors, configure thresholds, and receive alerts when monitored values change.

Supported Devices

D-Link DES-3100/DGS-3100 series managed switches

Monitoring Examples

An administrator would poll rldot1xExtAuthSessionStatsTable/rldot1xExtAuthSessionStatsEntry to review per-port authentication session counts and check rlDot1xAuthSessionAuthenticMethod to confirm which authentication method, such as RADIUS EAP, a client used. rldot1xGuestVlanVID and rldot1xGuestVlanPorts would be checked to verify unauthenticated devices are landing in the correct guest VLAN rather than the production network. rldot1xUnAuthenticatedVlanTable/Entry with rldot1xUnAuthenticatedVlanStatus reveals whether the unauthenticated-VLAN feature is active on a given port, useful when troubleshooting why a non-802.1X-capable device can or cannot reach the network.

What Can Be Monitored

per-port 802.1X authentication session statistics
authentication method used
guest VLAN assignment/status
unauthenticated VLAN configuration and status
user-based VLAN support

Imported Objects

From BRIDGE-MIB

MacAddress

From DLINK-3100-MIB

rnd	MODULE-IDENTITY

From IEEE8021-PAE-MIB

PaeControlledPortStatus
dot1xAuthSessionStatsEntry	OBJECT-TYPE
dot1xPaePortNumber	OBJECT-TYPE

From Q-BRIDGE-MIB

PortList
VlanIndex
dot1qFdbId	OBJECT-TYPE

From SNMP-FRAMEWORK-MIB

SnmpAdminString

From SNMPv2-SMI

Counter32
Counter64
MODULE-IDENTITY
OBJECT-TYPE
TimeTicks

From SNMPv2-TC

RowStatus
TruthValue

How to Use in IPNetwork Monitor

Example using rldot1xAuthMultiEapolFramesRx OID:

Select a D-Link 3100 series switch (DES/DGS-3100), 802.1X port access control as the target host to create a monitor — the SNMP service should be up and running on it. Click New Monitor, then check SNMP Custom on the Favorites tab, click Next, and confirm the host. On the next page, click Select... to open the built-in SNMP MIB Browser and type rldot1xAuthMultiEapolFramesRx into the Find box to locate it in the OID tree, selecting the specific row/instance you want to monitor since this is a table column, then select it and click OK. The number of valid EAPOL frames of any type that have been received by this Authenticator. On the monitor's Main parameters page you can set the target's SNMP port (default 161), credentials, polling interval, and other settings — see the SNMP Monitor help for details. On the State conditions and Alerting tabs, configure when the monitor should change state and trigger an alert; since this is a Counter32-type OID, Value bounds is the most useful condition here — trigger an alert if the counter increases sharply between polls relative to its normal baseline, since an unexpected spike often reflects a real change in traffic or activity. Click Finish to create the monitor; you can adjust any parameter later.

OIDs

OID symbolic	OID numeric	Type	Access	Description
rldot1x	1.3.6.1.4.1.171.10.94.89.89.95			This private MIB module defines dot1x private MIBs.
INT rldot1xMibVersion	1.3.6.1.4.1.171.10.94.89.89.95.1	INTEGER	read-only	MIB's version, the current version is 1.
rldot1xExtAuthSessionStatsTable	1.3.6.1.4.1.171.10.94.89.89.95.2		not-accessible	A table that contains the session statistics objects for the Authenticator PAE associated with each Port. An entry appears in this table for each port that may authenticate access to itself.
rldot1xExtAuthSessionStatsEntry	1.3.6.1.4.1.171.10.94.89.89.95.2.1		not-accessible	The session statistics information for an Authenticator PAE. This shows the current values being collected for each session that is still in progress, or the final values for the last valid session on each port where there is no session currently active.
INT rlDot1xAuthSessionAuthenticMethod	1.3.6.1.4.1.171.10.94.89.89.95.2.1.1	INTEGER	read-only	The authentication method used to establish the session.
T/F rldot1xGuestVlanSupported	1.3.6.1.4.1.171.10.94.89.89.95.3	TruthValue	read-only	indicate if guest vlan is supported.
VLA rldot1xGuestVlanVID	1.3.6.1.4.1.171.10.94.89.89.95.4	VlanIndex	read-write	specify the guest vlan tag , 0 for non exiting.
POR rldot1xGuestVlanPorts	1.3.6.1.4.1.171.10.94.89.89.95.5	PortList	read-write	the ports that can be members in the guest vlan
T/F rldot1xUnAuthenticatedVlanSupported	1.3.6.1.4.1.171.10.94.89.89.95.6	TruthValue	read-only	indicate if unauthenticated Vlan is supported.
rldot1xUnAuthenticatedVlanTable	1.3.6.1.4.1.171.10.94.89.89.95.7		not-accessible	port belong to vlan in all port authenticated state except force unauthenticated table
rldot1xUnAuthenticatedVlanEntry	1.3.6.1.4.1.171.10.94.89.89.95.7.1		not-accessible	port belong to vlan in all port authenticated state except force unauthenticated entry
ROW rldot1xUnAuthenticatedVlanStatus	1.3.6.1.4.1.171.10.94.89.89.95.7.1.1	RowStatus	read-create	The row status variable, used according to row installation and removal conventions.
T/F rldot1xUserBasedVlanSupported	1.3.6.1.4.1.171.10.94.89.89.95.8	TruthValue	read-only	indicate if user based Vlan is supported.
POR rldot1xUserBasedVlanPorts	1.3.6.1.4.1.171.10.94.89.89.95.9	PortList	read-write	the ports that can be members in the user based vlan
rldot1xAuthenticationPortTable	1.3.6.1.4.1.171.10.94.89.89.95.10		not-accessible	A table of system level information for each port supported by the Port Access Entity. An entry appears in this table for each port of this system.
rldot1xAuthenticationPortEntry	1.3.6.1.4.1.171.10.94.89.89.95.10.1		not-accessible	The Port number and mac method
INT rldot1xAuthenticationPortMethod	1.3.6.1.4.1.171.10.94.89.89.95.10.1.1	INTEGER	read-write	The value of the mac based authenication.
T/F rldot1xRadiusAttrVlanIdEnabled	1.3.6.1.4.1.171.10.94.89.89.95.10.1.2	TruthValue	read-write	Defines if treat VLAN ID that received from Radius attributes in Radius-Accept message.
T/F rldot1xRadiusAttAclNameEnabled	1.3.6.1.4.1.171.10.94.89.89.95.10.1.3	TruthValue	read-write	Defines if treat ACL Name that received from Radius attributes in Radius-Accept message.
rldot1xAuthMultiStatsTable	1.3.6.1.4.1.171.10.94.89.89.95.11		not-accessible	A table that contains the statistics objects for the Authenticator PAE associated with each Port and MAC for multisession 802.1x mode of operation. An entry appears in this table for each port and MAC that have an authentication session currently running under way for them.
rldot1xAuthMultiStatsEntry	1.3.6.1.4.1.171.10.94.89.89.95.11.1		not-accessible	The statistics information for an Authenticator PAE.
INT rldot1xAuthMultiStatsPortNumber	1.3.6.1.4.1.171.10.94.89.89.95.11.1.1	INTEGER	read-only	Port Number.
MAC rldot1xAuthMultiStatsSourceMac	1.3.6.1.4.1.171.10.94.89.89.95.11.1.2	MacAddress	read-only	Mac of the authentication session.
C32 rldot1xAuthMultiEapolFramesRxEx	1.3.6.1.4.1.171.10.94.89.89.95.11.1.3	Counter32	read-only	The number of valid EAPOL frames of any type that have been received by this Authenticator.
C32 rldot1xAuthMultiEapolFramesTx	1.3.6.1.4.1.171.10.94.89.89.95.11.1.4	Counter32	read-only	The number of EAPOL frames of any type that have been transmitted by this Authenticator.
C32 rldot1xAuthMultiEapolStartFramesRx	1.3.6.1.4.1.171.10.94.89.89.95.11.1.5	Counter32	read-only	The number of EAPOL Start frames that have been received by this Authenticator.
C32 rldot1xAuthMultiEapolLogoffFramesRx	1.3.6.1.4.1.171.10.94.89.89.95.11.1.6	Counter32	read-only	The number of EAPOL Logoff frames that have been received by this Authenticator.
C32 rldot1xAuthMultiEapolRespIdFramesRx	1.3.6.1.4.1.171.10.94.89.89.95.11.1.7	Counter32	read-only	The number of EAP Resp/Id frames that have been received by this Authenticator.
C32 rldot1xAuthMultiEapolRespFramesRx	1.3.6.1.4.1.171.10.94.89.89.95.11.1.8	Counter32	read-only	The number of valid EAP Response frames (other than Resp/Id frames) that have been received by this Authenticator.
C32 rldot1xAuthMultiEapolReqIdFramesTx	1.3.6.1.4.1.171.10.94.89.89.95.11.1.9	Counter32	read-only	The number of EAP Req/Id frames that have been transmitted by this Authenticator.
C32 rldot1xAuthMultiEapolReqFramesTx	1.3.6.1.4.1.171.10.94.89.89.95.11.1.10	Counter32	read-only	The number of EAP Request frames (other than Rq/Id frames) that have been transmitted by this Authenticator.
C32 rldot1xAuthMultiInvalidEapolFramesRx	1.3.6.1.4.1.171.10.94.89.89.95.11.1.11	Counter32	read-only	The number of EAPOL frames that have been received by this Authenticator in which the frame type is not recognized.
C32 rldot1xAuthMultiEapLengthErrorFramesRx	1.3.6.1.4.1.171.10.94.89.89.95.11.1.12	Counter32	read-only	The number of EAPOL frames that have been received by this Authenticator in which the Packet Body Length field is invalid.
rldot1xAuthMultiDiagTable	1.3.6.1.4.1.171.10.94.89.89.95.12		not-accessible	A table that contains the diagnostics objects for the Authenticator PAE associated with each Port and MAC. An entry appears in this table for each port and MAC that have an authentication session currently running under way for them.
rldot1xAuthMultiDiagEntry	1.3.6.1.4.1.171.10.94.89.89.95.12.1		not-accessible	The diagnostics information for an Authenticator PAE.
INT rldot1xAuthMultiDiagPortNumber	1.3.6.1.4.1.171.10.94.89.89.95.12.1.1	INTEGER	read-only	Port Number.
MAC rldot1xAuthMultiDiagSourceMac	1.3.6.1.4.1.171.10.94.89.89.95.12.1.2	MacAddress	read-only	Mac of the authentication session.
C32 rldot1xAuthMultiEntersConnecting	1.3.6.1.4.1.171.10.94.89.89.95.12.1.3	Counter32	read-only	Counts the number of times that the state machine transitions to the CONNECTING state from any other state.
C32 rldot1xAuthMultiEntersAuthenticating	1.3.6.1.4.1.171.10.94.89.89.95.12.1.4	Counter32	read-only	Counts the number of times that the state machine transitions from CONNECTING to AUTHENTICATING, as a result of an EAP-Response/Identity message being received from the Supplicant.
C32 rldot1xAuthMultiAuthSuccessWhileAuthenticating	1.3.6.1.4.1.171.10.94.89.89.95.12.1.5	Counter32	read-only	Counts the number of times that the state machine transitions from AUTHENTICATING to AUTHENTICATED, as a result of the Backend Authentication state machine indicating successful authentication of the Supplicant (authSuccess = TRUE).
C32 rldot1xAuthMultiAuthFailWhileAuthenticating	1.3.6.1.4.1.171.10.94.89.89.95.12.1.6	Counter32	read-only	Counts the number of times that the state machine transitions from AUTHENTICATING to HELD, as a result of the Backend Authentication state machine indicating authentication failure (authFail = TRUE).
C32 rldot1xAuthMultiAuthReauthsWhileAuthenticating	1.3.6.1.4.1.171.10.94.89.89.95.12.1.7	Counter32	read-only	Counts the number of times that the state machine transitions from AUTHENTICATING to ABORTING, as a result of a reauthentication request (reAuthenticate = TRUE).
C32 rldot1xAuthMultiAuthEapStartsWhileAuthenticating	1.3.6.1.4.1.171.10.94.89.89.95.12.1.8	Counter32	read-only	Counts the number of times that the state machine transitions from AUTHENTICATING to ABORTING, as a result of an EAPOL-Start message being received from the Supplicant.
C32 rldot1xAuthMultiAuthReauthsWhileAuthenticated	1.3.6.1.4.1.171.10.94.89.89.95.12.1.9	Counter32	read-only	Counts the number of times that the state machine transitions from AUTHENTICATED to CONNECTING, as a result of a reauthentication request (reAuthenticate = TRUE).
C32 rldot1xAuthMultiAuthEapStartsWhileAuthenticated	1.3.6.1.4.1.171.10.94.89.89.95.12.1.10	Counter32	read-only	Counts the number of times that the state machine transitions from AUTHENTICATED to CONNECTING, as a result of an EAPOL-Start message being received from the Supplicant.
C32 rldot1xAuthMultiBackendResponses	1.3.6.1.4.1.171.10.94.89.89.95.12.1.11	Counter32	read-only	Counts the number of times that the state machine sends an initial Access-Request packet to the Authentication server (i.e., executes sendRespToServer on entry to the RESPONSE state). Indicates that the Authenticator attempted communication with the Authentication Server.
C32 rldot1xAuthMultiBackendAccessChallenges	1.3.6.1.4.1.171.10.94.89.89.95.12.1.12	Counter32	read-only	Counts the number of times that the state machine receives an initial Access-Challenge packet from the Authentication server (i.e., aReq becomes TRUE, causing exit from the RESPONSE state). Indicates that the Authentication Server has communication with the Authenticator.
C32 rldot1xAuthMultiBackendOtherRequestsToSupplicant	1.3.6.1.4.1.171.10.94.89.89.95.12.1.13	Counter32	read-only	Counts the number of times that the state machine sends an EAP-Request packet (other than an Identity, Notification, Failure or Success message) to the Supplicant (i.e., executes txReq on entry to the REQUEST state). Indicates that the Authenticator chose an EAP-method.
C32 rldot1xAuthMultiBackendNonNakResponsesFromSupplicant	1.3.6.1.4.1.171.10.94.89.89.95.12.1.14	Counter32	read-only	Counts the number of times that the state machine receives a response from the Supplicant to an initial EAP-Request, and the response is something other than EAP-NAK (i.e., rxResp becomes TRUE, causing the state machine to transition from REQUEST to RESPONSE, and the response is not an EAP-NAK). Indicates that the Supplicant can respond to the Authenticators chosen EAP-method.
C32 rldot1xAuthMultiBackendAuthSuccesses	1.3.6.1.4.1.171.10.94.89.89.95.12.1.15	Counter32	read-only	Counts the number of times that the state machine receives an EAP-Success message from the Authentication Server (i.e., aSuccess becomes TRUE, causing a transition from RESPONSE to SUCCESS). Indicates that the Supplicant has successfully authenticated to the Authentication Server.
rldot1xAuthMultiSessionStatsTable	1.3.6.1.4.1.171.10.94.89.89.95.13		not-accessible	A table that contains the session statistics objects for the Authenticator PAE associated with each Port. An entry appears in this table for each port that may authenticate access to itself.
rldot1xAuthMultiSessionStatsEntry	1.3.6.1.4.1.171.10.94.89.89.95.13.1		not-accessible	The session statistics information for an Authenticator PAE. This shows the current values being collected for each session that is still in progress, or the final values for the last valid session on each port where there is no session currently active.
INT rldot1xAuthMultiSessionStatsPortNumber	1.3.6.1.4.1.171.10.94.89.89.95.13.1.1	INTEGER	read-only	Port Number.
MAC rldot1xAuthMultiSessionStatsSourceMac	1.3.6.1.4.1.171.10.94.89.89.95.13.1.2	MacAddress	read-only	Mac of the authentication session.
C64 rldot1xAuthMultiSessionOctetsRx	1.3.6.1.4.1.171.10.94.89.89.95.13.1.3	Counter64	read-only	The number of octets received in user data frames on this Port during the session.
C64 rldot1xAuthMultiSessionOctetsTx	1.3.6.1.4.1.171.10.94.89.89.95.13.1.4	Counter64	read-only	The number of octets transmitted in user data frames on this Port during the session.
C32 rldot1xAuthMultiSessionFramesRx	1.3.6.1.4.1.171.10.94.89.89.95.13.1.5	Counter32	read-only	The number of user data frames received on this Port during the session.
C32 rldot1xAuthMultiSessionFramesTx	1.3.6.1.4.1.171.10.94.89.89.95.13.1.6	Counter32	read-only	The number of user data frames transmitted on this Port during the session.
STR rldot1xAuthMultiSessionId	1.3.6.1.4.1.171.10.94.89.89.95.13.1.7	SnmpAdminString	read-only	A unique identifier for the session, in the form of a printable ASCII string of at least three characters.
TIK rldot1xAuthMultiSessionTime	1.3.6.1.4.1.171.10.94.89.89.95.13.1.8	TimeTicks	read-only	The duration of the session in seconds.
STR rldot1xAuthMultiSessionUserName	1.3.6.1.4.1.171.10.94.89.89.95.13.1.9	SnmpAdminString	read-only	The User-Name representing the identity of the Supplicant PAE.
INT rldot1xAuthMultiSessionRadiusAttrVlan	1.3.6.1.4.1.171.10.94.89.89.95.13.1.10	INTEGER	read-only	VLAN ID that received from Radius attributes.
STR rldot1xAuthMultiSessionRadiusAttrFilterId	1.3.6.1.4.1.171.10.94.89.89.95.13.1.11	SnmpAdminString	read-only	Filter ID that received from Radius attributes.
rldot1xAuthMultiConfigTable	1.3.6.1.4.1.171.10.94.89.89.95.14		not-accessible	A table that contains the configuration objects for the Authenticator PAE associated with each port and MAC. An entry appears in this table for each port and MAC that may authenticate access to itself.
rldot1xAuthMultiConfigEntry	1.3.6.1.4.1.171.10.94.89.89.95.14.1		not-accessible	The configuration information for an Authenticator PAE.
INT rldot1xAuthMultiPortNumber	1.3.6.1.4.1.171.10.94.89.89.95.14.1.1	INTEGER	read-only	Port Number.
MAC rldot1xAuthMultiSourceMac	1.3.6.1.4.1.171.10.94.89.89.95.14.1.2	MacAddress	read-only	Mac of the authentication session.
INT rldot1xAuthMultiPaeState	1.3.6.1.4.1.171.10.94.89.89.95.14.1.3	INTEGER	read-only	The current value of the Authenticator PAE state machine.
INT rldot1xAuthMultiBackendAuthState	1.3.6.1.4.1.171.10.94.89.89.95.14.1.4	INTEGER	read-only	The current state of the Backend Authentication state machine.
PAE rldot1xAuthMultiControlledPortStatus	1.3.6.1.4.1.171.10.94.89.89.95.14.1.5	PaeControlledPortStatus	read-only	The current value of the controlled Port status parameter for the Port.
T/F rldot1xBpduFilteringEnabled	1.3.6.1.4.1.171.10.94.89.89.95.15	TruthValue	read-write	Specify that when 802.1x is globally disabled, 802.1x BPDU packets would be filtered or bridged.
T/F rldot1xRadiusAttributesErrorsAclReject	1.3.6.1.4.1.171.10.94.89.89.95.18	TruthValue	read-write	Specify ACL error handling for the Radius attributes feature.
INT rldot1xGuestVlanTimeInterval	1.3.6.1.4.1.171.10.94.89.89.95.19	INTEGER	read-write	indicate the guest vlan timeout interval.
T/F rldot1xMacAuthSuccessTrapEnabled	1.3.6.1.4.1.171.10.94.89.89.95.20	TruthValue	read-write	Specify if sending traps when a MAC address is successfully authenticated by the 802.1X mac-authentication access control.
T/F rldot1xMacAuthFailureTrapEnabled	1.3.6.1.4.1.171.10.94.89.89.95.21	TruthValue	read-write	Specify if sending traps when MAC address was failed in authentication of the 802.1X MAC authentication access control.
rldot1xLegacyPortTable	1.3.6.1.4.1.171.10.94.89.89.95.22		not-accessible	A table of system level information for each port supported by the Port Access Entity. An entry appears in this table for each port of this system.
rldot1xLegacyPortEntry	1.3.6.1.4.1.171.10.94.89.89.95.22.1		not-accessible	The Port number and leagcy mode
T/F rldot1xLegacyPortModeEnabled	1.3.6.1.4.1.171.10.94.89.89.95.22.1.1	TruthValue	read-write	Indicates whether in multiple sessions mode work according to legacy devices mode or not.

RFC description

D-Link specific MIB for the DGS-3100 series managed switches that defines 802.1X (dot1x) authentication and access control objects for network security management.

Start monitoring D-Link 3100 series switch (DES/DGS-3100), 802.1X port access control with a free 30-day trial of IPNetwork Monitor. Import MIBs, browse SNMP OIDs, create custom SNMP monitors, configure alerts, and monitor any SNMP-enabled network device from a single console.

Download DLINK-3100-DOT1X-MIB