DLINKSW-DOT1X-EXT-MIB

All MIBs › DLINKSW-DOT1X-EXT-MIB

Organization: D-Link Corp.

Last Updated: 2013-07-19

Description: D-Link switch MIB extending IEEE 802.1X port-based access control with vendor-specific session, VLAN assignment, and guest-VLAN objects not covered by the standard PAE-MIB

Start monitoring vendor-neutral, standards-based MIB, any SNMPv3-capable network device (SNMP engine identity/boot/clock status) with a free 30-day trial of IPNetwork Monitor. Import MIBs, browse SNMP OIDs, create custom SNMP monitors, configure alerts, and monitor any SNMP-enabled network device from a single console.

What Is DLINKSW-DOT1X-EXT-MIB?

DLINKSW-DOT1X-EXT-MIB is a D-Link switch MIB extending standard IEEE 802.1X port-based network access control (as defined in the standard IEEE8021-PAE-MIB) with vendor-specific objects for D-Link managed switches. It exposes 802.1X extensions such as per-session details, dynamic VLAN assignment, and guest-VLAN configuration not covered by the base standard. It is used to monitor the software-level status of network access control — active 802.1X sessions, which VLAN a supplicant was assigned, and guest-VLAN fallback state — useful for detecting authentication failures or unexpected guest-VLAN placement rather than any hardware fault. It explicitly extends the standard IEEE8021-PAE-MIB, so it must be interpreted together with that base standard MIB. It is deployed on D-Link enterprise/campus switches implementing 802.1X port authentication with dynamic VLAN assignment, for example in BYOD or guest-access network designs, and administrators can download the DLINKSW-DOT1X-EXT-MIB file to load it into their MIB browser for reference.

IPNetwork Monitor allows you to monitor SNMP objects defined in DLINKSW-DOT1X-EXT-MIB. Use the built-in SNMP Monitoring Browser to explore available variables, view their current values and descriptions, and select the objects you want to monitor. You can then create SNMP monitors, configure thresholds, and receive alerts when monitored values change.

Supported Devices

D-Link managed Ethernet switches

Monitoring Examples

No object or table names were included in the source excerpt, so a concrete polling example can't be grounded in real identifiers. Based on the short description, an admin would typically poll per-session 802.1X extension objects to confirm the VLAN a device was dynamically assigned after authentication, or to check whether a port fell back to the guest VLAN due to authentication failure.

What Can Be Monitored

802.1X session VLAN assignment
guest VLAN fallback state
port authentication session details

Imported Objects

From DLINK-ID-REC-MIB

dlinkIndustrialCommon

OBJECT-IDENTITY

From DLINKSW-NETWORK-ACCESS-MIB

dnaSessionAuthUserName	OBJECT-TYPE
dnaSessionAuthVlan	OBJECT-TYPE
dnaSessionClientMacAddress	OBJECT-TYPE

From IF-MIB

InterfaceIndex
InterfaceIndexOrZero
ifIndex	OBJECT-TYPE

From Q-BRIDGE-MIB

VlanId

From SNMP-FRAMEWORK-MIB

SnmpAdminString

From SNMPv2-CONF

MODULE-COMPLIANCE
NOTIFICATION-GROUP
OBJECT-GROUP

From SNMPv2-SMI

Counter32
Counter64
MODULE-IDENTITY
OBJECT-TYPE
TimeTicks
Unsigned32

From SNMPv2-TC

DisplayString
MacAddress
TruthValue

How to Use in IPNetwork Monitor

Example using dDot1xExtAuthEapolFramesRx OID:

Select a D-Link managed switch (802.1X extensions: dynamic/guest VLAN) as the target host to create a monitor — the SNMP service should be up and running on it. Click New Monitor, then check SNMP Custom on the Favorites tab, click Next, and confirm the host. On the next page, click Select... to open the built-in SNMP MIB Browser and type dDot1xExtAuthEapolFramesRx into the Find box to locate it in the OID tree, selecting the specific row/instance you want to monitor since this is a table column, then select it and click OK. The number of valid EAPOL frames of any type that have been received by this Authenticator. On the monitor's Main parameters page you can set the target's SNMP port (default 161), credentials, polling interval, and other settings — see the SNMP Monitor help for details. On the State conditions and Alerting tabs, configure when the monitor should change state and trigger an alert; since this is a Counter32-type OID, Value bounds is the most useful condition here — trigger an alert if the counter increases sharply between polls relative to its normal baseline, since an unexpected spike often reflects a real change in traffic or activity. Click Finish to create the monitor; you can adjust any parameter later.

OIDs

OID symbolic	OID numeric	Type	Access	Description
dlinkSwDot1xExtMIB	1.3.6.1.4.1.171.26.30			This MIB module defines objects for managing IEEE 802.1X extensions which cannot be covered by standard MIB (IEEE8021-PAE-MIB).
dDot1xExtMIBNotifications	1.3.6.1.4.1.171.26.30.0
NTF dDot1xExtLoggedSuccess	1.3.6.1.4.1.171.26.30.0.1			The trap is sent when a host has successfully logged in (passed 802.1X authentication).
NTF dDot1xExtLoggedFail	1.3.6.1.4.1.171.26.30.0.2			The trap is sent when a host failed to pass 802.1X authenitcation (login failed).
dDot1xExtMIBObjects	1.3.6.1.4.1.171.26.30.1
dDot1xExtGenCtrl	1.3.6.1.4.1.171.26.30.1.1
NUM dDot1xExtClearCounterByIf	1.3.6.1.4.1.171.26.30.1.1.1	InterfaceIndexOrZero	read-write	This object indicates the ifIndex of the interface on which 802.1X authentication and session statistics will be cleared. When read, a value of 0 is returned.
MAC dDot1xExtInitByMacAddr	1.3.6.1.4.1.171.26.30.1.1.2	MacAddress	read-write	This object specifies a MAC address which will be initialized. When read, a value of '000000000000'H is returned.
MAC dDot1xExtReAuthByMacAddr	1.3.6.1.4.1.171.26.30.1.1.3	MacAddress	read-write	This object specifies a MAC address which will be re-authenticated. When read, a value of '000000000000'H is returned.
T/F dDot1xExtNotifEnabled	1.3.6.1.4.1.171.26.30.1.1.4	TruthValue	read-write	Setting to 'true' to enable global SNMP notification for 802.1X authentication feature. Setting the object to 'false' will disable SNMP notifications.
dDot1xExtPortMgmt	1.3.6.1.4.1.171.26.30.1.2
dDot1xExtPaePortTable	1.3.6.1.4.1.171.26.30.1.2.1		not-accessible	A table contains a list of port-specific information for the 802.1X extensions.
dDot1xExtPaePortEntry	1.3.6.1.4.1.171.26.30.1.2.1.1		not-accessible	An entry in dDot1xExtPaePortTable indicates per port 802.1X extensions information which is not covered by IEEE8021-PAE-MIB.
NUM dDot1xExtPaePortNumber	1.3.6.1.4.1.171.26.30.1.2.1.1.1	InterfaceIndex	not-accessible	This object indicates the ifIndex of the port.
T/F dDot1xExtPaePortEnabled	1.3.6.1.4.1.171.26.30.1.2.1.1.2	TruthValue	read-create	This object is used to enable/disable IEEE 802.1X port access entity (PAE) authenticator.
T/F dDot1xExtPaePortForwardPdu	1.3.6.1.4.1.171.26.30.1.2.1.1.3	TruthValue	read-create	This object is used to enable/disable forwarding of IEEE 802.1X PDU. 'true' indicates the forwarding of 802.1X PDU is enabled. 'false' indicates the forwarding of 802.1X PDU is disabled.
dDot1xExtAuthStatsTable	1.3.6.1.4.1.171.26.30.1.3		not-accessible	A table that contains the statistics objects for the Authenticator PAE associated with each Port/MAC/VLAN (for multi-auth mode).
dDot1xExtAuthStatsEntry	1.3.6.1.4.1.171.26.30.1.3.1		not-accessible	The statistics information for an Authenticator PAE, including multi-auth mode.
MAC dDot1xExtAuthStatsMacAddr	1.3.6.1.4.1.171.26.30.1.3.1.1	MacAddress	not-accessible	This object indicates the MAC address of the entry.
VLA dDot1xExtAuthStatsVlanId	1.3.6.1.4.1.171.26.30.1.3.1.2	VlanId	not-accessible	This object indicates the VLAN ID of the entry.
C32 dDot1xExtAuthEapolFramesRxEx	1.3.6.1.4.1.171.26.30.1.3.1.3	Counter32	read-only	The number of valid EAPOL frames of any type that have been received by this Authenticator.
C32 dDot1xExtAuthEapolFramesTx	1.3.6.1.4.1.171.26.30.1.3.1.4	Counter32	read-only	The number of EAPOL frames of any type that have been transmitted by this Authenticator.
C32 dDot1xExtAuthEapolStartFramesRx	1.3.6.1.4.1.171.26.30.1.3.1.5	Counter32	read-only	The number of EAPOL Start frames that have been received by this Authenticator.
C32 dDot1xExtAuthEapolLogoffFramesRx	1.3.6.1.4.1.171.26.30.1.3.1.6	Counter32	read-only	The number of EAPOL Logoff frames that have been received by this Authenticator.
C32 dDot1xExtAuthEapolRespIdFramesRx	1.3.6.1.4.1.171.26.30.1.3.1.7	Counter32	read-only	The number of EAP Resp/Id frames that have been received by this Authenticator.
C32 dDot1xExtAuthEapolRespFramesRx	1.3.6.1.4.1.171.26.30.1.3.1.8	Counter32	read-only	The number of valid EAP Response frames (other than Resp/Id frames) that have been received by this Authenticator.
C32 dDot1xExtAuthEapolReqIdFramesTx	1.3.6.1.4.1.171.26.30.1.3.1.9	Counter32	read-only	The number of EAP Req/Id frames that have been transmitted by this Authenticator.
C32 dDot1xExtAuthEapolReqFramesTx	1.3.6.1.4.1.171.26.30.1.3.1.10	Counter32	read-only	The number of EAP Request frames (other than Rq/Id frames) that have been transmitted by this Authenticator.
C32 dDot1xExtAuthInvalidEapolFramesRx	1.3.6.1.4.1.171.26.30.1.3.1.11	Counter32	read-only	The number of EAPOL frames that have been received by this Authenticator in which the frame type is not recognized.
C32 dDot1xExtAuthEapLengthErrorFramesRx	1.3.6.1.4.1.171.26.30.1.3.1.12	Counter32	read-only	The number of EAPOL frames that have been received by this Authenticator in which the Packet Body Length field is invalid.
U32 dDot1xExtAuthLastEapolFrameVersion	1.3.6.1.4.1.171.26.30.1.3.1.13	Unsigned32	read-only	The protocol version number carried in the most recently received EAPOL frame.
MAC dDot1xExtAuthLastEapolFrameSource	1.3.6.1.4.1.171.26.30.1.3.1.14	MacAddress	read-only	The source MAC address carried in the most recently received EAPOL frame.
dDot1xExtAuthDiagTable	1.3.6.1.4.1.171.26.30.1.4		not-accessible	A table that contains the diagnostics objects for the Authenticator PAE associated with each Port/MAC/VLAN (for multi-auth mode).
dDot1xExtAuthDiagEntry	1.3.6.1.4.1.171.26.30.1.4.1		not-accessible	The statistics information for an Authenticator PAE, including multi-auth mode.
MAC dDot1xExtAuthDiagMacAddr	1.3.6.1.4.1.171.26.30.1.4.1.1	MacAddress	not-accessible	This object indicates the MAC address of the entry.
VLA dDot1xExtAuthDiagVlanId	1.3.6.1.4.1.171.26.30.1.4.1.2	VlanId	not-accessible	This object indicates the VLAN ID of the entry.
C32 dDot1xExtAuthEntersConnecting	1.3.6.1.4.1.171.26.30.1.4.1.3	Counter32	read-only	Counts the number of times that the state machine transitions to the CONNECTING state from any other state.
C32 dDot1xExtAuthEapLogoffsWhileConnecting	1.3.6.1.4.1.171.26.30.1.4.1.4	Counter32	read-only	Counts the number of times that the state machine transitions from CONNECTING to DISCONNECTED as a result of receiving an EAPOL-Logoff message.
C32 dDot1xExtAuthEntersAuthenticating	1.3.6.1.4.1.171.26.30.1.4.1.5	Counter32	read-only	Counts the number of times that the state machine transitions from CONNECTING to AUTHENTICATING, as a result of an EAP-Response/Identity message being received from the Supplicant.
C32 dDot1xExtAuthAuthSuccessWhileAuthenticating	1.3.6.1.4.1.171.26.30.1.4.1.6	Counter32	read-only	Counts the number of times that the state machine transitions from AUTHENTICATING to AUTHENTICATED, as a result of the Backend Authentication state machine indicating successful authentication of the Supplicant (authSuccess = TRUE).
C32 dDot1xExtAuthAuthTimeoutsWhileAuthenticating	1.3.6.1.4.1.171.26.30.1.4.1.7	Counter32	read-only	Counts the number of times that the state machine transitions from AUTHENTICATING to ABORTING, as a result of the Backend Authentication state machine indicating authentication timeout (authTimeout = TRUE).
C32 dDot1xExtAuthAuthFailWhileAuthenticating	1.3.6.1.4.1.171.26.30.1.4.1.8	Counter32	read-only	Counts the number of times that the state machine transitions from AUTHENTICATING to HELD, as a result of the Backend Authentication state machine indicating authentication failure (authFail = TRUE).
C32 dDot1xExtAuthAuthReauthsWhileAuthenticating	1.3.6.1.4.1.171.26.30.1.4.1.9	Counter32	read-only	Counts the number of times that the state machine transitions from AUTHENTICATING to ABORTING, as a result of a reauthentication request (reAuthenticate = TRUE).
C32 dDot1xExtAuthAuthEapStartsWhileAuthenticating	1.3.6.1.4.1.171.26.30.1.4.1.10	Counter32	read-only	Counts the number of times that the state machine transitions from AUTHENTICATING to ABORTING, as a result of an EAPOL-Start message being received from the Supplicant.
C32 dDot1xExtAuthAuthEapLogoffWhileAuthenticating	1.3.6.1.4.1.171.26.30.1.4.1.11	Counter32	read-only	Counts the number of times that the state machine transitions from AUTHENTICATING to ABORTING, as a result of an EAPOL-Logoff message being received from the Supplicant.
C32 dDot1xExtAuthAuthReauthsWhileAuthenticated	1.3.6.1.4.1.171.26.30.1.4.1.12	Counter32	read-only	Counts the number of times that the state machine transitions from AUTHENTICATED to CONNECTING, as a result of a reauthentication request (reAuthenticate = TRUE).
C32 dDot1xExtAuthAuthEapStartsWhileAuthenticated	1.3.6.1.4.1.171.26.30.1.4.1.13	Counter32	read-only	Counts the number of times that the state machine transitions from AUTHENTICATED to CONNECTING, as a result of an EAPOL-Start message being received from the Supplicant.
C32 dDot1xExtAuthAuthEapLogoffWhileAuthenticated	1.3.6.1.4.1.171.26.30.1.4.1.14	Counter32	read-only	Counts the number of times that the state machine transitions from AUTHENTICATED to DISCONNECTED, as a result of an EAPOL-Logoff message being received from the Supplicant.
C32 dDot1xExtAuthBackendResponses	1.3.6.1.4.1.171.26.30.1.4.1.15	Counter32	read-only	Counts the number of times that the state machine sends an initial Access-Request packet to the Authentication server (i.e., executes sendRespToServer on entry to the RESPONSE state). Indicates that the Authenticator attempted communication with the Authentication Server.
C32 dDot1xExtAuthBackendAccessChallenges	1.3.6.1.4.1.171.26.30.1.4.1.16	Counter32	read-only	Counts the number of times that the state machine receives an initial Access-Challenge packet from the Authentication server (i.e., aReq becomes TRUE, causing exit from the RESPONSE state). Indicates that the Authentication Server has communication with the Authenticator.
C32 dDot1xExtAuthBackendOtherRequestsToSupplicant	1.3.6.1.4.1.171.26.30.1.4.1.17	Counter32	read-only	Counts the number of times that the state machine sends an EAP-Request packet (other than an Identity, Notification, Failure or Success message) to the Supplicant (i.e., executes txReq on entry to the REQUEST state). Indicates that the Authenticator chose an EAP-method.
C32 dDot1xExtAuthBackendNonNakResponsesFromSupplicant	1.3.6.1.4.1.171.26.30.1.4.1.18	Counter32	read-only	Counts the number of times that the state machine receives a response from the Supplicant to an initial EAP-Request, and the response is something other than EAP-NAK (i.e., rxResp becomes TRUE, causing the state machine to transition from REQUEST to RESPONSE, and the response is not an EAP-NAK). Indicates that the Supplicant can respond to the Authenticator's chosen EAP-method.
C32 dDot1xExtAuthBackendAuthSuccesses	1.3.6.1.4.1.171.26.30.1.4.1.19	Counter32	read-only	Counts the number of times that the state machine receives an EAP-Success message from the Authentication Server (i.e., aSuccess becomes TRUE, causing a transition from RESPONSE to SUCCESS). Indicates that the Supplicant has successfully authenticated to the Authentication Server.
C32 dDot1xExtAuthBackendAuthFails	1.3.6.1.4.1.171.26.30.1.4.1.20	Counter32	read-only	Counts the number of times that the state machine receives an EAP-Failure message from the Authentication Server (i.e., aFail becomes TRUE, causing a transition from RESPONSE to FAIL). Indicates that the Supplicant has not authenticated to the Authentication Server.
dDot1xExtAuthSessionStatsTable	1.3.6.1.4.1.171.26.30.1.5		not-accessible	A table that contains the diagnostics objects for the Authenticator PAE associated with each Port/MAC/VLAN (for multi-auth mode).
dDot1xExtAuthSessionStatsEntry	1.3.6.1.4.1.171.26.30.1.5.1		not-accessible	The statistics information for an Authenticator PAE, including multi-auth mode.
MAC dDot1xExtAuthSessionMacAddr	1.3.6.1.4.1.171.26.30.1.5.1.1	MacAddress	not-accessible	This object indicates the MAC address of the entry.
VLA dDot1xExtAuthSessionVlanId	1.3.6.1.4.1.171.26.30.1.5.1.2	VlanId	not-accessible	This object indicates the VLAN ID of the entry.
C64 dDot1xExtAuthSessionOctetsRx	1.3.6.1.4.1.171.26.30.1.5.1.3	Counter64	read-only	The number of octets received in user data frames on this Port during the session.
C64 dDot1xExtAuthSessionOctetsTx	1.3.6.1.4.1.171.26.30.1.5.1.4	Counter64	read-only	The number of octets transmitted in user data frames on this Port during the session.
C32 dDot1xExtAuthSessionFramesRx	1.3.6.1.4.1.171.26.30.1.5.1.5	Counter32	read-only	The number of user data frames received on this Port during the session.
C32 dDot1xExtAuthSessionFramesTx	1.3.6.1.4.1.171.26.30.1.5.1.6	Counter32	read-only	The number of user data frames transmitted on this Port during the session.
STR dDot1xExtAuthSessionId	1.3.6.1.4.1.171.26.30.1.5.1.7	SnmpAdminString	read-only	A unique identifier for the session, in the form of a printable ASCII string of at least three characters.
INT dDot1xExtAuthSessionAuthenticMethod	1.3.6.1.4.1.171.26.30.1.5.1.8	INTEGER	read-only	The authentication method used to establish the session.
TIK dDot1xExtAuthSessionTime	1.3.6.1.4.1.171.26.30.1.5.1.9	TimeTicks	read-only	The duration of the session in seconds.
INT dDot1xExtAuthSessionTerminateCause	1.3.6.1.4.1.171.26.30.1.5.1.10	INTEGER	read-only	The reason for the session termination.
STR dDot1xExtAuthSessionUserName	1.3.6.1.4.1.171.26.30.1.5.1.11	SnmpAdminString	read-only	The User-Name representing the identity of the Supplicant PAE.
dDot1xExtNotifyInfo	1.3.6.1.4.1.171.26.30.1.6
STR dDot1xExtNotifyFailReason	1.3.6.1.4.1.171.26.30.1.6.1	DisplayString	accessible-for-notify	The reason for failed authentication.
dDot1xExtMIBConformance	1.3.6.1.4.1.171.26.30.2
dDot1xExtCompliances	1.3.6.1.4.1.171.26.30.2.1
dDot1xExtCompliance	1.3.6.1.4.1.171.26.30.2.1.1			The compliance statement for entities which implement the DLINKSW-DOT1X-EXT-MIB.
dDot1xExtGroups	1.3.6.1.4.1.171.26.30.2.2
dDot1xExtGeneralGroup	1.3.6.1.4.1.171.26.30.2.2.1			A collection of objects providing the global configuration for 802.1X extensions.
dDot1xExtPortIfGroup	1.3.6.1.4.1.171.26.30.2.2.2			A collection of objects providing the interface-specific information for 802.1X extensions.
ddot1xExtPaeAuthStatsGroup	1.3.6.1.4.1.171.26.30.2.2.3			A collection of objects providing statistics about an Authenticator PAE, including the multi-auth mode.
ddot1xExtPaeAuthDiagGroup	1.3.6.1.4.1.171.26.30.2.2.4			A collection of objects providing diagnostic statistics about an Authenticator PAE, including the multi-auth mode.
ddot1xExtPaeAuthSessionStatsGroup	1.3.6.1.4.1.171.26.30.2.2.5			A collection of objects providing statistics about the current, or last session for an Authenticator PAE, including the multi-auth mode.
ddot1xExtNotifyCfgGroup	1.3.6.1.4.1.171.26.30.2.2.6			A collection of objects provides the configuration for notification of 802.1X authentication.
dDot1xExtNotificationGroup	1.3.6.1.4.1.171.26.30.2.2.7			The collection of notifications used for monitoring the hosts under the control of 802.1X authentication.

RFC description

D-Link IEEE 802.1X port-based network access control extensions beyond standard PAE MIB.

Start monitoring D-Link managed switch (802.1X extensions: dynamic/guest VLAN) with a free 30-day trial of IPNetwork Monitor. Import MIBs, browse SNMP OIDs, create custom SNMP monitors, configure alerts, and monitor any SNMP-enabled network device from a single console.

Download DLINKSW-DOT1X-EXT-MIB