DLINKSW-NETWORK-ACCESS-MIB

All MIBs › DLINKSW-NETWORK-ACCESS-MIB

Organization: D-Link Corp.

Last Updated: 2013-07-18

Description: Defines network access authentication configuration including method sequencing and failover for D-Link industrial switches

Start monitoring vendor-neutral, standards-based MIB, any SNMPv3-capable network device (SNMP engine identity/boot/clock status) with a free 30-day trial of IPNetwork Monitor. Import MIBs, browse SNMP OIDs, create custom SNMP monitors, configure alerts, and monitor any SNMP-enabled network device from a single console.

What Is DLINKSW-NETWORK-ACCESS-MIB?

This is a D-Link proprietary MIB for industrial switches that defines generic network access authentication configuration, including the sequencing and failover behavior across multiple authentication methods (e.g., local, RADIUS, TACACS+, or 802.1X-style methods). It primarily exposes configuration data describing the ordered list of authentication methods and failover rules rather than runtime traffic counters. There is no large DLINKSW-NETWORK-ACCESS-MIB OID list of runtime counters to walk here, since the module is limited to a small number of ordered-method and failover-configuration objects. For monitoring hardware/software status, it is useful for confirming that the configured authentication method order matches policy and that failover to a backup method (such as local authentication when a RADIUS server is unreachable) is functioning as intended, since authentication failures can lock users out of network access. It generalizes across multiple underlying authentication protocols rather than depending on one specific IETF MIB. It is deployed on D-Link industrial switches where administrators need centralized, flexible control over how devices/users authenticate for network access.

IPNetwork Monitor allows you to monitor SNMP objects defined in DLINKSW-NETWORK-ACCESS-MIB. Use the built-in SNMP Monitoring Browser to explore available variables, view their current values and descriptions, and select the objects you want to monitor. You can then create SNMP monitors, configure thresholds, and receive alerts when monitored values change.

Supported Devices

D-Link DGS-F3400 Series (current) — Layer 2 modular industrial managed switch, fanless, wide-temperature design
D-Link DIS-200G-12SW — 12-port industrial managed switch

Monitoring Examples

No sample objects were provided; in practice an administrator would review the configured authentication method sequence and failover order to confirm, for example, that if a primary RADIUS server times out the switch correctly falls back to a secondary method rather than denying all access.

What Can Be Monitored

configured authentication method sequence
failover order between authentication methods
authentication method status

Imported Objects

From DLINK-ID-REC-MIB

dlinkIndustrialCommon

OBJECT-IDENTITY

From DLINKSW-TC-MIB

Dlink2kVlanList

From IF-MIB

ifIndex

OBJECT-TYPE

From INET-ADDRESS-MIB

InetAddress
InetAddressType

From Q-BRIDGE-MIB

VlanIdOrNone

From SNMP-FRAMEWORK-MIB

SnmpAdminString

From SNMPv2-CONF

MODULE-COMPLIANCE
OBJECT-GROUP

From SNMPv2-SMI

Integer32
MODULE-IDENTITY
OBJECT-TYPE
Unsigned32

From SNMPv2-TC

DisplayString
MacAddress
RowStatus
TEXTUAL-CONVENTION
TruthValue

OIDs

OID symbolic	OID numeric	Type	Access	Description
dlinkSwNetworkAccessAuthMIB	1.3.6.1.4.1.171.26.151			This MIB module defines objects for Network Access Authentication in the system. Network Access Authentication provides generic configurations for authentication methods in the system and manages the failover sequence of these methods in a flexible manner.
dNetAccessAuthMIBNotifications	1.3.6.1.4.1.171.26.151.0
dNetAccessAuthMIBObjects	1.3.6.1.4.1.171.26.151.1
dNetAuthSystem	1.3.6.1.4.1.171.26.151.1.1
INT dnaMacMoveMode	1.3.6.1.4.1.171.26.151.1.1.1	INTEGER	read-write	This object controls whether to allow authenticated hosts to do roaming across different switch ports. deny : When a host is authenticated on one port, that address is not allowed to move on another authenticated manager-enabled port of the device. permit: Authenticated hosts are allowed to move from one port to another on the same device. When a host moves to a new port, the authenticated session on the original port is deleted, and the host is re-authenticated on the new port.
T/F dnaAuthorizationEnabled	1.3.6.1.4.1.171.26.151.1.1.2	TruthValue	read-write	This object indicates the state of acceptance of the authorized configuration. When authorization is enabled for authentication, the authorized attributes (for example VLAN, 802.1p default priority, bandwidth, and ACL) will be accepted.
INT dnaMacFormatCase	1.3.6.1.4.1.171.26.151.1.1.3	INTEGER	read-write	This object indicates the format of the authentication MAC address. uppercase: Using uppercase format, the formatted is: AA-BB-CC-DD-EE-FF. lowercase: Using lowercase format, the formatted is: aa-bb-cc-dd-ee-ff.
INT dnaMacFormatDelimiter	1.3.6.1.4.1.171.26.151.1.1.4	INTEGER	read-write	This object indicates the delimiter format of authentication MAC address. none: Not using any delimiter, the format is: AABBCCDDEEFF hyphen: Using '-' as delimiter, the format is: AA-BB-CC-DD-EE-FF colon: Using ':' as delimiter, the format is: AA:BB:CC:DD:EE:FF dot: Using '.' as delimiter, the format is: AA.BB.CC.DD.EE.FF
I32 dnaMacFormatDelimiterNumber	1.3.6.1.4.1.171.26.151.1.1.5	Integer32	read-write	This object indicates the delimiter number of authentication MAC address. 1: single delimiter, the format is: AABBCC.DDEEFF 2: double delimiter, the format is: AABB.CCDD.EEFF 5: multiple delimiter, the format is: AA.BB.CC.DD.EE.FF Note: while dnaMacFormatDelimiter is none(1), the delimiter number will not take effect.
dNetAuthAuthenticator	1.3.6.1.4.1.171.26.151.1.2
U32 dnaMaxAuthedUserLimit	1.3.6.1.4.1.171.26.151.1.2.1	Unsigned32	read-write	This object indicates the maximum authenticated users of the system.
dnaPortConfigTable	1.3.6.1.4.1.171.26.151.1.2.2		not-accessible	This table is a list of configurations for ports. An entry will exist for every interface which supports Network Access Authentication feature.
dnaPortConfigEntry	1.3.6.1.4.1.171.26.151.1.2.2.1		not-accessible	An entry contains port-specific configuration for Network Access Authentication.
U32 dnaPortMaxAuthedUserLimit	1.3.6.1.4.1.171.26.151.1.2.2.1.1	Unsigned32	read-write	This object indicates the maximum authenticated users of this port.
DLI dnaPortAuthHostMode	1.3.6.1.4.1.171.26.151.1.2.2.1.2	DlinkAuthHostMode	read-write	This object indicates the authentication host mode of the entry.
DLI dnaPortAuthVlansFirst2K	1.3.6.1.4.1.171.26.151.1.2.2.1.3	Dlink2kVlanList	read-write	This object specifies the authentication VLAN(s) in a string of octets containing one bit per VLAN for VLANs 1 to 2048. If the bit is set to '1', then the VLAN needs authentication.
DLI dnaPortAuthVlansSecond2K	1.3.6.1.4.1.171.26.151.1.2.2.1.4	Dlink2kVlanList	read-write	This object specifies the authentication VLAN(s) in a string of octets containing one bit per VLAN for VLANs 2049 to 4094. If the bit is set to '1', then the VLAN needs authentication.
T/F dnaPortReauthEnabled	1.3.6.1.4.1.171.26.151.1.2.2.1.5	TruthValue	read-write	This object indicates whether the periodic re-authentication is enabled.
U32 dnaPortReauthInterval	1.3.6.1.4.1.171.26.151.1.2.2.1.6	Unsigned32	read-write	Specifies the re-authentication interval, after which the port will be re-authenticated if value of the corresponding instance of dnaPortReauthEnabled is 'true'. A value of zero indicates that the re-authentication interval is based on AAA server when this port is authenticated. Besides, the action (re-authenticate or initialize) to take after expiration of the timer is also based on server.
U32 dnaPortRestartInterval	1.3.6.1.4.1.171.26.151.1.2.2.1.7	Unsigned32	read-write	Specifies the interval after which a further authentication attempt should be made to this port if it is not authorized.
I32 dnaPortInactivityTimeout	1.3.6.1.4.1.171.26.151.1.2.2.1.8	Integer32	read-write	Specifies the period of time that a client associating with this port is allowed to be inactive before being terminated. A value of zero indicates that inactivity timeout is disabled on this port. A value of -1 indicates that inactivity timeout is based on AAA server when this port is authenticated.
VLA dnaPortGuestVlanid	1.3.6.1.4.1.171.26.151.1.2.2.1.9	VlanIdOrNone	read-write	Specifies the VLAN ID of guest VLAN on the interface. The guest VLAN allows the user access within the guest VLAN before it is authenticated. A value of zero for this object indicates guest VLAN is not configured for the interface.
dnaPortMethodTable	1.3.6.1.4.1.171.26.151.1.2.3		not-accessible	The table contains a list of authentication methods information on ports. An entry will exist for every port which supports Network Access Authentication feature.
dnaPortMethodEntry	1.3.6.1.4.1.171.26.151.1.2.3.1		not-accessible	An entry contains configuration and information of authentication methods for a particular port.
DLI dnaPortMethodAvailable	1.3.6.1.4.1.171.26.151.1.2.3.1.1	DlinkAuthMethodList	read-only	This object indicates the currently effective authentication methods on the port. e.g: The dnaPortMethodCompAuthMode of the interface is set to any(1), but only dot1x is running on this interface, macAuth, webAuth and jwac are disabled, only the bit of dot1x is '1'.
DLI dnaPortMethodCompAuthMode	1.3.6.1.4.1.171.26.151.1.2.3.1.2	DlinkCompAuthMode	read-write	This object indicates the compound authentication mode on the port.
dNetAuthSession	1.3.6.1.4.1.171.26.151.1.3
dnaSessionTable	1.3.6.1.4.1.171.26.151.1.3.1		not-accessible	The table contains a list of authentication sessions. An entry is created when an authentication session has been successfully created within Network Access Authentication. An entry is deleted when an authentication session has been removed.
dnaSessionEntry	1.3.6.1.4.1.171.26.151.1.3.1.1		not-accessible	An entry contains management information for a particular authentication session.
U32 dnaSessionId	1.3.6.1.4.1.171.26.151.1.3.1.1.1	Unsigned32	not-accessible	This object indicates a unique identifier of the authentication session.
MAC dnaSessionClientMacAddress	1.3.6.1.4.1.171.26.151.1.3.1.1.2	MacAddress	read-only	This object indicates the MAC address of the device associates with the authentication session.
IPt dnaSessionClientAddrType	1.3.6.1.4.1.171.26.151.1.3.1.1.3	InetAddressType	read-only	This object indicates the type of Internet address of the client associates with the authentication session. This object is meaningful only when the corresponding dnaSessionAuthorizedBy is webAuth or jwac.
IP dnaSessionClientAddress	1.3.6.1.4.1.171.26.151.1.3.1.1.4	InetAddress	read-only	This object indicates the Internet address of the client associates with the authentication session. This object is meaningful only when the corresponding dnaSessionAuthorizedBy is webAuth or jwac.
INT dnaSessionStatus	1.3.6.1.4.1.171.26.151.1.3.1.1.5	INTEGER	read-only	This object indicates the current status of the authentication session. idle : the session has been initialized and no method has run yet. authenticating : an authentication method is running for this session. noMethod : no authentication method has provided a result for this session. authenticationSuccess: an authentication method has resulted in authentication success for this session. authenticationFailed: an authentication method has resulted in authentication failed for this session.
STR dnaSessionAuthUserName	1.3.6.1.4.1.171.26.151.1.3.1.1.6	SnmpAdminString	read-only	This object indicates the user name of the authentication session. This object is meaningless when the corresponding dnaSessionAuthorizedBy is macAuth and a zero length string will be returned.
DLI dnaSessionAuthorizedBy	1.3.6.1.4.1.171.26.151.1.3.1.1.7	DlinkAuthMethod	read-only	This object indicates the method which authorizes the authentication session.
VLA dnaSessionAuthVlan	1.3.6.1.4.1.171.26.151.1.3.1.1.8	VlanIdOrNone	read-only	This object indicates the authorized VLAN applied to the authentication session. Value zero indicates that no authorized VLAN has been applied, or it is not applicable.
STR dnaSessionAccountingID	1.3.6.1.4.1.171.26.151.1.3.1.1.9	SnmpAdminString	read-only	This object indicates the accounting session ID that using to accounting after authenticated.
VLA dnaSessionAssignVid	1.3.6.1.4.1.171.26.151.1.3.1.1.10	VlanIdOrNone	read-only	This object indicates the effectively assigned VLAN ID that are authorized after host pass authenticated. A value of zero indicates that no valid VLAN ID is authorized.
I32 dnaSessionAssignPriority	1.3.6.1.4.1.171.26.151.1.3.1.1.11	Integer32	read-only	This object indicates the effectively assigned priority that is authorized after host pass authenticated. A value of -1 indicates that no valid priority is authorized.
I32 dnaSessionAssignIngressBandwidth	1.3.6.1.4.1.171.26.151.1.3.1.1.12	Integer32	read-only	This object indicates the effectively assigned ingress bandwidth that is authorized after host pass authenticated. A value of -1 indicates that no valid ingress is authorized.
I32 dnaSessionAssignEgressBandwidth	1.3.6.1.4.1.171.26.151.1.3.1.1.13	Integer32	read-only	This object indicates the effectively assigned egress bandwidth that is authorized after host pass authenticated. A value of -1 indicates that no valid egress is authorized.
U32 dnaSessionTimeout	1.3.6.1.4.1.171.26.151.1.3.1.1.14	Unsigned32	read-only	Indicates the session timeout used by Network Access Authentication for the authentication session.
U32 dnaSessionTimeLeft	1.3.6.1.4.1.171.26.151.1.3.1.1.15	Unsigned32	read-only	Indicates the leftover time of the authentication session.
U32 dnaSessionInactivityTimeout	1.3.6.1.4.1.171.26.151.1.3.1.1.16	Unsigned32	read-only	Indicates the inactivity timeout used by Network Access Authentication for the authentication session.
U32 dnaSessionInactivityTimeLeft	1.3.6.1.4.1.171.26.151.1.3.1.1.17	Unsigned32	read-only	Indicates the leftover time of the inactivity timer of the authentication session.
INT dnaSessionTerminateSession	1.3.6.1.4.1.171.26.151.1.3.1.1.99	INTEGER	read-write	This object terminates the authentication session, when set to 'terminate'. Setting this object to 'false' has no effect. No action is taken if this object is set to 'noOp'. When read, the value 'noOp' is returned.
dnaSessionMethodInfoTable	1.3.6.1.4.1.171.26.151.1.3.2		not-accessible	The table contains a list of authenticating state information of methods for every authentication session. An entry exists for every authentication method that can initiate the authentication session within Network Access Authentication.
dnaSessionMethodInfoEntry	1.3.6.1.4.1.171.26.151.1.3.2.1		not-accessible	An entry contains information for a particular effective authentication method which is associated with a session on an interface.
DLI dnaSessionMethod	1.3.6.1.4.1.171.26.151.1.3.2.1.1	DlinkAuthMethod	not-accessible	Indicates the authentication method of the entry.
INT dnaSessionMethodState	1.3.6.1.4.1.171.26.151.1.3.2.1.2	INTEGER	read-only	Indicates the state of this authentication method. notInitiated : The method hasn't initiated the authentication process yet. inProgress : The authentication method is in progress. authcSuccess: The session has been authenticated by the method. authcFailed : The session has failed to be authenticated by the method.
dnaSessionTerminateIfTable	1.3.6.1.4.1.171.26.151.1.3.3		not-accessible	The table is used to terminate authentication sessions by interface.
dnaSessionTerminateIfEntry	1.3.6.1.4.1.171.26.151.1.3.3.1		not-accessible	An entry is used to terminate authentication sessions by specifying authentication methods per Network Access Authentication managed port.
DLI dnaSessionTerminateIfMethodList	1.3.6.1.4.1.171.26.151.1.3.3.1.1	DlinkAuthMethodList	read-write	This object is used to terminate authentication sessions by methods on an interface by setting the corresponding bit to '1'. This object always returns '00'H when read.
DLI dnaSessionTerminateMethod	1.3.6.1.4.1.171.26.151.1.3.4	DlinkAuthMethod	read-write	This object is used to terminate the authentication sessions by setting this object to valid value. Setting this object to 'other' has no effect. When read, the value 'other' is returned.
INT dnaSessionTerminateAll	1.3.6.1.4.1.171.26.151.1.3.5	INTEGER	read-write	This object is used to terminate all authentication sessions by setting this object to 'terminateAll'. Setting this object to 'noOp' has no effect. When read, the value 'noOp' is returned.
dNetAuthUser	1.3.6.1.4.1.171.26.151.1.4
dnaUserTable	1.3.6.1.4.1.171.26.151.1.4.1		not-accessible	A table contains a list of users in the local database for authentication.
dnaUserEntry	1.3.6.1.4.1.171.26.151.1.4.1.1		not-accessible	An entry consists of information for an account.
STR dnaUserName	1.3.6.1.4.1.171.26.151.1.4.1.1.1	DisplayString	not-accessible	This object indicates the username for this user account.
STR dnaUserPassword	1.3.6.1.4.1.171.26.151.1.4.1.1.2	DisplayString	read-create	This object indicates the password in clear text form for this user account. When read, a zero length string will be returned for security reasons.
VLA dnaUserTargetVlanid	1.3.6.1.4.1.171.26.151.1.4.1.1.3	VlanIdOrNone	read-create	This object indicates the VLAN ID to be assigned for this user account.
ROW dnaUserRowStatus	1.3.6.1.4.1.171.26.151.1.4.1.1.99	RowStatus	read-create	This object manages this user account.
dNetAccessAuthMIBConformance	1.3.6.1.4.1.171.26.151.2
dnaMIBCompliances	1.3.6.1.4.1.171.26.151.2.1
dnaCompliance	1.3.6.1.4.1.171.26.151.2.1.1			The compliance statement for entities which implement DLINKSW-NETWORK-ACCESS-MIB.
dnaMIBGroups	1.3.6.1.4.1.171.26.151.2.2
dnaAuthPortConfigGroup	1.3.6.1.4.1.171.26.151.2.2.1			A collection of objects that provides port-specific configuration of Network Access Authentication.
dnaPortMethodGroup	1.3.6.1.4.1.171.26.151.2.2.2			A collection of objects provides authentication methods configuration for Network Access Authentication.
dnaSessionGroup	1.3.6.1.4.1.171.26.151.2.2.3			A collection of objects that provides authentication session management information for Network Access Authentication.
dnaSessionMethodInfoGroup	1.3.6.1.4.1.171.26.151.2.2.4			A collection of objects that provides authentication session state information per authentication methods.
dnaMacMoveConfigGroup	1.3.6.1.4.1.171.26.151.2.2.5			A collection of objects providing MAC move configuration for Network Access Authentication on the device.
dnaAuthzConfigGroup	1.3.6.1.4.1.171.26.151.2.2.6			A collection of objects provides authorization configuration for Network Access Authentication on the device.
dnaMacFormatGroup	1.3.6.1.4.1.171.26.151.2.2.7			A collection of objects provides MAC format configuration for Network Access Authentication on the device.
dnaMaxAuthedUserLimitGroup	1.3.6.1.4.1.171.26.151.2.2.8			A collection of objects provides configuration of upper limits for authenticated user.
dnaGuestVlanGroup	1.3.6.1.4.1.171.26.151.2.2.9			A collection of objects providing guest VLAN configuration for Network Access Authentication on the device.
dnaAuthenticationVlanGroup	1.3.6.1.4.1.171.26.151.2.2.10			A collection of objects provides for the platform which supports the feature of per VLAN authentication.
dnaSessionTerminateGroup	1.3.6.1.4.1.171.26.151.2.2.11			A collection of objects providing terminate authentication session information for Network Access Authentication on the device.
dnaAccountUserGroup	1.3.6.1.4.1.171.26.151.2.2.12			A collection of objects providing local account information for Network Access Authentication on the device.

RFC description

D-Link switch vendor-private MIB for managing network access control and port-based authentication.

Start monitoring D-Link DGS-F3400/DIS-200G-12SW industrial switch (network access authentication sequencing) with a free 30-day trial of IPNetwork Monitor. Import MIBs, browse SNMP OIDs, create custom SNMP monitors, configure alerts, and monitor any SNMP-enabled network device from a single console.

Download DLINKSW-NETWORK-ACCESS-MIB

What Is DLINKSW-NETWORK-ACCESS-MIB?

Supported Devices

Monitoring Examples

What Can Be Monitored

This MIB depends on

Related MIBs

RFC description