ENTERASYS-AUTO-TRACKING-MIB

All MIBs › ENTERASYS-AUTO-TRACKING-MIB

Organization: Enterasys Networks, Inc

Last Updated: 2013-02-12

Category: Vendor: Enterasys/Cabletron

Description: Enterasys Networks MIB for configuring automatic tracking of authenticated user sessions via RADIUS-based network access control.

Start monitoring vendor-neutral, standards-based MIB, any SNMPv3-capable network device (SNMP engine identity/boot/clock status) with a free 30-day trial of IPNetwork Monitor. Import MIBs, browse SNMP OIDs, create custom SNMP monitors, configure alerts, and monitor any SNMP-enabled network device from a single console.

What Is ENTERASYS-AUTO-TRACKING-MIB?

ENTERASYS-AUTO-TRACKING-MIB is a vendor-specific Enterasys Networks MIB for configuring Auto Tracking, a RADIUS-based mechanism for tracking and controlling authenticated user sessions on switch ports. It exposes system-wide enable/account flags and a per-port table covering enable status, allowed versus allocated concurrent authentications, session and idle timeouts, and RADIUS profile associations for timeouts and rejections. This gives visibility into the software/configuration status of network access control on each port, letting an admin see whether a port has reached its authentication capacity or is using unexpected RADIUS handling profiles. As a RADIUS-integrated feature, it explicitly depends on an external RADIUS server/infrastructure for authentication decisions. It is typically deployed on Enterasys Networks managed switches implementing network access control (NAC) at the edge. Engineers can download the ENTERASYS-AUTO-TRACKING-MIB file directly to load it into their MIB browser.

IPNetwork Monitor allows you to monitor SNMP objects defined in ENTERASYS-AUTO-TRACKING-MIB. Use the built-in SNMP Monitoring Browser to explore available variables, view their current values and descriptions, and select the objects you want to monitor. You can then create SNMP monitors, configure thresholds, and receive alerts when monitored values change.

Supported Devices

Enterasys Networks managed Ethernet switch

Monitoring Examples

etsysAutoTrackingPortTable/PortEntry per port exposes etsysAutoTrackingPortAuthenticationsAllowed versus etsysAutoTrackingPortAuthenticationsAllocated, letting an admin see whether a port has reached its maximum concurrent authenticated sessions. etsysAutoTrackingPortSessionTimeout and etsysAutoTrackingPortIdleTimeout show configured session limits, and etsysAutoTrackingPortRadiusRejectProfileIndex identifies which RADIUS profile governs rejected auth attempts, useful when diagnosing why users on a given port are being denied network access.

What Can Be Monitored

auto tracking enable status per port
authenticated sessions allowed vs allocated per port
session timeout
idle timeout
RADIUS profile association per port

Imported Objects

From ENTERASYS-MIB-NAMES

etsysModules

OBJECT-IDENTITY

From IF-MIB

ifIndex

OBJECT-TYPE

From P-BRIDGE-MIB

EnabledStatus

From SNMPv2-CONF

MODULE-COMPLIANCE
OBJECT-GROUP

From SNMPv2-SMI

MODULE-IDENTITY
OBJECT-TYPE
Unsigned32

OIDs

OID symbolic	OID numeric	Type	Access	Description
etsysAutoTrackingMIB	1.3.6.1.4.1.5624.1.2.92			This MIB module defines a portion of the SNMP MIB under the Enterasys Networks enterprise OID pertaining to configuration of Auto Tracking on a device.
etsysAutoTrackingBody	1.3.6.1.4.1.5624.1.2.92.2
etsysAutoTrackingObjects	1.3.6.1.4.1.5624.1.2.92.2.1
etsysAutoTrackingSystem	1.3.6.1.4.1.5624.1.2.92.2.1.1
ENA etsysAutoTrackingSystemEnable	1.3.6.1.4.1.5624.1.2.92.2.1.1.1	EnabledStatus	read-write	When enabled(1), all objects in this MIB are fully active. When disabled(2), this object overrides all other object settings in this MIB without affecting their values.
ENA etsysAutoTrackingSystemAccountEnable	1.3.6.1.4.1.5624.1.2.92.2.1.1.2	EnabledStatus	read-write	When enabled(1), RADIUS accounting start, interim and stop frames are sent to the configured RADIUS server(s). When disabled(2), accounting packets are not sent to the RADIUS server.
etsysAutoTrackingPort	1.3.6.1.4.1.5624.1.2.92.2.1.2
etsysAutoTrackingPortTable	1.3.6.1.4.1.5624.1.2.92.2.1.2.1		not-accessible	A table containing configuration objects for each auto tracking port. The configuration for each port in this table must be non-volatile.
etsysAutoTrackingPortEntry	1.3.6.1.4.1.5624.1.2.92.2.1.2.1.1		not-accessible	Each conceptual row provides control over all of the initial values used by each auto authenticated MAC on this port. Subsequent changes to rows in this table, except where noted, have no effect on existing auto tracking sessions on this port.
ENA etsysAutoTrackingPortEnable	1.3.6.1.4.1.5624.1.2.92.2.1.2.1.1.1	EnabledStatus	read-write	When set to enabled(1), a platform dependent triggering mechanism initiates auto tracking for sessions on this port. When disabled(2), auto tracking is disabled and all currently auto tracking sessions or those in the process of auto tracking on this port are terminated.
U32 etsysAutoTrackingPortAuthenticationsAllowed	1.3.6.1.4.1.5624.1.2.92.2.1.2.1.1.2	Unsigned32	read-only	The maximum number of concurrent auto tracking sessions supported on this port on this module. The default value of this object is platform and resource dependent.
U32 etsysAutoTrackingPortAuthenticationsAllocated	1.3.6.1.4.1.5624.1.2.92.2.1.2.1.1.3	Unsigned32	read-write	The maximum number of auto tracking sessions permitted on this port on this module. This value must be non-zero and be less than or equal to the value of etsysAutoTrackingPortAuthenticationsAllowed. Setting this object to a value less than the current number of auto tracking sessions on this port prevents further auto tracking sessions, but has no affect on the current sessions.
U32 etsysAutoTrackingPortSessionTimeout	1.3.6.1.4.1.5624.1.2.92.2.1.2.1.1.4	Unsigned32	read-write	The maximum number of seconds an auto tracking session may last before termination of the session. A value of zero indicates that the global etsysMultiAuthSessionTimeout value will be used.
U32 etsysAutoTrackingPortIdleTimeout	1.3.6.1.4.1.5624.1.2.92.2.1.2.1.1.5	Unsigned32	read-write	The maximum number of consecutive seconds an auto tracking session may be idle before termination of the session. A value of zero indicates that the global etsysMultiAuthSessionTimeout value will be used.
U32 etsysAutoTrackingPortRadiusTimeoutProfileIndex	1.3.6.1.4.1.5624.1.2.92.2.1.2.1.1.6	Unsigned32	read-write	The policy profile index to be used by the auto-tracking provisioning agent if a complete RADIUS server timeout occurs. This policy profile index will only be used if the auto-tracking provisioning agent is the highest precedent multiauth provisioning agent to provision the session. Auto-tracking has the lowest precedence by default. The value will be overwritten by the policy profile index in etsysAutoTrackingPortRadiusRejectProfileIndex if both a rejection and a complete timeout occur. A value of (0) indicates that no policy profile index is configured for complete RADIUS server timeouts.
U32 etsysAutoTrackingPortRadiusRejectProfileIndex	1.3.6.1.4.1.5624.1.2.92.2.1.2.1.1.7	Unsigned32	read-write	The policy profile index to be used by the auto-tracking provisioning agent if a complete RADIUS server timeout occurs. This policy profile index will only be used if the auto-tracking provisioning agent is the highest precedent multiauth provisioning agent to provision the session. Auto-tracking has the lowest precedence by default. The value will not be overwritten by the policy profile index in etsysAutoTrackingPortRadiusTimeoutProfileIndex if both a rejection and a complete timeout occur. A value of (0) indicates that no policy profile index is configured for complete RADIUS server timeouts.
etsysAutoTrackingConformance	1.3.6.1.4.1.5624.1.2.92.3
etsysAutoTrackingGroups	1.3.6.1.4.1.5624.1.2.92.3.1
etsysAutoTrackingSystemGroup	1.3.6.1.4.1.5624.1.2.92.3.1.1			Global object controlling this feature. Global objects that affect how the credentials are presented to the authentication server.
etsysAutoTrackingPortGroup	1.3.6.1.4.1.5624.1.2.92.3.1.2			Objects describing the Auto Tracking variables for each port.
etsysAutoTrackingSystemGroup2	1.3.6.1.4.1.5624.1.2.92.3.1.3			Global object controlling this feature. Global objects that affect how the credentials are presented to the authentication server.
etsysAutoTrackingPortGroup2	1.3.6.1.4.1.5624.1.2.92.3.1.4			Objects describing the Auto Tracking variables for each port.
etsysAutoTrackingCompliances	1.3.6.1.4.1.5624.1.2.92.3.2
etsysAutoTrackingCompliance	1.3.6.1.4.1.5624.1.2.92.3.2.1			The compliance statement for devices that support Auto Tracking.
etsysAutoTrackingCompliance2	1.3.6.1.4.1.5624.1.2.92.3.2.2			The compliance statement for devices that support Auto Tracking.

RFC description

Manages automatic endpoint discovery and network access control policy tracking on Enterasys network devices.

Start monitoring Enterasys Networks switch (legacy, later Extreme Networks) (RADIUS-based Auto Tracking NAC) with a free 30-day trial of IPNetwork Monitor. Import MIBs, browse SNMP OIDs, create custom SNMP monitors, configure alerts, and monitor any SNMP-enabled network device from a single console.

Download ENTERASYS-AUTO-TRACKING-MIB

What Is ENTERASYS-AUTO-TRACKING-MIB?

Supported Devices

Monitoring Examples

What Can Be Monitored

This MIB depends on

Related MIBs

RFC description