| OID symbolic | OID numeric | Type | Access | Description |
|---|
| etsysMACAuthenticationMIB | 1.3.6.1.4.1.5624.1.2.25 | | | This MIB module defines a portion of the SNMP enterprise
MIBs under Enterasys Networks' enterprise OID pertaining to
MAC-Authentication.
This MIB was designed to be used for authentication using
source MAC addresses received in traffic on ports under
control of MAC-authentication.
The security afforded by this approach is neither the primary
concern nor intent of this MIB. Rather, this MIB provides
a convenient method of associating policy with MAC
addresses and applying that policy when the MAC address
appears on a pre-approved port in the network.
The term MAC-Authentication is used because an authentication
backend mechanism is used to allow the MAC onto the network,
as well as provide authorization information to the switch. |
| etsysMACAuthenticationObjects | 1.3.6.1.4.1.5624.1.2.25.1 | | | |
| etsysMACAuthenticationSystem | 1.3.6.1.4.1.5624.1.2.25.1.1 | | | |
| ENA etsysMACAuthenticationSystemEnable | 1.3.6.1.4.1.5624.1.2.25.1.1.1 | EnabledStatus | read-write | When enabled(1), all objects in this MIB are fully active.
When disabled(2), this object overrides all other object
settings in this MIB without affecting their values. |
| STR etsysMACAuthenticationMACUserPassword | 1.3.6.1.4.1.5624.1.2.25.1.1.2 | SnmpAdminString | read-write | This is the string to be used as a password credential
when authenticating a MAC address. |
| INT etsysMACAuthenticationPortUserNameSignificantBits | 1.3.6.1.4.1.5624.1.2.25.1.1.3 | INTEGER | read-write | This object represents the number of significant bits in the
MAC addresses to be used starting with the left-most bit of
the vendor portion of the MAC address. The significant portion
of the MAC address is sent as a user-name credential when the
primary attempt to authenticate the full MAC address fails.
Any other failure to authenticate the full address, (i.e.
authentication server timeout) causes the the next attempt to
start once again with a full MAC authentication. |
| etsysMACAuthenticationPortConfig | 1.3.6.1.4.1.5624.1.2.25.1.2 | | | |
| etsysMACAuthenticationPortConfigTable | 1.3.6.1.4.1.5624.1.2.25.1.2.1 | | not-accessible | A table containing configuration objects for each MAC
authentication port. The configuration for
each port in this table must be non-volatile. |
| etsysMACAuthenticationPortConfigEntry | 1.3.6.1.4.1.5624.1.2.25.1.2.1.1 | | not-accessible | Each conceptual row provides control over all of the
initial values used by each authenticated MAC on
this port. Subsequent changes to rows in this table,
except where noted, have no effect on existing MACs
authenticated on this port. |
| NUM etsysMACAuthenticationPort | 1.3.6.1.4.1.5624.1.2.25.1.2.1.1.1 | InterfaceIndex | not-accessible | This is the InterfaceIndex associated with this row. |
| T/F etsysMACAuthenticationPortInitialize | 1.3.6.1.4.1.5624.1.2.25.1.2.1.1.2 | TruthValue | read-write | When set to true(1), the MAC authentication logic on this
port is initialized, forcibly ending all MAC authentication
sessions currently in existence on this port. A set with
the value false(2) has no affect and a read always returns
false. |
| T/F etsysMACAuthenticationPortReauthenticate | 1.3.6.1.4.1.5624.1.2.25.1.2.1.1.3 | TruthValue | read-write | When set to true(1), the MAC authentication entity on
this port is required to immediately verify all currently
authenticated MACs on this port. This requires that each
MAC address be authenticated with the authentication server
through the local authentication client or some other
authentication mechanism. Each supplicant remains
authenticated pending the outcome. |
| ENA etsysMACAuthenticationPortEnable | 1.3.6.1.4.1.5624.1.2.25.1.2.1.1.4 | EnabledStatus | read-write | When set to enabled(1), a platform dependent triggering
mechanism initiates an authentication exchange using a
MAC address for authentication credentials.
When disabled(2), authentication attempts are disabled
and all currently authenticated MAC sessions or those in
the process of authentication on this port are terminated. |
| U32 etsysMACAuthenticationPortQuietPeriod | 1.3.6.1.4.1.5624.1.2.25.1.2.1.1.5 | Unsigned32 | read-write | The value, in seconds, following a failed authentication
before another may be attempted on this port. This object
allows network management to provide hysteresis for failed
authentication requests from the same port. |
| U32 etsysMACAuthenticationPortReauthPeriod | 1.3.6.1.4.1.5624.1.2.25.1.2.1.1.6 | Unsigned32 | read-write | The value, in seconds, between attempts to re-authenticate
any current MAC authenticated on this port. |
| ENA etsysMACAuthenticationPortReauthEnabled | 1.3.6.1.4.1.5624.1.2.25.1.2.1.1.7 | EnabledStatus | read-write | If enabled(1), then every etsysMACAuthenticationReauthPeriod
the switch attempts to validate all currently authenticated
MACs on this port. When set to disabled(2) all current
re-authentications in progress are allowed to complete and
the requisite actions are taken. When set to disabled(2), no
further re-authentications are attempted. |
| U32 etsysMACAuthenticationAuthenticationsAllowed | 1.3.6.1.4.1.5624.1.2.25.1.2.1.1.8 | Unsigned32 | read-only | The maximum number of concurrent authentications supported
on this port on this module. The default value of this
object is platform and resource dependent. |
| U32 etsysMACAuthenticationAuthenticationsAllocated | 1.3.6.1.4.1.5624.1.2.25.1.2.1.1.9 | Unsigned32 | read-write | The maximum number of MAC authentications permitted on this
port on this module. This value must be non-zero and be less
than or equal to the value of
etsysMACAuthenticationAuthenticationsAllowed. Setting this
object to a value less than the current number of authenticated
MACs on this port prevents further authentications, but has no
affect on the current sessions. |
| STR etsysMACAuthenticationLastFailedAuthCause | 1.3.6.1.4.1.5624.1.2.25.1.2.1.1.10 | SnmpAdminString | read-only | The string will be formatted with
'XX-XX-XX-XX-XX-XX: TIME&DATE: Textual failure reason';
where XX-XX-XX-XX-XX-XX is the MAC address and TIME&DATE
is the time (hh/mm/ss) and date (mm/dd/yyyy) of the failure.
It is also only best effort; as there could be multiple
failures per port and the agent may query this at any random
time. |
| etsysMACAuthenticationMACConfig | 1.3.6.1.4.1.5624.1.2.25.1.3 | | | |
| etsysMACAuthenticationMACConfigTable | 1.3.6.1.4.1.5624.1.2.25.1.3.1 | | not-accessible | A table containing configuration objects for each MAC
authenticated on a port. Each row in this table
is created dynamically when a MAC authenticates
on a port. |
| etsysMACAuthenticationMACConfigEntry | 1.3.6.1.4.1.5624.1.2.25.1.3.1.1 | | not-accessible | Each conceptual row inherits it's initial information
from the row in the etsysMACAuthenticationPortConfigTable
corresponding to the correct port. Each row represents an
authenticated MAC. |
| MAC etsysMACAuthenticationMACAddress | 1.3.6.1.4.1.5624.1.2.25.1.3.1.1.1 | MacAddress | not-accessible | This is the MAC address that was authenticated on this port. |
| NUM etsysMACAuthenticationSupplicantPort | 1.3.6.1.4.1.5624.1.2.25.1.3.1.1.2 | InterfaceIndex | read-only | This is the InterfaceIndex associated with this rows
authenticated MAC. |
| T/F etsysMACAuthenticationMACInitialize | 1.3.6.1.4.1.5624.1.2.25.1.3.1.1.3 | TruthValue | read-write | When set to true(1), this MAC session terminates causing the
corresponding row in this table and in the
etsysMACAuthenticationSessionTable to be removed.
Setting this object to false(2) has no effect on the system.
Reads of this object always return false(2). |
| T/F etsysMACAuthenticationMACReauthenticate | 1.3.6.1.4.1.5624.1.2.25.1.3.1.1.4 | TruthValue | read-write | When set to true(1), this MAC authentication session on this
port is required to immediately verify it's credentials.
This requires that each MAC address be authenticated with the
authentication server through the local authentication client
or some other authentication mechanism.
Setting this object to false(2) has no effect on the system.
Reads of this object always return false(2). |
| U32 etsysMACAuthenticationMACReauthPeriod | 1.3.6.1.4.1.5624.1.2.25.1.3.1.1.5 | Unsigned32 | read-only | The value, in seconds, between attempts to re-authenticate
the MAC associated with this row. |
| ENA etsysMACAuthenticationMACReauthEnabled | 1.3.6.1.4.1.5624.1.2.25.1.3.1.1.6 | EnabledStatus | read-only | If enabled(1), then every etsysMACAuthenticationReauthPeriod
the switch attempts to validate all currently authenticated
MACs on this port. If disabled(2), reauthentication is
not attempted. |
| etsysMACAuthenticationMACSession | 1.3.6.1.4.1.5624.1.2.25.1.4 | | | |
| etsysMACAuthenticationSessionTable | 1.3.6.1.4.1.5624.1.2.25.1.4.1 | | not-accessible | A table containing configuration objects for each MAC
authentication on a port. The successful completion of
an authentication causes the creation of a new row in
this table. When a MAC becomes unauthenticated because
of a link-down, a management change, or system
re-initialization, then the corresponding row is removed
from this table. |
| etsysMACAuthenticationSessionEntry | 1.3.6.1.4.1.5624.1.2.25.1.4.1.1 | | not-accessible | Each conceptual row inherits it's initial information
from the row in the etsysMACAuthenticationPortConfigTable
corresponding to the correct port. Each row represents an
authenticated MAC. |
| NUM etsysMACAuthenticationSessionPort | 1.3.6.1.4.1.5624.1.2.25.1.4.1.1.1 | InterfaceIndex | read-only | This is the InterfaceIndex associated with the authenticated
MACs session. |
| U32 etsysMACAuthenticationDuration | 1.3.6.1.4.1.5624.1.2.25.1.4.1.1.2 | Unsigned32 | read-only | The value, in seconds, which have elapsed since the start
of this session. |
| etsysMACAuthenticationConformance | 1.3.6.1.4.1.5624.1.2.25.2 | | | |
| etsysMACAuthenticationGroups | 1.3.6.1.4.1.5624.1.2.25.2.1 | | | |
| etsysMACAuthenticationSystemGroup | 1.3.6.1.4.1.5624.1.2.25.2.1.1 | | | Global object controlling this feature.
Global objects that affect how the credentials are
presented to the authentication server. |
| etsysMACAuthenticationPortConfigGroup | 1.3.6.1.4.1.5624.1.2.25.2.1.2 | | | Objects describing the MAC Authentication
configuration for each port. |
| etsysMACAuthenticationMACConfigGroup | 1.3.6.1.4.1.5624.1.2.25.2.1.3 | | | Objects associated with an individual MACs
authentication configuration. |
| etsysMACAuthenticationMACSessionGroup | 1.3.6.1.4.1.5624.1.2.25.2.1.4 | | | Objects associated with a MAC Session |
| etsysMACAuthenticationCompliances | 1.3.6.1.4.1.5624.1.2.25.2.2 | | | |
| etsysMACAuthenticationCompliance | 1.3.6.1.4.1.5624.1.2.25.2.2.1 | | | The compliance statement for devices that support MAC-Authentication. |
