ENTERASYS-MULTI-AUTH-MIB

All MIBs › ENTERASYS-MULTI-AUTH-MIB

Organization: Enterasys Networks, Inc.

Last Updated: 2008-02-05

Category: Vendor: Enterasys/Cabletron

Description: Enterasys Networks MIB for configuring simultaneous multiple authentication mechanisms on a single switch port.

Start monitoring vendor-neutral, standards-based MIB, any SNMPv3-capable network device (SNMP engine identity/boot/clock status) with a free 30-day trial of IPNetwork Monitor. Import MIBs, browse SNMP OIDs, create custom SNMP monitors, configure alerts, and monitor any SNMP-enabled network device from a single console.

What Is ENTERASYS-MULTI-AUTH-MIB?

ENTERASYS-MULTI-AUTH-MIB is an Enterasys Networks private MIB that manages simultaneous multiple authentication mechanisms — IEEE 802.1X, Port Web Authentication (PWA), MAC authentication, Convergence End Point (CEP) detection, and RADIUS Snooping — running concurrently on a single switch port, as defined by the EtsysMultiAuthTypes textual convention. It organizes objects into system-, port-, station-, session-, and module-level branches (etsysMultiAuthSystem/Port/Station/Session/Module) and defines precedence ordering via EtsysMultiAuthTypePrecedence, which determines which authentication result governs network access when multiple methods succeed for the same client. Session state is tracked through EtsysMultiAuthStatus values (authSuccess, authFailed, authInProgress, authServerTimeout, authTerminated), giving visibility into per-client authentication outcomes and timeout behavior, with notifications for system/module maximum-user-count conditions. It depends on ENTITY-MIB, IF-MIB, INET-ADDRESS-MIB, and Enterasys's own ENTERASYS-UPN-TC-MIB and P-BRIDGE-MIB for indexing and status types, and is deployed on Enterasys switches enforcing layered network access control, documented in the ENTERASYS-MULTI-AUTH-MIB MIB.

IPNetwork Monitor allows you to monitor SNMP objects defined in ENTERASYS-MULTI-AUTH-MIB. Use the built-in SNMP Monitoring Browser to explore available variables, view their current values and descriptions, and select the objects you want to monitor. You can then create SNMP monitors, configure thresholds, and receive alerts when monitored values change.

Supported Devices

Enterasys Networks switches

Monitoring Examples

An operator polls the per-session EtsysMultiAuthStatus for a client station to confirm authSuccess(1) was reached, cross-checking which authentication type won under etsysMultiAuthSystemDefaultPrecedence; a session repeatedly reporting authServerTimeout(4) would indicate the RADIUS or other authentication server is unreachable, leaving the port's access decision to fall back to a lower-precedence method or deny access.

What Can Be Monitored

per-session authentication status (success/failed/in-progress/timeout/terminated)
authentication type precedence ordering
per-port and per-station authenticated user counts
system/module maximum-user-count notifications
authentication timeout configuration

Imported Objects

From ENTERASYS-MIB-NAMES

etsysModules

OBJECT-IDENTITY

From ENTERASYS-UPN-TC-MIB

StationAddress
StationAddressType

From ENTITY-MIB

entPhysicalIndex

OBJECT-TYPE

From IF-MIB

ifIndex

OBJECT-TYPE

From INET-ADDRESS-MIB

InetAddress
InetAddressType

From P-BRIDGE-MIB

EnabledStatus

From SNMPv2-CONF

MODULE-COMPLIANCE
NOTIFICATION-GROUP
OBJECT-GROUP

From SNMPv2-SMI

Gauge32
Integer32
MODULE-IDENTITY
NOTIFICATION-TYPE
OBJECT-TYPE
Unsigned32

From SNMPv2-TC

DateAndTime
TEXTUAL-CONVENTION
TimeStamp
TruthValue

How to Use in IPNetwork Monitor

Example using etsysMultiAuthSystemCurrentNumUsers OID:

Select an Enterasys Networks switch (legacy, later Extreme Networks) (concurrent 802.1X/PWA/MAC/CEP authentication) as the target host to create a monitor — the SNMP service should be up and running on it. Click New Monitor, then check SNMP Custom on the Favorites tab, click Next, and confirm the host. On the next page, click Select... to open the built-in SNMP MIB Browser and type etsysMultiAuthSystemCurrentNumUsers into the Find box to locate it in the OID tree, then select it and click OK. The current number of users the are actively authenticated, have authentications in progress, or the device is keeping authentication termination information for in the system. On the monitor's Main parameters page you can set the target's SNMP port (default 161), credentials, polling interval, and other settings — see the SNMP Monitor help for details. On the State conditions and Alerting tabs, configure when the monitor should change state and trigger an alert; since this is a Gauge32-type OID, Value bounds is the most useful condition here — trigger an alert if the counter increases sharply between polls relative to its normal baseline, since an unexpected spike often reflects a real change in traffic or activity. Click Finish to create the monitor; you can adjust any parameter later.

OIDs

OID symbolic	OID numeric	Type	Access	Description
etsysMultiAuthMIB	1.3.6.1.4.1.5624.1.2.46			This MIB module defines a portion of the SNMP MIB under the Enterasys Networks enterprise OID pertaining to configuration of multiple authentication mechanisms to be run simultaneously on a device.
etsysMultiAuthObjects	1.3.6.1.4.1.5624.1.2.46.1
etsysMultiAuthNotification	1.3.6.1.4.1.5624.1.2.46.1.0
NTF etsysMultiAuthSuccess	1.3.6.1.4.1.5624.1.2.46.1.0.1			An etsysMultiAuthSuccess trap signifies that the SNMP entity, acting in an agent role, has successfully authenticated a station on one of its interfaces. The included objects of etsysMultiAuthStationAddrType and etsysMultiAuthStationAddr uniquely identify the station that has been authenticated. The interface that the station was authenticated on is specified by the ifIndex object, and the type of authentication used is to authenticate the station is specified by the etsysMultiAuthSessionAgentType object. This trap will only be generated on interfaces that are in the authOptional(3) or authRequired(4) state.
NTF etsysMultiAuthFailed	1.3.6.1.4.1.5624.1.2.46.1.0.2			An etsysMultiAuthFailed trap signifies that the SNMP entity, acting in an agent role, has identified a station that attempted and subsequently failed to authenticate on one of its interfaces. The included objects of etsysMultiAuthStationAddrType and etsysMultiAuthStationAddr uniquely identify the station that attempted to authenticate. The interface that the station attempted to authenticate on is specified by the ifIndex object, and the type of authentication attempted is specified by the etsysMultiAuthSessionAgentType object. This trap will only be generated on interfaces that are in the authOptional(3) or authRequired(4) state.
NTF etsysMultiAuthTerminated	1.3.6.1.4.1.5624.1.2.46.1.0.3			An etsysMultiAuthTerminated trap signifies that the SNMP entity, acting in an agent role, has terminated the authentication of a station on one of its interfaces. The included objects of etsysMultiAuthStationAddrType and etsysMultiAuthStationAddr uniquely identify the station for which authentication was terminated. The interface that the station was previously authenticated on is specified by the ifIndex object, and the type of authentication that the station was terminated for is specified by the etsysMultiAuthSessionAgentType object. This trap will only be generated on interfaces that are in the authOptional(3) or authRequired(4) state.
NTF etsysMultiAuthMaxNumUsersReached	1.3.6.1.4.1.5624.1.2.46.1.0.4			An etsysMultiAuthMaxNumUsersReached trap signifies that the SNMP entity, acting in an agent role, has an interface where subsequent to a successful authentication, the number of current sessions on the interface equals the maximum number of sessions allowed for that interface. The interface that the maximum number of sessions has been reached is specified by the ifIndex object.
NTF etsysMultiAuthModuleMaxNumUsersReached	1.3.6.1.4.1.5624.1.2.46.1.0.5			An etsysMultiAuthModuleMaxNumUsersReached trap signifies that the SNMP entity, acting in an agent role, has a module where subsequent to a successful authentication, the number of current sessions on the module equals the maximum number of sessions allowed for that module. The module that the maximum number of sessions has been reached is specified by the entPhysicalIndex object.
NTF etsysMultiAuthSystemMaxNumUsersReached	1.3.6.1.4.1.5624.1.2.46.1.0.6			An etsysMultiAuthSystemMaxNumUsersReached trap signifies that the SNMP entity, acting in an agent role, where subsequent to a successful authentication, has the number of current sessions on the system equals the maximum number of sessions allowed for that system, .
etsysMultiAuthSystem	1.3.6.1.4.1.5624.1.2.46.1.1
BIT etsysMultiAuthSystemSupportedTypes	1.3.6.1.4.1.5624.1.2.46.1.1.1	Bits	read-only	This object specifies that authentication types that the device supports. A bit will be set for each corresponding type that is supported.
U32 etsysMultiAuthSystemMaxNumUsers	1.3.6.1.4.1.5624.1.2.46.1.1.2	Unsigned32	read-only	The maximum number of users the can be actively authenticated or have authentications in progress at one time in the system.
G32 etsysMultiAuthSystemCurrentNumUsersEx	1.3.6.1.4.1.5624.1.2.46.1.1.3	Gauge32	read-only	The current number of users the are actively authenticated, have authentications in progress, or the device is keeping authentication termination information for in the system.
INT etsysMultiAuthSystemMode	1.3.6.1.4.1.5624.1.2.46.1.1.4	INTEGER	read-write	The value strictIeee8021x(1) will cause the device to authenticate in strict adherence to IEEE Std. 802.1X-2001. In this mode no other authentication mechanisms will be active. While in this mode, changes may be made to other objects in the MIB, but they will have no effect on the operation of the device until such time as the system mode is changed to etsysMultiAuth(2). A set of this object to a value of etsysMultiAuth(2) will cause the device to authenticate using multiple authenticators simultaneously.
ETS etsysMultiAuthSystemDefaultPrecedence	1.3.6.1.4.1.5624.1.2.46.1.1.5	EtsysMultiAuthTypePrecedence	read-only	The precedence that authentication results will be applied to network traffic by default. This object will have a size equal to the number of enumerations specified by the EtsysMultiAuthTypes textual convention.
ETS etsysMultiAuthSystemAdminPrecedence	1.3.6.1.4.1.5624.1.2.46.1.1.6	EtsysMultiAuthTypePrecedence	read-write	This object allows one to modify the default precedence by which authentication results will be applied to network traffic. Sets to this object are not required to specify all of the types that the device supports. If less types are specified than are supported, then all types that were not specified will be given an operational precedence based on that type's default precedence relative to the last type specified. For example, if the default precedence is '030102'H and the object is set to '02'H then operational precedence would be '020301'H. A set to this object of a zero length octet string will clear the administrative precedence. In this case the operational precedence would be equal to the default precedence.
ETS etsysMultiAuthSystemOperPrecedence	1.3.6.1.4.1.5624.1.2.46.1.1.7	EtsysMultiAuthTypePrecedence	read-only	This object returns the operational precedence of authentication types as they will be applied to network traffic. The value returned by this object is the calculated result of the etsysMultiAuthSystemDefaultPrecedence and etsysMultiAuthSystemAdminPrecedence objects. This object will have a size equal to the number of enumerations specified by the EtsysMultiAuthTypes textual convention.
etsysMultiAuthTypePropertiesTable	1.3.6.1.4.1.5624.1.2.46.1.1.8		not-accessible	A table of properties per authentication type.
etsysMultiAuthTypePropertiesEntry	1.3.6.1.4.1.5624.1.2.46.1.1.8.1		not-accessible	An entry containing per authentication type properties.
ETS etsysMultiAuthType	1.3.6.1.4.1.5624.1.2.46.1.1.8.1.1	EtsysMultiAuthTypes	accessible-for-notify	The authentication type the entry properties pertain to.
U32 etsysMultiAuthSessionTimeout	1.3.6.1.4.1.5624.1.2.46.1.1.8.1.2	Unsigned32	read-write	The maximum number of seconds an authenticated session may last before termination of the session. A value of zero indicates that no session timeout will be applied. This value MAY be superseded by a session timeout value provided by the authenticating server. For example, if a session is authenticated by a RADIUS server, that server may encode a Session-Timeout Attribute in its authentication response. The operational timeout value of a given authenticated session is specified by the etsysMultiAuthSessionSessionTimeout object.
U32 etsysMultiAuthIdleTimeout	1.3.6.1.4.1.5624.1.2.46.1.1.8.1.3	Unsigned32	read-write	The maximum number of consecutive seconds an authenticated session may be idle before termination of the session. A value of zero indicates that no idle timeout will be applied. This value MAY be superseded by a idle timeout value provided by the authenticating server. For example, if a session is authenticated by a RADIUS server, that server may encode a Idle-Timeout Attribute in its authentication response. The operational idle timeout value of a given authenticated session is specified by the etsysMultiAuthSessionIdleTimeout object.
G32 etsysMultiAuthCurrentNumUsers	1.3.6.1.4.1.5624.1.2.46.1.1.8.1.4	Gauge32	read-only	The current number of users the are actively authenticated or have authentications in progress for this authentication type in the system.
ENA etsysMultiAuthSystemMaxNumUsersReachedTrapEnable	1.3.6.1.4.1.5624.1.2.46.1.1.9	EnabledStatus	read-write	This object allows for the enabling or disabling the transmission of the etsysMultiAuthSystemMaxNumUsersReached NOTIFICATION.
etsysMultiAuthPort	1.3.6.1.4.1.5624.1.2.46.1.2
etsysMultiAuthPortTable	1.3.6.1.4.1.5624.1.2.46.1.2.1		not-accessible	A table of per port information and configuration for user authentication.
etsysMultiAuthPortEntry	1.3.6.1.4.1.5624.1.2.46.1.2.1.1		not-accessible	An entry containing per port authentication data. Only interfaces that are able to authenticate users are represented in this table.
INT etsysMultiAuthPortMode	1.3.6.1.4.1.5624.1.2.46.1.2.1.1.1	INTEGER	read-write	This object specifies the authorization mode to use for packets received on this interface. A value of forceUnauthorized(1) indicates that the interface is always unauthenticated. A value of forceAuthorized(2) indicates that users on this port will always be considered to be authenticated. A value of authOptional(3) indicates that authentication is optional on this interface. Packets received from unauthenticated users on the interface will be processed using the static configuration of the interface. Users may promote the policy applied to their traffic by actively authenticating on this interface. A value of authRequired(4) indicates that all packets received on the interface will be dropped until authentication succeeds. Some authentication types, such as PWA, will not be fully functional in this mode of operation.
U32 etsysMultiAuthPortMaxNumUsers	1.3.6.1.4.1.5624.1.2.46.1.2.1.1.2	Unsigned32	read-only	The maximum number of users that can be actively authenticated or have authentications in progress at one time on this interface.
U32 etsysMultiAuthPortNumUsersAllowed	1.3.6.1.4.1.5624.1.2.46.1.2.1.1.3	Unsigned32	read-write	The user configured number of users that can be actively authenticated or have authentications in progress at one time on this interface. This object has a default value equal to the value of etsysMultiAuthPortMaxNumUsers for this interface. If the value set to this object is less than its current value, it will have the same effect as setting the etsysMultiAuthPortClearUsers object to a value of true(1).
G32 etsysMultiAuthPortCurrentNumUsers	1.3.6.1.4.1.5624.1.2.46.1.2.1.1.4	Gauge32	read-only	The current number of users that are actively authenticated or have authentications in progress at one time on this interface. By definition this value can not exceed the value specified by etsysMultiAuthPortMaxNumUsers for the same interface.
T/F etsysMultiAuthPortClearUsers	1.3.6.1.4.1.5624.1.2.46.1.2.1.1.5	TruthValue	read-write	Setting this object to a value of true(1) will cause all users that are currently authenticated or that have authentications in progress on this interface to become unauthenticated. This will cause any such entries with matching ifIndex values in the etsysMultiAuthSessionStationTable tables to change their authorization status to authTerminated(5). Setting this object to a value of false(2) has no effect. This object will always return a value of false(2).
BIT etsysMultiAuthPortTrapEnable	1.3.6.1.4.1.5624.1.2.46.1.2.1.1.6	Bits	read-write	This object allows for the enabling or disabling of each trap on a per interface basis. Setting a given bit to a value of 1 allows traps of that type to be sent for events on that interface. Setting a given bit to a value of 0 disallows traps of that type to be sent for events on that interface. The individual bits correlate to specific traps as follows: BIT NOTIFICATION ---------------------------------------------------------------- authSuccessTrap(0) etsysMultiAuthSuccess authFailedTrap(1) etsysMultiAuthFailed authTerminatedTrap(2) etsysMultiAuthTerminated maxNumUsersReachedTrap(3) etsysMultiAuthMaxNumUsersReached
etsysMultiAuthPortTypeTable	1.3.6.1.4.1.5624.1.2.46.1.2.2		not-accessible	A table of per port, per authentication type information.
etsysMultiAuthPortTypeEntry	1.3.6.1.4.1.5624.1.2.46.1.2.2.1		not-accessible	An entry containing per port, per authentication type data. Only interfaces that are able to authenticate users are represented in this table.
G32 etsysMultiAuthPortTypeCurrentNumUsers	1.3.6.1.4.1.5624.1.2.46.1.2.2.1.1	Gauge32	read-only	The current number of users the are actively authenticated or have authentications in progress for this authentication type on the specified port.
etsysMultiAuthStation	1.3.6.1.4.1.5624.1.2.46.1.3
etsysMultiAuthStationTable	1.3.6.1.4.1.5624.1.2.46.1.3.1		not-accessible	A table of station configuration on specific interfaces.
etsysMultiAuthStationEntry	1.3.6.1.4.1.5624.1.2.46.1.3.1.1		not-accessible	An entry containing authentication information on a per station, per port basis. Only interfaces that are able to authenticate users are represented in this table.
ADR etsysMultiAuthStationAddrType	1.3.6.1.4.1.5624.1.2.46.1.3.1.1.1	StationAddressType	accessible-for-notify	The type of station represented by etsysMultiAuthStationAddr.
ADR etsysMultiAuthStationAddr	1.3.6.1.4.1.5624.1.2.46.1.3.1.1.2	StationAddress	accessible-for-notify	The station address for the authenticated user.
T/F etsysMultiAuthStationClearUsers	1.3.6.1.4.1.5624.1.2.46.1.3.1.1.3	TruthValue	read-write	Setting this object to a value of true(1) will cause any users with the specified station address that are currently authenticated or that have authentications in progress to become unauthenticated. This will cause any entries with matching etsysMultiAuthStationAddr values in the etsysMultiAuthSessionStationTable tables to change their authorization status to authTerminated(5). Setting this object to a value of false(2) has no effect. This object will always return a value of false(2).
etsysMultiAuthSession	1.3.6.1.4.1.5624.1.2.46.1.4
etsysMultiAuthSessionStationTable	1.3.6.1.4.1.5624.1.2.46.1.4.1		not-accessible	A table of session information and configuration for user authentication. Entries in this table represent users in various stages of authentication. Entries that do not have a etsysMultiAuthSessionStationAuthStatus value of authSuccess(1) or authInProgress(3) MAY be removed by the agent as required in order to free resources for new user authentications.
etsysMultiAuthSessionStationEntry	1.3.6.1.4.1.5624.1.2.46.1.4.1.1		not-accessible	An entry containing authentication information on a per station, per port, per authentication agent type basis. Only interfaces that are able to authenticate users are represented in this table.
ETS etsysMultiAuthSessionAgentType	1.3.6.1.4.1.5624.1.2.46.1.4.1.1.1	EtsysMultiAuthTypes	accessible-for-notify	The type of authentication agent for this session.
ETS etsysMultiAuthSessionStationAuthStatus	1.3.6.1.4.1.5624.1.2.46.1.4.1.1.2	EtsysMultiAuthStatus	read-only	The status of authentication for this session.
TIM etsysMultiAuthSessionAuthAttemptTime	1.3.6.1.4.1.5624.1.2.46.1.4.1.1.3	TimeStamp	read-only	The value of sysUpTime when this session last attempted authorization. For entries that have a value of authInProgress(3) for etsysMultiAuthSessionStationAuthStatus this object MAY return a value of zero.
INT etsysMultiAuthSessionAuthServerType	1.3.6.1.4.1.5624.1.2.46.1.4.1.1.4	INTEGER	read-only	The type of authentication server used to authenticate this session. A value of radius(1) indicates that a RADIUS request and response were attempted in order to authenticate the session. A value of local(2) indicates that the session was authenticated by a local file or configuration on the device itself.
IPt etsysMultiAuthSessionAuthServerAddrType	1.3.6.1.4.1.5624.1.2.46.1.4.1.1.5	InetAddressType	read-only	The type of data returned by etsysMultiAuthSessionAuthServerAddr. If the etsysMultiAuthSessionAuthServerType leaf for this entry has a value of local(2) then this object MUST return a a value of unknown(0).
IP etsysMultiAuthSessionAuthServerAddr	1.3.6.1.4.1.5624.1.2.46.1.4.1.1.6	InetAddress	read-only	The network address of the authentication server for this session. If the etsysMultiAuthSessionAuthServerType leaf for this entry has a value of local(2) then this object MUST return a zero length string.
I32 etsysMultiAuthSessionPolicyIndex	1.3.6.1.4.1.5624.1.2.46.1.4.1.1.7	Integer32	read-only	The Policy Profile Index returned from the authentication server for this session. The value of zero indicates that no policy will be applied for this session. If the etsysMultiAuthSessionStationAuthStatus object returns a value of authSuccess(1), then a value of zero is the result of the policy not being configured on the authorization server. For all other values of etsysMultiAuthSessionStationAuthStatus a value of zero for this object is the result of authorization not succeeding or not having completed. All values other than zero are valid Policy Profile Indexes that specify the policy profile the user will receive on this interface. If a given user has been authenticated by multiple authentication types on the same interface the policy that is applied to the user's packets is determined by the precedence of the agents as specified by etsysMultiAuthSystemOperPrecedence. These indexes are suitable for indexing in the ENTERASYS-POLICY-PROFILE-MIB.
T/F etsysMultiAuthSessionIsApplied	1.3.6.1.4.1.5624.1.2.46.1.4.1.1.8	TruthValue	read-only	This object indicates whether this entry and the policy index contained within it are actively being applied to traffic matching the interface and station address of this entry. A value of true(1) indicates that this entry is being applied. A value of false(2) indicates that the entry is not being applied. Only one authentication type per interface station address ordered pair may be applied at a single time. The operational precedence of the various authentication types determines which if any type will be applied.
DAT etsysMultiAuthSessionTerminationTime	1.3.6.1.4.1.5624.1.2.46.1.4.1.1.9	DateAndTime	read-only	The local date and time that the session was terminated. If the session is not in the authTerminated(5) state this object MUST return '00000000'H.
U32 etsysMultiAuthSessionSessionTimeout	1.3.6.1.4.1.5624.1.2.46.1.4.1.1.10	Unsigned32	read-only	The maximum number of seconds this session may last before automatic termination. A value of zero indicates that no session timeout will be applied. This value MAY be provided by the etsysMultiAuthSessionTimeout object or by the authenticating server.
U32 etsysMultiAuthSessionIdleTimeout	1.3.6.1.4.1.5624.1.2.46.1.4.1.1.11	Unsigned32	read-only	The maximum number of consecutive seconds this session may be idle before automatic termination. A value of zero indicates that no idle timeout will be applied. This value MAY be provided by the etsysMultiAuthIdleTimeout object or by the authenticating server.
G32 etsysMultiAuthSessionDuration	1.3.6.1.4.1.5624.1.2.46.1.4.1.1.12	Gauge32	read-only	The length of this session in seconds. This object MAY return zero for a session in any state other than authSuccess(1).
G32 etsysMultiAuthSessionIdleTime	1.3.6.1.4.1.5624.1.2.46.1.4.1.1.13	Gauge32	read-only	The number of consecutive seconds this session has been idle. This object MAY return zero for a session in any state other than authSuccess(1).
I32 etsysMultiAuthSessionVlanTunnelAttribute	1.3.6.1.4.1.5624.1.2.46.1.4.1.1.14	Integer32	read-only	The VLAN Tunnel Attribute (Tunnel-Group-ID) returned from the authentication server for this session. This value is interpreted as the 12 bit VLAN identifier to be applied to traffic from the session entity. Policy VLAN classification rules have precedence in assigning VLAN, however, in the absence of any applicable rules, this VLAN will be used. If the traffic is already tagged, this VLAN will only be applied if TCI overwrite has been enabled (through Policy or ctDot1qPortReplaceTCI). A value of zero indicates that there is no authenticated VLAN ID for the given session (none was provided by the authentication server). Should a session become unauthenticated this value MUST return zero. A value of 4095 indicates that a the session has been authenticated, but that the VLAN returned could not be applied to the port (possibly because of resource constraints or misconfiguration). The traffic from the session entity will be assigned VLAN through Policy or standard 802.1Q mechanisms.
etsysMultiAuthSessionPortTable	1.3.6.1.4.1.5624.1.2.46.1.4.2		not-accessible	A table of session information and configuration for user authentication. This table represents the information specified in the etsysMultiAuthSessionStationTable with alternate indexing for faster lookups of data on per port basis.
etsysMultiAuthSessionPortEntry	1.3.6.1.4.1.5624.1.2.46.1.4.2.1		not-accessible	An entry containing authentication information on a per port, per station, per authentication agent type basis. Only interfaces that are able to authenticate users are represented in this table.
ETS etsysMultiAuthSessionPortAuthStatus	1.3.6.1.4.1.5624.1.2.46.1.4.2.1.1	EtsysMultiAuthStatus	read-only	The status of authentication for this session.
etsysMultiAuthModule	1.3.6.1.4.1.5624.1.2.46.1.5
etsysMultiAuthModuleTable	1.3.6.1.4.1.5624.1.2.46.1.5.1		not-accessible	A table of per module information for user authentication.
etsysMultiAuthModuleEntry	1.3.6.1.4.1.5624.1.2.46.1.5.1.1		not-accessible	An entry containing per module authentication data. Only physical indexes with a entPhysicalClass of module(9) are represented in this table. Furthermore, each entity represented in this table must have authentication resources that are separate from every other entity in the table.
U32 etsysMultiAuthModuleMaxNumUsers	1.3.6.1.4.1.5624.1.2.46.1.5.1.1.1	Unsigned32	read-only	The maximum number of users that can be actively authenticated or have authentications in progress at one time on the specified module.
G32 etsysMultiAuthModuleCurrentNumUsers	1.3.6.1.4.1.5624.1.2.46.1.5.1.1.2	Gauge32	read-only	The current number of users that are actively authenticated or have authentications in progress at one time on the specified module. By definition this value can not exceed the value specified by etsysMultiAuthModuleMaxNumUsers for the same module.
ENA etsysMultiAuthModuleMaxNumUsersReachedTrapEnable	1.3.6.1.4.1.5624.1.2.46.1.5.2	EnabledStatus	read-write	This object allows for the enabling or disabling the transmission of the etsysMultiAuthModuleMaxNumUsersReached NOTIFICATION.
etsysMultiAuthConformance	1.3.6.1.4.1.5624.1.2.46.2
etsysMultiAuthGroups	1.3.6.1.4.1.5624.1.2.46.2.1
etsysMultiAuthSystemGroup	1.3.6.1.4.1.5624.1.2.46.2.1.1			The system group for all devices supporting Multiple Authentication.
etsysMultiAuthPortBaseGroup	1.3.6.1.4.1.5624.1.2.46.2.1.2			The base level port group for all devices supporting Multiple Authentication.
etsysMultiAuthPortTrapGroup	1.3.6.1.4.1.5624.1.2.46.2.1.3			This group of objects for all devices supporting per interface SNMP notifications.
etsysMultiAuthStationGroup	1.3.6.1.4.1.5624.1.2.46.2.1.4			The station group for all devices supporting Multiple Authentication.
etsysMultiAuthSessionGroup	1.3.6.1.4.1.5624.1.2.46.2.1.5			The session group for all devices supporting Multiple Authentication.
etsysMultiAuthNotificationPortGroup	1.3.6.1.4.1.5624.1.2.46.2.1.6			The group of per interface notifications for Multiple Authentication.
etsysMultiAuthModuleGroup	1.3.6.1.4.1.5624.1.2.46.2.1.7			The module group for all devices supporting Multiple Authentication.
etsysMultiAuthSessionGroup2	1.3.6.1.4.1.5624.1.2.46.2.1.8			The session group for all devices supporting Multiple Authentication.
etsysMultiAuthTimeoutGroup	1.3.6.1.4.1.5624.1.2.46.2.1.9			The group of objects for all devices that support timing out Multiple Authentication sessions.
etsysMultiAuthCurrentNumUsersGroup	1.3.6.1.4.1.5624.1.2.46.2.1.10			The group of objects for all devices that support counting the number of current users on a per authentication type basis.
etsysMultiAuthModuleTrapGroup	1.3.6.1.4.1.5624.1.2.46.2.1.11			The group of objects for all devices supporting module SNMP notifications.
etsysMultiAuthSystemTrapGroup	1.3.6.1.4.1.5624.1.2.46.2.1.12			The group of objects for all devices supporting system SNMP notifications.
etsysMultiAuthNotificationModuleGroup	1.3.6.1.4.1.5624.1.2.46.2.1.13			The group of per module notifications for Multiple Authentication.
etsysMultiAuthNotificationSystemGroup	1.3.6.1.4.1.5624.1.2.46.2.1.14			The group of per system notifications for Multiple Authentication.
etsysMultiAuthTunnelAttributeGroup	1.3.6.1.4.1.5624.1.2.46.2.1.15			The group of objects for all devices supporting 802.1X RADIUS tunnel attributes for 802.1Q VLANs.
etsysMultiAuthCompliances	1.3.6.1.4.1.5624.1.2.46.2.2
etsysMultiAuthCompliance	1.3.6.1.4.1.5624.1.2.46.2.2.1			This compliance statement has been deprecated in favor of the expanded group defined by etsysMultiAuthCompliance2.
etsysMultiAuthCompliance2	1.3.6.1.4.1.5624.1.2.46.2.2.2			This compliance statement has been deprecated in favor of the expanded group defined by etsysMultiAuthCompliance3.
etsysMultiAuthCompliance3	1.3.6.1.4.1.5624.1.2.46.2.2.3			This compliance statement has been deprecated in favor of the expanded group defined by etsysMultiAuthCompliance4.
etsysMultiAuthTimeoutCompliance	1.3.6.1.4.1.5624.1.2.46.2.2.4			The compliance statement for devices that support timing out of Multiple Authentication sessions.
etsysMultiAuthCurrentNumUserCompliance	1.3.6.1.4.1.5624.1.2.46.2.2.5			The compliance statement for all devices that support counting the number of current users on a per authentication type basis.
etsysMultiAuthCompliance4	1.3.6.1.4.1.5624.1.2.46.2.2.6			The compliance statement for devices that support Multiple Authentication.
etsysMultiTunnelAttributeCompliance	1.3.6.1.4.1.5624.1.2.46.2.2.7			The compliance statement for all devices that support 802.1X RADIUS Tunnel Attributes.

RFC description

Enterasys simultaneous multiple authentication mechanisms configuration supporting RADIUS, TACACS+, and LDAP methods.

Start monitoring Enterasys Networks switch (legacy, later Extreme Networks) (concurrent 802.1X/PWA/MAC/CEP authentication) with a free 30-day trial of IPNetwork Monitor. Import MIBs, browse SNMP OIDs, create custom SNMP monitors, configure alerts, and monitor any SNMP-enabled network device from a single console.

Download ENTERASYS-MULTI-AUTH-MIB