ENTERASYS-MULTI-USER-8021X-MIB

All MIBs › ENTERASYS-MULTI-USER-8021X-MIB

Organization: Enterasys Networks, Inc

Last Updated: 2004-11-11

Category: Protocol: 802.1X, Vendor: Enterasys/Cabletron

Description: Enterasys Networks MIB for multi-user IEEE 802.1X authentication, supporting per-MAC authentication statistics on a port.

Start monitoring vendor-neutral, standards-based MIB, any SNMPv3-capable network device (SNMP engine identity/boot/clock status) with a free 30-day trial of IPNetwork Monitor. Import MIBs, browse SNMP OIDs, create custom SNMP monitors, configure alerts, and monitor any SNMP-enabled network device from a single console.

What Is ENTERASYS-MULTI-USER-8021X-MIB?

ENTERASYS-MULTI-USER-8021X-MIB is an Enterasys Networks proprietary MIB (extending the standard IEEE 802.1X-2001 MIB) supporting multiple concurrent 802.1X-authenticated users on a single switch port. Its access-entity table, keyed by index, records active flag, authenticator state, backend-authentication state, initialize/reauthenticate triggers, re-auth period, supplicant MAC address, and username, while a companion statistics table counts EAPOL frames received/sent, start/logoff/response-ID/response frames received, request-ID/request frames sent, invalid EAPOL frames, EAP length-error frames, EAPOL frame version, and frame source. As a configuration/protocol-status MIB it lets an administrator confirm each concurrently-authenticated user's 802.1X state and username on a shared port. It is deployed on Enterasys Networks managed switches with multi-user 802.1X. Engineers can download the ENTERASYS-MULTI-USER-8021X-MIB file directly to load it into their MIB browser.

IPNetwork Monitor allows you to monitor SNMP objects defined in ENTERASYS-MULTI-USER-8021X-MIB. Use the built-in SNMP Monitoring Browser to explore available variables, view their current values and descriptions, and select the objects you want to monitor. You can then create SNMP monitors, configure thresholds, and receive alerts when monitored values change.

Supported Devices

Enterasys Networks managed switches (multi-user 802.1X)

Monitoring Examples

An administrator checks etsysMulti1xAeUserName and AeState to identify which specific user on a shared multi-user 802.1X port is failing authentication on an Enterasys switch.

What Can Be Monitored

per-user 802.1X authentication state and EAPOL statistics

Imported Objects

From ENTERASYS-MIB-NAMES

etsysModules

OBJECT-IDENTITY

From IEEE8021-PAE-MIB

dot1xPaePortNumber

OBJECT-TYPE

From SNMP-FRAMEWORK-MIB

SnmpAdminString

From SNMPv2-CONF

MODULE-COMPLIANCE
OBJECT-GROUP

From SNMPv2-SMI

Counter32
Counter64
MODULE-IDENTITY
OBJECT-TYPE
TimeTicks
Unsigned32

From SNMPv2-TC

MacAddress
TruthValue

How to Use in IPNetwork Monitor

Example using etsysMulti1xAeEapolFramesRx OID:

Select an Enterasys Networks switch (legacy, later Extreme Networks) (multi-user 802.1X per port) as the target host to create a monitor — the SNMP service should be up and running on it. Click New Monitor, then check SNMP Custom on the Favorites tab, click Next, and confirm the host. On the next page, click Select... to open the built-in SNMP MIB Browser and type etsysMulti1xAeEapolFramesRx into the Find box to locate it in the OID tree, selecting the specific row/instance you want to monitor since this is a table column, then select it and click OK. The number of valid EAPOL frames of any type that have been received by this Access Entity. On the monitor's Main parameters page you can set the target's SNMP port (default 161), credentials, polling interval, and other settings — see the SNMP Monitor help for details. On the State conditions and Alerting tabs, configure when the monitor should change state and trigger an alert; since this is a Counter32-type OID, Value bounds is the most useful condition here — trigger an alert if the counter increases sharply between polls relative to its normal baseline, since an unexpected spike often reflects a real change in traffic or activity. Click Finish to create the monitor; you can adjust any parameter later.

OIDs

OID symbolic	OID numeric	Type	Access	Description
etsysMulti1xAccessEntityEntry	1.3.6.1.4.1.5624.1.2.53.1.2.1.1		not-accessible	The system and configuration information for an individual Access Entity.
etsysMulti1xAccessEntityStatsEntry	1.3.6.1.4.1.5624.1.2.53.1.2.2.1		not-accessible	The statistics information for an individual Access Entity.
etsysMulti1xAccessEntityStatsTable	1.3.6.1.4.1.5624.1.2.53.1.2.2		not-accessible	The statistics objects for the all the Access Entities.
etsysMulti1xAccessEntityTable	1.3.6.1.4.1.5624.1.2.53.1.2.1		not-accessible	The system and configuration information for all the Access Entities.
etsysMulti1xActiveAccessEntityEntry	1.3.6.1.4.1.5624.1.2.53.1.2.7.1		not-accessible	An individual active Access Entity.
etsysMulti1xActiveAccessEntityTable	1.3.6.1.4.1.5624.1.2.53.1.2.7		not-accessible	The active Access Entities.
MAC etsysMulti1xActiveSupplicantAddress	1.3.6.1.4.1.5624.1.2.53.1.2.7.1.1	MacAddress	read-only	The MAC address that this active Access Entity is currently bound to.
T/F etsysMulti1xAeActive	1.3.6.1.4.1.5624.1.2.53.1.2.1.1.2	TruthValue	read-only	Indicates if this Access Entity is currently active.
C32 etsysMulti1xAeAuthEapLogoffWhileAuthenticated	1.3.6.1.4.1.5624.1.2.53.1.2.3.1.12	Counter32	read-only	Counts the number of times that the state machine transitions from AUTHENTICATED to DISCONNECTED, as a result of an EAPOL-Logoff message being received from the Supplicant.
C32 etsysMulti1xAeAuthEapLogoffWhileAuthenticating	1.3.6.1.4.1.5624.1.2.53.1.2.3.1.9	Counter32	read-only	Counts the number of times that the state machine transitions from AUTHENTICATING to ABORTING, as a result of an EAPOL-Logoff message being received from the Supplicant.
C32 etsysMulti1xAeAuthEapStartsWhileAuthenticated	1.3.6.1.4.1.5624.1.2.53.1.2.3.1.11	Counter32	read-only	Counts the number of times that the state machine transitions from AUTHENTICATED to CONNECTING, as a result of an EAPOL-Start message being received from the Supplicant.
C32 etsysMulti1xAeAuthEapStartsWhileAuthenticating	1.3.6.1.4.1.5624.1.2.53.1.2.3.1.8	Counter32	read-only	Counts the number of times that the state machine transitions from AUTHENTICATING to ABORTING, as a result of an EAPOL-Start message being received from the Supplicant.
C32 etsysMulti1xAeAuthFailWhileAuthenticating	1.3.6.1.4.1.5624.1.2.53.1.2.3.1.6	Counter32	read-only	Counts the number of times that the state machine transitions from AUTHENTICATING to HELD, as a result of the Backend Authentication state machine indicating authentication failure (authFail = TRUE).
C32 etsysMulti1xAeAuthReauthsWhileAuthenticated	1.3.6.1.4.1.5624.1.2.53.1.2.3.1.10	Counter32	read-only	Counts the number of times that the state machine transitions from AUTHENTICATED to CONNECTING, as a result of a reauthentication request (reAuthenticate = TRUE).
C32 etsysMulti1xAeAuthReauthsWhileAuthenticating	1.3.6.1.4.1.5624.1.2.53.1.2.3.1.7	Counter32	read-only	Counts the number of times that the state machine transitions from AUTHENTICATING to ABORTING, as a result of a reauthentication request (reAuthenticate = TRUE).
C32 etsysMulti1xAeAuthSuccessWhileAuthenticating	1.3.6.1.4.1.5624.1.2.53.1.2.3.1.4	Counter32	read-only	Counts the number of times that the state machine transitions from AUTHENTICATING to AUTHENTICATED, as a result of the Backend Authentication state machine indicating successful authentication of the Supplicant (authSuccess = TRUE).
C32 etsysMulti1xAeAuthTimeoutsWhileAuthenticating	1.3.6.1.4.1.5624.1.2.53.1.2.3.1.5	Counter32	read-only	Counts the number of times that the state machine transitions from AUTHENTICATING to ABORTING, as a result of the Backend Authentication state machine indicating authentication timeout (authTimeout = TRUE).
C32 etsysMulti1xAeBackendAccessChallenges	1.3.6.1.4.1.5624.1.2.53.1.2.3.1.14	Counter32	read-only	Counts the number of times that the state machine receives an initial Access-Challenge packet from the Authentication server (i.e., aReq becomes TRUE, causing exit from the RESPONSE state). Indicates that the Authentication Server has communication with the Authenticator.
C32 etsysMulti1xAeBackendAuthFails	1.3.6.1.4.1.5624.1.2.53.1.2.3.1.18	Counter32	read-only	Counts the number of times that the state machine receives an EAP-Failure message from the Authentication Server (i.e., aFail becomes TRUE, causing a transition from RESPONSE to FAIL). Indicates that the Supplicant has not authenticated to the Authentication Server.
INT etsysMulti1xAeBackendAuthState	1.3.6.1.4.1.5624.1.2.53.1.2.1.1.4	INTEGER	read-only	The current state of the Backend Authentication state machine.
C32 etsysMulti1xAeBackendAuthSuccesses	1.3.6.1.4.1.5624.1.2.53.1.2.3.1.17	Counter32	read-only	Counts the number of times that the state machine receives an EAP-Success message from the Authentication Server (i.e., aSuccess becomes TRUE, causing a transition from RESPONSE to SUCCESS). Indicates that the Supplicant has successfully authenticated to the Authentication Server.
C32 etsysMulti1xAeBackendNonNakResponsesFromSupplicant	1.3.6.1.4.1.5624.1.2.53.1.2.3.1.16	Counter32	read-only	Counts the number of times that the state machine receives a response from the Supplicant to an initial EAP-Request, and the response is something other than EAP-NAK (i.e., rxResp becomes TRUE, causing the state machine to transition from REQUEST to RESPONSE, and the response is not an EAP-NAK). Indicates that the Supplicant can respond to the Authenticator's chosen EAP-method.
C32 etsysMulti1xAeBackendOtherRequestsToSupplicant	1.3.6.1.4.1.5624.1.2.53.1.2.3.1.15	Counter32	read-only	Counts the number of times that the state machine sends an EAP-Request packet (other than an Identity, Notification, Failure or Success message) to the Supplicant (i.e., executes txReq on entry to the REQUEST state). Indicates that the Authenticator chose an EAP-method.
C32 etsysMulti1xAeBackendResponses	1.3.6.1.4.1.5624.1.2.53.1.2.3.1.13	Counter32	read-only	Counts the number of times that the state machine sends an initial Access-Request packet to the Authentication server (i.e., executes sendRespToServer on entry to the RESPONSE state). Indicates that the Authenticator attempted communication with the Authentication Server.
etsysMulti1xAeDiagEntry	1.3.6.1.4.1.5624.1.2.53.1.2.3.1		not-accessible	The diagnostics information for an individual Access Entity.
etsysMulti1xAeDiagTable	1.3.6.1.4.1.5624.1.2.53.1.2.3		not-accessible	The diagnostics objects for all the Access Entities.
C32 etsysMulti1xAeEapLengthErrorFramesRx	1.3.6.1.4.1.5624.1.2.53.1.2.2.1.10	Counter32	read-only	The number of EAPOL frames that have been received by this Access Entity in which the Packet Body Length field is invalid.
C32 etsysMulti1xAeEapLogoffsWhileConnecting	1.3.6.1.4.1.5624.1.2.53.1.2.3.1.2	Counter32	read-only	Counts the number of times that the state machine transitions from CONNECTING to DISCONNECTED as a result of receiving an EAPOL-Logoff message.
MAC etsysMulti1xAeEapolFrameSource	1.3.6.1.4.1.5624.1.2.53.1.2.2.1.12	MacAddress	read-only	The source MAC address carried in the most recently received EAPOL frame.
C32 etsysMulti1xAeEapolFramesRxEx	1.3.6.1.4.1.5624.1.2.53.1.2.2.1.1	Counter32	read-only	The number of valid EAPOL frames of any type that have been received by this Access Entity.
C32 etsysMulti1xAeEapolFramesTx	1.3.6.1.4.1.5624.1.2.53.1.2.2.1.2	Counter32	read-only	The number of EAPOL frames of any type that have been transmitted by this Access Entity.
U32 etsysMulti1xAeEapolFrameVersion	1.3.6.1.4.1.5624.1.2.53.1.2.2.1.11	Unsigned32	read-only	The protocol version number carried in the most recently received EAPOL frame.
C32 etsysMulti1xAeEapolLogoffFramesRx	1.3.6.1.4.1.5624.1.2.53.1.2.2.1.4	Counter32	read-only	The number of EAPOL Logoff frames that have been received by this Access Entity.
C32 etsysMulti1xAeEapolReqFramesTx	1.3.6.1.4.1.5624.1.2.53.1.2.2.1.8	Counter32	read-only	The number of EAP Request frames (other than Rq/Id frames) that have been transmitted by this Access Entity.
C32 etsysMulti1xAeEapolReqIdFramesTx	1.3.6.1.4.1.5624.1.2.53.1.2.2.1.7	Counter32	read-only	The number of EAP Req/Id frames that have been transmitted by this Access Entity.
C32 etsysMulti1xAeEapolRespFramesRx	1.3.6.1.4.1.5624.1.2.53.1.2.2.1.6	Counter32	read-only	The number of valid EAP Response frames (other than Resp/Id frames) that have been received by this Access Entity.
C32 etsysMulti1xAeEapolRespIdFramesRx	1.3.6.1.4.1.5624.1.2.53.1.2.2.1.5	Counter32	read-only	The number of EAP Resp/Id frames that have been received by this Access Entity.
C32 etsysMulti1xAeEapolStartFramesRx	1.3.6.1.4.1.5624.1.2.53.1.2.2.1.3	Counter32	read-only	The number of EAPOL Start frames that have been received by this Access Entity.
C32 etsysMulti1xAeEntersAuthenticating	1.3.6.1.4.1.5624.1.2.53.1.2.3.1.3	Counter32	read-only	Counts the number of times that the state machine transitions from CONNECTING to AUTHENTICATING, as a result of an EAP-Response/Identity message being received from the Supplicant.
C32 etsysMulti1xAeEntersConnecting	1.3.6.1.4.1.5624.1.2.53.1.2.3.1.1	Counter32	read-only	Counts the number of times that the state machine transitions to the CONNECTING state from any other state.
U32 etsysMulti1xAeIndex	1.3.6.1.4.1.5624.1.2.53.1.2.1.1.1	Unsigned32	not-accessible	Indicates if this Access Entity is currently active.
T/F etsysMulti1xAeInitialize	1.3.6.1.4.1.5624.1.2.53.1.2.1.1.5	TruthValue	read-write	The initialization control for this Access Entity. Setting this attribute TRUE causes the Access Entity to be initialized. The attribute value reverts to FALSE once initialization has completed.
C32 etsysMulti1xAeInvalidEapolFramesRx	1.3.6.1.4.1.5624.1.2.53.1.2.2.1.9	Counter32	read-only	The number of EAPOL frames that have been received by this Access Entity in which the frame type is not recognized.
T/F etsysMulti1xAeReauthenticate	1.3.6.1.4.1.5624.1.2.53.1.2.1.1.6	TruthValue	read-write	The reauthentication control for this Access Entity. Setting this attribute TRUE causes the Access Entity state machine to reauthenticate the Supplicant. Setting this attribute FALSE has no effect. This attribute always returns FALSE when it is read.
U32 etsysMulti1xAeReAuthPeriod	1.3.6.1.4.1.5624.1.2.53.1.2.1.1.7	Unsigned32	read-only	The value, in seconds, of the reAuthPeriod constant currently in use by the Reauthentication Timer state machine.
INT etsysMulti1xAeState	1.3.6.1.4.1.5624.1.2.53.1.2.1.1.3	INTEGER	read-only	The current value of the Access Entity state machine.
MAC etsysMulti1xAeSupplicantAddress	1.3.6.1.4.1.5624.1.2.53.1.2.1.1.8	MacAddress	read-only	The MAC address that this Access Entity is currently bound to.
STR etsysMulti1xAeUserName	1.3.6.1.4.1.5624.1.2.53.1.2.1.1.9	SnmpAdminString	read-only	The User-Name representing the identity of the Supplicant PAE.
T/F etsysMulti1xSessionActive	1.3.6.1.4.1.5624.1.2.53.1.2.4.1.10	TruthValue	read-only	Indicates if this session is currently active.
INT etsysMulti1xSessionAuthenticMethod	1.3.6.1.4.1.5624.1.2.53.1.2.4.1.6	INTEGER	read-only	The authentication method used to establish the session.
C32 etsysMulti1xSessionFramesRx	1.3.6.1.4.1.5624.1.2.53.1.2.4.1.3	Counter32	read-only	The number of user data frames received on this port for this session.
C32 etsysMulti1xSessionFramesTx	1.3.6.1.4.1.5624.1.2.53.1.2.4.1.4	Counter32	read-only	The number of user data frames transmitted on this port for this session.
STR etsysMulti1xSessionId	1.3.6.1.4.1.5624.1.2.53.1.2.4.1.5	SnmpAdminString	read-only	A unique identifier for the session, in the form of a printable ASCII string of at least three characters.
C64 etsysMulti1xSessionOctetsRx	1.3.6.1.4.1.5624.1.2.53.1.2.4.1.1	Counter64	read-only	The number of octets of user data received on this port for this session.
C64 etsysMulti1xSessionOctetsTx	1.3.6.1.4.1.5624.1.2.53.1.2.4.1.2	Counter64	read-only	The number of octets of user data transmitted on this port for this session.
etsysMulti1xSessionStatsEntry	1.3.6.1.4.1.5624.1.2.53.1.2.4.1		not-accessible	The session statistics for an individual Access Entity. This shows the current values being collected for each session that is still in progress, or the final values for the last valid session on each Access Entity where there is no session currently active.
etsysMulti1xSessionStatsTable	1.3.6.1.4.1.5624.1.2.53.1.2.4		not-accessible	The session statistics for all the Access Entities.
INT etsysMulti1xSessionTerminateCause	1.3.6.1.4.1.5624.1.2.53.1.2.4.1.8	INTEGER	read-only	The reason for the session termination.
TIK etsysMulti1xSessionTime	1.3.6.1.4.1.5624.1.2.53.1.2.4.1.7	TimeTicks	read-only	The duration of the session in seconds.
STR etsysMulti1xSessionUserName	1.3.6.1.4.1.5624.1.2.53.1.2.4.1.9	SnmpAdminString	read-only	The User-Name representing the identity of the Supplicant PAE.
T/F etsysMulti1xSupplicantActive	1.3.6.1.4.1.5624.1.2.53.1.2.5.1.1	TruthValue	read-only	Indicates if the associated Access Entity is currently active.
etsysMulti1xSupplicantAddressEntry	1.3.6.1.4.1.5624.1.2.53.1.2.5.1		not-accessible	Some basic information about an individual Access Entity.
etsysMulti1xSupplicantAddressTable	1.3.6.1.4.1.5624.1.2.53.1.2.5		not-accessible	The Access Entities relative to the supplicant MAC address, port, and access entity index.
STR etsysMulti1xSupplicantUserName	1.3.6.1.4.1.5624.1.2.53.1.2.5.1.2	SnmpAdminString	read-only	The User-Name representing the identity of the Supplicant PAE.
T/F etsysMulti1xUserActive	1.3.6.1.4.1.5624.1.2.53.1.2.6.1.3	TruthValue	read-only	Indicates if the associated Access Entity is currently active.
MAC etsysMulti1xUserAddress	1.3.6.1.4.1.5624.1.2.53.1.2.6.1.4	MacAddress	read-only	The User-Name representing the identity of the Supplicant PAE.
STR etsysMulti1xUserName	1.3.6.1.4.1.5624.1.2.53.1.2.6.1.2	SnmpAdminString	read-only	The User-Name representing the identity of the Supplicant PAE.
etsysMulti1xUserNameEntry	1.3.6.1.4.1.5624.1.2.53.1.2.6.1		not-accessible	Some basic information about an individual Access Entity.
STR etsysMulti1xUserNameIndex	1.3.6.1.4.1.5624.1.2.53.1.2.6.1.1	SnmpAdminString	not-accessible	The fixed length equivalent of the etsysMulti1xUserName object. When the length of the corresponding etsysMulti1xUserName object is less then 8 octets this object is padded with null octets. When the length of the corresponding etsysMulti1xUserName object is greater than 8 octets this object has the value of the etsysMulti1xUserName object truncated to 20 octets.
etsysMulti1xUserNameTable	1.3.6.1.4.1.5624.1.2.53.1.2.6		not-accessible	The Access Entities relative to the supplicant user name, or the initial part of the supplicant user name, port, and access entity index.
etsysMulti8021xCompliance	1.3.6.1.4.1.5624.1.2.53.2.2.1			The compliance statement for devices that support the Enterasys Multi User IEEE 802.1x MIB.
etsysMultiUser8021xAccessEntity	1.3.6.1.4.1.5624.1.2.53.1.2
etsysMultiUser8021xAccessEntityDiagGroup	1.3.6.1.4.1.5624.1.2.53.2.1.3			A collection of objects providing diagnostic statistics for all the Access Entities running on all the ports.
etsysMultiUser8021xAccessEntityGroup	1.3.6.1.4.1.5624.1.2.53.2.1.1			A collection of objects providing system and configuration information for all the Access Entities running on all the ports.
etsysMultiUser8021xAccessEntitySessionGroup	1.3.6.1.4.1.5624.1.2.53.2.1.4			A collection of objects providing session statistics for all the Access Entities running on all the ports.
etsysMultiUser8021xAccessEntityStatsGroup	1.3.6.1.4.1.5624.1.2.53.2.1.2			A collection of objects providing statistics information for all the Access Entities running on all the ports.
etsysMultiUser8021xActiveAccessEntityGroup	1.3.6.1.4.1.5624.1.2.53.2.1.7			The Supplicant Address for each active Access Entity.
etsysMultiUser8021xCompliances	1.3.6.1.4.1.5624.1.2.53.2.2
etsysMultiUser8021xConformance	1.3.6.1.4.1.5624.1.2.53.2
etsysMultiUser8021xGroups	1.3.6.1.4.1.5624.1.2.53.2.1
etsysMultiUser8021xMIB	1.3.6.1.4.1.5624.1.2.53			This MIB module defines a portion of the SNMP enterprise MIBs under Enterasys Networks' enterprise OID pertaining to Multi-User IEEE 802.1X authentication. This MIB is designed to supplement and be used in connection with the standard IEEE 802.1X-2001 MIB.
etsysMultiUser8021xObjects	1.3.6.1.4.1.5624.1.2.53.1
etsysMultiUser8021xSupplicantAddressGroup	1.3.6.1.4.1.5624.1.2.53.2.1.5			A collection of objects providing a means to look up all of the Access Entities that are associated with a particular supplicant address.
etsysMultiUser8021xSystem	1.3.6.1.4.1.5624.1.2.53.1.1
etsysMultiUser8021xUserNameGroup	1.3.6.1.4.1.5624.1.2.53.2.1.6			A collection of objects providing a means to look up all of the Access Entities that are associated with a particular user name.

RFC description

Extends IEEE 802.1X authentication with multi-user support on Enterasys network switches.

Start monitoring Enterasys Networks switch (legacy, later Extreme Networks) (multi-user 802.1X per port) with a free 30-day trial of IPNetwork Monitor. Import MIBs, browse SNMP OIDs, create custom SNMP monitors, configure alerts, and monitor any SNMP-enabled network device from a single console.

Download ENTERASYS-MULTI-USER-8021X-MIB