ENTERASYS-QUARANTINE-AGENT-MIB

All MIBs › ENTERASYS-QUARANTINE-AGENT-MIB

Organization: Enterasys Networks, Inc

Last Updated: 2013-02-11

Category: Domain: Security, Vendor: Enterasys/Cabletron

Description: Enterasys Networks MIB for configuring the Quarantine Agent feature that isolates non-compliant endpoints at switch ports.

Start monitoring vendor-neutral, standards-based MIB, any SNMPv3-capable network device (SNMP engine identity/boot/clock status) with a free 30-day trial of IPNetwork Monitor. Import MIBs, browse SNMP OIDs, create custom SNMP monitors, configure alerts, and monitor any SNMP-enabled network device from a single console.

What Is ENTERASYS-QUARANTINE-AGENT-MIB?

ENTERASYS-QUARANTINE-AGENT-MIB is an Enterasys Networks (now Extreme Networks) enterprise MIB for the switch's Quarantine Agent feature, which isolates non-compliant or unauthenticated endpoints at the port level for network access control (NAC) purposes. It exposes system-wide and per-port configuration such as whether quarantine and account-enable features are active, per-port limits on allowed vs. allocated authentications, and session/idle timeout values. This MIB is oriented toward monitoring the software/security-policy status of the switch — how many authentication slots are in use per port versus the configured allowance, and whether quarantine enforcement is enabled — which helps detect ports saturated with pending authentications or endpoints stuck in quarantine. It complements Enterasys's broader NAC/authentication MIB suite and standards like 802.1X rather than defining authentication itself. It is deployed on Enterasys/Extreme access-layer switches enforcing endpoint compliance policy at the edge. Engineers can download the ENTERASYS-QUARANTINE-AGENT-MIB file directly to load it into their MIB browser.

IPNetwork Monitor allows you to monitor SNMP objects defined in ENTERASYS-QUARANTINE-AGENT-MIB. Use the built-in SNMP Monitoring Browser to explore available variables, view their current values and descriptions, and select the objects you want to monitor. You can then create SNMP monitors, configure thresholds, and receive alerts when monitored values change.

Supported Devices

Enterasys/Extreme Networks access switches

Monitoring Examples

An admin would check etsysQuarantineAgentSystemEnable and etsysQuarantineAgentSystemAccountEnable to confirm quarantine enforcement is globally active, then walk etsysQuarantineAgentPortTable/etsysQuarantineAgentPortEntry to compare etsysQuarantineAgentPortAuthenticationsAllocated against etsysQuarantineAgentPortAuthenticationsAllowed on a busy access port. A port where allocated authentications reach the allowed maximum would indicate it has run out of quarantine authentication capacity, blocking new endpoint connections, and etsysQuarantineAgentPortSessionTimeout/etsysQuarantineAgentPortIdleTimeout reveal how long quarantined sessions persist.

What Can Be Monitored

quarantine feature enable state
per-port authentication allocation vs. allowance
port quarantine enable status
session/idle timeout settings

Imported Objects

From ENTERASYS-MIB-NAMES

etsysModules

OBJECT-IDENTITY

From IF-MIB

ifIndex

OBJECT-TYPE

From P-BRIDGE-MIB

EnabledStatus

From SNMPv2-CONF

MODULE-COMPLIANCE
OBJECT-GROUP

From SNMPv2-SMI

MODULE-IDENTITY
OBJECT-TYPE
Unsigned32

OIDs

OID symbolic	OID numeric	Type	Access	Description
etsysQuarantineAgentMIB	1.3.6.1.4.1.5624.1.2.93			This MIB module defines a portion of the SNMP MIB under the Enterasys Networks enterprise OID pertaining to configuration of the Quarantine Agent on a device.
etsysQuarantineAgentBody	1.3.6.1.4.1.5624.1.2.93.2
etsysQuarantineAgentObjects	1.3.6.1.4.1.5624.1.2.93.2.1
etsysQuarantineAgentSystem	1.3.6.1.4.1.5624.1.2.93.2.1.1
ENA etsysQuarantineAgentSystemEnable	1.3.6.1.4.1.5624.1.2.93.2.1.1.1	EnabledStatus	read-write	When enabled(1), all objects in this MIB are fully active. When disabled(2), this object overrides all other object settings in this MIB without affecting their values.
ENA etsysQuarantineAgentSystemAccountEnable	1.3.6.1.4.1.5624.1.2.93.2.1.1.2	EnabledStatus	read-write	When enabled(1), RADIUS accounting start, interim and stop frames are sent to the configured RADIUS server(s). When disabled(2), accounting packets are not sent to the RADIUS server.
etsysQuarantineAgentPort	1.3.6.1.4.1.5624.1.2.93.2.1.2
etsysQuarantineAgentPortTable	1.3.6.1.4.1.5624.1.2.93.2.1.2.1		not-accessible	A table containing configuration objects for each quarantine agent port. The configuration for each port in this table must be non-volatile.
etsysQuarantineAgentPortEntry	1.3.6.1.4.1.5624.1.2.93.2.1.2.1.1		not-accessible	Each conceptual row provides control over all of the initial values used by each quarantine agent MAC on this port. Subsequent changes to rows in this table, except where noted, have no effect on existing quarantined sessions on this port.
ENA etsysQuarantineAgentPortEnable	1.3.6.1.4.1.5624.1.2.93.2.1.2.1.1.2	EnabledStatus	read-write	When set to enabled(1), a platform dependent triggering mechanism allows for quarantined sessions on this port. When disabled(2), quarantined sessions are disabled and all currently quarantined sessions or those in the process of being quarantined on this port are terminated.
U32 etsysQuarantineAgentPortAuthenticationsAllowed	1.3.6.1.4.1.5624.1.2.93.2.1.2.1.1.3	Unsigned32	read-only	The maximum number of concurrent quarantined sessions supported on this port on this module. The default value of this object is platform and resource dependent.
U32 etsysQuarantineAgentPortAuthenticationsAllocated	1.3.6.1.4.1.5624.1.2.93.2.1.2.1.1.4	Unsigned32	read-write	The maximum number of quarantined sessions permitted on this port on this module. This value must be non-zero and be less than or equal to the value of etsysQuarantineAgentPortAuthenticationsAllowed. Setting this object to a value less than the current number of quarantined sessions on this port prevents further quarantine agent provisioning, but has no affect on the current sessions.
U32 etsysQuarantineAgentPortSessionTimeout	1.3.6.1.4.1.5624.1.2.93.2.1.2.1.1.5	Unsigned32	read-write	The maximum number of seconds a quarantined session may last before termination of the session. A value of zero indicates that the global etsysMultiAuthSessionTimeout value will be used.
U32 etsysQuarantineAgentPortIdleTimeout	1.3.6.1.4.1.5624.1.2.93.2.1.2.1.1.6	Unsigned32	read-write	The maximum number of consecutive seconds a quarantined session may be idle before termination of the session. A value of zero indicates that the global etsysMultiAuthSessionTimeout value will be used.
etsysQuarantineAgentConformance	1.3.6.1.4.1.5624.1.2.93.3
etsysQuarantineAgentGroups	1.3.6.1.4.1.5624.1.2.93.3.1
etsysQuarantineAgentSystemGroup	1.3.6.1.4.1.5624.1.2.93.3.1.1			Global object controlling this feature. Global objects that affect how the credentials are presented to the authentication server.
etsysQuarantineAgentPortGroup	1.3.6.1.4.1.5624.1.2.93.3.1.2			Objects describing the Quarantine Agent variables for each port.
etsysQuarantineAgentSystemGroup2	1.3.6.1.4.1.5624.1.2.93.3.1.3			Global object controlling this feature. Global objects that affect how the credentials are presented to the authentication server.
etsysQuarantineAgentCompliances	1.3.6.1.4.1.5624.1.2.93.3.2
etsysQuarantineAgentCompliance	1.3.6.1.4.1.5624.1.2.93.3.2.1			The compliance statement for devices that support the Quarantine Agent.
etsysQuarantineAgentCompliance2	1.3.6.1.4.1.5624.1.2.93.3.2.2			The compliance statement for devices that support the Quarantine Agent.

RFC description

Enterasys Networks MIB for network access control and endpoint quarantine management. Supports RFC 3580 port and VLAN-based quarantine policies for infected or non-compliant network devices.

Start monitoring Enterasys Networks switch (legacy, later Extreme Networks) (Quarantine Agent NAC) with a free 30-day trial of IPNetwork Monitor. Import MIBs, browse SNMP OIDs, create custom SNMP monitors, configure alerts, and monitor any SNMP-enabled network device from a single console.

Download ENTERASYS-QUARANTINE-AGENT-MIB

What Is ENTERASYS-QUARANTINE-AGENT-MIB?

Supported Devices

Monitoring Examples

What Can Be Monitored

This MIB depends on

Related MIBs

RFC description