All MIBs › EXTREME-MAC-AUTH-MIB
Organization: Extreme Networks, Inc.
Last Updated: 2014-03-04
Category: Protocol: 802.1X, Vendor: Extreme Networks
Description: Extreme Networks MIB for MAC-based authentication (MAC Auth) policies, controlling port access based on MAC address credentials.
Start monitoring vendor-neutral, standards-based MIB, any SNMPv3-capable network device (SNMP engine identity/boot/clock status) with a free 30-day trial of IPNetwork Monitor. Import MIBs, browse SNMP OIDs, create custom SNMP monitors, configure alerts, and monitor any SNMP-enabled network device from a single console.
What Is EXTREME-MAC-AUTH-MIB?
EXTREME-MAC-AUTH-MIB is an Extreme Networks proprietary MIB for managing MAC-based authentication (MAC Auth) on switch ports, controlling network access based on the source MAC address of connected devices rather than 802.1X credentials. It exposes a table of authenticated client entries per port along with control objects to initialize or force reauthentication of a given client. Its monitoring focus is software/security status: operators can see which client MAC addresses are currently authenticated on which ports, detect authentication failures, and trigger reauthentication when troubleshooting access issues, which is important for tracking unmanaged devices (printers, IP phones, IoT) admitted via MAC-based policy. It is a self-contained Extreme Networks vendor extension for port-based network access control, complementary to but distinct from the IEEE 802.1X-based standard MIBs. It is deployed on Extreme Networks access switches in environments using MAC-based NAC for devices that cannot perform 802.1X supplicant authentication. Engineers can download the EXTREME-MAC-AUTH-MIB file directly to load it into their MIB browser.
IPNetwork Monitor allows you to monitor SNMP objects defined in EXTREME-MAC-AUTH-MIB. Use the built-in SNMP Monitoring Browser to explore available variables, view their current values and descriptions, and select the objects you want to monitor. You can then create SNMP monitors, configure thresholds, and receive alerts when monitored values change.
Supported Devices
- Extreme Networks access switch
Monitoring Examples
A network administrator would poll extremeMacAuthClientTable/extremeMacAuthClientEntry to see which extremeMacAuthClientAddress values are currently authenticated on each port, spotting an unexpected or unauthorized MAC address gaining network access. If a legitimate device (e.g., an IP phone) fails to authenticate after a policy change, the admin can invoke extremeMacAuthClientReauthenticate to force a fresh authentication attempt, or extremeMacAuthClientInitialize to reset that client's authentication state entirely. Repeated authentication failures logged against a single port's client entry point to either a misconfigured MAC allow-list or a faulty end device.
What Can Be Monitored
- authenticated client MAC addresses per port
- client authentication state
- reauthentication/initialization control
- MAC-based access control status
Imported Objects
From EXTREME-BASE-MIB
| extremeAgent | OBJECT-IDENTITY |
From IF-MIB
| InterfaceIndex |
From SNMPv2-SMI
| MODULE-IDENTITY | |
| OBJECT-TYPE |
From SNMPv2-TC
| MacAddress | |
| TEXTUAL-CONVENTION | |
| TruthValue |
OIDs
RFC description
Extreme Networks vendor-private MIB for MAC-based authentication and port access control on Extreme switches.
Start monitoring Extreme Networks access switches with a free 30-day trial of IPNetwork Monitor. Import MIBs, browse SNMP OIDs, create custom SNMP monitors, configure alerts, and monitor any SNMP-enabled network device from a single console.