G6-PACC-MIB

All MIBs › G6-PACC-MIB

Organization: MICROSENS GmbH & Co. KG

Last Updated: 2018-02-12

Category: Vendor: MICROSENS

Description: MICROSENS G6 switch MIB for port access control configuration and authentication policy management.

Start monitoring vendor-neutral, standards-based MIB, any SNMPv3-capable network device (SNMP engine identity/boot/clock status) with a free 30-day trial of IPNetwork Monitor. Import MIBs, browse SNMP OIDs, create custom SNMP monitors, configure alerts, and monitor any SNMP-enabled network device from a single console.

What Is G6-PACC-MIB?

G6-PACC-MIB is a MICROSENS private MIB for Generation 6 Ethernet switches covering port access control, i.e., 802.1X-style network access authentication settings such as reauthentication timing, RADIUS server association, and MAC-based authentication behavior. It exposes configuration data controlling how a port authenticates connecting devices (MAC separator/spelling conventions, password source), and which primary/fallback RADIUS authentication and accounting servers are used, including server-down timeout. This is primarily a security/configuration-status MIB rather than a hardware-health MIB, letting an operator confirm whether port access control is enabled and correctly pointed at working authentication infrastructure. It depends functionally on the companion G6-RADIUS-MIB, which defines the actual RADIUS server objects referenced here by name. It is deployed on MICROSENS G6 switches in environments enforcing NAC (network access control) at the switch port. Engineers can download the G6-PACC-MIB file directly to load it into their MIB browser.

IPNetwork Monitor allows you to monitor SNMP objects defined in G6-PACC-MIB. Use the built-in SNMP Monitoring Browser to explore available variables, view their current values and descriptions, and select the objects you want to monitor. You can then create SNMP monitors, configure thresholds, and receive alerts when monitored values change.

Supported Devices

MICROSENS G6 Ethernet switch

Monitoring Examples

An administrator would check paccEnablePortAccessControl and paccReauthenticationPeriod to confirm access control is active and reauthentication is happening on the expected interval, and would verify paccPrimaryAuthServerName/paccPrimaryAcctServerName point to a live RADIUS server, falling back to paccFallbackAuthServerName/paccFallbackAcctServerName if the primary times out per paccServerDownTimeout. paccMacPasswordSource and paccMacPasswordString would be checked when troubleshooting MAC-authentication-bypass devices that fail to authenticate. This MIB is about authentication configuration state rather than traffic counters.

What Can Be Monitored

port access control enable state
reauthentication period
primary/fallback RADIUS server assignment
server-down timeout
MAC authentication password source

Imported Objects

From MICROSENS-G6-MIB

g6	OBJECT-IDENTITY

From SNMPv2-SMI

Counter32
Integer32
MODULE-IDENTITY
NOTIFICATION-TYPE
OBJECT-TYPE
Unsigned32
enterprises

From SNMPv2-TC

DisplayString
MacAddress

OIDs

OID symbolic	OID numeric	Type	Access	Description
authorizedMacsEntry	1.3.6.1.4.1.3181.10.6.2.46.17.1		not-accessible
INT authorizedMacsIndex	1.3.6.1.4.1.3181.10.6.2.46.17.1.1	INTEGER	not-accessible	Automatically generated
MAC authorizedMacsMacAddress	1.3.6.1.4.1.3181.10.6.2.46.17.1.3	MacAddress	read-write	MAC address of authorized user for port.
STR authorizedMacsName	1.3.6.1.4.1.3181.10.6.2.46.17.1.2	DisplayString	read-write	Unique name to reference this entry and to remember whose MAC address is entered.
INT authorizedMacsPermittedPorts	1.3.6.1.4.1.3181.10.6.2.46.17.1.4	INTEGER	read-write	Mask which defines at which port(s) this MAC is permitted. A value of 0 disables this entry. Syntax: slot/port, slot/port or use hex value for quick setup. Example: = 0xf (ports 1-4)
authorizedMacsTable	1.3.6.1.4.1.3181.10.6.2.46.17		not-accessible	This table defines statically permitted MACs that do not require the device to perform any further authorization process.
INT authorizedMacsTreatAsVendorMac	1.3.6.1.4.1.3181.10.6.2.46.17.1.5	INTEGER	read-write	When set, the MAC is treated as vendor MAC. All MACs from this vendor are permitted then.
pacc	1.3.6.1.4.1.3181.10.6.2.46
INT paccEnablePortAccessControl	1.3.6.1.4.1.3181.10.6.2.46.1	INTEGER	read-write	Generally enables the port access control function.
STR paccFallbackAcctServerName	1.3.6.1.4.1.3181.10.6.2.46.11	DisplayString	read-write	Symbolic name of the RADIUS server used for accounting if the primary server is down. Leave empty when no fallback is required.
STR paccFallbackAuthServerName	1.3.6.1.4.1.3181.10.6.2.46.10	DisplayString	read-write	Symbolic name of the RADIUS server used for authentication if the primary server is down. Leave empty when no fallback is required.
STR paccFilterAuthorizedMac	1.3.6.1.4.1.3181.10.6.2.46.13	DisplayString	read-write	Filter user_status table to show only entries for specified MAC. Supply MAC address as parameter. Enter only the first 3 value pairs of the MAC to search for vendor MACs. Syntax example: mac.filter_mac = 01:22:3A.
STR paccFilterAuthorizedPort	1.3.6.1.4.1.3181.10.6.2.46.14	DisplayString	read-write	Filter user_status table to show only entries associated with a given port range. The shorthand port format like 1 for 1/1 may be used. Syntax examples: mac.filter_port = 1/1,2/5 or mac.filter_port = 1-3,5.
STR paccFilterAuthorizedUser	1.3.6.1.4.1.3181.10.6.2.46.15	DisplayString	read-write	Filter user_status table to show only entries for the given user name. Wildcards name automatically apply so that only a part of the expected name needs to be supplied.
INT paccMacPasswordSource	1.3.6.1.4.1.3181.10.6.2.46.6	INTEGER	read-write	Defines if MAC or Password is used for authentication.
STR paccMacPasswordString	1.3.6.1.4.1.3181.10.6.2.46.7	DisplayString	read-write	User defined password string.
STR paccMacSeparatorChar	1.3.6.1.4.1.3181.10.6.2.46.4	DisplayString	read-write	Defines the character which separates the bytes of a MAC address.
INT paccMacSpelling	1.3.6.1.4.1.3181.10.6.2.46.5	INTEGER	read-write	Defines in which case the MAC is defined.
STR paccNasIdentifier	1.3.6.1.4.1.3181.10.6.2.46.3	DisplayString	read-write	Optional NAS-Identifier string for RADIUS messages.
STR paccPrimaryAcctServerName	1.3.6.1.4.1.3181.10.6.2.46.9	DisplayString	read-write	Symbolic name of the RADIUS server used for accounting.
STR paccPrimaryAuthServerName	1.3.6.1.4.1.3181.10.6.2.46.8	DisplayString	read-write	Symbolic name of the RADIUS server used for authentication.
U32 paccReauthenticationPeriod	1.3.6.1.4.1.3181.10.6.2.46.2	Unsigned32	read-write	EAP reauthentication period in seconds. To disable reauthentication set value to 0.
I32 paccServerDownTimeout	1.3.6.1.4.1.3181.10.6.2.46.12	Integer32	read-write	Retry interval in seconds for trying to return to the primary RADIUS server.
INT port8021xStatusAuthorizationState	1.3.6.1.4.1.3181.10.6.2.46.102.1.2	INTEGER	read-only	Indicates the port access control state.
port8021xStatusEntry	1.3.6.1.4.1.3181.10.6.2.46.102.1		not-accessible
STR port8021xStatusFilterId	1.3.6.1.4.1.3181.10.6.2.46.102.1.9	DisplayString	read-only	If the RADIUS attribute filter-id is used its value is reflected here.
I32 port8021xStatusIdleTimeout	1.3.6.1.4.1.3181.10.6.2.46.102.1.7	Integer32	read-only	This value reflects the idle timeout setting as received via RADIUS. It sets the maximum number of seconds before an idle session is terminated.
STR port8021xStatusLastStateChange	1.3.6.1.4.1.3181.10.6.2.46.102.1.10	DisplayString	read-only	Indicates the last time the authorization state of this port was modified.
INT port8021xStatusPortIndex	1.3.6.1.4.1.3181.10.6.2.46.102.1.1	INTEGER	not-accessible	Automatically generated
I32 port8021xStatusSessionTimeout	1.3.6.1.4.1.3181.10.6.2.46.102.1.8	Integer32	read-only	This value reflects the session timeout setting as received via RADIUS. It sets the maximum number of seconds of service to be provided to the user before the session is terminated.
port8021xStatusTable	1.3.6.1.4.1.3181.10.6.2.46.102		not-accessible	This table indicates the current port autentication state and contains the data for the last user or MAC that tried to authorize on a given port. To see all users in a multiuser environment refer to user_status table.
MAC port8021xStatusUserMac	1.3.6.1.4.1.3181.10.6.2.46.102.1.3	MacAddress	read-only	Last MAC that attempted authorization.
STR port8021xStatusUserName	1.3.6.1.4.1.3181.10.6.2.46.102.1.4	DisplayString	read-only	Last user that attempted authorization unless MAC authentication was used in which case this field is blank.
STR port8021xStatusVlanAlias	1.3.6.1.4.1.3181.10.6.2.46.102.1.5	DisplayString	read-only	Last dynamically through radius assigned VLAN alias.
I32 port8021xStatusVlanId	1.3.6.1.4.1.3181.10.6.2.46.102.1.6	Integer32	read-only	Last dynamically through radius assigned VLAN.
U32 portConfigAuthFailRetryTimer	1.3.6.1.4.1.3181.10.6.2.46.16.1.5	Unsigned32	read-write	When authentication has failed, the authentication is restarted after the defined time in seconds. This is useful for unattended devices using MAC authentication or when access rights are centrally changed on the RADIUS server and the end unit cannot be reauthenticated manually. The default value of 0 disables the automatic retry.
INT portConfigAuthorizeMode	1.3.6.1.4.1.3181.10.6.2.46.16.1.2	INTEGER	read-write	Defines method for authorization of user on port.
INT portConfigAuthorizePriority	1.3.6.1.4.1.3181.10.6.2.46.16.1.3	INTEGER	read-write	When two methods provide positive authorization, then this parameter decides which method is used.
INT portConfigDropEgressBroadcasts	1.3.6.1.4.1.3181.10.6.2.46.16.1.9	INTEGER	read-write	When set no broadcast frames with egress this port.
INT portConfigDropUnknownUnicasts	1.3.6.1.4.1.3181.10.6.2.46.16.1.8	INTEGER	read-write	When set only unicast frames with learned or known MAC address will be send out of this port.
portConfigEntry	1.3.6.1.4.1.3181.10.6.2.46.16.1		not-accessible
STR portConfigLearnMacNow	1.3.6.1.4.1.3181.10.6.2.46.16.1.10	DisplayString	read-write	Learn the next incoming MAC(s) of this port and enter them into the mac_table. Syntax: learn_mac_now = 3 will learn the next 3 MAC addresses. Use pacc.port_status.number_of_learned_macs to verify progress. Type learn_mac_now = 0 to cancel further learning.
I32 portConfigLimitedNumberOfMacs	1.3.6.1.4.1.3181.10.6.2.46.16.1.7	Integer32	read-write	Limit the number of permitted MACs on the port. Set to 0 for normal unlimited operation. This feature is independend of the authorized_mac function.
INT portConfigMacTimeout	1.3.6.1.4.1.3181.10.6.2.46.16.1.6	INTEGER	read-write	Defines how long authorized MACs remain authorized after inactivity of the MAC.
INT portConfigPortIndex	1.3.6.1.4.1.3181.10.6.2.46.16.1.1	INTEGER	not-accessible	Automatically generated
STR portConfigReauthenticate	1.3.6.1.4.1.3181.10.6.2.46.16.1.11	DisplayString	read-write	This action forces re-authentication of the port using the configured method. No parameter required.
portConfigTable	1.3.6.1.4.1.3181.10.6.2.46.16		not-accessible
INT portConfigUnauthorizedMode	1.3.6.1.4.1.3181.10.6.2.46.16.1.4	INTEGER	read-write	Defines how unauthorized ports are treated.
STR portConfigUnauthorizeMac	1.3.6.1.4.1.3181.10.6.2.46.16.1.12	DisplayString	read-write	This action will unauthorize a specific MAC. When no MAC is specified, the entire port is unauthorized.
INT portMacStatusAuthorizationState	1.3.6.1.4.1.3181.10.6.2.46.101.1.2	INTEGER	read-only	Indicates the port access control state.
portMacStatusEntry	1.3.6.1.4.1.3181.10.6.2.46.101.1		not-accessible
STR portMacStatusFilterId	1.3.6.1.4.1.3181.10.6.2.46.101.1.9	DisplayString	read-only	If the RADIUS attribute filter-id is used its value is reflected here.
I32 portMacStatusIdleTimeout	1.3.6.1.4.1.3181.10.6.2.46.101.1.7	Integer32	read-only	This value reflects the idle timeout setting as received via RADIUS. It sets the maximum number of seconds before an idle session is terminated.
STR portMacStatusLastStateChange	1.3.6.1.4.1.3181.10.6.2.46.101.1.10	DisplayString	read-only	Indicates the last time the authorization state of this port was modified.
INT portMacStatusPortIndex	1.3.6.1.4.1.3181.10.6.2.46.101.1.1	INTEGER	not-accessible	Automatically generated
I32 portMacStatusSessionTimeout	1.3.6.1.4.1.3181.10.6.2.46.101.1.8	Integer32	read-only	This value reflects the session timeout setting as received via RADIUS. It sets the maximum number of seconds of service to be provided to the user before the session is terminated.
portMacStatusTable	1.3.6.1.4.1.3181.10.6.2.46.101		not-accessible	This table indicates the current port autentication state and contains the data for the last user or MAC that tried to authorize on a given port. To see all users in a multiuser environment refer to user_status table.
MAC portMacStatusUserMac	1.3.6.1.4.1.3181.10.6.2.46.101.1.3	MacAddress	read-only	Last MAC that attempted authorization.
STR portMacStatusUserName	1.3.6.1.4.1.3181.10.6.2.46.101.1.4	DisplayString	read-only	Last user that attempted authorization unless MAC authentication was used in which case this field is blank.
STR portMacStatusVlanAlias	1.3.6.1.4.1.3181.10.6.2.46.101.1.5	DisplayString	read-only	Last dynamically through radius assigned VLAN alias.
I32 portMacStatusVlanId	1.3.6.1.4.1.3181.10.6.2.46.101.1.6	Integer32	read-only	Last dynamically through radius assigned VLAN.
INT portStatusAuthorizationMode	1.3.6.1.4.1.3181.10.6.2.46.100.1.3	INTEGER	read-only	Last authorization method applied on this port.
INT portStatusAuthorizationState	1.3.6.1.4.1.3181.10.6.2.46.100.1.2	INTEGER	read-only	Indicates the port access control state.
portStatusEntry	1.3.6.1.4.1.3181.10.6.2.46.100.1		not-accessible
STR portStatusLastStateChange	1.3.6.1.4.1.3181.10.6.2.46.100.1.4	DisplayString	read-only	Indicates the last time the authorization state of this port was modified.
I32 portStatusNumberOfLearnedMacs	1.3.6.1.4.1.3181.10.6.2.46.100.1.6	Integer32	read-only	This value indicates how many MAC addresses have actually been learned since the learn_macs_now command had been issued.
I32 portStatusNumberOfMacsToLearn	1.3.6.1.4.1.3181.10.6.2.46.100.1.5	Integer32	read-only	Indicates how many MAC addresses will be learned. This is a result of the learn_macs_now action command.
INT portStatusPortIndex	1.3.6.1.4.1.3181.10.6.2.46.100.1.1	INTEGER	not-accessible	Automatically generated
portStatusTable	1.3.6.1.4.1.3181.10.6.2.46.100		not-accessible	This table indicates the current port autentication state and contains the data for the last user or MAC that tried to authorize on a given port. To see all users in a multiuser environment refer to user_status table.
protocol	1.3.6.1.4.1.3181.10.6.2			Microsens private MIB for Generation 6 Ethernet Switches
INT supplicantActionOnLinkDown	1.3.6.1.4.1.3181.10.6.2.46.18.1.4	INTEGER	read-write	When the supplicant link goes down, the local authenticated user ports can be deauthenticated as well.
STR supplicantAnonymousIdentity	1.3.6.1.4.1.3181.10.6.2.46.18.1.6	DisplayString	read-write	Identity string for EAP-MD5. Also used as the unencrypted anonymous outer identity with EAP types that support different tunneled identity, e.g. EAP-TTLS.
STR supplicantAuthenticationProtocol	1.3.6.1.4.1.3181.10.6.2.46.18.1.7	DisplayString	read-write	Space-separated list of accepted EAP methods. If not set, all listed methods are allowed. MD5 = insecure and does not generate keying material to be used as a Phase 2 method withPEAP or TTLS. PEAP = with tunneled EAP authentication. TTLS = with tunneled EAP or PAP/CHAP/MSCHAP/MSCHAPV2 authentication. TLS = client and server certificate.
INT supplicantEnableSupplicant	1.3.6.1.4.1.3181.10.6.2.46.18.1.2	INTEGER	read-write	Generally enables the 802.1x supplicant function.
STR supplicantEncryptedAuthPassword	1.3.6.1.4.1.3181.10.6.2.46.18.1.9	DisplayString	read-write	The encrypted EAP password. Can be set with enter_password action.
STR supplicantEnterPassword	1.3.6.1.4.1.3181.10.6.2.46.18.1.8	DisplayString	read-write	Set a new authentication password which replaces the previous one. Note: trailing spaces or multiple spaces in the password are automatically removed.
supplicantEntry	1.3.6.1.4.1.3181.10.6.2.46.18.1		not-accessible
STR supplicantIdentity	1.3.6.1.4.1.3181.10.6.2.46.18.1.5	DisplayString	read-write	Inner identity for tunneled EAP methods (e.g. EAP-TTLS)
INT supplicantIndex	1.3.6.1.4.1.3181.10.6.2.46.18.1.1	INTEGER	not-accessible	Automatically generated
I32 supplicantPort	1.3.6.1.4.1.3181.10.6.2.46.18.1.3	Integer32	read-write	Port through which the authorizing authority is reached. Usually this is the link port.
STR supplicantReauthenticate	1.3.6.1.4.1.3181.10.6.2.46.18.1.10	DisplayString	read-write	Restarts the authentication process for testing and display the results.
supplicantTable	1.3.6.1.4.1.3181.10.6.2.46.18		not-accessible	The 802.1x supplicant permits automatic login when a port is activated.
INT userStatusAuthorizationMode	1.3.6.1.4.1.3181.10.6.2.46.103.1.4	INTEGER	read-only	Authorization method used for this authorization attempt.
INT userStatusAuthorizationState	1.3.6.1.4.1.3181.10.6.2.46.103.1.3	INTEGER	read-only	Indicates the port access control state resulting from this authorization attempt .
userStatusEntry	1.3.6.1.4.1.3181.10.6.2.46.103.1		not-accessible
INT userStatusEntryState	1.3.6.1.4.1.3181.10.6.2.46.103.1.2	INTEGER	read-only	Indicates if this record displays a currently active login or a history entry of a previous authentication which is invalidated by now.
STR userStatusFilterId	1.3.6.1.4.1.3181.10.6.2.46.103.1.12	DisplayString	read-only	If the RADIUS attribute filter-id is used its value is reflected here.
I32 userStatusIdleTimeout	1.3.6.1.4.1.3181.10.6.2.46.103.1.10	Integer32	read-only	This value reflects the idle timeout setting as received via RADIUS. It sets the maximum number of seconds before an idle session is terminated.
INT userStatusIndex	1.3.6.1.4.1.3181.10.6.2.46.103.1.1	INTEGER	not-accessible	Automatically generated
U32 userStatusLoginEpoch	1.3.6.1.4.1.3181.10.6.2.46.103.1.14	Unsigned32	read-only	Indicates the time when this record was created. in Linux time since the epoch format.
STR userStatusLoginTimeStamp	1.3.6.1.4.1.3181.10.6.2.46.103.1.13	DisplayString	read-only	Indicates the time when this record was created.
I32 userStatusPort	1.3.6.1.4.1.3181.10.6.2.46.103.1.5	Integer32	read-only	Indicates the port at which this MAC is connected.
I32 userStatusSessionTimeout	1.3.6.1.4.1.3181.10.6.2.46.103.1.11	Integer32	read-only	This value reflects the session timeout setting as received via RADIUS. It sets the maximum number of seconds of service to be provided to the user before the session is terminated.
userStatusTable	1.3.6.1.4.1.3181.10.6.2.46.103		not-accessible	This table lists all users authorized or rejected via some form of port access control. Use filter actions for easier viewing.
MAC userStatusUserMac	1.3.6.1.4.1.3181.10.6.2.46.103.1.6	MacAddress	read-only	MAC used for this authorization attempt.
STR userStatusUserName	1.3.6.1.4.1.3181.10.6.2.46.103.1.7	DisplayString	read-only	User that attempted authorization unless MAC authentication was used in which case this field is blank.
STR userStatusVlanAlias	1.3.6.1.4.1.3181.10.6.2.46.103.1.8	DisplayString	read-only	Dynamically through radius assigned VLAN alias.
I32 userStatusVlanId	1.3.6.1.4.1.3181.10.6.2.46.103.1.9	Integer32	read-only	Dynamically through radius assigned VLAN.

RFC description

Granite Microsystems G6 PACC (Protocol Adapter Control Card) platform management MIB for carrier-grade access equipment.

Start monitoring MICROSENS Generation 6 (G6) managed Ethernet switch (802.1X port access control) with a free 30-day trial of IPNetwork Monitor. Import MIBs, browse SNMP OIDs, create custom SNMP monitors, configure alerts, and monitor any SNMP-enabled network device from a single console.

Download G6-PACC-MIB

What Is G6-PACC-MIB?

Supported Devices

Monitoring Examples

What Can Be Monitored

This MIB depends on

Related MIBs

RFC description