G6-PACC-MIB

All MIBs › G6-PACC-MIB

Organization: MICROSENS GmbH & Co. KG

Last Updated: 2018-02-12

Category: Vendor: MICROSENS

Description: MICROSENS G6 switch MIB for port access control configuration and authentication policy management.

Start monitoring vendor-neutral, standards-based MIB, any SNMPv3-capable network device (SNMP engine identity/boot/clock status) with a free 30-day trial of IPNetwork Monitor. Import MIBs, browse SNMP OIDs, create custom SNMP monitors, configure alerts, and monitor any SNMP-enabled network device from a single console.

What Is G6-PACC-MIB?

G6-PACC-MIB is a MICROSENS private MIB for Generation 6 Ethernet switches covering port access control, i.e., 802.1X-style network access authentication settings such as reauthentication timing, RADIUS server association, and MAC-based authentication behavior. It exposes configuration data controlling how a port authenticates connecting devices (MAC separator/spelling conventions, password source), and which primary/fallback RADIUS authentication and accounting servers are used, including server-down timeout. This is primarily a security/configuration-status MIB rather than a hardware-health MIB, letting an operator confirm whether port access control is enabled and correctly pointed at working authentication infrastructure. It depends functionally on the companion G6-RADIUS-MIB, which defines the actual RADIUS server objects referenced here by name. It is deployed on MICROSENS G6 switches in environments enforcing NAC (network access control) at the switch port. Engineers can download the G6-PACC-MIB file directly to load it into their MIB browser.

IPNetwork Monitor allows you to monitor SNMP objects defined in G6-PACC-MIB. Use the built-in SNMP Monitoring Browser to explore available variables, view their current values and descriptions, and select the objects you want to monitor. You can then create SNMP monitors, configure thresholds, and receive alerts when monitored values change.

Supported Devices

MICROSENS G6 Ethernet switch

Monitoring Examples

An administrator would check paccEnablePortAccessControl and paccReauthenticationPeriod to confirm access control is active and reauthentication is happening on the expected interval, and would verify paccPrimaryAuthServerName/paccPrimaryAcctServerName point to a live RADIUS server, falling back to paccFallbackAuthServerName/paccFallbackAcctServerName if the primary times out per paccServerDownTimeout. paccMacPasswordSource and paccMacPasswordString would be checked when troubleshooting MAC-authentication-bypass devices that fail to authenticate. This MIB is about authentication configuration state rather than traffic counters.

What Can Be Monitored

port access control enable state
reauthentication period
primary/fallback RADIUS server assignment
server-down timeout
MAC authentication password source

Imported Objects

From MICROSENS-G6-MIB

g6	OBJECT-IDENTITY

From SNMPv2-SMI

Counter32
Integer32
MODULE-IDENTITY
NOTIFICATION-TYPE
OBJECT-TYPE
Unsigned32
enterprises

From SNMPv2-TC

DisplayString
MacAddress

OIDs

OID symbolic	OID numeric	Type	Access	Description
protocol	1.3.6.1.4.1.3181.10.6.2			Microsens private MIB for Generation 6 Ethernet Switches
pacc	1.3.6.1.4.1.3181.10.6.2.46
INT paccEnablePortAccessControl	1.3.6.1.4.1.3181.10.6.2.46.1	INTEGER	read-write	Generally enables the port access control function.
U32 paccReauthenticationPeriod	1.3.6.1.4.1.3181.10.6.2.46.2	Unsigned32	read-write	EAP reauthentication period in seconds. To disable reauthentication set value to 0.
STR paccNasIdentifier	1.3.6.1.4.1.3181.10.6.2.46.3	DisplayString	read-write	Optional NAS-Identifier string for RADIUS messages.
STR paccMacSeparatorChar	1.3.6.1.4.1.3181.10.6.2.46.4	DisplayString	read-write	Defines the character which separates the bytes of a MAC address.
INT paccMacSpelling	1.3.6.1.4.1.3181.10.6.2.46.5	INTEGER	read-write	Defines in which case the MAC is defined.
INT paccMacPasswordSource	1.3.6.1.4.1.3181.10.6.2.46.6	INTEGER	read-write	Defines if MAC or Password is used for authentication.
STR paccMacPasswordString	1.3.6.1.4.1.3181.10.6.2.46.7	DisplayString	read-write	User defined password string.
STR paccPrimaryAuthServerName	1.3.6.1.4.1.3181.10.6.2.46.8	DisplayString	read-write	Symbolic name of the RADIUS server used for authentication.
STR paccPrimaryAcctServerName	1.3.6.1.4.1.3181.10.6.2.46.9	DisplayString	read-write	Symbolic name of the RADIUS server used for accounting.
STR paccFallbackAuthServerName	1.3.6.1.4.1.3181.10.6.2.46.10	DisplayString	read-write	Symbolic name of the RADIUS server used for authentication if the primary server is down. Leave empty when no fallback is required.
STR paccFallbackAcctServerName	1.3.6.1.4.1.3181.10.6.2.46.11	DisplayString	read-write	Symbolic name of the RADIUS server used for accounting if the primary server is down. Leave empty when no fallback is required.
I32 paccServerDownTimeout	1.3.6.1.4.1.3181.10.6.2.46.12	Integer32	read-write	Retry interval in seconds for trying to return to the primary RADIUS server.
STR paccFilterAuthorizedMac	1.3.6.1.4.1.3181.10.6.2.46.13	DisplayString	read-write	Filter user_status table to show only entries for specified MAC. Supply MAC address as parameter. Enter only the first 3 value pairs of the MAC to search for vendor MACs. Syntax example: mac.filter_mac = 01:22:3A.
STR paccFilterAuthorizedPort	1.3.6.1.4.1.3181.10.6.2.46.14	DisplayString	read-write	Filter user_status table to show only entries associated with a given port range. The shorthand port format like 1 for 1/1 may be used. Syntax examples: mac.filter_port = 1/1,2/5 or mac.filter_port = 1-3,5.
STR paccFilterAuthorizedUser	1.3.6.1.4.1.3181.10.6.2.46.15	DisplayString	read-write	Filter user_status table to show only entries for the given user name. Wildcards name automatically apply so that only a part of the expected name needs to be supplied.
portConfigTable	1.3.6.1.4.1.3181.10.6.2.46.16		not-accessible
portConfigEntry	1.3.6.1.4.1.3181.10.6.2.46.16.1		not-accessible
INT portConfigPortIndex	1.3.6.1.4.1.3181.10.6.2.46.16.1.1	INTEGER	not-accessible	Automatically generated
INT portConfigAuthorizeMode	1.3.6.1.4.1.3181.10.6.2.46.16.1.2	INTEGER	read-write	Defines method for authorization of user on port.
INT portConfigAuthorizePriority	1.3.6.1.4.1.3181.10.6.2.46.16.1.3	INTEGER	read-write	When two methods provide positive authorization, then this parameter decides which method is used.
INT portConfigUnauthorizedMode	1.3.6.1.4.1.3181.10.6.2.46.16.1.4	INTEGER	read-write	Defines how unauthorized ports are treated.
U32 portConfigAuthFailRetryTimer	1.3.6.1.4.1.3181.10.6.2.46.16.1.5	Unsigned32	read-write	When authentication has failed, the authentication is restarted after the defined time in seconds. This is useful for unattended devices using MAC authentication or when access rights are centrally changed on the RADIUS server and the end unit cannot be reauthenticated manually. The default value of 0 disables the automatic retry.
INT portConfigMacTimeout	1.3.6.1.4.1.3181.10.6.2.46.16.1.6	INTEGER	read-write	Defines how long authorized MACs remain authorized after inactivity of the MAC.
I32 portConfigLimitedNumberOfMacs	1.3.6.1.4.1.3181.10.6.2.46.16.1.7	Integer32	read-write	Limit the number of permitted MACs on the port. Set to 0 for normal unlimited operation. This feature is independend of the authorized_mac function.
INT portConfigDropUnknownUnicasts	1.3.6.1.4.1.3181.10.6.2.46.16.1.8	INTEGER	read-write	When set only unicast frames with learned or known MAC address will be send out of this port.
INT portConfigDropEgressBroadcasts	1.3.6.1.4.1.3181.10.6.2.46.16.1.9	INTEGER	read-write	When set no broadcast frames with egress this port.
STR portConfigLearnMacNow	1.3.6.1.4.1.3181.10.6.2.46.16.1.10	DisplayString	read-write	Learn the next incoming MAC(s) of this port and enter them into the mac_table. Syntax: learn_mac_now = 3 will learn the next 3 MAC addresses. Use pacc.port_status.number_of_learned_macs to verify progress. Type learn_mac_now = 0 to cancel further learning.
STR portConfigReauthenticate	1.3.6.1.4.1.3181.10.6.2.46.16.1.11	DisplayString	read-write	This action forces re-authentication of the port using the configured method. No parameter required.
STR portConfigUnauthorizeMac	1.3.6.1.4.1.3181.10.6.2.46.16.1.12	DisplayString	read-write	This action will unauthorize a specific MAC. When no MAC is specified, the entire port is unauthorized.
authorizedMacsTable	1.3.6.1.4.1.3181.10.6.2.46.17		not-accessible	This table defines statically permitted MACs that do not require the device to perform any further authorization process.
authorizedMacsEntry	1.3.6.1.4.1.3181.10.6.2.46.17.1		not-accessible
INT authorizedMacsIndex	1.3.6.1.4.1.3181.10.6.2.46.17.1.1	INTEGER	not-accessible	Automatically generated
STR authorizedMacsName	1.3.6.1.4.1.3181.10.6.2.46.17.1.2	DisplayString	read-write	Unique name to reference this entry and to remember whose MAC address is entered.
MAC authorizedMacsMacAddress	1.3.6.1.4.1.3181.10.6.2.46.17.1.3	MacAddress	read-write	MAC address of authorized user for port.
INT authorizedMacsPermittedPorts	1.3.6.1.4.1.3181.10.6.2.46.17.1.4	INTEGER	read-write	Mask which defines at which port(s) this MAC is permitted. A value of 0 disables this entry. Syntax: slot/port, slot/port or use hex value for quick setup. Example: = 0xf (ports 1-4)
INT authorizedMacsTreatAsVendorMac	1.3.6.1.4.1.3181.10.6.2.46.17.1.5	INTEGER	read-write	When set, the MAC is treated as vendor MAC. All MACs from this vendor are permitted then.
supplicantTable	1.3.6.1.4.1.3181.10.6.2.46.18		not-accessible	The 802.1x supplicant permits automatic login when a port is activated.
supplicantEntry	1.3.6.1.4.1.3181.10.6.2.46.18.1		not-accessible
INT supplicantIndex	1.3.6.1.4.1.3181.10.6.2.46.18.1.1	INTEGER	not-accessible	Automatically generated
INT supplicantEnableSupplicant	1.3.6.1.4.1.3181.10.6.2.46.18.1.2	INTEGER	read-write	Generally enables the 802.1x supplicant function.
I32 supplicantPort	1.3.6.1.4.1.3181.10.6.2.46.18.1.3	Integer32	read-write	Port through which the authorizing authority is reached. Usually this is the link port.
INT supplicantActionOnLinkDown	1.3.6.1.4.1.3181.10.6.2.46.18.1.4	INTEGER	read-write	When the supplicant link goes down, the local authenticated user ports can be deauthenticated as well.
STR supplicantIdentity	1.3.6.1.4.1.3181.10.6.2.46.18.1.5	DisplayString	read-write	Inner identity for tunneled EAP methods (e.g. EAP-TTLS)
STR supplicantAnonymousIdentity	1.3.6.1.4.1.3181.10.6.2.46.18.1.6	DisplayString	read-write	Identity string for EAP-MD5. Also used as the unencrypted anonymous outer identity with EAP types that support different tunneled identity, e.g. EAP-TTLS.
STR supplicantAuthenticationProtocol	1.3.6.1.4.1.3181.10.6.2.46.18.1.7	DisplayString	read-write	Space-separated list of accepted EAP methods. If not set, all listed methods are allowed. MD5 = insecure and does not generate keying material to be used as a Phase 2 method withPEAP or TTLS. PEAP = with tunneled EAP authentication. TTLS = with tunneled EAP or PAP/CHAP/MSCHAP/MSCHAPV2 authentication. TLS = client and server certificate.
STR supplicantEnterPassword	1.3.6.1.4.1.3181.10.6.2.46.18.1.8	DisplayString	read-write	Set a new authentication password which replaces the previous one. Note: trailing spaces or multiple spaces in the password are automatically removed.
STR supplicantEncryptedAuthPassword	1.3.6.1.4.1.3181.10.6.2.46.18.1.9	DisplayString	read-write	The encrypted EAP password. Can be set with enter_password action.
STR supplicantReauthenticate	1.3.6.1.4.1.3181.10.6.2.46.18.1.10	DisplayString	read-write	Restarts the authentication process for testing and display the results.
portStatusTable	1.3.6.1.4.1.3181.10.6.2.46.100		not-accessible	This table indicates the current port autentication state and contains the data for the last user or MAC that tried to authorize on a given port. To see all users in a multiuser environment refer to user_status table.
portStatusEntry	1.3.6.1.4.1.3181.10.6.2.46.100.1		not-accessible
INT portStatusPortIndex	1.3.6.1.4.1.3181.10.6.2.46.100.1.1	INTEGER	not-accessible	Automatically generated
INT portStatusAuthorizationState	1.3.6.1.4.1.3181.10.6.2.46.100.1.2	INTEGER	read-only	Indicates the port access control state.
INT portStatusAuthorizationMode	1.3.6.1.4.1.3181.10.6.2.46.100.1.3	INTEGER	read-only	Last authorization method applied on this port.
STR portStatusLastStateChange	1.3.6.1.4.1.3181.10.6.2.46.100.1.4	DisplayString	read-only	Indicates the last time the authorization state of this port was modified.
I32 portStatusNumberOfMacsToLearn	1.3.6.1.4.1.3181.10.6.2.46.100.1.5	Integer32	read-only	Indicates how many MAC addresses will be learned. This is a result of the learn_macs_now action command.
I32 portStatusNumberOfLearnedMacs	1.3.6.1.4.1.3181.10.6.2.46.100.1.6	Integer32	read-only	This value indicates how many MAC addresses have actually been learned since the learn_macs_now command had been issued.
portMacStatusTable	1.3.6.1.4.1.3181.10.6.2.46.101		not-accessible	This table indicates the current port autentication state and contains the data for the last user or MAC that tried to authorize on a given port. To see all users in a multiuser environment refer to user_status table.
portMacStatusEntry	1.3.6.1.4.1.3181.10.6.2.46.101.1		not-accessible
INT portMacStatusPortIndex	1.3.6.1.4.1.3181.10.6.2.46.101.1.1	INTEGER	not-accessible	Automatically generated
INT portMacStatusAuthorizationState	1.3.6.1.4.1.3181.10.6.2.46.101.1.2	INTEGER	read-only	Indicates the port access control state.
MAC portMacStatusUserMac	1.3.6.1.4.1.3181.10.6.2.46.101.1.3	MacAddress	read-only	Last MAC that attempted authorization.
STR portMacStatusUserName	1.3.6.1.4.1.3181.10.6.2.46.101.1.4	DisplayString	read-only	Last user that attempted authorization unless MAC authentication was used in which case this field is blank.
STR portMacStatusVlanAlias	1.3.6.1.4.1.3181.10.6.2.46.101.1.5	DisplayString	read-only	Last dynamically through radius assigned VLAN alias.
I32 portMacStatusVlanId	1.3.6.1.4.1.3181.10.6.2.46.101.1.6	Integer32	read-only	Last dynamically through radius assigned VLAN.
I32 portMacStatusIdleTimeout	1.3.6.1.4.1.3181.10.6.2.46.101.1.7	Integer32	read-only	This value reflects the idle timeout setting as received via RADIUS. It sets the maximum number of seconds before an idle session is terminated.
I32 portMacStatusSessionTimeout	1.3.6.1.4.1.3181.10.6.2.46.101.1.8	Integer32	read-only	This value reflects the session timeout setting as received via RADIUS. It sets the maximum number of seconds of service to be provided to the user before the session is terminated.
STR portMacStatusFilterId	1.3.6.1.4.1.3181.10.6.2.46.101.1.9	DisplayString	read-only	If the RADIUS attribute filter-id is used its value is reflected here.
STR portMacStatusLastStateChange	1.3.6.1.4.1.3181.10.6.2.46.101.1.10	DisplayString	read-only	Indicates the last time the authorization state of this port was modified.
port8021xStatusTable	1.3.6.1.4.1.3181.10.6.2.46.102		not-accessible	This table indicates the current port autentication state and contains the data for the last user or MAC that tried to authorize on a given port. To see all users in a multiuser environment refer to user_status table.
port8021xStatusEntry	1.3.6.1.4.1.3181.10.6.2.46.102.1		not-accessible
INT port8021xStatusPortIndex	1.3.6.1.4.1.3181.10.6.2.46.102.1.1	INTEGER	not-accessible	Automatically generated
INT port8021xStatusAuthorizationState	1.3.6.1.4.1.3181.10.6.2.46.102.1.2	INTEGER	read-only	Indicates the port access control state.
MAC port8021xStatusUserMac	1.3.6.1.4.1.3181.10.6.2.46.102.1.3	MacAddress	read-only	Last MAC that attempted authorization.
STR port8021xStatusUserName	1.3.6.1.4.1.3181.10.6.2.46.102.1.4	DisplayString	read-only	Last user that attempted authorization unless MAC authentication was used in which case this field is blank.
STR port8021xStatusVlanAlias	1.3.6.1.4.1.3181.10.6.2.46.102.1.5	DisplayString	read-only	Last dynamically through radius assigned VLAN alias.
I32 port8021xStatusVlanId	1.3.6.1.4.1.3181.10.6.2.46.102.1.6	Integer32	read-only	Last dynamically through radius assigned VLAN.
I32 port8021xStatusIdleTimeout	1.3.6.1.4.1.3181.10.6.2.46.102.1.7	Integer32	read-only	This value reflects the idle timeout setting as received via RADIUS. It sets the maximum number of seconds before an idle session is terminated.
I32 port8021xStatusSessionTimeout	1.3.6.1.4.1.3181.10.6.2.46.102.1.8	Integer32	read-only	This value reflects the session timeout setting as received via RADIUS. It sets the maximum number of seconds of service to be provided to the user before the session is terminated.
STR port8021xStatusFilterId	1.3.6.1.4.1.3181.10.6.2.46.102.1.9	DisplayString	read-only	If the RADIUS attribute filter-id is used its value is reflected here.
STR port8021xStatusLastStateChange	1.3.6.1.4.1.3181.10.6.2.46.102.1.10	DisplayString	read-only	Indicates the last time the authorization state of this port was modified.
userStatusTable	1.3.6.1.4.1.3181.10.6.2.46.103		not-accessible	This table lists all users authorized or rejected via some form of port access control. Use filter actions for easier viewing.
userStatusEntry	1.3.6.1.4.1.3181.10.6.2.46.103.1		not-accessible
INT userStatusIndex	1.3.6.1.4.1.3181.10.6.2.46.103.1.1	INTEGER	not-accessible	Automatically generated
INT userStatusEntryState	1.3.6.1.4.1.3181.10.6.2.46.103.1.2	INTEGER	read-only	Indicates if this record displays a currently active login or a history entry of a previous authentication which is invalidated by now.
INT userStatusAuthorizationState	1.3.6.1.4.1.3181.10.6.2.46.103.1.3	INTEGER	read-only	Indicates the port access control state resulting from this authorization attempt .
INT userStatusAuthorizationMode	1.3.6.1.4.1.3181.10.6.2.46.103.1.4	INTEGER	read-only	Authorization method used for this authorization attempt.
I32 userStatusPort	1.3.6.1.4.1.3181.10.6.2.46.103.1.5	Integer32	read-only	Indicates the port at which this MAC is connected.
MAC userStatusUserMac	1.3.6.1.4.1.3181.10.6.2.46.103.1.6	MacAddress	read-only	MAC used for this authorization attempt.
STR userStatusUserName	1.3.6.1.4.1.3181.10.6.2.46.103.1.7	DisplayString	read-only	User that attempted authorization unless MAC authentication was used in which case this field is blank.
STR userStatusVlanAlias	1.3.6.1.4.1.3181.10.6.2.46.103.1.8	DisplayString	read-only	Dynamically through radius assigned VLAN alias.
I32 userStatusVlanId	1.3.6.1.4.1.3181.10.6.2.46.103.1.9	Integer32	read-only	Dynamically through radius assigned VLAN.
I32 userStatusIdleTimeout	1.3.6.1.4.1.3181.10.6.2.46.103.1.10	Integer32	read-only	This value reflects the idle timeout setting as received via RADIUS. It sets the maximum number of seconds before an idle session is terminated.
I32 userStatusSessionTimeout	1.3.6.1.4.1.3181.10.6.2.46.103.1.11	Integer32	read-only	This value reflects the session timeout setting as received via RADIUS. It sets the maximum number of seconds of service to be provided to the user before the session is terminated.
STR userStatusFilterId	1.3.6.1.4.1.3181.10.6.2.46.103.1.12	DisplayString	read-only	If the RADIUS attribute filter-id is used its value is reflected here.
STR userStatusLoginTimeStamp	1.3.6.1.4.1.3181.10.6.2.46.103.1.13	DisplayString	read-only	Indicates the time when this record was created.
U32 userStatusLoginEpoch	1.3.6.1.4.1.3181.10.6.2.46.103.1.14	Unsigned32	read-only	Indicates the time when this record was created. in Linux time since the epoch format.

RFC description

Granite Microsystems G6 PACC (Protocol Adapter Control Card) platform management MIB for carrier-grade access equipment.

Start monitoring MICROSENS Generation 6 (G6) managed Ethernet switch (802.1X port access control) with a free 30-day trial of IPNetwork Monitor. Import MIBs, browse SNMP OIDs, create custom SNMP monitors, configure alerts, and monitor any SNMP-enabled network device from a single console.

Download G6-PACC-MIB

What Is G6-PACC-MIB?

Supported Devices

Monitoring Examples

What Can Be Monitored

This MIB depends on

Related MIBs

RFC description