HP-DOT1X-EXTENSIONS-MIB

All MIBs › HP-DOT1X-EXTENSIONS-MIB

Organization: HP Networking

Last Updated: 2017-10-12

Category: Domain: Security, Protocol: 802.1X, Vendor: HP/HPE

Description: HP ProCurve extension MIB for IEEE 802.1X port-based network access control with additional vendor-specific objects.

Start monitoring vendor-neutral, standards-based MIB, any SNMPv3-capable network device (SNMP engine identity/boot/clock status) with a free 30-day trial of IPNetwork Monitor. Import MIBs, browse SNMP OIDs, create custom SNMP monitors, configure alerts, and monitor any SNMP-enabled network device from a single console.

What Is HP-DOT1X-EXTENSIONS-MIB?

HP-DOT1X-EXTENSIONS-MIB is an HP Networking proprietary MIB (extending the standard IEEE 802.1X PAE MIB) adding shared-media port support — multi-supplicant/multi-auth mode, as used on wireless access points or ports with several authenticating devices — to HP switches/routers. Its PAE-port table records authenticator/supplicant/mixed-mode flags, speed VSA, MAC-based-VLAN (MBV) flag, critical/open-authentication voice/data VLAN and user-role assignments, and initial role, while an auth-config table sets authorized/unauthorized VLAN, unauthorized period, client limit, logoff period, and cached-reauthentication settings. As a configuration MIB it lets an administrator confirm a shared-media port's critical-authentication (fail-open) VLAN assignment for use during a RADIUS server outage. It is deployed on HP switches/routers using 802.1X with shared-media ports. Engineers can download the HP-DOT1X-EXTENSIONS-MIB file directly to load it into their MIB browser.

IPNetwork Monitor allows you to monitor SNMP objects defined in HP-DOT1X-EXTENSIONS-MIB. Use the built-in SNMP Monitoring Browser to explore available variables, view their current values and descriptions, and select the objects you want to monitor. You can then create SNMP monitors, configure thresholds, and receive alerts when monitored values change.

Supported Devices

HP switches/routers (802.1X shared-media ports)

Monitoring Examples

An administrator checks hpicfDot1xPaePortCritAuthDataVid to confirm which VLAN a port fails open into if the RADIUS server becomes unreachable during 802.1X authentication on an HP switch.

What Can Be Monitored

802.1X shared-media port mode and fail-open VLAN configuration

Imported Objects

From HP-AUTZ-MIB

HpAutzUserRoleName

From HP-ICF-OID

hpSwitch

OBJECT-IDENTITY

From IEEE8021-PAE-MIB

dot1xAuthConfigEntry	OBJECT-TYPE
dot1xPaePortEntry	OBJECT-TYPE
dot1xPaePortNumber	OBJECT-TYPE
dot1xSuppConfigEntry	OBJECT-TYPE

From IF-MIB

InterfaceIndex

From Q-BRIDGE-MIB

VlanIndex

From SNMP-FRAMEWORK-MIB

SnmpAdminString

From SNMPv2-CONF

MODULE-COMPLIANCE
OBJECT-GROUP

From SNMPv2-SMI

Counter32
Counter64
MODULE-IDENTITY
OBJECT-TYPE
TimeTicks
Unsigned32

From SNMPv2-TC

DisplayString
MacAddress
TimeStamp
TruthValue

How to Use in IPNetwork Monitor

Example using hpicfDot1xAuthNumberOfSuccessAuthentication OID:

Select an HP switch/router (802.1X shared-media/multi-supplicant ports) as the target host to create a monitor — the SNMP service should be up and running on it. Click New Monitor, then check SNMP Custom on the Favorites tab, click Next, and confirm the host. On the next page, click Select... to open the built-in SNMP MIB Browser and type hpicfDot1xAuthNumberOfSuccessAuthentication into the Find box to locate it in the OID tree, selecting the specific row/instance you want to monitor since this is a table column, then select it and click OK. Counts the number of times that authenticator received an EAP-Success message from Authentication Server. On the monitor's Main parameters page you can set the target's SNMP port (default 161), credentials, polling interval, and other settings — see the SNMP Monitor help for details. On the State conditions and Alerting tabs, configure when the monitor should change state and trigger an alert; since this is a Counter32-type OID, Value bounds is the most useful condition here — trigger an alert if the counter increases sharply between polls relative to its normal baseline, since an unexpected spike often reflects a real change in traffic or activity. Click Finish to create the monitor; you can adjust any parameter later.

OIDs

OID symbolic	OID numeric	Type	Access	Description
INT hpicfDot1x2010	1.3.6.1.4.1.11.2.14.11.5.1.25.1.1.2	INTEGER	read-write	The administrative enable dot1x 2010 compliance support gobally for authenticator and supplicant.
T/F hpicfDot1xAuthAllowGvrpVlans	1.3.6.1.4.1.11.2.14.11.5.1.25.1.2.6	TruthValue	read-write	This object allows enable/disable the use of RADIUS-assigned dynamic (GVRP) VLANs.
VLA hpicfDot1xAuthAuthVid	1.3.6.1.4.1.11.2.14.11.5.1.25.1.2.1.1.1	VlanIndex	read-write	This object configures the PVID for the authorized 802.1x port. When hpSwitchAutzUserRoleEnabled is true, this value may be superseded by the value of hpSwitchAutzUserRoleVlanId or hpSwitchAutzUserRoleVlanName from the client's assigned role.
U32 hpicfDot1xAuthCachedReauthDelay	1.3.6.1.4.1.11.2.14.11.5.1.25.1.2.7	Unsigned32	read-write	The value indicates the period in seconds, during which all reauthentications will be suppressed after a cached reauthentication.
U32 hpicfDot1xAuthCachedReauthPeriod	1.3.6.1.4.1.11.2.14.11.5.1.25.1.2.1.1.7	Unsigned32	read-write	The value indicates the period in seconds, during which cached reauthentication is allowed on the port. If value is zero then the period of cached reauthentication is unlimited.
U32 hpicfDot1xAuthClientLimit	1.3.6.1.4.1.11.2.14.11.5.1.25.1.2.1.1.4	Unsigned32	read-write	***********THIS OBJECT IS DEPRECATED ******** The maximum number of authenticated clients to allow on the port.
U32 hpicfDot1xAuthClientLimit2	1.3.6.1.4.1.11.2.14.11.5.1.25.1.2.1.1.6	Unsigned32	read-write	The maximum number of authenticated clients to allow on the port if greater than 0. If 0 then authenticator controls port as a single entity - no client limit.
hpicfDot1xAuthConfigEntry	1.3.6.1.4.1.11.2.14.11.5.1.25.1.2.1.1		not-accessible	The fields in these entries will be used to supplement 'dot1xAuthConfigEntry'.
hpicfDot1xAuthConfigGroup	1.3.6.1.4.1.11.2.14.11.5.1.25.2.1.2			******* THIS GROUP IS DEPRECATED ******* A collection of objects providing basic configuration control of over Authenticator PAEs.
hpicfDot1xAuthConfigGroup2	1.3.6.1.4.1.11.2.14.11.5.1.25.2.1.7			A collection of objects providing basic configuration control of over Authenticator PAEs.
hpicfDot1xAuthConfigGroup3	1.3.6.1.4.1.11.2.14.11.5.1.25.2.1.8			A collection of objects providing basic configuration control of over Authenticator PAEs.
hpicfDot1xAuthConfigGroup4	1.3.6.1.4.1.11.2.14.11.5.1.25.2.1.9			A collection of objects providing basic configuration control of over Authenticator PAEs.
hpicfDot1xAuthConfigGroup5	1.3.6.1.4.1.11.2.14.11.5.1.25.2.1.10			A collection of objects providing basic configuration control of over Authenticator PAEs.
hpicfDot1xAuthConfigTable	1.3.6.1.4.1.11.2.14.11.5.1.25.1.2.1		not-accessible	This table supplements the 'dot1xAuthConfigTable'.
hpicfDot1xAuthDiagEntry	1.3.6.1.4.1.11.2.14.11.5.1.25.1.2.3.1		not-accessible	The diagnostic information for an Authenticator PAE.
hpicfDot1xAuthDiagGroup	1.3.6.1.4.1.11.2.14.11.5.1.25.2.1.4			A collection of objects providing basic diagnostic Information over Authenticator PAEs.
hpicfDot1xAuthDiagTable	1.3.6.1.4.1.11.2.14.11.5.1.25.1.2.3		not-accessible	A table that contains the diagnostics objects for the Authenticator PAE associated with each Port. An entry appears in this table for each port that may authenticate access to itself.
C32 hpicfDot1xAuthEapLengthErrorFramesRx	1.3.6.1.4.1.11.2.14.11.5.1.25.1.2.4.1.10	Counter32	read-only	The number of EAPOL frames that have been received by this Authenticator in which the Packet Body Length field is invalid.
C32 hpicfDot1xAuthEapolFramesRx	1.3.6.1.4.1.11.2.14.11.5.1.25.1.2.4.1.1	Counter32	read-only	The number of valid EAPOL frames of any type that have been received by this Authenticator.
C32 hpicfDot1xAuthEapolFramesTx	1.3.6.1.4.1.11.2.14.11.5.1.25.1.2.4.1.2	Counter32	read-only	The number of EAPOL frames of any type that have been transmitted by this Authenticator.
C32 hpicfDot1xAuthEapolLogoffFramesRx	1.3.6.1.4.1.11.2.14.11.5.1.25.1.2.4.1.4	Counter32	read-only	The number of EAPOL Logoff frames that have been received by this Authenticator.
C32 hpicfDot1xAuthEapolReqFramesTx	1.3.6.1.4.1.11.2.14.11.5.1.25.1.2.4.1.8	Counter32	read-only	The number of EAP Request frames (other than Rq/Id frames) that have been transmitted by this Authenticator.
C32 hpicfDot1xAuthEapolReqIdFramesTx	1.3.6.1.4.1.11.2.14.11.5.1.25.1.2.4.1.7	Counter32	read-only	The number of EAP Req/Id frames that have been transmitted by this Authenticator.
C32 hpicfDot1xAuthEapolRespFramesRx	1.3.6.1.4.1.11.2.14.11.5.1.25.1.2.4.1.6	Counter32	read-only	The number of valid EAP Response frames (other than Resp/Id frames) that have been received by this Authenticator.
C32 hpicfDot1xAuthEapolRespIdFramesRx	1.3.6.1.4.1.11.2.14.11.5.1.25.1.2.4.1.5	Counter32	read-only	The number of EAP Resp/Id frames that have been received by this Authenticator.
C32 hpicfDot1xAuthEapolStartFramesRx	1.3.6.1.4.1.11.2.14.11.5.1.25.1.2.4.1.3	Counter32	read-only	The number of EAPOL Start frames that have been received by this Authenticator.
T/F hpicfDot1xAuthEnforceCacheReauth	1.3.6.1.4.1.11.2.14.11.5.1.25.1.2.1.1.8	TruthValue	read-write	Setting this attribute TRUE(1) will allow cached reauthentication when server-timeout is configured lesser than radius connection timeout or when client initiates authentication before the radius connection timeout during reauthentication.
hpicfDot1xAuthenticator	1.3.6.1.4.1.11.2.14.11.5.1.25.1.2
C32 hpicfDot1xAuthInvalidEapolFramesRx	1.3.6.1.4.1.11.2.14.11.5.1.25.1.2.4.1.9	Counter32	read-only	The number of EAPOL frames that have been received by this Authenticator in which the frame type is not recognized.
MAC hpicfDot1xAuthLastEapolFrameSource	1.3.6.1.4.1.11.2.14.11.5.1.25.1.2.4.1.12	MacAddress	read-only	The source MAC address carried in the most recently received EAPOL frame.
U32 hpicfDot1xAuthLastEapolFrameVersion	1.3.6.1.4.1.11.2.14.11.5.1.25.1.2.4.1.11	Unsigned32	read-only	The protocol version number carried in the most recently received EAPOL frame.
U32 hpicfDot1xAuthLogoffPeriod	1.3.6.1.4.1.11.2.14.11.5.1.25.1.2.1.1.5	Unsigned32	read-write	Specifies the period, in seconds, at which an authenticated client will be considered unauthenticated for a lack of activity (i.e. traffic originating from client).
C32 hpicfDot1xAuthNumberOfFailedAuthentication	1.3.6.1.4.1.11.2.14.11.5.1.25.1.2.3.1.2	Counter32	read-only	Counts the number of times that authenticator received an EAP-Failure message from Authentication Server. Indicates that Supplicant has failed to authenticate to the Authentication Server.
C32 hpicfDot1xAuthNumberOfSuccessAuthenticationEx	1.3.6.1.4.1.11.2.14.11.5.1.25.1.2.3.1.1	Counter32	read-only	Counts the number of times that authenticator received an EAP-Success message from Authentication Server. Indicates that Supplicant has successfully authenticated to the Authentication Server.
INT hpicfDot1xAuthSessionAuthenticMethod	1.3.6.1.4.1.11.2.14.11.5.1.25.1.2.5.1.7	INTEGER	read-only	The authentication method used to establish the session.
C32 hpicfDot1xAuthSessionFramesRx	1.3.6.1.4.1.11.2.14.11.5.1.25.1.2.5.1.4	Counter32	read-only	The number of user data frames received during the session.
C32 hpicfDot1xAuthSessionFramesTx	1.3.6.1.4.1.11.2.14.11.5.1.25.1.2.5.1.5	Counter32	read-only	The number of user data frames transmitted during the session.
STR hpicfDot1xAuthSessionId	1.3.6.1.4.1.11.2.14.11.5.1.25.1.2.5.1.6	SnmpAdminString	read-only	A unique identifier for the session, in the form of a printable ASCII string of at least three characters.
TIK hpicfDot1xAuthSessionInactiveTime	1.3.6.1.4.1.11.2.14.11.5.1.25.1.2.5.1.11	TimeTicks	read-only	This time (in seconds) since last user data frames, either received or transmitted, were observed.
T/F hpicfDot1xAuthSessionIsForwarding	1.3.6.1.4.1.11.2.14.11.5.1.25.1.2.5.1.14	TruthValue	read-only	Specifies whether traffic originating from Supplicant PAE is being forwarded by Authenticator PAE. If TRUE, then Authenticator is forwarding Supplicant's traffic If FALSE, then Authenticator is not forwarding (blocking) Supplicant's traffic.
C64 hpicfDot1xAuthSessionOctetsRx	1.3.6.1.4.1.11.2.14.11.5.1.25.1.2.5.1.2	Counter64	read-only	The number of octets received in user data frames during the session.
C64 hpicfDot1xAuthSessionOctetsTx	1.3.6.1.4.1.11.2.14.11.5.1.25.1.2.5.1.3	Counter64	read-only	The number of octets transmitted in user data frames during the session.
T/F hpicfDot1xAuthSessionPerPAECountersEnabled	1.3.6.1.4.1.11.2.14.11.5.1.25.1.2.5.1.1	TruthValue	read-only	Specifies whether individualized PAE octet and frame counts are supported. If TRUE then system is capable of maintaining separate counter sets for each, of possibly many, Authenticator PAE instance on a port. If FALSE then system is incapable of maintaining separate counter sets. Frame and octet counter values returned are an aggregate of all PAE sessions on the port.
HPA hpicfDot1xAuthSessionRoleName	1.3.6.1.4.1.11.2.14.11.5.1.25.1.2.5.1.16	HpAutzUserRoleName	read-only	When hpSwitchAutzUserRoleEnabled is true, specifies the user role of the client assigned to the Supplicant PAE.
TIM hpicfDot1xAuthSessionStartTime	1.3.6.1.4.1.11.2.14.11.5.1.25.1.2.5.1.9	TimeStamp	read-only	This object contains the value of sysUpTime at the time Supplicant was successfully authenticated.
hpicfDot1xAuthSessionStatsEntry	1.3.6.1.4.1.11.2.14.11.5.1.25.1.2.5.1		not-accessible	The session statistics information for an Authenticator PAE. This shows the current values being collected for each session that is still in progress, or the final values for the last valid session on each port where there is no session currently active.
hpicfDot1xAuthSessionStatsGroup	1.3.6.1.4.1.11.2.14.11.5.1.25.2.1.6			A collection of objects providing statistics about the current, or last sessions for Authenticator PAEs running on a shared-media port.
hpicfDot1xAuthSessionStatsGroup1	1.3.6.1.4.1.11.2.14.11.5.1.25.2.1.18			A collection of objects providing statistics about the current, or last sessions for Authenticator PAEs running on a shared-media port.
hpicfDot1xAuthSessionStatsTable	1.3.6.1.4.1.11.2.14.11.5.1.25.1.2.5		not-accessible	A table that contains the session statistics objects for the Authenticator PAE's associated with each shared-media Port.
TIM hpicfDot1xAuthSessionStopTime	1.3.6.1.4.1.11.2.14.11.5.1.25.1.2.5.1.10	TimeStamp	read-only	This object contains the value of sysUpTime at the time an authenticated Supplicant was de-authenticated, as a result of an EAPOL-Logoff, reauthentication period expiration, or forced asynchronous reauthentication.
INT hpicfDot1xAuthSessionTerminateCause	1.3.6.1.4.1.11.2.14.11.5.1.25.1.2.5.1.12	INTEGER	read-only	The reason for the session termination.
TIK hpicfDot1xAuthSessionTime	1.3.6.1.4.1.11.2.14.11.5.1.25.1.2.5.1.8	TimeTicks	read-only	The duration of the session in seconds.
STR hpicfDot1xAuthSessionUserName	1.3.6.1.4.1.11.2.14.11.5.1.25.1.2.5.1.13	SnmpAdminString	read-only	The User-Name representing the identity of the Supplicant PAE.
VLA hpicfDot1xAuthSessionVid	1.3.6.1.4.1.11.2.14.11.5.1.25.1.2.5.1.15	VlanIndex	read-only	The PVID on which user data frames are being forwarded.
hpicfDot1xAuthStatsEntry	1.3.6.1.4.1.11.2.14.11.5.1.25.1.2.4.1		not-accessible	The statistics information for an Authenticator PAE.
hpicfDot1xAuthStatsGroup	1.3.6.1.4.1.11.2.14.11.5.1.25.2.1.5			A collection of objects providing statistics about Authenticator PAEs running on a shared-media port.
hpicfDot1xAuthStatsTable	1.3.6.1.4.1.11.2.14.11.5.1.25.1.2.4		not-accessible	A table that contains the statistics objects for the Authenticator PAE's associated with each shared-media Port.
U32 hpicfDot1xAuthUnauthPeriod	1.3.6.1.4.1.11.2.14.11.5.1.25.1.2.1.1.3	Unsigned32	read-write	This objects configures the period of time, in seconds, which the authenticator will wait for authentication before transitioning to guest VLAN mode, or assigning the role identified by hpSwitchAutzUserRoleInitialRoleName when hpSwitchAutzUserRoleEnabled is true.
VLA hpicfDot1xAuthUnauthVid	1.3.6.1.4.1.11.2.14.11.5.1.25.1.2.1.1.2	VlanIndex	read-write	This object configures the PVID for the unauthorized 802.1x port. When hpSwitchAutzUserRoleEnabled is true, this value may be superseded by the value of hpSwitchAutzUserRoleVlanId or hpSwitchAutzUserRoleVlanName from the role identified by hpSwitchAutzUserRoleInitialRoleName.
hpicfDot1xCompliance	1.3.6.1.4.1.11.2.14.11.5.1.25.2.2.1			******* THIS COMPLIANCE IS DEPRECATED ******* The compliance statement for devices support of HP IEEE 802.1X extensions MIB.
hpicfDot1xCompliance11	1.3.6.1.4.1.11.2.14.11.5.1.25.2.2.11			The compliance statement for devices support of HP IEEE 802.1X extensions MIB.
hpicfDot1xCompliance12	1.3.6.1.4.1.11.2.14.11.5.1.25.2.2.12			The compliance statement for devices support of HP IEEE 802.1X extensions MIB.
hpicfDot1xCompliance13	1.3.6.1.4.1.11.2.14.11.5.1.25.2.2.13			The compliance statement for devices support of HP IEEE 802.1X extensions MIB.
hpicfDot1xCompliance14	1.3.6.1.4.1.11.2.14.11.5.1.25.2.2.14			The compliance statement for devices support of HP IEEE 802.1X extensions MIB.
hpicfDot1xCompliance2	1.3.6.1.4.1.11.2.14.11.5.1.25.2.2.2			******* THIS COMPLIANCE IS DEPRECATED ******* The compliance statement for devices support of HP IEEE 802.1X extensions MIB.
hpicfDot1xCompliance3	1.3.6.1.4.1.11.2.14.11.5.1.25.2.2.3			******* THIS COMPLIANCE IS DEPRECATED ******* The compliance statement for devices support of HP IEEE 802.1X extensions MIB.
hpicfDot1xCompliance4	1.3.6.1.4.1.11.2.14.11.5.1.25.2.2.4			******* THIS COMPLIANCE IS DEPRECATED ******* The compliance statement for devices support of HP IEEE 802.1X extensions MIB.
hpicfDot1xCompliance5	1.3.6.1.4.1.11.2.14.11.5.1.25.2.2.5			The compliance statement for devices support of HP IEEE 802.1X extensions MIB.
hpicfDot1xCompliance6	1.3.6.1.4.1.11.2.14.11.5.1.25.2.2.6			The compliance statement for devices support of HP IEEE 802.1X extensions MIB.
hpicfDot1xCompliance7	1.3.6.1.4.1.11.2.14.11.5.1.25.2.2.7			The compliance statement for devices support of HP IEEE 802.1X extensions MIB.
hpicfDot1xCompliance8	1.3.6.1.4.1.11.2.14.11.5.1.25.2.2.8			The compliance statement for devices support of HP IEEE 802.1X extensions MIB.
hpicfDot1xCompliance9	1.3.6.1.4.1.11.2.14.11.5.1.25.2.2.9			The compliance statement for devices support of HP IEEE 802.1X extensions MIB.
hpicfDot1xCompliances	1.3.6.1.4.1.11.2.14.11.5.1.25.2.2
hpicfDot1xConformance	1.3.6.1.4.1.11.2.14.11.5.1.25.2
hpicfDot1xGroups	1.3.6.1.4.1.11.2.14.11.5.1.25.2.1
hpicfDot1xMIB	1.3.6.1.4.1.11.2.14.11.5.1.25			This MIB module contains the definitions of Managed Objects for HP extensions to IEEE 802.1X. This MIB supplements the IEEE 802.1X MIB to provide a mechanism by which to configure and retrieve status on shared-media ports, such as in wireless access points or multi-supplicant mode on HP switches/routers.
hpicfDot1xMIBObjects	1.3.6.1.4.1.11.2.14.11.5.1.25.1
hpicfDot1xPaeAuthSessionGroup	1.3.6.1.4.1.11.2.14.11.5.1.25.2.1.12			A collection of Dot1x objects .
hpicfDot1xPaeAuthSessionGroup1	1.3.6.1.4.1.11.2.14.11.5.1.25.2.1.14			A collection of Dot1x objects .
T/F hpicfDot1xPaePortAuth	1.3.6.1.4.1.11.2.14.11.5.1.25.1.1.1.1.1	TruthValue	read-write	This object allows enable/disable authenticator functionality on a port.
VLA hpicfDot1xPaePortCritAuthDataVid	1.3.6.1.4.1.11.2.14.11.5.1.25.1.1.1.1.7	VlanIndex	read-write	The VLANID which is being assinged as a critical-auth data vlan.
STR hpicfDot1xPaePortCritAuthUserRole	1.3.6.1.4.1.11.2.14.11.5.1.25.1.1.1.1.8	DisplayString	read-write	This object specifies the user role of the client for critical-auth.
VLA hpicfDot1xPaePortCritAuthVoiceVid	1.3.6.1.4.1.11.2.14.11.5.1.25.1.1.1.1.6	VlanIndex	read-write	The VLANID which is being assinged as a critical-auth voice vlan.
hpicfDot1xPaePortEntry	1.3.6.1.4.1.11.2.14.11.5.1.25.1.1.1.1		not-accessible	The fields in these entries will be used to supplement 'dot1xPaePortEntry'.
hpicfDot1xPaePortGroup	1.3.6.1.4.1.11.2.14.11.5.1.25.2.1.1			A collection of objects providing basic administrative control over Authenticator PAE and Supplicant PAE in system.
hpicfDot1xPaePortGroup1	1.3.6.1.4.1.11.2.14.11.5.1.25.2.1.20			A collection of objects providing configuration support for critial/open auth vlan.
STR hpicfDot1xPaePortInitialRole	1.3.6.1.4.1.11.2.14.11.5.1.25.1.1.1.1.12	DisplayString	read-write	This object specifies the initial role that is configured for a port.
T/F hpicfDot1xPaePortMBV	1.3.6.1.4.1.11.2.14.11.5.1.25.1.1.1.1.5	TruthValue	read-write	This object enables and disables the MAC-based VLANs feature on the port.
T/F hpicfDot1xPaePortMixed	1.3.6.1.4.1.11.2.14.11.5.1.25.1.1.1.1.3	TruthValue	read-write	This object allows enable/disable guests on ports with authenticated clients.
VLA hpicfDot1xPaePortOpenAuthDataVid	1.3.6.1.4.1.11.2.14.11.5.1.25.1.1.1.1.10	VlanIndex	read-write	The VLANID which is being assinged as a open-auth data vlan.
STR hpicfDot1xPaePortOpenAuthUserRole	1.3.6.1.4.1.11.2.14.11.5.1.25.1.1.1.1.11	DisplayString	read-write	This object specifies the user role of the client for open-auth.
VLA hpicfDot1xPaePortOpenAuthVoiceVid	1.3.6.1.4.1.11.2.14.11.5.1.25.1.1.1.1.9	VlanIndex	read-write	The VLANID which is being assinged as a open-auth voice vlan.
T/F hpicfDot1xPaePortSpeedVSA	1.3.6.1.4.1.11.2.14.11.5.1.25.1.1.1.1.4	TruthValue	read-write	This object allows enable or disable port speed VSA processing on a port.
T/F hpicfDot1xPaePortSupp	1.3.6.1.4.1.11.2.14.11.5.1.25.1.1.1.1.2	TruthValue	read-write	This object allows enable/disable supplicant functionality on a port.
hpicfDot1xPaePortTable	1.3.6.1.4.1.11.2.14.11.5.1.25.1.1.1		not-accessible	This table supplements the 'dot1xPaePortTable'.
INT hpicfDot1xSMAuthBackendAuthState	1.3.6.1.4.1.11.2.14.11.5.1.25.1.2.2.1.6	INTEGER	read-only	The current state of the Backend Authentication state machine.
hpicfDot1xSMAuthConfigEntry	1.3.6.1.4.1.11.2.14.11.5.1.25.1.2.2.1		not-accessible	The configuration information for an Authenticator PAE.
hpicfDot1xSMAuthConfigGroup	1.3.6.1.4.1.11.2.14.11.5.1.25.2.1.3			A collection of objects providing basic status and configuration control over Authenticator PAEs running on a shared-media port.
hpicfDot1xSMAuthConfigTable	1.3.6.1.4.1.11.2.14.11.5.1.25.1.2.2		not-accessible	A table that contains the configuration and basic status objects for Authenticator PAEs associated with each shared-media port.
T/F hpicfDot1xSMAuthInitialize	1.3.6.1.4.1.11.2.14.11.5.1.25.1.2.2.1.3	TruthValue	read-write	The initialization control for this Authenticator PAE. Setting this attribute TRUE causes the PAE to be initialized. The attribute value reverts to FALSE once initialization has completed.
MAC hpicfDot1xSMAuthMacAddr	1.3.6.1.4.1.11.2.14.11.5.1.25.1.2.2.1.2	MacAddress	read-only	The 48-bit IEEE media access control address of The supplicant associated with this Authenticator PAE.
NUM hpicfDot1xSMAuthPaePort	1.3.6.1.4.1.11.2.14.11.5.1.25.1.2.2.1.1	InterfaceIndex	not-accessible	The interface index associated with this Authenticator PAE. On wired HP products the interface index is the physical port. On wireless products it is the instance (whether real or virtual) of an AP.
INT hpicfDot1xSMAuthPaeState	1.3.6.1.4.1.11.2.14.11.5.1.25.1.2.2.1.5	INTEGER	read-only	The current value of the Authenticator PAE state machine.
T/F hpicfDot1xSMAuthReAuthEnabled	1.3.6.1.4.1.11.2.14.11.5.1.25.1.2.2.1.8	TruthValue	read-only	The enable/disable control used by the Reauthentication Timer state machine (8.5.5.1).
T/F hpicfDot1xSMAuthReauthenticate	1.3.6.1.4.1.11.2.14.11.5.1.25.1.2.2.1.4	TruthValue	read-write	The reauthentication control for this Authenticator PAE. Setting this attribute TRUE causes the Authenticator PAE state machine for the Port to reauthenticate the Supplicant. Setting this attribute FALSE has no effect. This attribute always returns FALSE when it is read.
U32 hpicfDot1xSMAuthReAuthPeriod	1.3.6.1.4.1.11.2.14.11.5.1.25.1.2.2.1.7	Unsigned32	read-only	The value, in seconds, of the reAuthPeriod constant currently in use by the Reauthentication Timer state machine. When hpSwitchAutzUserRoleEnabled is true, this value will be superseded by the value of hpSwitchAutzUserRoleReauthPeriod from the client's assigned role.
U32 hpicfDot1xSMAuthSessionTimeout	1.3.6.1.4.1.11.2.14.11.5.1.25.1.2.2.1.9	Unsigned32	read-only	Specifies the RADIUS Server set session timeout for reauthentication of the user. When ST = 0, user gets reauthenticated at reauth-period secs, ST 60 user is reauthenticated at ST secs.
hpicfDot1xSMAuthSessionTimeoutGroup	1.3.6.1.4.1.11.2.14.11.5.1.25.2.1.13			A collection of objects providing RADIUS server set session timeout for user reauthentication
hpicfDot1xSuppConfigEntry	1.3.6.1.4.1.11.2.14.11.5.1.25.1.3.1.1		not-accessible	The fields in these entries will be used to supplement 'dot1xSuppConfigEntry'.
hpicfDot1xSuppConfigGroup	1.3.6.1.4.1.11.2.14.11.5.1.25.2.1.11			A collection of objects providing basic configuration of the 802.1x supplicant.
STR hpicfDot1xSuppConfigIdentity	1.3.6.1.4.1.11.2.14.11.5.1.25.1.3.1.1.1	DisplayString	read-write	This object can be used to set/get the identity 802.1x supplicant supplies to its authenticator.
STR hpicfDot1xSuppConfigPassword	1.3.6.1.4.1.11.2.14.11.5.1.25.1.3.1.1.2	DisplayString	read-write	This object can be used to set the password the supplicant uses for MD5 authentication.
OCT hpicfDot1xSuppConfigPasswordEncrypted	1.3.6.1.4.1.11.2.14.11.5.1.25.1.3.1.1.3	OCTET STRING	read-write	The encrypted form of the password used by supplicant for MD5 authentication. This object may only be read or written when hpSwitchAuthenticationEncryptCredentialsMethod is set to a value other than none(0). At most one of hpicfDot1xSuppConfigPassword and hpicfDot1xSuppConfigPasswordEncrypted may be set in any transaction. This object should only be written with an encrypted password previously read from a compatible HP Networking device.
hpicfDot1xSuppConfigTable	1.3.6.1.4.1.11.2.14.11.5.1.25.1.3.1		not-accessible	This table supplements the 'dot1xSuppConfigTable'.
hpicfDot1xSupplicant	1.3.6.1.4.1.11.2.14.11.5.1.25.1.3
hpicfDot1xSystem	1.3.6.1.4.1.11.2.14.11.5.1.25.1.1
hpicfDot1xSystemGroup	1.3.6.1.4.1.11.2.14.11.5.1.25.2.1.19			A collection of objects providing dot1x 2010 support for authenticator and supplicant.

RFC description

Extends IEEE 802.1X port access control with HP-specific features for shared-media ports and wireless access points.

Start monitoring HP switch/router (802.1X shared-media/multi-supplicant ports) with a free 30-day trial of IPNetwork Monitor. Import MIBs, browse SNMP OIDs, create custom SNMP monitors, configure alerts, and monitor any SNMP-enabled network device from a single console.

Download HP-DOT1X-EXTENSIONS-MIB