All MIBs › IEEE8021-PAE-MIB
Organization: IEEE 802.1 Working Group
Last Updated: 2004-06-22
Category: Protocol: 802.1X, Standard: IEEE 802
Description:
IEEE 802.1 MIB for Port Access Entity (PAE/802.1X), used to manage port-based access control and authentication on the network.
Imported Objects
From IF-MIB
| InterfaceIndex |
From SNMP-FRAMEWORK-MIB
| SnmpAdminString |
From SNMPv2-CONF
| MODULE-COMPLIANCE | |
| OBJECT-GROUP |
From SNMPv2-SMI
| Counter32 | |
| Counter64 | |
| MODULE-IDENTITY | |
| OBJECT-TYPE | |
| TimeTicks | |
| Unsigned32 |
From SNMPv2-TC
| MacAddress | |
| TEXTUAL-CONVENTION | |
| TruthValue |
What Is IEEE8021-PAE-MIB?
IEEE8021-PAE-MIB is the IEEE 802.1X standard MIB for the Port Access Entity, implementing port-based network access control and authentication on managed network devices. It exposes per-port authentication configuration and state, including protocol version and capabilities, admin/reauthentication controls, and detailed authenticator/backend authentication state machine status. Its monitoring value is centered on software/security-control status rather than physical hardware; operators use it to verify whether 802.1X is enabled and functioning correctly on each port and to see if ports are stuck in an unauthenticated or error state, which can indicate misconfigured supplicants or a failed RADIUS backend. As a vendor-neutral IEEE standard it has no dependency on vendor-specific MIBs, though it's typically deployed alongside IF-MIB for per-interface correlation. It's common on managed Ethernet switches and wireless controllers that enforce port-based or SSID-based authentication, and network engineers searching for ieee8021-pae-mib documentation are usually looking for exactly these per-port authentication and backend state objects to script compliance checks.
IPNetwork Monitor allows you to monitor SNMP objects defined in IEEE8021-PAE-MIB. Use the built-in SNMP Monitoring Browser to explore available variables, view their current values and descriptions, and select the objects you want to monitor. You can then create SNMP monitors, configure thresholds, and receive alerts when monitored values change.
What Can Be Monitored
- per-port 802.1X admin status
- authenticator PAE state
- backend authentication state
- port protocol version/capabilities
- global authentication control
- port reauthentication/initialize actions
Supported Devices
- vendor-neutral, standards-based MIB, not tied to a specific manufacturer
- managed Ethernet switches
- wireless LAN controllers
Monitoring Examples
An administrator would poll dot1xPaePortTable/dot1xPaePortEntry, indexed by dot1xPaePortNumber, checking dot1xPaePortProtocolVersion and dot1xPaePortCapabilities alongside dot1xPaePortInitialize/dot1xPaePortReauthenticate to control or reset a port's authentication cycle. dot1xAuthConfigTable/dot1xAuthConfigEntry would be checked for dot1xAuthPaeState and dot1xAuthBackendAuthState per port; a port stuck in a non-authorized dot1xAuthPaeState with dot1xAuthBackendAuthState showing a timeout suggests a RADIUS server reachability problem. Toggling dot1xPaeSystemAuthControl globally lets an admin verify whether 802.1X enforcement is active fleet-wide.
OIDs
| OID symbolic | OID numeric | Type | Access | Description |
|---|---|---|---|---|
| ieee8021paeMIB | 1.0.8802.1.1.1 | The Port Access Entity module for managing IEEE 802.1X. | ||
| paeMIBObjects | 1.0.8802.1.1.1.1 | |||
| dot1xPaeSystem | 1.0.8802.1.1.1.1.1 | |||
| INT dot1xPaeSystemAuthControl | 1.0.8802.1.1.1.1.1.1 | INTEGER | read-write | The administrative enable/disable state for Port Access Control in a System. |
| dot1xPaePortTable | 1.0.8802.1.1.1.1.1.2 | not-accessible | A table of system level information for each port supported by the Port Access Entity. An entry appears in this table for each port of this system. | |
| dot1xPaePortEntry | 1.0.8802.1.1.1.1.1.2.1 | not-accessible | The Port number, protocol version, and initialization control for a Port. | |
| NUM dot1xPaePortNumber | 1.0.8802.1.1.1.1.1.2.1.1 | InterfaceIndex | not-accessible | The Port number associated with this Port. |
| U32 dot1xPaePortProtocolVersion | 1.0.8802.1.1.1.1.1.2.1.2 | Unsigned32 | read-only | The protocol version associated with this Port. |
| BIT dot1xPaePortCapabilities | 1.0.8802.1.1.1.1.1.2.1.3 | Bits | read-only | Indicates the PAE functionality that this Port supports and that may be managed through this MIB. |
| T/F dot1xPaePortInitialize | 1.0.8802.1.1.1.1.1.2.1.4 | TruthValue | read-write | The initialization control for this Port. Setting this attribute TRUE causes the Port to be initialized. The attribute value reverts to FALSE once initialization has completed. |
| T/F dot1xPaePortReauthenticate | 1.0.8802.1.1.1.1.1.2.1.5 | TruthValue | read-write | The reauthentication control for this port. Setting this attribute TRUE causes the Authenticator PAE state machine for the Port to reauthenticate the Supplicant. Setting this attribute FALSE has no effect. This attribute always returns FALSE when it is read. |
| dot1xPaeAuthenticator | 1.0.8802.1.1.1.1.2 | |||
| dot1xAuthConfigTable | 1.0.8802.1.1.1.1.2.1 | not-accessible | A table that contains the configuration objects for the Authenticator PAE associated with each port. An entry appears in this table for each port that may authenticate access to itself. | |
| dot1xAuthConfigEntry | 1.0.8802.1.1.1.1.2.1.1 | not-accessible | The configuration information for an Authenticator PAE. | |
| INT dot1xAuthPaeState | 1.0.8802.1.1.1.1.2.1.1.1 | INTEGER | read-only | The current value of the Authenticator PAE state machine. |
| INT dot1xAuthBackendAuthState | 1.0.8802.1.1.1.1.2.1.1.2 | INTEGER | read-only | The current state of the Backend Authentication state machine. |
| PAE dot1xAuthAdminControlledDirections | 1.0.8802.1.1.1.1.2.1.1.3 | PaeControlledDirections | read-write | The current value of the administrative controlled directions parameter for the Port. |
| PAE dot1xAuthOperControlledDirections | 1.0.8802.1.1.1.1.2.1.1.4 | PaeControlledDirections | read-only | The current value of the operational controlled directions parameter for the Port. |
| PAE dot1xAuthAuthControlledPortStatus | 1.0.8802.1.1.1.1.2.1.1.5 | PaeControlledPortStatus | read-only | The current value of the controlled Port status parameter for the Port. |
| PAE dot1xAuthAuthControlledPortControl | 1.0.8802.1.1.1.1.2.1.1.6 | PaeControlledPortControl | read-write | The current value of the controlled Port control parameter for the Port. |
| U32 dot1xAuthQuietPeriod | 1.0.8802.1.1.1.1.2.1.1.7 | Unsigned32 | read-write | The value, in seconds, of the quietPeriod constant currently in use by the Authenticator PAE state machine. |
| U32 dot1xAuthTxPeriod | 1.0.8802.1.1.1.1.2.1.1.8 | Unsigned32 | read-write | The value, in seconds, of the txPeriod constant currently in use by the Authenticator PAE state machine. |
| U32 dot1xAuthSuppTimeout | 1.0.8802.1.1.1.1.2.1.1.9 | Unsigned32 | read-write | The value, in seconds, of the suppTimeout constant currently in use by the Backend Authentication state machine. |
| U32 dot1xAuthServerTimeout | 1.0.8802.1.1.1.1.2.1.1.10 | Unsigned32 | read-write | The value, in seconds, of the serverTimeout constant currently in use by the Backend Authentication state machine. |
| U32 dot1xAuthMaxReq | 1.0.8802.1.1.1.1.2.1.1.11 | Unsigned32 | read-write | The value of the maxReq constant currently in use by the Backend Authentication state machine. |
| U32 dot1xAuthReAuthPeriod | 1.0.8802.1.1.1.1.2.1.1.12 | Unsigned32 | read-write | The value, in seconds, of the reAuthPeriod constant currently in use by the Reauthentication Timer state machine. |
| T/F dot1xAuthReAuthEnabled | 1.0.8802.1.1.1.1.2.1.1.13 | TruthValue | read-write | The enable/disable control used by the Reauthentication Timer state machine (8.5.5.1). |
| T/F dot1xAuthKeyTxEnabled | 1.0.8802.1.1.1.1.2.1.1.14 | TruthValue | read-write | The value of the keyTransmissionEnabled constant currently in use by the Authenticator PAE state machine. |
| dot1xAuthStatsTable | 1.0.8802.1.1.1.1.2.2 | not-accessible | A table that contains the statistics objects for the Authenticator PAE associated with each Port. An entry appears in this table for each port that may authenticate access to itself. | |
| dot1xAuthStatsEntry | 1.0.8802.1.1.1.1.2.2.1 | not-accessible | The statistics information for an Authenticator PAE. | |
| C32 dot1xAuthEapolFramesRx | 1.0.8802.1.1.1.1.2.2.1.1 | Counter32 | read-only | The number of valid EAPOL frames of any type that have been received by this Authenticator. |
| C32 dot1xAuthEapolFramesTx | 1.0.8802.1.1.1.1.2.2.1.2 | Counter32 | read-only | The number of EAPOL frames of any type that have been transmitted by this Authenticator. |
| C32 dot1xAuthEapolStartFramesRx | 1.0.8802.1.1.1.1.2.2.1.3 | Counter32 | read-only | The number of EAPOL Start frames that have been received by this Authenticator. |
| C32 dot1xAuthEapolLogoffFramesRx | 1.0.8802.1.1.1.1.2.2.1.4 | Counter32 | read-only | The number of EAPOL Logoff frames that have been received by this Authenticator. |
| C32 dot1xAuthEapolRespIdFramesRx | 1.0.8802.1.1.1.1.2.2.1.5 | Counter32 | read-only | The number of EAP Resp/Id frames that have been received by this Authenticator. |
| C32 dot1xAuthEapolRespFramesRx | 1.0.8802.1.1.1.1.2.2.1.6 | Counter32 | read-only | The number of valid EAP Response frames (other than Resp/Id frames) that have been received by this Authenticator. |
| C32 dot1xAuthEapolReqIdFramesTx | 1.0.8802.1.1.1.1.2.2.1.7 | Counter32 | read-only | The number of EAP Req/Id frames that have been transmitted by this Authenticator. |
| C32 dot1xAuthEapolReqFramesTx | 1.0.8802.1.1.1.1.2.2.1.8 | Counter32 | read-only | The number of EAP Request frames (other than Rq/Id frames) that have been transmitted by this Authenticator. |
| C32 dot1xAuthInvalidEapolFramesRx | 1.0.8802.1.1.1.1.2.2.1.9 | Counter32 | read-only | The number of EAPOL frames that have been received by this Authenticator in which the frame type is not recognized. |
| C32 dot1xAuthEapLengthErrorFramesRx | 1.0.8802.1.1.1.1.2.2.1.10 | Counter32 | read-only | The number of EAPOL frames that have been received by this Authenticator in which the Packet Body Length field is invalid. |
| U32 dot1xAuthLastEapolFrameVersion | 1.0.8802.1.1.1.1.2.2.1.11 | Unsigned32 | read-only | The protocol version number carried in the most recently received EAPOL frame. |
| MAC dot1xAuthLastEapolFrameSource | 1.0.8802.1.1.1.1.2.2.1.12 | MacAddress | read-only | The source MAC address carried in the most recently received EAPOL frame. |
| dot1xAuthDiagTable | 1.0.8802.1.1.1.1.2.3 | not-accessible | A table that contains the diagnostics objects for the Authenticator PAE associated with each Port. An entry appears in this table for each port that may authenticate access to itself. | |
| dot1xAuthDiagEntry | 1.0.8802.1.1.1.1.2.3.1 | not-accessible | The diagnostics information for an Authenticator PAE. | |
| C32 dot1xAuthEntersConnecting | 1.0.8802.1.1.1.1.2.3.1.1 | Counter32 | read-only | Counts the number of times that the state machine transitions to the CONNECTING state from any other state. |
| C32 dot1xAuthEapLogoffsWhileConnecting | 1.0.8802.1.1.1.1.2.3.1.2 | Counter32 | read-only | Counts the number of times that the state machine transitions from CONNECTING to DISCONNECTED as a result of receiving an EAPOL-Logoff message. |
| C32 dot1xAuthEntersAuthenticating | 1.0.8802.1.1.1.1.2.3.1.3 | Counter32 | read-only | Counts the number of times that the state machine transitions from CONNECTING to AUTHENTICATING, as a result of an EAP-Response/Identity message being received from the Supplicant. |
| C32 dot1xAuthAuthSuccessWhileAuthenticating | 1.0.8802.1.1.1.1.2.3.1.4 | Counter32 | read-only | Counts the number of times that the state machine transitions from AUTHENTICATING to AUTHENTICATED, as a result of the Backend Authentication state machine indicating successful authentication of the Supplicant (authSuccess = TRUE). |
| C32 dot1xAuthAuthTimeoutsWhileAuthenticating | 1.0.8802.1.1.1.1.2.3.1.5 | Counter32 | read-only | Counts the number of times that the state machine transitions from AUTHENTICATING to ABORTING, as a result of the Backend Authentication state machine indicating authentication timeout (authTimeout = TRUE). |
| C32 dot1xAuthAuthFailWhileAuthenticating | 1.0.8802.1.1.1.1.2.3.1.6 | Counter32 | read-only | Counts the number of times that the state machine transitions from AUTHENTICATING to HELD, as a result of the Backend Authentication state machine indicating authentication failure (authFail = TRUE). |
| C32 dot1xAuthAuthReauthsWhileAuthenticating | 1.0.8802.1.1.1.1.2.3.1.7 | Counter32 | read-only | Counts the number of times that the state machine transitions from AUTHENTICATING to ABORTING, as a result of a reauthentication request (reAuthenticate = TRUE). |
| C32 dot1xAuthAuthEapStartsWhileAuthenticating | 1.0.8802.1.1.1.1.2.3.1.8 | Counter32 | read-only | Counts the number of times that the state machine transitions from AUTHENTICATING to ABORTING, as a result of an EAPOL-Start message being received from the Supplicant. |
| C32 dot1xAuthAuthEapLogoffWhileAuthenticating | 1.0.8802.1.1.1.1.2.3.1.9 | Counter32 | read-only | Counts the number of times that the state machine transitions from AUTHENTICATING to ABORTING, as a result of an EAPOL-Logoff message being received from the Supplicant. |
| C32 dot1xAuthAuthReauthsWhileAuthenticated | 1.0.8802.1.1.1.1.2.3.1.10 | Counter32 | read-only | Counts the number of times that the state machine transitions from AUTHENTICATED to CONNECTING, as a result of a reauthentication request (reAuthenticate = TRUE). |
| C32 dot1xAuthAuthEapStartsWhileAuthenticated | 1.0.8802.1.1.1.1.2.3.1.11 | Counter32 | read-only | Counts the number of times that the state machine transitions from AUTHENTICATED to CONNECTING, as a result of an EAPOL-Start message being received from the Supplicant. |
| C32 dot1xAuthAuthEapLogoffWhileAuthenticated | 1.0.8802.1.1.1.1.2.3.1.12 | Counter32 | read-only | Counts the number of times that the state machine transitions from AUTHENTICATED to DISCONNECTED, as a result of an EAPOL-Logoff message being received from the Supplicant. |
| C32 dot1xAuthBackendResponses | 1.0.8802.1.1.1.1.2.3.1.13 | Counter32 | read-only | Counts the number of times that the state machine sends an initial Access-Request packet to the Authentication server (i.e., executes sendRespToServer on entry to the RESPONSE state). Indicates that the Authenticator attempted communication with the Authentication Server. |
| C32 dot1xAuthBackendAccessChallenges | 1.0.8802.1.1.1.1.2.3.1.14 | Counter32 | read-only | Counts the number of times that the state machine receives an initial Access-Challenge packet from the Authentication server (i.e., aReq becomes TRUE, causing exit from the RESPONSE state). Indicates that the Authentication Server has communication with the Authenticator. |
| C32 dot1xAuthBackendOtherRequestsToSupplicant | 1.0.8802.1.1.1.1.2.3.1.15 | Counter32 | read-only | Counts the number of times that the state machine sends an EAP-Request packet (other than an Identity, Notification, Failure or Success message) to the Supplicant (i.e., executes txReq on entry to the REQUEST state). Indicates that the Authenticator chose an EAP-method. |
| C32 dot1xAuthBackendNonNakResponsesFromSupplicant | 1.0.8802.1.1.1.1.2.3.1.16 | Counter32 | read-only | Counts the number of times that the state machine receives a response from the Supplicant to an initial EAP-Request, and the response is something other than EAP-NAK (i.e., rxResp becomes TRUE, causing the state machine to transition from REQUEST to RESPONSE, and the response is not an EAP-NAK). Indicates that the Supplicant can respond to the Authenticators chosen EAP-method. |
| C32 dot1xAuthBackendAuthSuccesses | 1.0.8802.1.1.1.1.2.3.1.17 | Counter32 | read-only | Counts the number of times that the state machine receives an EAP-Success message from the Authentication Server (i.e., aSuccess becomes TRUE, causing a transition from RESPONSE to SUCCESS). Indicates that the Supplicant has successfully authenticated to the Authentication Server. |
| C32 dot1xAuthBackendAuthFails | 1.0.8802.1.1.1.1.2.3.1.18 | Counter32 | read-only | Counts the number of times that the state machine receives an EAP-Failure message from the Authentication Server (i.e., aFail becomes TRUE, causing a transition from RESPONSE to FAIL). Indicates that the Supplicant has not authenticated to the Authentication Server. |
| dot1xAuthSessionStatsTable | 1.0.8802.1.1.1.1.2.4 | not-accessible | A table that contains the session statistics objects for the Authenticator PAE associated with each Port. An entry appears in this table for each port that may authenticate access to itself. | |
| dot1xAuthSessionStatsEntry | 1.0.8802.1.1.1.1.2.4.1 | not-accessible | The session statistics information for an Authenticator PAE. This shows the current values being collected for each session that is still in progress, or the final values for the last valid session on each port where there is no session currently active. | |
| C64 dot1xAuthSessionOctetsRx | 1.0.8802.1.1.1.1.2.4.1.1 | Counter64 | read-only | The number of octets received in user data frames on this Port during the session. |
| C64 dot1xAuthSessionOctetsTx | 1.0.8802.1.1.1.1.2.4.1.2 | Counter64 | read-only | The number of octets transmitted in user data frames on this Port during the session. |
| C32 dot1xAuthSessionFramesRx | 1.0.8802.1.1.1.1.2.4.1.3 | Counter32 | read-only | The number of user data frames received on this Port during the session. |
| C32 dot1xAuthSessionFramesTx | 1.0.8802.1.1.1.1.2.4.1.4 | Counter32 | read-only | The number of user data frames transmitted on this Port during the session. |
| STR dot1xAuthSessionId | 1.0.8802.1.1.1.1.2.4.1.5 | SnmpAdminString | read-only | A unique identifier for the session, in the form of a printable ASCII string of at least three characters. |
| INT dot1xAuthSessionAuthenticMethod | 1.0.8802.1.1.1.1.2.4.1.6 | INTEGER | read-only | The authentication method used to establish the session. |
| TIK dot1xAuthSessionTime | 1.0.8802.1.1.1.1.2.4.1.7 | TimeTicks | read-only | The duration of the session in seconds. |
| INT dot1xAuthSessionTerminateCause | 1.0.8802.1.1.1.1.2.4.1.8 | INTEGER | read-only | The reason for the session termination. |
| STR dot1xAuthSessionUserName | 1.0.8802.1.1.1.1.2.4.1.9 | SnmpAdminString | read-only | The User-Name representing the identity of the Supplicant PAE. |
| dot1xPaeSupplicant | 1.0.8802.1.1.1.1.3 | |||
| dot1xSuppConfigTable | 1.0.8802.1.1.1.1.3.1 | not-accessible | A table that contains the configuration objects for the Supplicant PAE associated with each port. An entry appears in this table for each port that may authenticate itself when challenged by a remote system. | |
| dot1xSuppConfigEntry | 1.0.8802.1.1.1.1.3.1.1 | not-accessible | The configuration information for a Supplicant PAE. | |
| INT dot1xSuppPaeState | 1.0.8802.1.1.1.1.3.1.1.1 | INTEGER | read-only | The current state of the Supplicant PAE state machine (8.5.8). |
| U32 dot1xSuppHeldPeriod | 1.0.8802.1.1.1.1.3.1.1.2 | Unsigned32 | read-write | The value, in seconds, of the heldPeriod constant currently in use by the Supplicant PAE state machine (8.5.8.1.2). |
| U32 dot1xSuppAuthPeriod | 1.0.8802.1.1.1.1.3.1.1.3 | Unsigned32 | read-write | The value, in seconds, of the authPeriod constant currently in use by the Supplicant PAE state machine (8.5.8.1.2). |
| U32 dot1xSuppStartPeriod | 1.0.8802.1.1.1.1.3.1.1.4 | Unsigned32 | read-write | The value, in seconds, of the startPeriod constant currently in use by the Supplicant PAE state machine (8.5.8.1.2). |
| U32 dot1xSuppMaxStart | 1.0.8802.1.1.1.1.3.1.1.5 | Unsigned32 | read-write | The value of the maxStart constant currently in use by the Supplicant PAE state machine (8.5.8.1.2). |
| PAE dot1xSuppControlledPortStatus | 1.0.8802.1.1.1.1.3.1.1.6 | PaeControlledPortStatus | read-only | The current state of the Supplicant PAE state machine (8.5.8). |
| INT dot1xSuppAccessCtrlWithAuth | 1.0.8802.1.1.1.1.3.1.1.7 | INTEGER | read-write | The setting for the application of the Supplicant authorization state when the port is operating as both a Supplicant and an Authenticator. inactive indicates the port will not apply the the Supplicant authorization state, using only the Authenticator authorization state to restrict access to the port. active indicates the port will apply the the Supplicant authorization state, as well as the Authenticator authorization state. |
| INT dot1xSuppBackendState | 1.0.8802.1.1.1.1.3.1.1.8 | INTEGER | read-only | The current state of the Supplicant Backend state machine. |
| dot1xSuppStatsTable | 1.0.8802.1.1.1.1.3.2 | not-accessible | A table that contains the statistics objects for the Supplicant PAE associated with each port. An entry appears in this table for each port that may authenticate itself when challenged by a remote system. | |
| dot1xSuppStatsEntry | 1.0.8802.1.1.1.1.3.2.1 | not-accessible | The statistics information for a Supplicant PAE. | |
| C32 dot1xSuppEapolFramesRx | 1.0.8802.1.1.1.1.3.2.1.1 | Counter32 | read-only | The number of EAPOL frames of any type that have been received by this Supplicant. |
| C32 dot1xSuppEapolFramesTx | 1.0.8802.1.1.1.1.3.2.1.2 | Counter32 | read-only | The number of EAPOL frames of any type that have been transmitted by this Supplicant. |
| C32 dot1xSuppEapolStartFramesTx | 1.0.8802.1.1.1.1.3.2.1.3 | Counter32 | read-only | The number of EAPOL Start frames that have been transmitted by this Supplicant. |
| C32 dot1xSuppEapolLogoffFramesTx | 1.0.8802.1.1.1.1.3.2.1.4 | Counter32 | read-only | The number of EAPOL Logoff frames that have been transmitted by this Supplicant. |
| C32 dot1xSuppEapolRespIdFramesTx | 1.0.8802.1.1.1.1.3.2.1.5 | Counter32 | read-only | The number of EAP Resp/Id frames that have been transmitted by this Supplicant. |
| C32 dot1xSuppEapolRespFramesTx | 1.0.8802.1.1.1.1.3.2.1.6 | Counter32 | read-only | The number of valid EAP Response frames (other than Resp/Id frames) that have been transmitted by this Supplicant. |
| C32 dot1xSuppEapolReqIdFramesRx | 1.0.8802.1.1.1.1.3.2.1.7 | Counter32 | read-only | The number of EAP Req/Id frames that have been received by this Supplicant. |
| C32 dot1xSuppEapolReqFramesRx | 1.0.8802.1.1.1.1.3.2.1.8 | Counter32 | read-only | The number of EAP Request frames (other than Rq/Id frames) that have been received by this Supplicant. |
| C32 dot1xSuppInvalidEapolFramesRx | 1.0.8802.1.1.1.1.3.2.1.9 | Counter32 | read-only | The number of EAPOL frames that have been received by this Supplicant in which the frame type is not recognized. |
| C32 dot1xSuppEapLengthErrorFramesRx | 1.0.8802.1.1.1.1.3.2.1.10 | Counter32 | read-only | The number of EAPOL frames that have been received by this Supplicant in which the Packet Body Length field (7.5.5) is invalid. |
| U32 dot1xSuppLastEapolFrameVersion | 1.0.8802.1.1.1.1.3.2.1.11 | Unsigned32 | read-only | The protocol version number carried in the most recently received EAPOL frame. |
| MAC dot1xSuppLastEapolFrameSource | 1.0.8802.1.1.1.1.3.2.1.12 | MacAddress | read-only | The source MAC address carried in the most recently received EAPOL frame. |
| dot1xPaeConformance | 1.0.8802.1.1.1.2 | |||
| dot1xPaeGroups | 1.0.8802.1.1.1.2.1 | |||
| dot1xPaeSystemGroup | 1.0.8802.1.1.1.2.1.1 | A collection of objects providing system information about, and control over, a PAE. | ||
| dot1xPaeAuthConfigGroup | 1.0.8802.1.1.1.2.1.2 | A collection of objects providing configuration information about an Authenticator PAE. | ||
| dot1xPaeAuthStatsGroup | 1.0.8802.1.1.1.2.1.3 | A collection of objects providing statistics about an Authenticator PAE. | ||
| dot1xPaeAuthDiagGroup | 1.0.8802.1.1.1.2.1.4 | A collection of objects providing diagnostic statistics about an Authenticator PAE. | ||
| dot1xPaeAuthSessionStatsGroup | 1.0.8802.1.1.1.2.1.5 | A collection of objects providing statistics about the current, or last session for an Authenticator PAE. | ||
| dot1xPaeSuppConfigGroup | 1.0.8802.1.1.1.2.1.6 | A collection of objects providing configuration information about a Supplicant PAE. | ||
| dot1xPaeSuppStatsGroup | 1.0.8802.1.1.1.2.1.7 | A collection of objects providing statistics about a Supplicant PAE. | ||
| dot1xPaeAuthConfigGroup2 | 1.0.8802.1.1.1.2.1.8 | A collection of objects providing configuration information about an Authenticator PAE. | ||
| dot1xPaeSuppConfigGroup2 | 1.0.8802.1.1.1.2.1.9 | A collection of objects providing configuration information about a Supplicant PAE. | ||
| dot1xPaeSuppStatsGroup2 | 1.0.8802.1.1.1.2.1.10 | A collection of objects providing statistics about a Supplicant PAE. | ||
| dot1xPaeCompliances | 1.0.8802.1.1.1.2.2 | |||
| dot1xPaeCompliance | 1.0.8802.1.1.1.2.2.1 | The compliance statement for device support of Port Access Control. | ||
| dot1xPaeCompliance2 | 1.0.8802.1.1.1.2.2.2 | The compliance statement for device support of Port Access Control. |
FAQ
How would a network engineer use IEEE8021-PAE-MIB to spot a failed 802.1X authentication rollout?
By polling per-port admin status along with the authenticator PAE state and backend authentication state machine status, an engineer can see whether 802.1X is enabled and working correctly on each port, and identify ports stuck in an unauthenticated or error state -- a sign of a misconfigured supplicant or a failed RADIUS backend.
Is IEEE8021-PAE-MIB tied to a specific switch vendor?
No, it's a vendor-neutral IEEE standard with no dependency on vendor-specific MIBs, so it's commonly found on managed Ethernet switches and wireless LAN controllers from any vendor that enforces port-based or SSID-based authentication; it's typically deployed alongside IF-MIB for per-interface correlation.
RFC description
IEEE 802.1 MIB for Port Access Entity (PAE/802.1X) managing port-based network access control and authentication.
Start monitoring Vendor-neutral IEEE 802.1X standard (managed Ethernet switch/wireless LAN controller, Port Access Entity) with a free 30-day trial of IPNetwork Monitor. Import MIBs, browse SNMP OIDs, create custom SNMP monitors, configure alerts, and monitor any SNMP-enabled network device from a single console.