IEEE8021-PAE-MIB

All MIBs › IEEE8021-PAE-MIB

Organization: IEEE 802.1 Working Group

Last Updated: 2004-06-22

Category: Protocol: 802.1X, Standard: IEEE 802

Description: IEEE 802.1 MIB for Port Access Entity (PAE/802.1X), used to manage port-based access control and authentication on the network.

Start monitoring vendor-neutral, standards-based MIB, any SNMPv3-capable network device (SNMP engine identity/boot/clock status) with a free 30-day trial of IPNetwork Monitor. Import MIBs, browse SNMP OIDs, create custom SNMP monitors, configure alerts, and monitor any SNMP-enabled network device from a single console.

What Is IEEE8021-PAE-MIB?

IEEE8021-PAE-MIB is the IEEE 802.1X standard MIB for the Port Access Entity, implementing port-based network access control and authentication on managed network devices. It exposes per-port authentication configuration and state, including protocol version and capabilities, admin/reauthentication controls, and detailed authenticator/backend authentication state machine status. Its monitoring value is centered on software/security-control status rather than physical hardware; operators use it to verify whether 802.1X is enabled and functioning correctly on each port and to see if ports are stuck in an unauthenticated or error state, which can indicate misconfigured supplicants or a failed RADIUS backend. As a vendor-neutral IEEE standard it has no dependency on vendor-specific MIBs, though it's typically deployed alongside IF-MIB for per-interface correlation. It's common on managed Ethernet switches and wireless controllers that enforce port-based or SSID-based authentication, and network engineers searching for ieee8021-pae-mib documentation are usually looking for exactly these per-port authentication and backend state objects to script compliance checks.

IPNetwork Monitor allows you to monitor SNMP objects defined in IEEE8021-PAE-MIB. Use the built-in SNMP Monitoring Browser to explore available variables, view their current values and descriptions, and select the objects you want to monitor. You can then create SNMP monitors, configure thresholds, and receive alerts when monitored values change.

Supported Devices

vendor-neutral, standards-based MIB, not tied to a specific manufacturer
managed Ethernet switches
wireless LAN controllers

Monitoring Examples

An administrator would poll dot1xPaePortTable/dot1xPaePortEntry, indexed by dot1xPaePortNumber, checking dot1xPaePortProtocolVersion and dot1xPaePortCapabilities alongside dot1xPaePortInitialize/dot1xPaePortReauthenticate to control or reset a port's authentication cycle. dot1xAuthConfigTable/dot1xAuthConfigEntry would be checked for dot1xAuthPaeState and dot1xAuthBackendAuthState per port; a port stuck in a non-authorized dot1xAuthPaeState with dot1xAuthBackendAuthState showing a timeout suggests a RADIUS server reachability problem. Toggling dot1xPaeSystemAuthControl globally lets an admin verify whether 802.1X enforcement is active fleet-wide.

What Can Be Monitored

per-port 802.1X admin status
authenticator PAE state
backend authentication state
port protocol version/capabilities
global authentication control
port reauthentication/initialize actions

Imported Objects

From IF-MIB

InterfaceIndex

From SNMP-FRAMEWORK-MIB

SnmpAdminString

From SNMPv2-CONF

MODULE-COMPLIANCE
OBJECT-GROUP

From SNMPv2-SMI

Counter32
Counter64
MODULE-IDENTITY
OBJECT-TYPE
TimeTicks
Unsigned32

From SNMPv2-TC

MacAddress
TEXTUAL-CONVENTION
TruthValue

How to Use in IPNetwork Monitor

Example using dot1xAuthSessionTime OID:

Select a device implementing IEEE8021-PAE-MIB as the target host to create a monitor — the SNMP service should be up and running on it. Click New Monitor, then check SNMP Custom on the Favorites tab, click Next, and confirm the host. On the next page, click Select... to open the built-in SNMP MIB Browser and type dot1xAuthSessionTime into the Find box to locate it in the OID tree, selecting the specific row/instance you want to monitor since this is a table column, then select it and click OK. It reports the duration, in seconds, of this 802.1X-authenticated session. On the monitor's Main parameters page you can set the target's SNMP port (default 161), credentials, polling interval, and other settings — see the SNMP Monitor help for details. On the State conditions and Alerting tabs, configure when the monitor should change state and trigger an alert; since this is a TimeTicks-type OID, Value bounds is the most useful condition here — trigger an alert if a specific session's duration exceeds an unexpectedly long value for your environment (e.g. many hours), which can indicate a session that failed to re-authenticate or time out as expected. Click Finish to create the monitor; you can adjust any parameter later.

OIDs

OID symbolic	OID numeric	Type	Access	Description
PAE dot1xAuthAdminControlledDirections	1.0.8802.1.1.1.1.2.1.1.3	PaeControlledDirections	read-write	The current value of the administrative controlled directions parameter for the Port.
PAE dot1xAuthAuthControlledPortControl	1.0.8802.1.1.1.1.2.1.1.6	PaeControlledPortControl	read-write	The current value of the controlled Port control parameter for the Port.
PAE dot1xAuthAuthControlledPortStatus	1.0.8802.1.1.1.1.2.1.1.5	PaeControlledPortStatus	read-only	The current value of the controlled Port status parameter for the Port.
C32 dot1xAuthAuthEapLogoffWhileAuthenticated	1.0.8802.1.1.1.1.2.3.1.12	Counter32	read-only	Counts the number of times that the state machine transitions from AUTHENTICATED to DISCONNECTED, as a result of an EAPOL-Logoff message being received from the Supplicant.
C32 dot1xAuthAuthEapLogoffWhileAuthenticating	1.0.8802.1.1.1.1.2.3.1.9	Counter32	read-only	Counts the number of times that the state machine transitions from AUTHENTICATING to ABORTING, as a result of an EAPOL-Logoff message being received from the Supplicant.
C32 dot1xAuthAuthEapStartsWhileAuthenticated	1.0.8802.1.1.1.1.2.3.1.11	Counter32	read-only	Counts the number of times that the state machine transitions from AUTHENTICATED to CONNECTING, as a result of an EAPOL-Start message being received from the Supplicant.
C32 dot1xAuthAuthEapStartsWhileAuthenticating	1.0.8802.1.1.1.1.2.3.1.8	Counter32	read-only	Counts the number of times that the state machine transitions from AUTHENTICATING to ABORTING, as a result of an EAPOL-Start message being received from the Supplicant.
C32 dot1xAuthAuthFailWhileAuthenticating	1.0.8802.1.1.1.1.2.3.1.6	Counter32	read-only	Counts the number of times that the state machine transitions from AUTHENTICATING to HELD, as a result of the Backend Authentication state machine indicating authentication failure (authFail = TRUE).
C32 dot1xAuthAuthReauthsWhileAuthenticated	1.0.8802.1.1.1.1.2.3.1.10	Counter32	read-only	Counts the number of times that the state machine transitions from AUTHENTICATED to CONNECTING, as a result of a reauthentication request (reAuthenticate = TRUE).
C32 dot1xAuthAuthReauthsWhileAuthenticating	1.0.8802.1.1.1.1.2.3.1.7	Counter32	read-only	Counts the number of times that the state machine transitions from AUTHENTICATING to ABORTING, as a result of a reauthentication request (reAuthenticate = TRUE).
C32 dot1xAuthAuthSuccessWhileAuthenticating	1.0.8802.1.1.1.1.2.3.1.4	Counter32	read-only	Counts the number of times that the state machine transitions from AUTHENTICATING to AUTHENTICATED, as a result of the Backend Authentication state machine indicating successful authentication of the Supplicant (authSuccess = TRUE).
C32 dot1xAuthAuthTimeoutsWhileAuthenticating	1.0.8802.1.1.1.1.2.3.1.5	Counter32	read-only	Counts the number of times that the state machine transitions from AUTHENTICATING to ABORTING, as a result of the Backend Authentication state machine indicating authentication timeout (authTimeout = TRUE).
C32 dot1xAuthBackendAccessChallenges	1.0.8802.1.1.1.1.2.3.1.14	Counter32	read-only	Counts the number of times that the state machine receives an initial Access-Challenge packet from the Authentication server (i.e., aReq becomes TRUE, causing exit from the RESPONSE state). Indicates that the Authentication Server has communication with the Authenticator.
C32 dot1xAuthBackendAuthFails	1.0.8802.1.1.1.1.2.3.1.18	Counter32	read-only	Counts the number of times that the state machine receives an EAP-Failure message from the Authentication Server (i.e., aFail becomes TRUE, causing a transition from RESPONSE to FAIL). Indicates that the Supplicant has not authenticated to the Authentication Server.
INT dot1xAuthBackendAuthState	1.0.8802.1.1.1.1.2.1.1.2	INTEGER	read-only	The current state of the Backend Authentication state machine.
C32 dot1xAuthBackendAuthSuccesses	1.0.8802.1.1.1.1.2.3.1.17	Counter32	read-only	Counts the number of times that the state machine receives an EAP-Success message from the Authentication Server (i.e., aSuccess becomes TRUE, causing a transition from RESPONSE to SUCCESS). Indicates that the Supplicant has successfully authenticated to the Authentication Server.
C32 dot1xAuthBackendNonNakResponsesFromSupplicant	1.0.8802.1.1.1.1.2.3.1.16	Counter32	read-only	Counts the number of times that the state machine receives a response from the Supplicant to an initial EAP-Request, and the response is something other than EAP-NAK (i.e., rxResp becomes TRUE, causing the state machine to transition from REQUEST to RESPONSE, and the response is not an EAP-NAK). Indicates that the Supplicant can respond to the Authenticators chosen EAP-method.
C32 dot1xAuthBackendOtherRequestsToSupplicant	1.0.8802.1.1.1.1.2.3.1.15	Counter32	read-only	Counts the number of times that the state machine sends an EAP-Request packet (other than an Identity, Notification, Failure or Success message) to the Supplicant (i.e., executes txReq on entry to the REQUEST state). Indicates that the Authenticator chose an EAP-method.
C32 dot1xAuthBackendResponses	1.0.8802.1.1.1.1.2.3.1.13	Counter32	read-only	Counts the number of times that the state machine sends an initial Access-Request packet to the Authentication server (i.e., executes sendRespToServer on entry to the RESPONSE state). Indicates that the Authenticator attempted communication with the Authentication Server.
dot1xAuthConfigEntry	1.0.8802.1.1.1.1.2.1.1		not-accessible	The configuration information for an Authenticator PAE.
dot1xAuthConfigTable	1.0.8802.1.1.1.1.2.1		not-accessible	A table that contains the configuration objects for the Authenticator PAE associated with each port. An entry appears in this table for each port that may authenticate access to itself.
dot1xAuthDiagEntry	1.0.8802.1.1.1.1.2.3.1		not-accessible	The diagnostics information for an Authenticator PAE.
dot1xAuthDiagTable	1.0.8802.1.1.1.1.2.3		not-accessible	A table that contains the diagnostics objects for the Authenticator PAE associated with each Port. An entry appears in this table for each port that may authenticate access to itself.
C32 dot1xAuthEapLengthErrorFramesRx	1.0.8802.1.1.1.1.2.2.1.10	Counter32	read-only	The number of EAPOL frames that have been received by this Authenticator in which the Packet Body Length field is invalid.
C32 dot1xAuthEapLogoffsWhileConnecting	1.0.8802.1.1.1.1.2.3.1.2	Counter32	read-only	Counts the number of times that the state machine transitions from CONNECTING to DISCONNECTED as a result of receiving an EAPOL-Logoff message.
C32 dot1xAuthEapolFramesRx	1.0.8802.1.1.1.1.2.2.1.1	Counter32	read-only	The number of valid EAPOL frames of any type that have been received by this Authenticator.
C32 dot1xAuthEapolFramesTx	1.0.8802.1.1.1.1.2.2.1.2	Counter32	read-only	The number of EAPOL frames of any type that have been transmitted by this Authenticator.
C32 dot1xAuthEapolLogoffFramesRx	1.0.8802.1.1.1.1.2.2.1.4	Counter32	read-only	The number of EAPOL Logoff frames that have been received by this Authenticator.
C32 dot1xAuthEapolReqFramesTx	1.0.8802.1.1.1.1.2.2.1.8	Counter32	read-only	The number of EAP Request frames (other than Rq/Id frames) that have been transmitted by this Authenticator.
C32 dot1xAuthEapolReqIdFramesTx	1.0.8802.1.1.1.1.2.2.1.7	Counter32	read-only	The number of EAP Req/Id frames that have been transmitted by this Authenticator.
C32 dot1xAuthEapolRespFramesRx	1.0.8802.1.1.1.1.2.2.1.6	Counter32	read-only	The number of valid EAP Response frames (other than Resp/Id frames) that have been received by this Authenticator.
C32 dot1xAuthEapolRespIdFramesRx	1.0.8802.1.1.1.1.2.2.1.5	Counter32	read-only	The number of EAP Resp/Id frames that have been received by this Authenticator.
C32 dot1xAuthEapolStartFramesRx	1.0.8802.1.1.1.1.2.2.1.3	Counter32	read-only	The number of EAPOL Start frames that have been received by this Authenticator.
C32 dot1xAuthEntersAuthenticating	1.0.8802.1.1.1.1.2.3.1.3	Counter32	read-only	Counts the number of times that the state machine transitions from CONNECTING to AUTHENTICATING, as a result of an EAP-Response/Identity message being received from the Supplicant.
C32 dot1xAuthEntersConnecting	1.0.8802.1.1.1.1.2.3.1.1	Counter32	read-only	Counts the number of times that the state machine transitions to the CONNECTING state from any other state.
C32 dot1xAuthInvalidEapolFramesRx	1.0.8802.1.1.1.1.2.2.1.9	Counter32	read-only	The number of EAPOL frames that have been received by this Authenticator in which the frame type is not recognized.
T/F dot1xAuthKeyTxEnabled	1.0.8802.1.1.1.1.2.1.1.14	TruthValue	read-write	The value of the keyTransmissionEnabled constant currently in use by the Authenticator PAE state machine.
MAC dot1xAuthLastEapolFrameSource	1.0.8802.1.1.1.1.2.2.1.12	MacAddress	read-only	The source MAC address carried in the most recently received EAPOL frame.
U32 dot1xAuthLastEapolFrameVersion	1.0.8802.1.1.1.1.2.2.1.11	Unsigned32	read-only	The protocol version number carried in the most recently received EAPOL frame.
U32 dot1xAuthMaxReq	1.0.8802.1.1.1.1.2.1.1.11	Unsigned32	read-write	The value of the maxReq constant currently in use by the Backend Authentication state machine.
PAE dot1xAuthOperControlledDirections	1.0.8802.1.1.1.1.2.1.1.4	PaeControlledDirections	read-only	The current value of the operational controlled directions parameter for the Port.
INT dot1xAuthPaeState	1.0.8802.1.1.1.1.2.1.1.1	INTEGER	read-only	The current value of the Authenticator PAE state machine.
U32 dot1xAuthQuietPeriod	1.0.8802.1.1.1.1.2.1.1.7	Unsigned32	read-write	The value, in seconds, of the quietPeriod constant currently in use by the Authenticator PAE state machine.
T/F dot1xAuthReAuthEnabled	1.0.8802.1.1.1.1.2.1.1.13	TruthValue	read-write	The enable/disable control used by the Reauthentication Timer state machine (8.5.5.1).
U32 dot1xAuthReAuthPeriod	1.0.8802.1.1.1.1.2.1.1.12	Unsigned32	read-write	The value, in seconds, of the reAuthPeriod constant currently in use by the Reauthentication Timer state machine.
U32 dot1xAuthServerTimeout	1.0.8802.1.1.1.1.2.1.1.10	Unsigned32	read-write	The value, in seconds, of the serverTimeout constant currently in use by the Backend Authentication state machine.
INT dot1xAuthSessionAuthenticMethod	1.0.8802.1.1.1.1.2.4.1.6	INTEGER	read-only	The authentication method used to establish the session.
C32 dot1xAuthSessionFramesRx	1.0.8802.1.1.1.1.2.4.1.3	Counter32	read-only	The number of user data frames received on this Port during the session.
C32 dot1xAuthSessionFramesTx	1.0.8802.1.1.1.1.2.4.1.4	Counter32	read-only	The number of user data frames transmitted on this Port during the session.
STR dot1xAuthSessionId	1.0.8802.1.1.1.1.2.4.1.5	SnmpAdminString	read-only	A unique identifier for the session, in the form of a printable ASCII string of at least three characters.
C64 dot1xAuthSessionOctetsRx	1.0.8802.1.1.1.1.2.4.1.1	Counter64	read-only	The number of octets received in user data frames on this Port during the session.
C64 dot1xAuthSessionOctetsTx	1.0.8802.1.1.1.1.2.4.1.2	Counter64	read-only	The number of octets transmitted in user data frames on this Port during the session.
dot1xAuthSessionStatsEntry	1.0.8802.1.1.1.1.2.4.1		not-accessible	The session statistics information for an Authenticator PAE. This shows the current values being collected for each session that is still in progress, or the final values for the last valid session on each port where there is no session currently active.
dot1xAuthSessionStatsTable	1.0.8802.1.1.1.1.2.4		not-accessible	A table that contains the session statistics objects for the Authenticator PAE associated with each Port. An entry appears in this table for each port that may authenticate access to itself.
INT dot1xAuthSessionTerminateCause	1.0.8802.1.1.1.1.2.4.1.8	INTEGER	read-only	The reason for the session termination.
TIK dot1xAuthSessionTimeEx	1.0.8802.1.1.1.1.2.4.1.7	TimeTicks	read-only	The duration of the session in seconds.
STR dot1xAuthSessionUserName	1.0.8802.1.1.1.1.2.4.1.9	SnmpAdminString	read-only	The User-Name representing the identity of the Supplicant PAE.
dot1xAuthStatsEntry	1.0.8802.1.1.1.1.2.2.1		not-accessible	The statistics information for an Authenticator PAE.
dot1xAuthStatsTable	1.0.8802.1.1.1.1.2.2		not-accessible	A table that contains the statistics objects for the Authenticator PAE associated with each Port. An entry appears in this table for each port that may authenticate access to itself.
U32 dot1xAuthSuppTimeout	1.0.8802.1.1.1.1.2.1.1.9	Unsigned32	read-write	The value, in seconds, of the suppTimeout constant currently in use by the Backend Authentication state machine.
U32 dot1xAuthTxPeriod	1.0.8802.1.1.1.1.2.1.1.8	Unsigned32	read-write	The value, in seconds, of the txPeriod constant currently in use by the Authenticator PAE state machine.
dot1xPaeAuthConfigGroup	1.0.8802.1.1.1.2.1.2			A collection of objects providing configuration information about an Authenticator PAE.
dot1xPaeAuthConfigGroup2	1.0.8802.1.1.1.2.1.8			A collection of objects providing configuration information about an Authenticator PAE.
dot1xPaeAuthDiagGroup	1.0.8802.1.1.1.2.1.4			A collection of objects providing diagnostic statistics about an Authenticator PAE.
dot1xPaeAuthenticator	1.0.8802.1.1.1.1.2
dot1xPaeAuthSessionStatsGroup	1.0.8802.1.1.1.2.1.5			A collection of objects providing statistics about the current, or last session for an Authenticator PAE.
dot1xPaeAuthStatsGroup	1.0.8802.1.1.1.2.1.3			A collection of objects providing statistics about an Authenticator PAE.
dot1xPaeCompliance	1.0.8802.1.1.1.2.2.1			The compliance statement for device support of Port Access Control.
dot1xPaeCompliance2	1.0.8802.1.1.1.2.2.2			The compliance statement for device support of Port Access Control.
dot1xPaeCompliances	1.0.8802.1.1.1.2.2
dot1xPaeConformance	1.0.8802.1.1.1.2
dot1xPaeGroups	1.0.8802.1.1.1.2.1
BIT dot1xPaePortCapabilities	1.0.8802.1.1.1.1.1.2.1.3	Bits	read-only	Indicates the PAE functionality that this Port supports and that may be managed through this MIB.
dot1xPaePortEntry	1.0.8802.1.1.1.1.1.2.1		not-accessible	The Port number, protocol version, and initialization control for a Port.
T/F dot1xPaePortInitialize	1.0.8802.1.1.1.1.1.2.1.4	TruthValue	read-write	The initialization control for this Port. Setting this attribute TRUE causes the Port to be initialized. The attribute value reverts to FALSE once initialization has completed.
NUM dot1xPaePortNumber	1.0.8802.1.1.1.1.1.2.1.1	InterfaceIndex	not-accessible	The Port number associated with this Port.
U32 dot1xPaePortProtocolVersion	1.0.8802.1.1.1.1.1.2.1.2	Unsigned32	read-only	The protocol version associated with this Port.
T/F dot1xPaePortReauthenticate	1.0.8802.1.1.1.1.1.2.1.5	TruthValue	read-write	The reauthentication control for this port. Setting this attribute TRUE causes the Authenticator PAE state machine for the Port to reauthenticate the Supplicant. Setting this attribute FALSE has no effect. This attribute always returns FALSE when it is read.
dot1xPaePortTable	1.0.8802.1.1.1.1.1.2		not-accessible	A table of system level information for each port supported by the Port Access Entity. An entry appears in this table for each port of this system.
dot1xPaeSuppConfigGroup	1.0.8802.1.1.1.2.1.6			A collection of objects providing configuration information about a Supplicant PAE.
dot1xPaeSuppConfigGroup2	1.0.8802.1.1.1.2.1.9			A collection of objects providing configuration information about a Supplicant PAE.
dot1xPaeSupplicant	1.0.8802.1.1.1.1.3
dot1xPaeSuppStatsGroup	1.0.8802.1.1.1.2.1.7			A collection of objects providing statistics about a Supplicant PAE.
dot1xPaeSuppStatsGroup2	1.0.8802.1.1.1.2.1.10			A collection of objects providing statistics about a Supplicant PAE.
dot1xPaeSystem	1.0.8802.1.1.1.1.1
INT dot1xPaeSystemAuthControl	1.0.8802.1.1.1.1.1.1	INTEGER	read-write	The administrative enable/disable state for Port Access Control in a System.
dot1xPaeSystemGroup	1.0.8802.1.1.1.2.1.1			A collection of objects providing system information about, and control over, a PAE.
INT dot1xSuppAccessCtrlWithAuth	1.0.8802.1.1.1.1.3.1.1.7	INTEGER	read-write	The setting for the application of the Supplicant authorization state when the port is operating as both a Supplicant and an Authenticator. inactive indicates the port will not apply the the Supplicant authorization state, using only the Authenticator authorization state to restrict access to the port. active indicates the port will apply the the Supplicant authorization state, as well as the Authenticator authorization state.
U32 dot1xSuppAuthPeriod	1.0.8802.1.1.1.1.3.1.1.3	Unsigned32	read-write	The value, in seconds, of the authPeriod constant currently in use by the Supplicant PAE state machine (8.5.8.1.2).
INT dot1xSuppBackendState	1.0.8802.1.1.1.1.3.1.1.8	INTEGER	read-only	The current state of the Supplicant Backend state machine.
dot1xSuppConfigEntry	1.0.8802.1.1.1.1.3.1.1		not-accessible	The configuration information for a Supplicant PAE.
dot1xSuppConfigTable	1.0.8802.1.1.1.1.3.1		not-accessible	A table that contains the configuration objects for the Supplicant PAE associated with each port. An entry appears in this table for each port that may authenticate itself when challenged by a remote system.
PAE dot1xSuppControlledPortStatus	1.0.8802.1.1.1.1.3.1.1.6	PaeControlledPortStatus	read-only	The current state of the Supplicant PAE state machine (8.5.8).
C32 dot1xSuppEapLengthErrorFramesRx	1.0.8802.1.1.1.1.3.2.1.10	Counter32	read-only	The number of EAPOL frames that have been received by this Supplicant in which the Packet Body Length field (7.5.5) is invalid.
C32 dot1xSuppEapolFramesRx	1.0.8802.1.1.1.1.3.2.1.1	Counter32	read-only	The number of EAPOL frames of any type that have been received by this Supplicant.
C32 dot1xSuppEapolFramesTx	1.0.8802.1.1.1.1.3.2.1.2	Counter32	read-only	The number of EAPOL frames of any type that have been transmitted by this Supplicant.
C32 dot1xSuppEapolLogoffFramesTx	1.0.8802.1.1.1.1.3.2.1.4	Counter32	read-only	The number of EAPOL Logoff frames that have been transmitted by this Supplicant.
C32 dot1xSuppEapolReqFramesRx	1.0.8802.1.1.1.1.3.2.1.8	Counter32	read-only	The number of EAP Request frames (other than Rq/Id frames) that have been received by this Supplicant.
C32 dot1xSuppEapolReqIdFramesRx	1.0.8802.1.1.1.1.3.2.1.7	Counter32	read-only	The number of EAP Req/Id frames that have been received by this Supplicant.
C32 dot1xSuppEapolRespFramesTx	1.0.8802.1.1.1.1.3.2.1.6	Counter32	read-only	The number of valid EAP Response frames (other than Resp/Id frames) that have been transmitted by this Supplicant.
C32 dot1xSuppEapolRespIdFramesTx	1.0.8802.1.1.1.1.3.2.1.5	Counter32	read-only	The number of EAP Resp/Id frames that have been transmitted by this Supplicant.
C32 dot1xSuppEapolStartFramesTx	1.0.8802.1.1.1.1.3.2.1.3	Counter32	read-only	The number of EAPOL Start frames that have been transmitted by this Supplicant.
U32 dot1xSuppHeldPeriod	1.0.8802.1.1.1.1.3.1.1.2	Unsigned32	read-write	The value, in seconds, of the heldPeriod constant currently in use by the Supplicant PAE state machine (8.5.8.1.2).
C32 dot1xSuppInvalidEapolFramesRx	1.0.8802.1.1.1.1.3.2.1.9	Counter32	read-only	The number of EAPOL frames that have been received by this Supplicant in which the frame type is not recognized.
MAC dot1xSuppLastEapolFrameSource	1.0.8802.1.1.1.1.3.2.1.12	MacAddress	read-only	The source MAC address carried in the most recently received EAPOL frame.
U32 dot1xSuppLastEapolFrameVersion	1.0.8802.1.1.1.1.3.2.1.11	Unsigned32	read-only	The protocol version number carried in the most recently received EAPOL frame.
U32 dot1xSuppMaxStart	1.0.8802.1.1.1.1.3.1.1.5	Unsigned32	read-write	The value of the maxStart constant currently in use by the Supplicant PAE state machine (8.5.8.1.2).
INT dot1xSuppPaeState	1.0.8802.1.1.1.1.3.1.1.1	INTEGER	read-only	The current state of the Supplicant PAE state machine (8.5.8).
U32 dot1xSuppStartPeriod	1.0.8802.1.1.1.1.3.1.1.4	Unsigned32	read-write	The value, in seconds, of the startPeriod constant currently in use by the Supplicant PAE state machine (8.5.8.1.2).
dot1xSuppStatsEntry	1.0.8802.1.1.1.1.3.2.1		not-accessible	The statistics information for a Supplicant PAE.
dot1xSuppStatsTable	1.0.8802.1.1.1.1.3.2		not-accessible	A table that contains the statistics objects for the Supplicant PAE associated with each port. An entry appears in this table for each port that may authenticate itself when challenged by a remote system.
ieee8021paeMIB	1.0.8802.1.1.1			The Port Access Entity module for managing IEEE 802.1X.
paeMIBObjects	1.0.8802.1.1.1.1

FAQ

How would a network engineer use IEEE8021-PAE-MIB to spot a failed 802.1X authentication rollout?
By polling per-port admin status along with the authenticator PAE state and backend authentication state machine status, an engineer can see whether 802.1X is enabled and working correctly on each port, and identify ports stuck in an unauthenticated or error state -- a sign of a misconfigured supplicant or a failed RADIUS backend.

Is IEEE8021-PAE-MIB tied to a specific switch vendor?
No, it's a vendor-neutral IEEE standard with no dependency on vendor-specific MIBs, so it's commonly found on managed Ethernet switches and wireless LAN controllers from any vendor that enforces port-based or SSID-based authentication; it's typically deployed alongside IF-MIB for per-interface correlation.

RFC description

IEEE 802.1 MIB for Port Access Entity (PAE/802.1X) managing port-based network access control and authentication.

Start monitoring Vendor-neutral IEEE 802.1X standard (managed Ethernet switch/wireless LAN controller, Port Access Entity) with a free 30-day trial of IPNetwork Monitor. Import MIBs, browse SNMP OIDs, create custom SNMP monitors, configure alerts, and monitor any SNMP-enabled network device from a single console.

Download IEEE8021-PAE-MIB