All MIBs › IEEE8021X-PAE-MIB › ieee8021XPaeSysAccessControl
ieee8021XPaeSysAccessControl
Module: IEEE8021X-PAE-MIB
OID (symbolic): IEEE8021X-PAE-MIB::ieee8021XPaeSysAccessControl
OID (numeric): 1.3.111.2.802.1.1.15.1.1.1
Node type: OBJECT-TYPE
Type: TruthValue
Access: read-write
Description: This object enables or disables port-based network access control for all the system's ports. Setting this control object to 'false' causes the following actions : . Deletes any virtual ports previously instantiated. . Terminates authentication exchanges and MKA instances' operation. . Each real port PAE behaves as if no virtual ports created. . All the PAEs' Supplicant, Authenticator, and KaY are disabled. . Logon Process(es) behave as if the object ieee8021XNidUnauthAllowed was 'immediate'. . Announcements can be transmitted, both periodically and in response to announcement requests (conveyed by EAPOL-Starts or EAPOL-Announcement-Reqs) but are sent with a single NULL NID. . Objects announcementAccessStatus and announceAccessStatus have the 'noAccess' value, announcementAccessRequested is 'false', object announcementUnauthAccess has the 'openAccess' value.
The control variable settings for each real port PAE in the ieee8021XPaePortTable are unaffected, and will be used once the object is set to 'true'.
This configured value for this object shall be stored in persistent memory and remain unchanged across a re-initialization of the management system of the entity.
What is ieee8021XPaeSysAccessControl?
This read-write switch turns 802.1X port-based access control on or off for every port on the system at once. Setting it to false immediately tears down virtual ports, kills all authentication exchanges and MKA sessions, and forces announcements to go out with a null network ID, so an admin flips this to true to re-enable authenticated access after maintenance and false to fully bypass 802.1X system-wide.
Examples
Walk all instances (SNMPv2c):
snmpwalk -v2c -c public <target> 1.3.111.2.802.1.1.15.1.1.1 snmpwalk -v2c -c public <target> IEEE8021X-PAE-MIB::ieee8021XPaeSysAccessControl
Get a specific instance (index 1):
snmpget -v2c -c public <target> 1.3.111.2.802.1.1.15.1.1.1.1 snmpget -v2c -c public <target> IEEE8021X-PAE-MIB::ieee8021XPaeSysAccessControl.1
Set instance 1 (SNMPv2c):
snmpset -v2c -c private <target> 1.3.111.2.802.1.1.15.1.1.1.1 s <value>
Start monitoring Vendor-neutral IEEE 802.1X-2010 standard (enterprise access switch/wireless controller, PAE/MKA) with a free 30-day trial of IPNetwork Monitor. Create custom SNMP monitor using the IEEE8021X-PAE-MIB::ieee8021XPaeSysAccessControl OID value, configure state conditions and alerts, and monitor any Vendor-neutral IEEE 802.1X-2010 standard (enterprise access switch/wireless controller, PAE/MKA) from a single console.
OID Breakdown
Upper-level ancestors (3 from the standard OID tree / other modules)
| Numeric OID | Name | Module |
|---|---|---|
| 1 | iso | LANART-AGENT |
| 1.3 | org | AirPair-MIB |
| 1.3.111.2.802.1.1 | ieee802dot1mibs | IEEE8021-TC-MIB |
| Numeric OID | Name | Module |
|---|---|---|
| 1.3.111.2.802.1.1.15 | ieee8021XPaeMIB | IEEE8021X-PAE-MIB |
| 1.3.111.2.802.1.1.15.1 | ieee8021XPaeMIBObjects | IEEE8021X-PAE-MIB |
| 1.3.111.2.802.1.1.15.1.1 | ieee8021XPaeSystem | IEEE8021X-PAE-MIB |
| 1.3.111.2.802.1.1.15.1.1.1 | ieee8021XPaeSysAccessControl | IEEE8021X-PAE-MIB |