JUNIPER-PAE-EXTENSION-MIB

All MIBs › JUNIPER-PAE-EXTENSION-MIB

Organization: Juniper Networks, Inc.

Last Updated: 2007-06-07

Category: Protocol: 802.1X, Vendor: Juniper

Description: Juniper Networks MIB extending IEEE 802.1X Port Access Entity (PAE) management objects for Juniper-specific authentication features.

Start monitoring vendor-neutral, standards-based MIB, any SNMPv3-capable network device (SNMP engine identity/boot/clock status) with a free 30-day trial of IPNetwork Monitor. Import MIBs, browse SNMP OIDs, create custom SNMP monitors, configure alerts, and monitor any SNMP-enabled network device from a single console.

What Is JUNIPER-PAE-EXTENSION-MIB?

JUNIPER-PAE-EXTENSION-MIB is Juniper Networks' enterprise extension to the standard IEEE 802.1X PAE MIB, adding static MAC authentication (MAC-RADIUS/MAC bypass) support. Its objects cover the current authentication-profile name, a per-port auth-configuration table (MAC-auth status, guest VLAN, retry count, supplicant mode, MAC-RADIUS enable/restrict, re-authenticate, quiet period, max requests, clients-rejected count, server/supplicant timeout, transmit period), a static-MAC-authentication-bypass table (MAC address, VLAN name), and a per-interface bypass table. As a configuration MIB it lets an administrator confirm which MAC addresses are statically authorized to bypass full 802.1X authentication and their assigned VLAN. It is deployed on Juniper Networks EX-series switches. Engineers can download the JUNIPER-PAE-EXTENSION-MIB file directly to load it into their MIB browser.

IPNetwork Monitor allows you to monitor SNMP objects defined in JUNIPER-PAE-EXTENSION-MIB. Use the built-in SNMP Monitoring Browser to explore available variables, view their current values and descriptions, and select the objects you want to monitor. You can then create SNMP monitors, configure thresholds, and receive alerts when monitored values change.

Supported Devices

Juniper Networks EX-series switches

Monitoring Examples

An administrator checks jnxStaticMacAuthBypassTable to confirm a printer's MAC address is correctly configured for static bypass authentication on a Juniper EX switch.

What Can Be Monitored

802.1X MAC authentication configuration and static bypass entries

Imported Objects

From IEEE8021-PAE-MIB

dot1xPaePortNumber

OBJECT-TYPE

From IF-MIB

InterfaceIndex

From JUNIPER-EX-SMI

jnxExPaeExtension

OBJECT-IDENTITY

From SNMPv2-SMI

MODULE-IDENTITY
OBJECT-TYPE
Unsigned32

From SNMPv2-TC

DisplayString
MacAddress
TruthValue

OIDs

OID symbolic	OID numeric	Type	Access	Description
jnxPaeExtensionMIB	1.3.6.1.4.1.2636.3.40.1.3.1			This is Juniper Networks' implementation of enterprise specific MIB for IEEE802.1x PAE Extension MIB. This MIB Module supports Static MAC Authetication.
jnxPaeExtensionMIBNotification	1.3.6.1.4.1.2636.3.40.1.3.1.0
jnxPaeExtensionMIBObjects	1.3.6.1.4.1.2636.3.40.1.3.1.1
STR jnxAuthProfileName	1.3.6.1.4.1.2636.3.40.1.3.1.1.1	DisplayString	read-only	The Authentication Profile Name is given by this object. The access profile with this name is already defined with the radius server ip address, port and secret key.
jnxPaeAuthConfigTable	1.3.6.1.4.1.2636.3.40.1.3.1.1.2		not-accessible	A table that contains the configuration objects for the Authenticator PAE associated with each port.
jnxPaeAuthConfigEntry	1.3.6.1.4.1.2636.3.40.1.3.1.1.2.1		not-accessible	An Entry appears in the table for each PAE Authenticator Port.
T/F jnxPaeAuthConfigMacAuthStatus	1.3.6.1.4.1.2636.3.40.1.3.1.1.2.1.1	TruthValue	read-only	This object specifies whether MAC Authentication is enabled on the specified PAE port.
STR jnxPaeAuthConfigGuestVlan	1.3.6.1.4.1.2636.3.40.1.3.1.1.2.1.2	DisplayString	read-only	This object specifies the Vlan to which the unauthenticated client moves to. The Vlan should exist on the switch and is user cofigurable per port.
U32 jnxPaeAuthConfigNumberRetries	1.3.6.1.4.1.2636.3.40.1.3.1.1.2.1.3	Unsigned32	read-only	This sets the number of failed authentications on an interface before invoking the quiet period, during which no one can be authenticated on that interface.
INT jnxPaeAuthConfigSupplicantMode	1.3.6.1.4.1.2636.3.40.1.3.1.1.2.1.4	INTEGER	read-only	This object specifies the supplicant mode of MAC Authentication enabled on the specified PAE port.
INT jnxPaeAuthConfigMacRadius	1.3.6.1.4.1.2636.3.40.1.3.1.1.2.1.5	INTEGER	read-only	This object specifies the Mac-Radius mode of MAC Authentication enabled on the specified PAE port.
INT jnxPaeAuthConfigMacRadiusRestrict	1.3.6.1.4.1.2636.3.40.1.3.1.1.2.1.6	INTEGER	read-only	This object specifies the Mac-Radius mode of MAC Authentication enabled on the specified PAE port.
T/F jnxPaeAuthConfigReAuthenticate	1.3.6.1.4.1.2636.3.40.1.3.1.1.2.1.7	TruthValue	read-only	This object specifies Re-Authentication is enabled or not on the specified PAE port.
U32 jnxPaeAuthConfigQuietPeriod	1.3.6.1.4.1.2636.3.40.1.3.1.1.2.1.8	Unsigned32	read-only	This object specifies Time to wait after an authentication failure on the specified PAE port.
U32 jnxPaeAuthConfigMaxRequests	1.3.6.1.4.1.2636.3.40.1.3.1.1.2.1.9	Unsigned32	read-only	This object specifies Number of EAPOL RequestIDs to send before timing out on the specified PAE port.
STR jnxPaeAuthConfigClientsRejected	1.3.6.1.4.1.2636.3.40.1.3.1.1.2.1.10	DisplayString	read-only	This object specifies VLAN name or 802.1q tag for authentication rejected clients on the specified PAE port.
U32 jnxPaeAuthConfigServerTimeout	1.3.6.1.4.1.2636.3.40.1.3.1.1.2.1.11	Unsigned32	read-only	This object specifies Authentication server timeout interval on the specified PAE port.
U32 jnxPaeAuthConfigSuppTimeout	1.3.6.1.4.1.2636.3.40.1.3.1.1.2.1.12	Unsigned32	read-only	This object specifies Time to wait for a client response on the specified PAE port.
U32 jnxPaeAuthConfigTransmitPeriod	1.3.6.1.4.1.2636.3.40.1.3.1.1.2.1.13	Unsigned32	read-only	This object specifies Interval before retransmitting initial EAPOL PDUs on the specified PAE port.
jnxStaticMacAuthBypassTable	1.3.6.1.4.1.2636.3.40.1.3.1.1.3		not-accessible	The static MAC list provides an authentication bypass mechanism for clients connected to a port. The MAC address of the clients is first checked in a local database which is a user specified static list of MAC addresses and if a match is found, the client is assumed to be successfully authenticated and the port is opened up for it. No further authentication is done for that client. The VLAN that the client should be moved to or the interfaces on which the MAC address should be allowed from can also be optionally stored in this table. This will enable devices like printers, which do not support 802.1X, to be connected on 802.1X enabled ports. If a match is not found in the static list, 802.1X or MAC authentication is initiated. This table contains the static list of MAC addresses specified by the user.
jnxStaticMacAuthBypassEntry	1.3.6.1.4.1.2636.3.40.1.3.1.1.3.1		not-accessible	A table entry specifies the MacAddress of the client and the Vlan the client is to be moved.
MAC jnxStaticMacAddress	1.3.6.1.4.1.2636.3.40.1.3.1.1.3.1.1	MacAddress	not-accessible	This object specifies the MAC Address of the client connected to the particular PAE port.
STR jnxStaticMacVlanName	1.3.6.1.4.1.2636.3.40.1.3.1.1.3.1.2	DisplayString	read-only	This object specifies the Vlan to which the client is assigned to.
jnxStaticMacAuthBypassIfTable	1.3.6.1.4.1.2636.3.40.1.3.1.1.4		not-accessible	This table provides the list of interfaces on which each MAC Address in the jnxStaticMacAuthBypassTable can be allowed from. If it is detected on any other interface, the authentication is not bypassed.
jnxStaticMacAuthBypassIfEntry	1.3.6.1.4.1.2636.3.40.1.3.1.1.4.1		not-accessible	For each MAC Address in the jnxStaticMacAuthBypassTable an entry is present in this table.It specifies the list of interfaces from which the specified MAC Address is allowed from.
NUM jnxStaticMacIfIndex	1.3.6.1.4.1.2636.3.40.1.3.1.1.4.1.1	InterfaceIndex	read-only	This object specifies the list of interfaces from which the MAC Address is allowed from. If it is detected on any other interface, the authentication is bypassed.

RFC description

Manages 802.1X port access control and static MAC authentication on Juniper EX-series network devices.

Start monitoring Juniper Networks EX-series switch (802.1X static MAC authentication) with a free 30-day trial of IPNetwork Monitor. Import MIBs, browse SNMP OIDs, create custom SNMP monitors, configure alerts, and monitor any SNMP-enabled network device from a single console.

Download JUNIPER-PAE-EXTENSION-MIB

What Is JUNIPER-PAE-EXTENSION-MIB?

Supported Devices

Monitoring Examples

What Can Be Monitored

This MIB depends on

Related MIBs

RFC description