JWAC-MIB

All MIBs › JWAC-MIB

Organization: D-Link Corp.

Last Updated: 2010-04-22

Category: Protocol: 802.1X, Technology: Switching/L2, Vendor: D-Link

Description: D-Link MIB for managing JWAC (Japanese Web Authentication Control) portal-based network access control on D-Link switches.

Start monitoring vendor-neutral, standards-based MIB, any SNMPv3-capable network device (SNMP engine identity/boot/clock status) with a free 30-day trial of IPNetwork Monitor. Import MIBs, browse SNMP OIDs, create custom SNMP monitors, configure alerts, and monitor any SNMP-enabled network device from a single console.

What Is JWAC-MIB?

JWAC-MIB is a D-Link enterprise MIB for managing JWAC (Japanese Web Authentication Control), a portal-based network access control feature on D-Link switches that authenticates users via a captive web portal before granting network access. Although no sample objects were provided in this batch, based on its stated purpose it would expose configuration and status objects for enabling JWAC per port/VLAN, authentication session state, and possibly authenticated host/MAC tables. Its monitoring value would be centered on software/access-control status - whether JWAC is enabled on a given port and how many hosts are currently authenticated through the portal - rather than hardware sensors. As a NAC/portal-authentication feature it likely depends on or interacts with the switch's underlying 802.1X/MAC-based access control and RADIUS client MIBs, though the specific relationship isn't confirmed by this source. It is typically deployed on D-Link managed switches in networks (common in Japan) requiring captive-portal-based authentication before granting LAN or Internet access. Engineers can download the JWAC-MIB file directly to load it into their MIB browser.

IPNetwork Monitor allows you to monitor SNMP objects defined in JWAC-MIB. Use the built-in SNMP Monitoring Browser to explore available variables, view their current values and descriptions, and select the objects you want to monitor. You can then create SNMP monitors, configure thresholds, and receive alerts when monitored values change.

Supported Devices

D-Link managed switch

Monitoring Examples

No sample object names were provided for this module in this batch, so a concrete OID-level example cannot be given honestly. In general, an administrator would be expected to poll per-port JWAC enable status and current authenticated-host counts to confirm the web-authentication portal is functioning and to see how many users are currently authenticated, but the actual object names are not available here to reference concretely.

Imported Objects

From DLINK-ID-REC-MIB

dlink-common-mgmt

From RFC1213-MIB

DisplayString

From SNMPv2-SMI

IpAddress
MODULE-IDENTITY
OBJECT-TYPE

From SNMPv2-TC

MacAddress
RowStatus

OIDs

OID symbolic	OID numeric	Type	Access	Description
INT swJWACAuthenticatePage	1.3.6.1.4.1.171.12.39.1.15	INTEGER	read-write	This lets an administrator decide which authentication page to use. japanese: Choose the Japanese page; english: Choose the English page.
INT swJWACAuthFailOverState	1.3.6.1.4.1.171.12.39.1.16	INTEGER	read-write	This object enables/disables the web-based authentication auth_failover status of the device. When the authentication failover is enabled, if the RADIUS server's authentication is unreachable, the local database will be used for authentication.
INT swJWACAuthStateAssignPriority	1.3.6.1.4.1.171.12.39.4.4.1.8	INTEGER	read-only	Specifies the JWAC host priority assigned when pass authentication. -1 indicates the host has no priority assigned.
VLA swJWACAuthStateAssignVid	1.3.6.1.4.1.171.12.39.4.4.1.7	VlanId	read-only	Specifies the JWAC host assign VID.
INT swJWACAuthStateAuthStatus	1.3.6.1.4.1.171.12.39.4.4.1.5	INTEGER	read-only	Specifies the JWAC host authentication state.
INT swJWACAuthStateDelAction	1.3.6.1.4.1.171.12.39.4.4.1.30	INTEGER	read-write	Used to delete the specified authentication entry. Setting delete(2) will delete this JWAC host entry.
swJWACAuthStateEntry	1.3.6.1.4.1.171.12.39.4.4.1		not-accessible	This list contains JWAC client host information.
INT swJWACAuthStateIdleTime	1.3.6.1.4.1.171.12.39.4.4.1.14	INTEGER	read-only	Specifies the JWAC host idle time in seconds. 0 indicates the idle state of the authenticated host on the port will never be checked.
IP swJWACAuthStateIP	1.3.6.1.4.1.171.12.39.4.4.1.20	IpAddress	read-only	Specifies the IP address of the JWAC host, which starts the authentication process.
MAC swJWACAuthStateMACAddr	1.3.6.1.4.1.171.12.39.4.4.1.3	MacAddress	not-accessible	Specifies the JWAC host MAC address.
VLA swJWACAuthStateOriginalVid	1.3.6.1.4.1.171.12.39.4.4.1.2	VlanId	not-accessible	Specifies the JWAC host original receive VLAN-ID.
INT swJWACAuthStatePort	1.3.6.1.4.1.171.12.39.4.4.1.1	INTEGER	not-accessible	Specifies the JWAC host port number.
INT swJWACAuthStateRemainTime	1.3.6.1.4.1.171.12.39.4.4.1.12	INTEGER	read-only	Specifies the remaining JWAC host aging time/ block time. When host's authentication state is 'authenticated' in swJWACAuthStateAuthStatus, this object indicates the host's aging time, the units is minutes. When host's authentication state is 'blocked' in swJWACAuthStateAuthStatus, this object indicates the host's block time, the units is seconds. 0 indicates the authenticated host on the port will never age out.
swJWACAuthStateTable	1.3.6.1.4.1.171.12.39.4.4		not-accessible	This table contains JWAC client host information.
STR swJWACAuthStateUserName	1.3.6.1.4.1.171.12.39.4.4.1.18	DisplayString	read-only	Specifies the user name who starts the authentication process.
swJWACCtrl	1.3.6.1.4.1.171.12.39.1
INT swJWACForcibleLogoutState	1.3.6.1.4.1.171.12.39.1.3	INTEGER	read-write	This object enables/disables the JWAC forcible_logout function. When forcible_logout is enabled, a PING packet from an authenticated host to the JWAC Switch with TTL=1 will be regarded as a logout request, and the host will move back to the unauthenticated state.
INT swJWACHostAuthStatus	1.3.6.1.4.1.171.12.39.4.1.1.2	INTEGER	read-only	Specifies the JWAC host authentication state.
INT swJWACHostBlockTime	1.3.6.1.4.1.171.12.39.4.1.1.7	INTEGER	read-only	Specifies the JWAC host block time.
swJWACHostEntry	1.3.6.1.4.1.171.12.39.4.1.1		not-accessible	A list containing JWAC client host information.
INT swJWACHostIdleTime	1.3.6.1.4.1.171.12.39.4.1.1.6	INTEGER	read-only	Specifies the JWAC host idle time. 0 indicates the idle state of the authenticated host on the port will never be checked.
IP swJWACHostIP	1.3.6.1.4.1.171.12.39.4.1.1.11	IpAddress	read-only	Specifies the IP address of the JWAC host, which started the authentication process.
MAC swJWACHostMACAddr	1.3.6.1.4.1.171.12.39.4.1.1.3	MacAddress	read-only	Specifies the JWAC host MAC address.
INT swJWACHostPort	1.3.6.1.4.1.171.12.39.4.1.1.1	INTEGER	read-only	Specifies the JWAC host port number.
INT swJWACHostPriority	1.3.6.1.4.1.171.12.39.4.1.1.9	INTEGER	read-only	Specifies the JWAC host priority assigned when passing authentication. -1 indicates the host has no priority.
INT swJWACHostRemainAgeTime	1.3.6.1.4.1.171.12.39.4.1.1.5	INTEGER	read-only	Specifies the remaining JWAC host agetime. 0 indicates the authenticated host on the port will never age out.
INT swJWACHostStatus	1.3.6.1.4.1.171.12.39.4.1.1.8	INTEGER	read-write	Specifies the status of the JWAC host. Setting delete (2) will delete this JWAC host entry.
swJWACHostTable	1.3.6.1.4.1.171.12.39.4.1		not-accessible	A table that contains JWAC client host information.
STR swJWACHostUserName	1.3.6.1.4.1.171.12.39.4.1.1.10	DisplayString	read-only	Specifies the user name who started the authentication process.
VLA swJWACHostVID	1.3.6.1.4.1.171.12.39.4.1.1.4	VlanId	read-only	Specifies the JWAC host VID.
swJWACInfo	1.3.6.1.4.1.171.12.39.2
INT swJWACLocalAuthorizeState	1.3.6.1.4.1.171.12.39.1.18	INTEGER	read-write	Used to enable or disable the acceptance of an authorized configuration. When the authorization is enabled for the JWAC local, the authorized data assigned by the local database will be accepted.
swJWACMgmt	1.3.6.1.4.1.171.12.39.4
swJWACMIB	1.3.6.1.4.1.171.12.39			The structure of JWAC management for the proprietary enterprise.
swJWACNotify	1.3.6.1.4.1.171.12.39.5
swJWACPageElementEntry	1.3.6.1.4.1.171.12.39.4.2.1		not-accessible	A list containing JWAC authenticate page information. This allows an administrator to customize the authenticate page.
STR swJWACPageElementLoginWindowTitle	1.3.6.1.4.1.171.12.39.4.2.1.3	DisplayString	read-write	Specifies the JWAC login window title mapping of the authenticate page.
STR swJWACPageElementLogoutWindowTitle	1.3.6.1.4.1.171.12.39.4.2.1.6	DisplayString	read-write	Specifies the JWAC logout window title mapping of the authenticate page.
STR swJWACPageElementNotificationLine1	1.3.6.1.4.1.171.12.39.4.2.1.7	DisplayString	read-write	Used to set the notification information of line 1 in web page after successful authentication.
STR swJWACPageElementNotificationLine2	1.3.6.1.4.1.171.12.39.4.2.1.8	DisplayString	read-write	Used to set the notification information of line 2 in web page after successful authentication.
STR swJWACPageElementNotificationLine3	1.3.6.1.4.1.171.12.39.4.2.1.9	DisplayString	read-write	Used to set the notification information of line 3 in web page after successful authentication.
STR swJWACPageElementNotificationLine4	1.3.6.1.4.1.171.12.39.4.2.1.10	DisplayString	read-write	Used to set the notification information of line 4 in web page after successful authentication.
STR swJWACPageElementNotificationLine5	1.3.6.1.4.1.171.12.39.4.2.1.11	DisplayString	read-write	Used to set the notification information of line 5 in web page after successful authentication.
INT swJWACPageElementPage	1.3.6.1.4.1.171.12.39.4.2.1.1	INTEGER	read-only	Specifies the JWAC authenticate page.
STR swJWACPageElementPageTitle	1.3.6.1.4.1.171.12.39.4.2.1.2	DisplayString	read-write	Specifies the JWAC page title of the authenticate page.
STR swJWACPageElementPassWord	1.3.6.1.4.1.171.12.39.4.2.1.5	DisplayString	read-write	Specifies the remaining JWAC password mapping of the authenticate page.
swJWACPageElementTable	1.3.6.1.4.1.171.12.39.4.2		not-accessible	A table that contains JWAC authentication page information.
STR swJWACPageElementUserName	1.3.6.1.4.1.171.12.39.4.2.1.4	DisplayString	read-write	Specifies the JWAC user name mapping of the authenticate page.
INT swJWACPortAgeingTime	1.3.6.1.4.1.171.12.39.3.1.1.4	INTEGER	read-write	Specifies the time period during which an authenticated host will remain in the authenticated state. 0 indicates the authenticated host will never age out on the port.
INT swJWACPortAuthMode	1.3.6.1.4.1.171.12.39.3.1.1.7	INTEGER	read-write	Specifies the authentication mode on the special port. The default mode is host based.
INT swJWACPortBlockTime	1.3.6.1.4.1.171.12.39.3.1.1.6	INTEGER	read-write	Specifies the block_time. If a host fails to pass authentication, it will be blocked for a period specified by the block_time.
swJWACPortEntry	1.3.6.1.4.1.171.12.39.3.1.1		not-accessible	A list containing JWAC port information.
INT swJWACPortIdleTime	1.3.6.1.4.1.171.12.39.3.1.1.5	INTEGER	read-write	Specifies the idle_time. If there is no traffic during idle_time, the host will be moved back to the unauthenticated state. 0 indicates the idle state of the authenticated host on the port will never be checked.
INT swJWACPortIndex	1.3.6.1.4.1.171.12.39.3.1.1.1	INTEGER	read-only	Specifies the JWAC port number.
INT swJWACPortMaxAuthHost	1.3.6.1.4.1.171.12.39.3.1.1.3	INTEGER	read-write	Specifies the maximum number of host process authentication attempts allowed on each port at the same time. The value range is (0..N), the value of N is project dependent.
swJWACPortMgmt	1.3.6.1.4.1.171.12.39.3
INT swJWACPortState	1.3.6.1.4.1.171.12.39.3.1.1.2	INTEGER	read-write	Specifies the JWAC port state.
swJWACPortTable	1.3.6.1.4.1.171.12.39.3.1		not-accessible	A table that contains JWAC port information.
INT swJWACQuarantineServerErrorTimeOut	1.3.6.1.4.1.171.12.39.1.6	INTEGER	read-write	Used to set the Quarantine Server error timeout. When the Quarantine Server monitor is enabled, the JWAC Switch will periodically check if the Quarantine works okay. If the Switch does not receive any response from the Quarantine Server during the configured error timeout, the Switch then regards it as not working properly.
INT swJWACQuarantineServerMonitorState	1.3.6.1.4.1.171.12.39.1.5	INTEGER	read-write	This object enables/disables the JWAC Quarantine Server monitor function. When enabled, the JWAC Switch will monitor the Quarantine Server to ensure the server is okay. If the Switch detects no Quarantine Server, it will redirect all unauthenticated HTTP access attempts to the JWAC Login Page forcibly if the redirect is enabled and the redirect destination is configured to be a Quarantine Server.
STR swJWACQuarantineServerURL	1.3.6.1.4.1.171.12.39.1.10	DisplayString	read-write	Specifies the JWAC Quarantine Server URL. If the redirect is enabled and the redirect destination is the Quarantine Server, when an unauthenticated host sends the HTTP request packets to a random WEB server, the Switch will handle this HTTP packet and send back a message to the host to allow it access to the Quarantine Server with the configured URL. When the PC is connected to the specified URL, the quarantine server will request the PC user to input the user name and password to complete the authentication process.
INT swJWACRadiusAuthorizeState	1.3.6.1.4.1.171.12.39.1.17	INTEGER	read-write	Used to enable or disable the acceptance of an authorized configuration. When the authorization is enabled for the JWAC RADIUS, the authorized data assigned by the RADUIS server will be accepted if the global authorization network is enabled.
INT swJWACRadiusProtocol	1.3.6.1.4.1.171.12.39.1.13	INTEGER	read-write	Specifies the RADIUS protocol used by JWAC to complete a RADIUS authentication.
INT swJWACRedirectDelayTime	1.3.6.1.4.1.171.12.39.1.8	INTEGER	read-write	Specifies the delay time before an unauthenticated host is redirected to the Quarantine Server or JWAC login web page. The unit of delay_time is seconds. 0 means no delay in the redirect.
INT swJWACRedirectDestination	1.3.6.1.4.1.171.12.39.1.7	INTEGER	read-write	Specifies the destination before an unauthenticated host is redirected to the Quarantine Server or JWAC login web page.
INT swJWACRedirectState	1.3.6.1.4.1.171.12.39.1.2	INTEGER	read-write	This object enables/disables the JWAC redirect function. When the redirect quarantine_server is enabled, the unauthenticated host will be redirected to the quarantine server when it tries to access a random URL. When the redirect jwac_login_page is enabled, the unauthenticated host will be redirected to the jwac_login_page in the Switch to finish authentication. When redirect is disabled, only access to the quarantine_server and the jwac_login_page from the unauthenticated host are allowed, all other web access will be denied. NOTE: When enabling redirect to the quarantine_server, a quarantine_server must be configured first.
INT swJWACState	1.3.6.1.4.1.171.12.39.1.1	INTEGER	read-write	This object enables/disables the JWAC function. JWAC and WAC are mutually exclusive functions. That is, they can not be enabled at the same time. Using the JWAC function, PC users need to pass two stages of authentication. The first stage is to do the authentication with the quarantine server and the second stage is the authentication with the switch. For the second stage, the authentication is similar to WAC, except that there is no port VLAN membership change by JWAC after a host passes authentication. The RADIUS server will share the server configuration defined by the 1X command set.
INT swJWACSwitchHttpPortNumber	1.3.6.1.4.1.171.12.39.1.11	INTEGER	read-write	Specifies the TCP port which the JWAC Switch listens to and uses to finish the authenticating process.
INT swJWACSwitchHttpProtocol	1.3.6.1.4.1.171.12.39.1.12	INTEGER	read-write	Specifies the protocol JWAC will run on this TCP port.
INT swJWACUDPFilteringState	1.3.6.1.4.1.171.12.39.1.4	INTEGER	read-write	This object enables/disables the JWAC udp_filtering function. When udp_filtering is enabled, all UDP and ICMP packets except DHCP and DNS packets from unauthenticated hosts will be dropped.
swJWACUpdateServerEntry	1.3.6.1.4.1.171.12.39.1.14.1		not-accessible	A list of JWAC Update Server information.
IP swJWACUpdateServerIpAddr	1.3.6.1.4.1.171.12.39.1.14.1.1	IpAddress	read-only	Specifies the IP address.
IP swJWACUpdateServerMask	1.3.6.1.4.1.171.12.39.1.14.1.2	IpAddress	read-only	Specifies the IP net mask.
ROW swJWACUpdateServerStatus	1.3.6.1.4.1.171.12.39.1.14.1.3	RowStatus	read-create	The status of this entry.
swJWACUpdateServerTable	1.3.6.1.4.1.171.12.39.1.14		not-accessible	A table that contains the JWAC Update Server information.
swJWACUpdateSVREntry	1.3.6.1.4.1.171.12.39.1.19.1		not-accessible	A list of JWAC Update Server information.
IP swJWACUpdateSVRIpAddr	1.3.6.1.4.1.171.12.39.1.19.1.1	IpAddress	read-only	Specifies the IP address.
IP swJWACUpdateSVRMask	1.3.6.1.4.1.171.12.39.1.19.1.2	IpAddress	read-only	Specifies the IP net mask.
INT swJWACUpdateSVRPort	1.3.6.1.4.1.171.12.39.1.19.1.4	INTEGER	read-only	Specifies the port, 0 denotes all ports.
INT swJWACUpdateSVRProtocol	1.3.6.1.4.1.171.12.39.1.19.1.3	INTEGER	read-only	Specifies the protocol.
INT swJWACUpdateSVRState	1.3.6.1.4.1.171.12.39.1.19.1.6	INTEGER	read-only	Specifies the update server ACL state.
ROW swJWACUpdateSVRStatus	1.3.6.1.4.1.171.12.39.1.19.1.5	RowStatus	read-create	The status of this entry.
swJWACUpdateSVRTable	1.3.6.1.4.1.171.12.39.1.19		not-accessible	A table that contains JWAC Update Server information.
IP swJWACVirtualIpAddr	1.3.6.1.4.1.171.12.39.1.9	IpAddress	read-write	Specifies the JWAC virtual IP address which is used to accept authentication requests from an unauthenticated host. The virtual IP of JWAC is used to accept authentication requests from an unauthenticated host. Only requests sent to this IP will get a correct response. NOTE: This IP does not respond to ARP requests or ICMP packets.
STR swJWACVirtualIpURL	1.3.6.1.4.1.171.12.39.1.20	DisplayString	read-write	Used to set the URL for virtual IP
swJWACWebAuthUserEntry	1.3.6.1.4.1.171.12.39.4.3.1		not-accessible	A list that contains web-based authentication account info.
STR swJWACWebAuthUserNameIndex	1.3.6.1.4.1.171.12.39.4.3.1.1	DisplayString	read-only	This object indicates the username (maximum number of characters is 15).
STR swJWACWebAuthUserPWD	1.3.6.1.4.1.171.12.39.4.3.1.2	DisplayString	read-create	This object indicates the password (maximum number of characters is 15) for this user account. It is write-only.
ROW swJWACWebAuthUserStatus	1.3.6.1.4.1.171.12.39.4.3.1.4	RowStatus	read-create	This object manages this entry.
swJWACWebAuthUserTable	1.3.6.1.4.1.171.12.39.4.3		not-accessible	A table that contains web-based authentication account info.
VLA swJWACWebAuthUserVID	1.3.6.1.4.1.171.12.39.4.3.1.3	VlanId	read-create	This object indicates the VID for this user account.

RFC description

VLAN-based authentication control (JWAC) MIB for D-Link switches, managing port-based authentication and RADIUS integration.

Start monitoring D-Link managed switch (JWAC captive-portal authentication) with a free 30-day trial of IPNetwork Monitor. Import MIBs, browse SNMP OIDs, create custom SNMP monitors, configure alerts, and monitor any SNMP-enabled network device from a single console.

Download JWAC-MIB

What Is JWAC-MIB?

Supported Devices

Monitoring Examples

This MIB depends on

Related MIBs

RFC description