MY-AAA-MIB

All MIBs › MY-AAA-MIB

Organization: D-Link Crop.

Last Updated: 2002-03-20

Category: RADIUS/AAA

Description: Manages D-Link switch AAA authentication, authorization, and accounting configuration.

Start monitoring vendor-neutral, standards-based MIB, any SNMPv3-capable network device (SNMP engine identity/boot/clock status) with a free 30-day trial of IPNetwork Monitor. Import MIBs, browse SNMP OIDs, create custom SNMP monitors, configure alerts, and monitor any SNMP-enabled network device from a single console.

What Is MY-AAA-MIB?

MY-AAA-MIB is a D-Link proprietary MIB that manages Authentication, Authorization, and Accounting settings on D-Link switches, with particular focus on IEEE 802.1x port-based network access control. It exposes configuration and status data for the 802.1x authenticator process, including per-port authentication status, timer parameters (quiet period, transmit period, supplicant timeout, server timeout), retry limits, and re-authentication settings, along with related AAA server objects. This is primarily a security/configuration-status MIB rather than a raw hardware-health MIB: administrators use it to confirm which switch ports have successfully authenticated clients and to verify that authentication timers and server communication are correctly tuned, which reflects the health of the authentication subsystem. It depends on the IEEE 802.1x standard and typically works alongside standard interface indexing since 802.1x state is tracked per physical port. It is typically deployed on D-Link managed switches in enterprise networks enforcing port-based network access control (NAC). Engineers can download the MY-AAA-MIB file directly to load it into their MIB browser.

IPNetwork Monitor allows you to monitor SNMP objects defined in MY-AAA-MIB. Use the built-in SNMP Monitoring Browser to explore available variables, view their current values and descriptions, and select the objects you want to monitor. You can then create SNMP monitors, configure thresholds, and receive alerts when monitored values change.

Supported Devices

D-Link managed switch

Monitoring Examples

An administrator polls myDot1xAuthStatus per port to confirm whether 802.1x authentication is enabled and functioning, and checks myDot1xAuthObjectsConfigTable/myDot1xAuthObjectsConfigFdbId entries to see which MAC/FDB bindings resulted from successful authentication. If clients repeatedly fail to authenticate, the admin reviews myDot1xAuthObjectsSuppTimeout and myDot1xAuthObjectsServerTimeout to determine whether the supplicant or RADIUS server is timing out, adjusting myDot1xAuthObjectsMaxReq/myDot1xAuthObjectsMaxReauth accordingly. Rising failures alongside repeated myDot1xAuthObjectsReAuthPeriod cycles would indicate a misconfigured or unreachable AAA server.

What Can Be Monitored

802.1x port authentication status
authentication quiet/transmit period timers
supplicant and server timeout values
max authentication request/reauth counts
re-authentication enable state and period
authenticated client FDB bindings

Imported Objects

From INET-ADDRESS-MIB

InetAddress
InetAddressType

From MY-SMI

myMgmt

OBJECT-IDENTITY

From MY-TC

ConfigStatus
IfIndex

From P-BRIDGE-MIB

EnabledStatus

From Q-BRIDGE-MIB

VlanId

From RFC1155-SMI

Counter

From SNMPv2-CONF

MODULE-COMPLIANCE
NOTIFICATION-GROUP
OBJECT-GROUP

From SNMPv2-SMI

Counter32
Integer32
IpAddress
MODULE-IDENTITY
NOTIFICATION-TYPE
OBJECT-TYPE
Unsigned32

From SNMPv2-TC

DisplayString
MacAddress
RowStatus
TruthValue

How to Use in IPNetwork Monitor

Example using myDot1xAuthObjectsEapolFramesRx OID:

Select a D-Link managed switch (802.1x port-based access control) as the target host to create a monitor — the SNMP service should be up and running on it. Click New Monitor, then check SNMP Custom on the Favorites tab, click Next, and confirm the host. On the next page, click Select... to open the built-in SNMP MIB Browser and type myDot1xAuthObjectsEapolFramesRx into the Find box to locate it in the OID tree, selecting the specific row/instance you want to monitor since this is a table column, then select it and click OK. The number of valid EAPOL frames of any type that have been received by this Authenticator. On the monitor's Main parameters page you can set the target's SNMP port (default 161), credentials, polling interval, and other settings — see the SNMP Monitor help for details. On the State conditions and Alerting tabs, configure when the monitor should change state and trigger an alert; since this is a Counter32-type OID, Value bounds is the most useful condition here — trigger an alert if the counter increases sharply between polls relative to its normal baseline, since an unexpected spike often reflects a real change in traffic or activity. Click Finish to create the monitor; you can adjust any parameter later.

OIDs

OID symbolic	OID numeric	Type	Access	Description
myAAAMIB	1.3.6.1.4.1.171.10.97.2.19			This module defines my AAA(802.1x) mibs.
myAAAMIBCompliance	1.3.6.1.4.1.171.10.97.2.19.2.1.1			The compliance statement for entities which implement the My AAA MIB
myAAAMIBCompliances	1.3.6.1.4.1.171.10.97.2.19.2.1
myAAAMIBConformance	1.3.6.1.4.1.171.10.97.2.19.2
myAAAMIBGroups	1.3.6.1.4.1.171.10.97.2.19.2.2
myAAAMIBObjects	1.3.6.1.4.1.171.10.97.2.19.1
INT myAAAServerAcctPort	1.3.6.1.4.1.171.10.97.2.19.1.2.3	INTEGER	read-write	UDP port used for accounting service in the global configuration. For RADIUS only, default value is 1813.
INT myAAAServerAuthPort	1.3.6.1.4.1.171.10.97.2.19.1.2.2	INTEGER	read-write	UDP port used for authentication in the global configuration. For RADIUS only, default value is 1812.
INT myAAAServerConfigAcctPort	1.3.6.1.4.1.171.10.97.2.19.1.2.9.1.6	INTEGER	read-create	UDP/TCP port used for accounting service in the server. For RADIUS, default value is 1813. For TACACS+, the value of myAAAServerConfigAcctPort is ignored, myAAAServerConfigAuthPort will be used instead.
IP myAAAServerConfigAddress	1.3.6.1.4.1.171.10.97.2.19.1.2.9.1.4	InetAddress	read-create	The IP address of the server.
IPt myAAAServerConfigAddressType	1.3.6.1.4.1.171.10.97.2.19.1.2.9.1.3	InetAddressType	read-create	The type of address format used for the myAAAServerConfigAddress object.
INT myAAAServerConfigAuthPort	1.3.6.1.4.1.171.10.97.2.19.1.2.9.1.5	INTEGER	read-create	UDP/TCP port used for authentication in the server. For RADIUS, default value is 1812. For TACACS+, default value is 49.
myAAAServerConfigEntry	1.3.6.1.4.1.171.10.97.2.19.1.2.9.1		not-accessible	The table of AAA server configuration identified by its protocol and its index.
U32 myAAAServerConfigIndex	1.3.6.1.4.1.171.10.97.2.19.1.2.9.1.2	Unsigned32	not-accessible	A number uniquely identifying each server. If the myAAAServerConfigIndex value for row creation is already in use by an existing entry, snmp set to the myAAAServerConfigIndex value will fail. Upon reload, casIndex values may be changed.
STR myAAAServerConfigKeyStr	1.3.6.1.4.1.171.10.97.2.19.1.2.9.1.7	DisplayString	read-create	The server key to be used with this server. Retrieving the value of this object via SNMP will return an empty string for security reasons.
INT myAAAServerConfigProtocol	1.3.6.1.4.1.171.10.97.2.19.1.2.9.1.1	INTEGER	not-accessible	The variable denotes the protocol used by the managed device with the AAA server corresponding to this entry in the table.
ROW myAAAServerConfigRowStatus	1.3.6.1.4.1.171.10.97.2.19.1.2.9.1.8	RowStatus	read-create	The status of this table entry. Once the entry status is set to active, the associated entry cannot be modified except destroyed by setting this object to destroy(6).
myAAAServerConfigTable	1.3.6.1.4.1.171.10.97.2.19.1.2.9		not-accessible	This table shows current configurations for each AAA server, allows existing servers to be removed and new ones to be created.
myAAAServerMIBGroup	1.3.6.1.4.1.171.10.97.2.19.2.2.2			A collection of objects providing AAA server managment.
myAAAServerObjects	1.3.6.1.4.1.171.10.97.2.19.1.2
STR myAAAServerRadiusKeyStr	1.3.6.1.4.1.171.10.97.2.19.1.2.4	DisplayString	read-write	The server key to be used with all RADIUS server. Retrieving the value of this object via SNMP will return an empty string for security reasons.
STR myAAAServerTacplusKeyStr	1.3.6.1.4.1.171.10.97.2.19.1.2.8	DisplayString	read-write	The server key to be used with all TACACS+ server. Retrieving the value of this object via SNMP will return an empty string for security reasons.
myAuthAddrEntry	1.3.6.1.4.1.171.10.97.2.19.1.3.1.1		not-accessible	The entry of MAC address which can be authenticated.
myAuthAddrMIBGroup	1.3.6.1.4.1.171.10.97.2.19.2.2.3			A collection of objects providing address permitted authentication managment.
INT myAuthAddrStatus	1.3.6.1.4.1.171.10.97.2.19.1.3.1.1.3	INTEGER	read-write	valid(1) - this entry is currently in use . invalid(2) - writing this value to the object removes the corresponding entry.
myAuthAddrTable	1.3.6.1.4.1.171.10.97.2.19.1.3.1		not-accessible	The table of MAC address which can be authenticated.
INT myAuthenticationMode	1.3.6.1.4.1.171.10.97.2.19.1.1.16	INTEGER	read-write	Mode used for authentication
IFI myAuthIf	1.3.6.1.4.1.171.10.97.2.19.1.1.15.1.1	IfIndex	read-only	The port number of the port/trunk to which frames received from a specific port/trunk and destined for a specific MAC address.
myAuthIfEntry	1.3.6.1.4.1.171.10.97.2.19.1.1.15.1		not-accessible	The entry of MAC address which can be authenticated.
ENA myAuthIfStatus	1.3.6.1.4.1.171.10.97.2.19.1.1.15.1.2	EnabledStatus	read-write	The authentication status of a port, can be opened by setting its value to Enabled(1), or closed by setting its value to Disabled(2).
myAuthIfTable	1.3.6.1.4.1.171.10.97.2.19.1.1.15		not-accessible	The table of the authenticated status of interface.
MAC myAuthMacAddress	1.3.6.1.4.1.171.10.97.2.19.1.3.1.1.2	MacAddress	read-only	The MAC address which can be authenticated.
myAuthModeMIBGroup	1.3.6.1.4.1.171.10.97.2.19.2.2.4			A collection of objects providing authentication mode managment.
myAuthModeObjects	1.3.6.1.4.1.171.10.97.2.19.1.4
IFI myAuthPort	1.3.6.1.4.1.171.10.97.2.19.1.3.1.1.1	IfIndex	read-only	The port number of the port/trunk to which frames received from a specific port/trunk and destined for a specific MAC address.
myAuthUserEntry	1.3.6.1.4.1.171.10.97.2.19.1.3.2.1		not-accessible	The entry of authentication User Info table.
U32 myAuthUserFdbId	1.3.6.1.4.1.171.10.97.2.19.1.3.2.1.1	Unsigned32	read-only	The VID of vlan which the address blongs to.
STR myAuthUserForVPNDel	1.3.6.1.4.1.171.10.97.2.19.1.3.3	DisplayString	read-write	VPN user's name. Setting this object will delete a authenticated user and this user is unauthenticated. The set string is the username. Reading this object always return null string.
IP myAuthUserIpAddr	1.3.6.1.4.1.171.10.97.2.19.1.3.2.1.5	IpAddress	read-only	The IP Address of authentication User .
MAC myAuthUserMacAddress	1.3.6.1.4.1.171.10.97.2.19.1.3.2.1.2	MacAddress	read-only	The MAC Address of authentication User .
STR myAuthUserName	1.3.6.1.4.1.171.10.97.2.19.1.3.2.1.3	DisplayString	read-only	The Name of authentication User.
myAuthUserObjects	1.3.6.1.4.1.171.10.97.2.19.1.3
INT myAuthUserPort	1.3.6.1.4.1.171.10.97.2.19.1.3.2.1.6	INTEGER	read-only	The interface of authentication User .
STR myAuthUserSessionId	1.3.6.1.4.1.171.10.97.2.19.1.3.2.1.4	DisplayString	read-only	The Session Id of authentication User .
CON myAuthUserStatus	1.3.6.1.4.1.171.10.97.2.19.1.3.2.1.7	ConfigStatus	read-write	Setting this object to 'invalid' will close a authenticated user, set its value to valid will cause no action of agent, when query always return value valid.
myAuthUserTable	1.3.6.1.4.1.171.10.97.2.19.1.3.2		not-accessible	The table of authentication User Info.
U32 myClientProbeAliveInteval	1.3.6.1.4.1.171.10.97.2.19.1.5.3	Unsigned32	read-write	When switch does not receive any legal hello packets from client in this interval,it will send RADIUS-Account-Stop to RADIUS server to stop this connection.The value of the objects must be more than myClientProbeHelloInterval
ENA myClientProbeEnabledStatus	1.3.6.1.4.1.171.10.97.2.19.1.5.1	EnabledStatus	read-write	The status of client probe function.
myClientProbeGroup	1.3.6.1.4.1.171.10.97.2.19.2.2.5			A collection of objects providing client probe management.
U32 myClientProbeHelloInterval	1.3.6.1.4.1.171.10.97.2.19.1.5.2	Unsigned32	read-write	The interval that client send hello packets.
myClientProbeObjects	1.3.6.1.4.1.171.10.97.2.19.1.5
ENA myDot1xAccountStatus	1.3.6.1.4.1.171.10.97.2.19.1.1.14	EnabledStatus	read-write	The enable(1)/disable(2) control used by the accounting function.
ENA myDot1xAccountUpdateStatus	1.3.6.1.4.1.171.10.97.2.19.1.1.17	EnabledStatus	read-write	Account Update Status
U32 myDot1xAcctInterimInterval	1.3.6.1.4.1.171.10.97.2.19.1.1.18	Unsigned32	read-write	Account Interim Interval
myDot1xAuthMIBGroup	1.3.6.1.4.1.171.10.97.2.19.2.2.1			A collection of objects providing dot1x authentication managment.
myDot1xAuthObjects	1.3.6.1.4.1.171.10.97.2.19.1.1
INT myDot1xAuthObjectsAuthControlledPortStatus	1.3.6.1.4.1.171.10.97.2.19.1.1.10.1.5	INTEGER	read-only	The current value of the controlled Port status parameter for the Port.
INT myDot1xAuthObjectsBackendAuthState	1.3.6.1.4.1.171.10.97.2.19.1.1.10.1.4	INTEGER	read-only	The current state of the Backend Authentication state machine.
MAC myDot1xAuthObjectsConfigAddr	1.3.6.1.4.1.171.10.97.2.19.1.1.10.1.2	MacAddress	read-only	The MAC address associated with this configurations.
myDot1xAuthObjectsConfigEntry	1.3.6.1.4.1.171.10.97.2.19.1.1.10.1		not-accessible	The configuration information for an Authenticator PAE.
U32 myDot1xAuthObjectsConfigFdbId	1.3.6.1.4.1.171.10.97.2.19.1.1.10.1.1	Unsigned32	read-only	The VID of vlan which the address blongs to.
myDot1xAuthObjectsConfigTable	1.3.6.1.4.1.171.10.97.2.19.1.1.10		not-accessible	A table that contains the configuration objects for the Authenticator PAE associated with each MAC address. An entry appears in this table for each MAC address that may authenticate access to itself.
C32 myDot1xAuthObjectsEapLengthErrorFramesRx	1.3.6.1.4.1.171.10.97.2.19.1.1.11.1.12	Counter32	read-only	The number of EAPOL frames that have been received by this Authenticator in which the Packet Body Length field is invalid.
C32 myDot1xAuthObjectsEapolFramesRxEx	1.3.6.1.4.1.171.10.97.2.19.1.1.11.1.3	Counter32	read-only	The number of valid EAPOL frames of any type that have been received by this Authenticator.
C32 myDot1xAuthObjectsEapolFramesTx	1.3.6.1.4.1.171.10.97.2.19.1.1.11.1.4	Counter32	read-only	The number of EAPOL frames of any type that have been transmitted by this Authenticator.
C32 myDot1xAuthObjectsEapolLogoffFramesRx	1.3.6.1.4.1.171.10.97.2.19.1.1.11.1.6	Counter32	read-only	The number of EAPOL Logoff frames that have been received by this Authenticator.
C32 myDot1xAuthObjectsEapolMyFramesRx	1.3.6.1.4.1.171.10.97.2.19.1.1.11.1.5	Counter32	read-only	The number of EAPOL My frames that have been received by this Authenticator.
C32 myDot1xAuthObjectsEapolReqFramesTx	1.3.6.1.4.1.171.10.97.2.19.1.1.11.1.10	Counter32	read-only	The number of EAP Request frames (other than Rq/Id frames) that have been transmitted by this Authenticator.
C32 myDot1xAuthObjectsEapolReqIdFramesTx	1.3.6.1.4.1.171.10.97.2.19.1.1.11.1.9	Counter32	read-only	The number of EAP Req/Id frames that have been transmitted by this Authenticator.
C32 myDot1xAuthObjectsEapolRespFramesRx	1.3.6.1.4.1.171.10.97.2.19.1.1.11.1.8	Counter32	read-only	The number of valid EAP Response frames (other than Resp/Id frames) that have been received by this Authenticator.
C32 myDot1xAuthObjectsEapolRespIdFramesRx	1.3.6.1.4.1.171.10.97.2.19.1.1.11.1.7	Counter32	read-only	The number of EAP Resp/Id frames that have been received by this Authenticator.
IFI myDot1xAuthObjectsIfIndex	1.3.6.1.4.1.171.10.97.2.19.1.1.10.1.7	IfIndex	read-only	The interface index associated with this configurations
C32 myDot1xAuthObjectsInvalidEapolFramesRx	1.3.6.1.4.1.171.10.97.2.19.1.1.11.1.11	Counter32	read-only	The number of EAPOL frames that have been received by this Authenticator in which the frame type is not recognized.
T/F myDot1xAuthObjectsKeyTxEnabled	1.3.6.1.4.1.171.10.97.2.19.1.1.10.1.6	TruthValue	read-only	The value of the keyTransmissionEnabled constant currently in use by the Authenticator PAE state machine.
MAC myDot1xAuthObjectsLastEapolFrameSource	1.3.6.1.4.1.171.10.97.2.19.1.1.11.1.14	MacAddress	read-only	The source MAC address carried in the most recently received EAPOL frame.
U32 myDot1xAuthObjectsLastEapolFrameVersion	1.3.6.1.4.1.171.10.97.2.19.1.1.11.1.13	Unsigned32	read-only	The protocol version number carried in the most recently received EAPOL frame.
U32 myDot1xAuthObjectsMaxReauth	1.3.6.1.4.1.171.10.97.2.19.1.1.8	Unsigned32	read-write	The value of the reAuthMax constant currently in use by the Authenticator PAE state machine.
U32 myDot1xAuthObjectsMaxReq	1.3.6.1.4.1.171.10.97.2.19.1.1.6	Unsigned32	read-write	The value of the maxReq constant currently in use by the Backend Authentication state machine.
INT myDot1xAuthObjectsPaeState	1.3.6.1.4.1.171.10.97.2.19.1.1.10.1.3	INTEGER	read-only	The current value of the Authenticator PAE state machine.
U32 myDot1xAuthObjectsQuietPeriod	1.3.6.1.4.1.171.10.97.2.19.1.1.2	Unsigned32	read-write	The value, in seconds, of the quietPeriod constant currently in use by the Authenticator PAE state machine.
ENA myDot1xAuthObjectsReAuthEnable	1.3.6.1.4.1.171.10.97.2.19.1.1.9	EnabledStatus	read-write	The enable(1)/disable(2) control used by the Reauthentication Timer state machine.
U32 myDot1xAuthObjectsReAuthPeriod	1.3.6.1.4.1.171.10.97.2.19.1.1.7	Unsigned32	read-write	The value, in seconds, of the reAuthPeriod constant currently in use by the Reauthentication Timer state machine.
U32 myDot1xAuthObjectsServerTimeout	1.3.6.1.4.1.171.10.97.2.19.1.1.5	Unsigned32	read-write	The value, in seconds, of the serverTimeout constant currently in use by the Backend Authentication state machine.
MAC myDot1xAuthObjectsStatsAddr	1.3.6.1.4.1.171.10.97.2.19.1.1.11.1.2	MacAddress	read-only	The MAC address associated with this states.
U32 myDot1xAuthObjectsStatsFdbId	1.3.6.1.4.1.171.10.97.2.19.1.1.11.1.1	Unsigned32	read-only	The VID of vlan which the address blongs to.
myDot1xAuthObjectsStatsTable	1.3.6.1.4.1.171.10.97.2.19.1.1.11		not-accessible	A table that contains the statistics objects for the Authenticator PAE associated with each MAC address. An entry appears in this table for each MAC address that may authenticate access to itself.
U32 myDot1xAuthObjectsSuppTimeout	1.3.6.1.4.1.171.10.97.2.19.1.1.4	Unsigned32	read-write	The value, in seconds, of the suppTimeout constant currently in use by the Backend Authentication state machine.
U32 myDot1xAuthObjectsTxPeriod	1.3.6.1.4.1.171.10.97.2.19.1.1.3	Unsigned32	read-write	The value, in seconds, of the txPeriod constant currently in use by the Authenticator PAE state machine.
myDot1xAuthStatsEntry	1.3.6.1.4.1.171.10.97.2.19.1.1.11.1		not-accessible	The statistics information for an Authenticator PAE.
ENA myDot1xAuthStatus	1.3.6.1.4.1.171.10.97.2.19.1.1.1	EnabledStatus	read-write	The enable(1)/disable(2) control used by the 802.1x global settings.
CTR myDot1xCurrentAuthenticatedUserNumber	1.3.6.1.4.1.171.10.97.2.19.1.1.13	Counter	read-only	Numbers of user who attached to the system and their current state is authorized
CTR myDot1xCurrentUserNumber	1.3.6.1.4.1.171.10.97.2.19.1.1.12	Counter	read-only	Numbers of users who attached to the system ,regardless of their state.
ENA myDot1xEapolTagEnabled	1.3.6.1.4.1.171.10.97.2.19.1.1.19	EnabledStatus	read-write	Eapol Tag Enabled
myDot1xIfUserMaxEntry	1.3.6.1.4.1.171.10.97.2.19.1.1.20.1		not-accessible	The entry of max dot1x user number on authenticated interface.
IFI myDot1xIfUserMaxIndex	1.3.6.1.4.1.171.10.97.2.19.1.1.20.1.1	IfIndex	read-only	The interface index which dot1x authentication is enabled.
U32 myDot1xIfUserMaxNum	1.3.6.1.4.1.171.10.97.2.19.1.1.20.1.2	Unsigned32	read-write	The max dot1x user num on the interface, this is valid only when dot1x authentication is enable on that interface. Number 0 indicates no user number limits enabled on the interface.
myDot1xIfUserMaxTable	1.3.6.1.4.1.171.10.97.2.19.1.1.20		not-accessible	The table of the max dot1x user number on authenticated interface.
INT myIpAuthorizationMode	1.3.6.1.4.1.171.10.97.2.19.1.4.1	INTEGER	read-write	disable(1) - don't limit ip address of user dhcpServer(2) - limit ip address of user, only ip address assigned by the dhcp server is legit. radiusServer(3) - limit ip address of user, only ip address assigned by the radius server is legit. supplicant(4) - mac+ip+port indicates different users (get the IP adress through supplicant)

RFC description

Manages AAA (Authentication, Authorization, Accounting) and 802.1x authentication settings on D-Link devices.

Start monitoring D-Link managed switch (802.1x port-based access control) with a free 30-day trial of IPNetwork Monitor. Import MIBs, browse SNMP OIDs, create custom SNMP monitors, configure alerts, and monitor any SNMP-enabled network device from a single console.

Download MY-AAA-MIB