All MIBs › MY-AAA-MIB
Organization: D-Link Crop.
Last Updated: 2002-03-20
Category: RADIUS/AAA
Description:
Manages D-Link switch AAA authentication, authorization, and accounting configuration.
Imported Objects
From INET-ADDRESS-MIB
| InetAddress | |
| InetAddressType |
From MY-SMI
| myMgmt | OBJECT-IDENTITY |
From MY-TC
| ConfigStatus | |
| IfIndex |
From P-BRIDGE-MIB
| EnabledStatus |
From Q-BRIDGE-MIB
| VlanId |
From RFC1155-SMI
| Counter |
From SNMPv2-CONF
| MODULE-COMPLIANCE | |
| NOTIFICATION-GROUP | |
| OBJECT-GROUP |
From SNMPv2-SMI
| Counter32 | |
| Integer32 | |
| IpAddress | |
| MODULE-IDENTITY | |
| NOTIFICATION-TYPE | |
| OBJECT-TYPE | |
| Unsigned32 |
From SNMPv2-TC
| DisplayString | |
| MacAddress | |
| RowStatus | |
| TruthValue |
What Is MY-AAA-MIB?
MY-AAA-MIB is a D-Link proprietary MIB that manages Authentication, Authorization, and Accounting settings on D-Link switches, with particular focus on IEEE 802.1x port-based network access control. It exposes configuration and status data for the 802.1x authenticator process, including per-port authentication status, timer parameters (quiet period, transmit period, supplicant timeout, server timeout), retry limits, and re-authentication settings, along with related AAA server objects. This is primarily a security/configuration-status MIB rather than a raw hardware-health MIB: administrators use it to confirm which switch ports have successfully authenticated clients and to verify that authentication timers and server communication are correctly tuned, which reflects the health of the authentication subsystem. It depends on the IEEE 802.1x standard and typically works alongside standard interface indexing since 802.1x state is tracked per physical port. It is typically deployed on D-Link managed switches in enterprise networks enforcing port-based network access control (NAC). Engineers can download the MY-AAA-MIB file directly to load it into their MIB browser.
IPNetwork Monitor allows you to monitor SNMP objects defined in MY-AAA-MIB. Use the built-in SNMP Monitoring Browser to explore available variables, view their current values and descriptions, and select the objects you want to monitor. You can then create SNMP monitors, configure thresholds, and receive alerts when monitored values change.
What Can Be Monitored
- 802.1x port authentication status
- authentication quiet/transmit period timers
- supplicant and server timeout values
- max authentication request/reauth counts
- re-authentication enable state and period
- authenticated client FDB bindings
Supported Devices
- D-Link managed switch
Monitoring Examples
An administrator polls myDot1xAuthStatus per port to confirm whether 802.1x authentication is enabled and functioning, and checks myDot1xAuthObjectsConfigTable/myDot1xAuthObjectsConfigFdbId entries to see which MAC/FDB bindings resulted from successful authentication. If clients repeatedly fail to authenticate, the admin reviews myDot1xAuthObjectsSuppTimeout and myDot1xAuthObjectsServerTimeout to determine whether the supplicant or RADIUS server is timing out, adjusting myDot1xAuthObjectsMaxReq/myDot1xAuthObjectsMaxReauth accordingly. Rising failures alongside repeated myDot1xAuthObjectsReAuthPeriod cycles would indicate a misconfigured or unreachable AAA server.
OIDs
| OID symbolic | OID numeric | Type | Access | Description |
|---|---|---|---|---|
| myAAAMIB | 1.3.6.1.4.1.171.10.97.2.19 | This module defines my AAA(802.1x) mibs. | ||
| myAAAMIBObjects | 1.3.6.1.4.1.171.10.97.2.19.1 | |||
| myDot1xAuthObjects | 1.3.6.1.4.1.171.10.97.2.19.1.1 | |||
| ENA myDot1xAuthStatus | 1.3.6.1.4.1.171.10.97.2.19.1.1.1 | EnabledStatus | read-write | The enable(1)/disable(2) control used by the 802.1x global settings. |
| U32 myDot1xAuthObjectsQuietPeriod | 1.3.6.1.4.1.171.10.97.2.19.1.1.2 | Unsigned32 | read-write | The value, in seconds, of the quietPeriod constant currently in use by the Authenticator PAE state machine. |
| U32 myDot1xAuthObjectsTxPeriod | 1.3.6.1.4.1.171.10.97.2.19.1.1.3 | Unsigned32 | read-write | The value, in seconds, of the txPeriod constant currently in use by the Authenticator PAE state machine. |
| U32 myDot1xAuthObjectsSuppTimeout | 1.3.6.1.4.1.171.10.97.2.19.1.1.4 | Unsigned32 | read-write | The value, in seconds, of the suppTimeout constant currently in use by the Backend Authentication state machine. |
| U32 myDot1xAuthObjectsServerTimeout | 1.3.6.1.4.1.171.10.97.2.19.1.1.5 | Unsigned32 | read-write | The value, in seconds, of the serverTimeout constant currently in use by the Backend Authentication state machine. |
| U32 myDot1xAuthObjectsMaxReq | 1.3.6.1.4.1.171.10.97.2.19.1.1.6 | Unsigned32 | read-write | The value of the maxReq constant currently in use by the Backend Authentication state machine. |
| U32 myDot1xAuthObjectsReAuthPeriod | 1.3.6.1.4.1.171.10.97.2.19.1.1.7 | Unsigned32 | read-write | The value, in seconds, of the reAuthPeriod constant currently in use by the Reauthentication Timer state machine. |
| U32 myDot1xAuthObjectsMaxReauth | 1.3.6.1.4.1.171.10.97.2.19.1.1.8 | Unsigned32 | read-write | The value of the reAuthMax constant currently in use by the Authenticator PAE state machine. |
| ENA myDot1xAuthObjectsReAuthEnable | 1.3.6.1.4.1.171.10.97.2.19.1.1.9 | EnabledStatus | read-write | The enable(1)/disable(2) control used by the Reauthentication Timer state machine. |
| myDot1xAuthObjectsConfigTable | 1.3.6.1.4.1.171.10.97.2.19.1.1.10 | not-accessible | A table that contains the configuration objects for the Authenticator PAE associated with each MAC address. An entry appears in this table for each MAC address that may authenticate access to itself. | |
| myDot1xAuthObjectsConfigEntry | 1.3.6.1.4.1.171.10.97.2.19.1.1.10.1 | not-accessible | The configuration information for an Authenticator PAE. | |
| U32 myDot1xAuthObjectsConfigFdbId | 1.3.6.1.4.1.171.10.97.2.19.1.1.10.1.1 | Unsigned32 | read-only | The VID of vlan which the address blongs to. |
| MAC myDot1xAuthObjectsConfigAddr | 1.3.6.1.4.1.171.10.97.2.19.1.1.10.1.2 | MacAddress | read-only | The MAC address associated with this configurations. |
| INT myDot1xAuthObjectsPaeState | 1.3.6.1.4.1.171.10.97.2.19.1.1.10.1.3 | INTEGER | read-only | The current value of the Authenticator PAE state machine. |
| INT myDot1xAuthObjectsBackendAuthState | 1.3.6.1.4.1.171.10.97.2.19.1.1.10.1.4 | INTEGER | read-only | The current state of the Backend Authentication state machine. |
| INT myDot1xAuthObjectsAuthControlledPortStatus | 1.3.6.1.4.1.171.10.97.2.19.1.1.10.1.5 | INTEGER | read-only | The current value of the controlled Port status parameter for the Port. |
| T/F myDot1xAuthObjectsKeyTxEnabled | 1.3.6.1.4.1.171.10.97.2.19.1.1.10.1.6 | TruthValue | read-only | The value of the keyTransmissionEnabled constant currently in use by the Authenticator PAE state machine. |
| IFI myDot1xAuthObjectsIfIndex | 1.3.6.1.4.1.171.10.97.2.19.1.1.10.1.7 | IfIndex | read-only | The interface index associated with this configurations |
| myDot1xAuthObjectsStatsTable | 1.3.6.1.4.1.171.10.97.2.19.1.1.11 | not-accessible | A table that contains the statistics objects for the Authenticator PAE associated with each MAC address. An entry appears in this table for each MAC address that may authenticate access to itself. | |
| myDot1xAuthStatsEntry | 1.3.6.1.4.1.171.10.97.2.19.1.1.11.1 | not-accessible | The statistics information for an Authenticator PAE. | |
| U32 myDot1xAuthObjectsStatsFdbId | 1.3.6.1.4.1.171.10.97.2.19.1.1.11.1.1 | Unsigned32 | read-only | The VID of vlan which the address blongs to. |
| MAC myDot1xAuthObjectsStatsAddr | 1.3.6.1.4.1.171.10.97.2.19.1.1.11.1.2 | MacAddress | read-only | The MAC address associated with this states. |
| C32 myDot1xAuthObjectsEapolFramesRx | 1.3.6.1.4.1.171.10.97.2.19.1.1.11.1.3 | Counter32 | read-only | The number of valid EAPOL frames of any type that have been received by this Authenticator. |
| C32 myDot1xAuthObjectsEapolFramesTx | 1.3.6.1.4.1.171.10.97.2.19.1.1.11.1.4 | Counter32 | read-only | The number of EAPOL frames of any type that have been transmitted by this Authenticator. |
| C32 myDot1xAuthObjectsEapolMyFramesRx | 1.3.6.1.4.1.171.10.97.2.19.1.1.11.1.5 | Counter32 | read-only | The number of EAPOL My frames that have been received by this Authenticator. |
| C32 myDot1xAuthObjectsEapolLogoffFramesRx | 1.3.6.1.4.1.171.10.97.2.19.1.1.11.1.6 | Counter32 | read-only | The number of EAPOL Logoff frames that have been received by this Authenticator. |
| C32 myDot1xAuthObjectsEapolRespIdFramesRx | 1.3.6.1.4.1.171.10.97.2.19.1.1.11.1.7 | Counter32 | read-only | The number of EAP Resp/Id frames that have been received by this Authenticator. |
| C32 myDot1xAuthObjectsEapolRespFramesRx | 1.3.6.1.4.1.171.10.97.2.19.1.1.11.1.8 | Counter32 | read-only | The number of valid EAP Response frames (other than Resp/Id frames) that have been received by this Authenticator. |
| C32 myDot1xAuthObjectsEapolReqIdFramesTx | 1.3.6.1.4.1.171.10.97.2.19.1.1.11.1.9 | Counter32 | read-only | The number of EAP Req/Id frames that have been transmitted by this Authenticator. |
| C32 myDot1xAuthObjectsEapolReqFramesTx | 1.3.6.1.4.1.171.10.97.2.19.1.1.11.1.10 | Counter32 | read-only | The number of EAP Request frames (other than Rq/Id frames) that have been transmitted by this Authenticator. |
| C32 myDot1xAuthObjectsInvalidEapolFramesRx | 1.3.6.1.4.1.171.10.97.2.19.1.1.11.1.11 | Counter32 | read-only | The number of EAPOL frames that have been received by this Authenticator in which the frame type is not recognized. |
| C32 myDot1xAuthObjectsEapLengthErrorFramesRx | 1.3.6.1.4.1.171.10.97.2.19.1.1.11.1.12 | Counter32 | read-only | The number of EAPOL frames that have been received by this Authenticator in which the Packet Body Length field is invalid. |
| U32 myDot1xAuthObjectsLastEapolFrameVersion | 1.3.6.1.4.1.171.10.97.2.19.1.1.11.1.13 | Unsigned32 | read-only | The protocol version number carried in the most recently received EAPOL frame. |
| MAC myDot1xAuthObjectsLastEapolFrameSource | 1.3.6.1.4.1.171.10.97.2.19.1.1.11.1.14 | MacAddress | read-only | The source MAC address carried in the most recently received EAPOL frame. |
| CTR myDot1xCurrentUserNumber | 1.3.6.1.4.1.171.10.97.2.19.1.1.12 | Counter | read-only | Numbers of users who attached to the system ,regardless of their state. |
| CTR myDot1xCurrentAuthenticatedUserNumber | 1.3.6.1.4.1.171.10.97.2.19.1.1.13 | Counter | read-only | Numbers of user who attached to the system and their current state is authorized |
| ENA myDot1xAccountStatus | 1.3.6.1.4.1.171.10.97.2.19.1.1.14 | EnabledStatus | read-write | The enable(1)/disable(2) control used by the accounting function. |
| myAuthIfTable | 1.3.6.1.4.1.171.10.97.2.19.1.1.15 | not-accessible | The table of the authenticated status of interface. | |
| myAuthIfEntry | 1.3.6.1.4.1.171.10.97.2.19.1.1.15.1 | not-accessible | The entry of MAC address which can be authenticated. | |
| IFI myAuthIf | 1.3.6.1.4.1.171.10.97.2.19.1.1.15.1.1 | IfIndex | read-only | The port number of the port/trunk to which frames received from a specific port/trunk and destined for a specific MAC address. |
| ENA myAuthIfStatus | 1.3.6.1.4.1.171.10.97.2.19.1.1.15.1.2 | EnabledStatus | read-write | The authentication status of a port, can be opened by setting its value to Enabled(1), or closed by setting its value to Disabled(2). |
| INT myAuthenticationMode | 1.3.6.1.4.1.171.10.97.2.19.1.1.16 | INTEGER | read-write | Mode used for authentication |
| ENA myDot1xAccountUpdateStatus | 1.3.6.1.4.1.171.10.97.2.19.1.1.17 | EnabledStatus | read-write | Account Update Status |
| U32 myDot1xAcctInterimInterval | 1.3.6.1.4.1.171.10.97.2.19.1.1.18 | Unsigned32 | read-write | Account Interim Interval |
| ENA myDot1xEapolTagEnabled | 1.3.6.1.4.1.171.10.97.2.19.1.1.19 | EnabledStatus | read-write | Eapol Tag Enabled |
| myDot1xIfUserMaxTable | 1.3.6.1.4.1.171.10.97.2.19.1.1.20 | not-accessible | The table of the max dot1x user number on authenticated interface. | |
| myDot1xIfUserMaxEntry | 1.3.6.1.4.1.171.10.97.2.19.1.1.20.1 | not-accessible | The entry of max dot1x user number on authenticated interface. | |
| IFI myDot1xIfUserMaxIndex | 1.3.6.1.4.1.171.10.97.2.19.1.1.20.1.1 | IfIndex | read-only | The interface index which dot1x authentication is enabled. |
| U32 myDot1xIfUserMaxNum | 1.3.6.1.4.1.171.10.97.2.19.1.1.20.1.2 | Unsigned32 | read-write | The max dot1x user num on the interface, this is valid only when dot1x authentication is enable on that interface. Number 0 indicates no user number limits enabled on the interface. |
| myAAAServerObjects | 1.3.6.1.4.1.171.10.97.2.19.1.2 | |||
| INT myAAAServerAuthPort | 1.3.6.1.4.1.171.10.97.2.19.1.2.2 | INTEGER | read-write | UDP port used for authentication in the global configuration. For RADIUS only, default value is 1812. |
| INT myAAAServerAcctPort | 1.3.6.1.4.1.171.10.97.2.19.1.2.3 | INTEGER | read-write | UDP port used for accounting service in the global configuration. For RADIUS only, default value is 1813. |
| STR myAAAServerRadiusKeyStr | 1.3.6.1.4.1.171.10.97.2.19.1.2.4 | DisplayString | read-write | The server key to be used with all RADIUS server. Retrieving the value of this object via SNMP will return an empty string for security reasons. |
| STR myAAAServerTacplusKeyStr | 1.3.6.1.4.1.171.10.97.2.19.1.2.8 | DisplayString | read-write | The server key to be used with all TACACS+ server. Retrieving the value of this object via SNMP will return an empty string for security reasons. |
| myAAAServerConfigTable | 1.3.6.1.4.1.171.10.97.2.19.1.2.9 | not-accessible | This table shows current configurations for each AAA server, allows existing servers to be removed and new ones to be created. | |
| myAAAServerConfigEntry | 1.3.6.1.4.1.171.10.97.2.19.1.2.9.1 | not-accessible | The table of AAA server configuration identified by its protocol and its index. | |
| INT myAAAServerConfigProtocol | 1.3.6.1.4.1.171.10.97.2.19.1.2.9.1.1 | INTEGER | not-accessible | The variable denotes the protocol used by the managed device with the AAA server corresponding to this entry in the table. |
| U32 myAAAServerConfigIndex | 1.3.6.1.4.1.171.10.97.2.19.1.2.9.1.2 | Unsigned32 | not-accessible | A number uniquely identifying each server. If the myAAAServerConfigIndex value for row creation is already in use by an existing entry, snmp set to the myAAAServerConfigIndex value will fail. Upon reload, casIndex values may be changed. |
| IPt myAAAServerConfigAddressType | 1.3.6.1.4.1.171.10.97.2.19.1.2.9.1.3 | InetAddressType | read-create | The type of address format used for the myAAAServerConfigAddress object. |
| IP myAAAServerConfigAddress | 1.3.6.1.4.1.171.10.97.2.19.1.2.9.1.4 | InetAddress | read-create | The IP address of the server. |
| INT myAAAServerConfigAuthPort | 1.3.6.1.4.1.171.10.97.2.19.1.2.9.1.5 | INTEGER | read-create | UDP/TCP port used for authentication in the server. For RADIUS, default value is 1812. For TACACS+, default value is 49. |
| INT myAAAServerConfigAcctPort | 1.3.6.1.4.1.171.10.97.2.19.1.2.9.1.6 | INTEGER | read-create | UDP/TCP port used for accounting service in the server. For RADIUS, default value is 1813. For TACACS+, the value of myAAAServerConfigAcctPort is ignored, myAAAServerConfigAuthPort will be used instead. |
| STR myAAAServerConfigKeyStr | 1.3.6.1.4.1.171.10.97.2.19.1.2.9.1.7 | DisplayString | read-create | The server key to be used with this server. Retrieving the value of this object via SNMP will return an empty string for security reasons. |
| ROW myAAAServerConfigRowStatus | 1.3.6.1.4.1.171.10.97.2.19.1.2.9.1.8 | RowStatus | read-create | The status of this table entry. Once the entry status is set to active, the associated entry cannot be modified except destroyed by setting this object to destroy(6). |
| myAuthUserObjects | 1.3.6.1.4.1.171.10.97.2.19.1.3 | |||
| myAuthAddrTable | 1.3.6.1.4.1.171.10.97.2.19.1.3.1 | not-accessible | The table of MAC address which can be authenticated. | |
| myAuthAddrEntry | 1.3.6.1.4.1.171.10.97.2.19.1.3.1.1 | not-accessible | The entry of MAC address which can be authenticated. | |
| IFI myAuthPort | 1.3.6.1.4.1.171.10.97.2.19.1.3.1.1.1 | IfIndex | read-only | The port number of the port/trunk to which frames received from a specific port/trunk and destined for a specific MAC address. |
| MAC myAuthMacAddress | 1.3.6.1.4.1.171.10.97.2.19.1.3.1.1.2 | MacAddress | read-only | The MAC address which can be authenticated. |
| INT myAuthAddrStatus | 1.3.6.1.4.1.171.10.97.2.19.1.3.1.1.3 | INTEGER | read-write | valid(1) - this entry is currently in use . invalid(2) - writing this value to the object removes the corresponding entry. |
| myAuthUserTable | 1.3.6.1.4.1.171.10.97.2.19.1.3.2 | not-accessible | The table of authentication User Info. | |
| myAuthUserEntry | 1.3.6.1.4.1.171.10.97.2.19.1.3.2.1 | not-accessible | The entry of authentication User Info table. | |
| U32 myAuthUserFdbId | 1.3.6.1.4.1.171.10.97.2.19.1.3.2.1.1 | Unsigned32 | read-only | The VID of vlan which the address blongs to. |
| MAC myAuthUserMacAddress | 1.3.6.1.4.1.171.10.97.2.19.1.3.2.1.2 | MacAddress | read-only | The MAC Address of authentication User . |
| STR myAuthUserName | 1.3.6.1.4.1.171.10.97.2.19.1.3.2.1.3 | DisplayString | read-only | The Name of authentication User. |
| STR myAuthUserSessionId | 1.3.6.1.4.1.171.10.97.2.19.1.3.2.1.4 | DisplayString | read-only | The Session Id of authentication User . |
| IP myAuthUserIpAddr | 1.3.6.1.4.1.171.10.97.2.19.1.3.2.1.5 | IpAddress | read-only | The IP Address of authentication User . |
| INT myAuthUserPort | 1.3.6.1.4.1.171.10.97.2.19.1.3.2.1.6 | INTEGER | read-only | The interface of authentication User . |
| CON myAuthUserStatus | 1.3.6.1.4.1.171.10.97.2.19.1.3.2.1.7 | ConfigStatus | read-write | Setting this object to 'invalid' will close a authenticated user, set its value to valid will cause no action of agent, when query always return value valid. |
| STR myAuthUserForVPNDel | 1.3.6.1.4.1.171.10.97.2.19.1.3.3 | DisplayString | read-write | VPN user's name. Setting this object will delete a authenticated user and this user is unauthenticated. The set string is the username. Reading this object always return null string. |
| myAuthModeObjects | 1.3.6.1.4.1.171.10.97.2.19.1.4 | |||
| INT myIpAuthorizationMode | 1.3.6.1.4.1.171.10.97.2.19.1.4.1 | INTEGER | read-write | disable(1) - don't limit ip address of user dhcpServer(2) - limit ip address of user, only ip address assigned by the dhcp server is legit. radiusServer(3) - limit ip address of user, only ip address assigned by the radius server is legit. supplicant(4) - mac+ip+port indicates different users (get the IP adress through supplicant) |
| myClientProbeObjects | 1.3.6.1.4.1.171.10.97.2.19.1.5 | |||
| ENA myClientProbeEnabledStatus | 1.3.6.1.4.1.171.10.97.2.19.1.5.1 | EnabledStatus | read-write | The status of client probe function. |
| U32 myClientProbeHelloInterval | 1.3.6.1.4.1.171.10.97.2.19.1.5.2 | Unsigned32 | read-write | The interval that client send hello packets. |
| U32 myClientProbeAliveInteval | 1.3.6.1.4.1.171.10.97.2.19.1.5.3 | Unsigned32 | read-write | When switch does not receive any legal hello packets from client in this interval,it will send RADIUS-Account-Stop to RADIUS server to stop this connection.The value of the objects must be more than myClientProbeHelloInterval |
| myAAAMIBConformance | 1.3.6.1.4.1.171.10.97.2.19.2 | |||
| myAAAMIBCompliances | 1.3.6.1.4.1.171.10.97.2.19.2.1 | |||
| myAAAMIBCompliance | 1.3.6.1.4.1.171.10.97.2.19.2.1.1 | The compliance statement for entities which implement the My AAA MIB | ||
| myAAAMIBGroups | 1.3.6.1.4.1.171.10.97.2.19.2.2 | |||
| myDot1xAuthMIBGroup | 1.3.6.1.4.1.171.10.97.2.19.2.2.1 | A collection of objects providing dot1x authentication managment. | ||
| myAAAServerMIBGroup | 1.3.6.1.4.1.171.10.97.2.19.2.2.2 | A collection of objects providing AAA server managment. | ||
| myAuthAddrMIBGroup | 1.3.6.1.4.1.171.10.97.2.19.2.2.3 | A collection of objects providing address permitted authentication managment. | ||
| myAuthModeMIBGroup | 1.3.6.1.4.1.171.10.97.2.19.2.2.4 | A collection of objects providing authentication mode managment. | ||
| myClientProbeGroup | 1.3.6.1.4.1.171.10.97.2.19.2.2.5 | A collection of objects providing client probe management. |
RFC description
Manages AAA (Authentication, Authorization, Accounting) and 802.1x authentication settings on D-Link devices.
Start monitoring D-Link managed switch (802.1x port-based access control) with a free 30-day trial of IPNetwork Monitor. Import MIBs, browse SNMP OIDs, create custom SNMP monitors, configure alerts, and monitor any SNMP-enabled network device from a single console.