WebBase-Access-Control-MIB

All MIBs › WebBase-Access-Control-MIB

Organization: D-Link Corp.

Last Updated: 2009-07-20

Category: Web Content Filtering and Security

Description: Manages D-Link web-based access control parameters including authentication methods and authorized user sessions.

Start monitoring vendor-neutral, standards-based MIB, any SNMPv3-capable network device (SNMP engine identity/boot/clock status) with a free 30-day trial of IPNetwork Monitor. Import MIBs, browse SNMP OIDs, create custom SNMP monitors, configure alerts, and monitor any SNMP-enabled network device from a single console.

What Is WebBase-Access-Control-MIB?

WebBase-Access-Control-MIB is a vendor-specific MIB from D-Link used to manage Web Authentication/Web-based Access Control (WAC) on its managed switches. It exposes configuration objects for enabling web-based authentication, selecting the authentication method, associating authentication with specific VLANs or ports, and setting parameters like the logout timer and redirect path shown to unauthenticated users. It is primarily a software/configuration-status MIB: administrators use it to confirm that web-based access control is administratively enabled, that the correct authentication method and VLAN are applied, and that the virtual IP/HTTP settings used for the captive-portal-style login page are correctly configured on the switch. It has an implicit dependency on the switch's underlying VLAN and IP addressing configuration (both IPv4 and IPv6, per swWACVirtualIpAddr/swWACVirtualIPv6Addr), since those objects tie web authentication to specific network segments. It is typically deployed on D-Link managed switches in environments requiring guest or port-based web login before granting network access, such as campus or hospitality networks. Network engineers evaluating or troubleshooting this functionality can download the WebBase-Access-Control-MIB file directly to load it into their MIB browser.

IPNetwork Monitor allows you to monitor SNMP objects defined in WebBase-Access-Control-MIB. Use the built-in SNMP Monitoring Browser to explore available variables, view their current values and descriptions, and select the objects you want to monitor. You can then create SNMP monitors, configure thresholds, and receive alerts when monitored values change.

Supported Devices

D-Link managed switch

Monitoring Examples

An administrator would check swWebAuthAdminState and swWebAuthMethod to confirm web authentication is enabled and using the intended method, and would review swWebAuthAllPortstate to see which switch ports currently have authentication applied. If swWACAuthFailOverState indicates the fail-over state has activated, that signals the primary authentication path (referenced via swWACVirtualIpAddr/swWACSwitchHttpPort) has failed and the switch has fallen back to an alternate behavior, which would explain why users are unexpectedly bypassing or being blocked from the captive portal.

What Can Be Monitored

web authentication admin state
authentication method in use
per-port authentication state
authentication VLAN assignment
fail-over state of web access control
logout timer / redirect path settings

Imported Objects

From DLINK-ID-REC-MIB

dlink-common-mgmt

From IPV6-TC

Ipv6Address

From RFC1213-MIB

DisplayString

From SNMPv2-SMI

IpAddress
MODULE-IDENTITY
OBJECT-TYPE

From SNMPv2-TC

MacAddress
RowStatus

OIDs

OID symbolic	OID numeric	Type	Access	Description
swWACMIB	1.3.6.1.4.1.171.12.27			.
swWACCtrl	1.3.6.1.4.1.171.12.27.1
INT swWebAuthAdminState	1.3.6.1.4.1.171.12.27.1.1	INTEGER	read-write	This object enables/disables the web-based authentication status of the device.
INT swWebAuthMethod	1.3.6.1.4.1.171.12.27.1.2	INTEGER	read-write	This object indicates the authentication method type. The RADIUS method is authenticated per authentication server.
STR swWebAuthVlanName	1.3.6.1.4.1.171.12.27.1.3	DisplayString	read-write	This object indicates the authentication method VLAN name.
INT swWebAuthAllPortstate	1.3.6.1.4.1.171.12.27.1.4	INTEGER	read-write	This object enables/disables the authentication state of all ports on the device.
STR swWebAuthDefaultredirpath	1.3.6.1.4.1.171.12.27.1.5	DisplayString	read-write	The URL that the client will be redirected to after successful authentication. Initially, the redirected path is an empty string. It must be specified by the user before the function can be enabled.
INT swWebAuthLogouttimer	1.3.6.1.4.1.171.12.27.1.6	INTEGER	read-write	The authenticated port will revert to an un-authenticated state after the logout times out. When the value is 0, it means the logout timer is infinite and the authenticated port will never revert to an un-authenticated state. The default value is 60 minutes.
IP swWACVirtualIpAddr	1.3.6.1.4.1.171.12.27.1.7	IpAddress	read-write	Specifies the WAC virtual IP address which is used to accept authentication requests from an unauthenticated host. The virtual IP of WAC is used to accept authentication requests from an unauthenticated host. Only requests sent to this IP will get a correct response. NOTE: This IP does not respond to ARP requests or ICMP packets.
INT swWACSwitchHttpProtocol	1.3.6.1.4.1.171.12.27.1.8	INTEGER	read-write	Specifies which WAC protocol runs on this TCP port.
INT swWACSwitchHttpPort	1.3.6.1.4.1.171.12.27.1.9	INTEGER	read-write	Specifies the TCP port which the WAC switch listens to and uses to finish the authenticating process.
INT swWACAuthFailOverState	1.3.6.1.4.1.171.12.27.1.10	INTEGER	read-write	This object enables/disables the web-based authentication auth_failover status of the device. When the authentication failover is enabled, if RADIU servers authentication are unreachable, the local database will be used to do the authentication.
INT swWACRadiusAuthorizationState	1.3.6.1.4.1.171.12.27.1.11	INTEGER	read-write	This object enables/disables the web-based authentication RADIUS authorization status of the device. When the RADIUS authorization state is disabled, the assigned information from the RADIUS server will be ignored.
INT swWACLocalAuthorizationState	1.3.6.1.4.1.171.12.27.1.12	INTEGER	read-write	This object enables/disables the web-based authentication local authorization status of the device. When the local authorization state is disabled, the assigned information from the local database will be ignored.
INT swWACAuthClearDefaultredirpath	1.3.6.1.4.1.171.12.27.1.13	INTEGER	read-write	This object is used to clear the default redirect URL that has been previously configured.
ADR swWACVirtualIPv6Addr	1.3.6.1.4.1.171.12.27.1.14	Ipv6Address	read-write	Specifies the WAC virtual IPv6 address which is used to accept authentication requests from an unauthenticated host. The virtual IP of WAC is used to accept authentication requests from an unauthenticated host. Only requests sent to this IP will get a correct response. NOTE: This IP does not respond to ARP requests or ICMP packets.
swWACInfo	1.3.6.1.4.1.171.12.27.2
swWACAuthInfoTable	1.3.6.1.4.1.171.12.27.2.1		not-accessible	This table contains WAC client host information.
swWACAuthInfoEntry	1.3.6.1.4.1.171.12.27.2.1.1		not-accessible	This list contains WAC client host information.
INT swWACAuthInfoPort	1.3.6.1.4.1.171.12.27.2.1.1.1	INTEGER	read-only	Specifies the WAC host port number.
INT swWACAuthInfoAuthStatus	1.3.6.1.4.1.171.12.27.2.1.1.2	INTEGER	read-only	Specifies the WAC host Authentication state.
MAC swWACAuthInfoMACAddr	1.3.6.1.4.1.171.12.27.2.1.1.3	MacAddress	read-only	Specifies the WAC host MAC address.
VLA swWACAuthInfoVID	1.3.6.1.4.1.171.12.27.2.1.1.4	VlanId	read-only	Specifies the WAC host VID.
INT swWACAuthInfoRemainAgeTime	1.3.6.1.4.1.171.12.27.2.1.1.5	INTEGER	read-only	Specifies the remaining WAC host agetime. 0 indicates the authenticated host on the port will never age out.
INT swWACAuthInfoIdleTime	1.3.6.1.4.1.171.12.27.2.1.1.6	INTEGER	read-only	Specifies the WAC host idle time. 0 indicates the idle state of the authenticated host on the port will never be checked.
INT swWACAuthInfoBlockTime	1.3.6.1.4.1.171.12.27.2.1.1.7	INTEGER	read-only	Specifies the WAC host block time.
INT swWACAuthInfoStatus	1.3.6.1.4.1.171.12.27.2.1.1.8	INTEGER	read-write	Specifies the status of the WAC host. Setting delete (2) will delete this WAC host entry.
INT swWACAuthInfoPriority	1.3.6.1.4.1.171.12.27.2.1.1.9	INTEGER	read-only	Specifies the WAC host priority assigned when pass authentication. -1 indicates the host has no priority assigned.
swWACAuthStateTable	1.3.6.1.4.1.171.12.27.2.2		not-accessible	This table contains WAC client host information.
swWACAuthStateEntry	1.3.6.1.4.1.171.12.27.2.2.1		not-accessible	This list contains WAC client host information.
INT swWACAuthStatePort	1.3.6.1.4.1.171.12.27.2.2.1.1	INTEGER	read-only	Specifies the WAC host port number.
VLA swWACAuthStateOriginalVid	1.3.6.1.4.1.171.12.27.2.2.1.2	VlanId	read-only	Specifies the WAC host original receive VLAN ID.
MAC swWACAuthStateMACAddr	1.3.6.1.4.1.171.12.27.2.2.1.3	MacAddress	read-only	Specifies the WAC host MAC address.
INT swWACAuthStateAuthStatus	1.3.6.1.4.1.171.12.27.2.2.1.5	INTEGER	read-only	Specifies the WAC host Authentication state.
VLA swWACAuthStateAssignVid	1.3.6.1.4.1.171.12.27.2.2.1.7	VlanId	read-only	Specifies the WAC host assign VID.
INT swWACAuthStateAssignPriority	1.3.6.1.4.1.171.12.27.2.2.1.8	INTEGER	read-only	Specifies the WAC host priority assigned when pass authentication. -1 indicates the host has no priority assigned.
INT swWACAuthStateRemainTime	1.3.6.1.4.1.171.12.27.2.2.1.12	INTEGER	read-only	Specifies the remaining WAC host aging time/ block time. 0 indicates the authenticated host on the port will never age out.
INT swWACAuthStateIdleTime	1.3.6.1.4.1.171.12.27.2.2.1.14	INTEGER	read-only	Specifies the WAC host idle time. 0 indicates the idle state of the authenticated host on the port will never be checked.
INT swWACAuthStateDelAction	1.3.6.1.4.1.171.12.27.2.2.1.25	INTEGER	read-write	Used to delete the specified authentication entry. Setting delete(2) will delete this WAC host entry.
swWACMgmt	1.3.6.1.4.1.171.12.27.3
swWebAuthPortTable	1.3.6.1.4.1.171.12.27.3.1		not-accessible	A table that contains method and state information for every port.
swWebAuthPortEntry	1.3.6.1.4.1.171.12.27.3.1.1		not-accessible	A list of method types and states for each port.
INT swWebAuthPortIndex	1.3.6.1.4.1.171.12.27.3.1.1.1	INTEGER	read-only	This object indicates the module's port number.
INT swWebAuthPortState	1.3.6.1.4.1.171.12.27.3.1.1.2	INTEGER	read-write	This object enables/disables the authentication state of this port.
STR swWebAuthPortUserName	1.3.6.1.4.1.171.12.27.3.1.1.3	DisplayString	read-only	This object indicates the user name of the port.
INT swWebAuthAuthStatus	1.3.6.1.4.1.171.12.27.3.1.1.4	INTEGER	read-only	This object indicates whether the current port is authenticated or not.
INT swWebAuthAssignedVID	1.3.6.1.4.1.171.12.27.3.1.1.5	INTEGER	read-only	This object indicates the assigned VLAN ID of this port.
INT swWACPortAgeingTime	1.3.6.1.4.1.171.12.27.3.1.1.6	INTEGER	read-write	Specifies the time period during which an authenticated host will remain in the authenticated state. 0 indicates the authenticated host will never age out on the port.
INT swWACPortIdleTime	1.3.6.1.4.1.171.12.27.3.1.1.7	INTEGER	read-write	Specifies the idle_time. If there is no traffic during idle_time, the host will be moved back to the unauthenticated state. 0 indicates the idle state of the authenticated host on the port will never be checked.
INT swWACPortBlockTime	1.3.6.1.4.1.171.12.27.3.1.1.8	INTEGER	read-write	Specifies the block_time. If a host fails to pass authentication, it will be blocked for a period specified by the block_time.
swWebAuthUserTable	1.3.6.1.4.1.171.12.27.3.2		not-accessible	A table that contains web-based authentication account info.
swWebAuthUserEntry	1.3.6.1.4.1.171.12.27.3.2.1		not-accessible	A list that contains web-based authentication account info.
STR swWebAuthUserNameIndex	1.3.6.1.4.1.171.12.27.3.2.1.1	DisplayString	read-only	This object indicates the username with 15 being the maximum number of characters.
STR swWebAuthUserPWD	1.3.6.1.4.1.171.12.27.3.2.1.2	DisplayString	read-create	This object indicates the password (maximum number of characters is 15) for this user account. It is write-only.
STR swWebAuthUserVlanName	1.3.6.1.4.1.171.12.27.3.2.1.3	DisplayString	read-create	This object indicates the VLAN name for this user account.
ROW swWebAuthUserStatus	1.3.6.1.4.1.171.12.27.3.2.1.4	RowStatus	read-create	This object manages this entry.
INT swWebAuthUserVID	1.3.6.1.4.1.171.12.27.3.2.1.5	INTEGER	read-create	This object indicates the VID for this user account. 0 indicates to delete configure VID in this user account.

RFC description

Web-based access control and authentication management for network switches with VLAN and RADIUS support.

Start monitoring D-Link managed switch (web-authentication VLAN/port/logout-timer config status) with a free 30-day trial of IPNetwork Monitor. Import MIBs, browse SNMP OIDs, create custom SNMP monitors, configure alerts, and monitor any SNMP-enabled network device from a single console.

Download WebBase-Access-Control-MIB

What Is WebBase-Access-Control-MIB?

Supported Devices

Monitoring Examples

What Can Be Monitored

This MIB depends on

Related MIBs

RFC description