All MIBs › ZYXEL-MAC-AUTHENTICATION-MIB
Organization: Enterprise Solution ZyXEL
Last Updated: 2012-07-01
Category: ZyXEL Security and Access Control
Description: Manages ZyXEL MAC-based authentication for controlling network access using device MAC addresses.
Start monitoring vendor-neutral, standards-based MIB, any SNMPv3-capable network device (SNMP engine identity/boot/clock status) with a free 30-day trial of IPNetwork Monitor. Import MIBs, browse SNMP OIDs, create custom SNMP monitors, configure alerts, and monitor any SNMP-enabled network device from a single console.
What Is ZYXEL-MAC-AUTHENTICATION-MIB?
ZYXEL-MAC-AUTHENTICATION-MIB is a ZyXEL Communications enterprise MIB that manages MAC-based network access authentication on ZyXEL switches, registered under the esMgmt (ZYXEL-ES-SMI) subtree. It provides switch-wide control via zyMacAuthenticationState (an EnabledStatus toggle), zyMacAuthenticationNamePrefix and zyMacAuthenticationPassword to customize the credentials sent to a RADIUS server for each client MAC address, and zyMacAuthenticationTimeout controlling how long a failed client must wait (up to 3000 seconds) before retrying authentication. The zyxelMacAuthenticationPortTable, indexed by dot1dBasePort, exposes per-port zyMacAuthenticationPortState to enable or disable MAC authentication independently on each switch port, similar in concept to IEEE 802.1X but keyed on the device's MAC address rather than user credentials. Because the feature depends on RADIUS reachability, monitoring this MIB alongside RADIUS server health helps distinguish a disabled feature from an unreachable authentication backend. It depends on EnabledStatus from P-BRIDGE-MIB and dot1dBasePort from BRIDGE-MIB for port indexing, and is deployed on ZyXEL managed switches supporting MAC-based access control. Network administrators configuring per-port MAC authentication commonly need the ZYXEL-MAC-AUTHENTICATION-MIB MIB to verify port-level enable state.
IPNetwork Monitor allows you to monitor SNMP objects defined in ZYXEL-MAC-AUTHENTICATION-MIB. Use the built-in SNMP Monitoring Browser to explore available variables, view their current values and descriptions, and select the objects you want to monitor. You can then create SNMP monitors, configure thresholds, and receive alerts when monitored values change.
Supported Devices
- ZyXEL managed switches supporting MAC-based network access authentication
Monitoring Examples
An operator polls zyxelMacAuthenticationPortTable to confirm zyMacAuthenticationPortState is enabled on ports expected to require MAC authentication, cross-checking zyMacAuthenticationState is globally enabled; a port showing MAC authentication disabled while global state is enabled would indicate an inconsistent per-port configuration allowing unauthenticated devices onto that port.
What Can Be Monitored
- global MAC authentication enable state
- RADIUS name-prefix and password configuration
- authentication retry timeout
- per-port MAC authentication enable/disable state
Imported Objects
From BRIDGE-MIB
| dot1dBasePort | OBJECT-TYPE |
From P-BRIDGE-MIB
| EnabledStatus |
From SNMPv2-SMI
| MODULE-IDENTITY | |
| OBJECT-TYPE |
From SNMPv2-TC
| DisplayString |
From ZYXEL-ES-SMI
| esMgmt | OBJECT-IDENTITY |
OIDs
RFC description
Implements MAC-based authentication against RADIUS servers with name prefix, password, and authentication timeout configuration.
Start monitoring ZyXEL managed switches supporting MAC-based network access authentication (per-port MAC-authentication enable/RADIUS status) with a free 30-day trial of IPNetwork Monitor. Import MIBs, browse SNMP OIDs, create custom SNMP monitors, configure alerts, and monitor any SNMP-enabled network device from a single console.