2004-06-02
This MIB module defines a portion of the SNMP MIB under Enterasys Networks' enterprise OID pertaining to proprietary extensions to the IETF Q-BRIDGE-MIB, as specified in RFC2674, pertaining to VLAN authorization, as specified in RFC3580. Specifically, the enabling and disabling of support for the VLAN Tunnel-Type attribute returned from a RADIUS authentication, and how that attribute is applied to the port which initiated the authentication.
Download ENTERASYS-VLAN-AUTHORIZATION-MIB.txt Open ENTERASYS-VLAN-AUTHORIZATION-MIB.txt in a new tab
| Name | OID |
|---|---|
| etsysVlanAuthorizationEnable | 1.3.6.1.4.1.5624.1.2.48.1.1.1 |
| Name | OID |
|---|---|
| etsysVlanAuthorizationTableaugments dot1dBasePortTable (BRIDGE-MIB) | 1.3.6.1.4.1.5624.1.2.48.1.2.1 |
END OF TOC
1.3.6.1.4.1.5624.1.2.48.1.1.1
EnabledStatus1 = enabled2 = disabledA simple status value for the object. · Integer32
The enable/disable state for the VLAN authorization feature. When disabled, no modifications to the VLAN attributes related to packet switching should be enforced.
1.3.6.1.4.1.5624.1.2.48.1.2.1
augments dot1dBasePortTable (BRIDGE-MIB)
Index: dot1dBasePort
Extensions to the table that contains information about every port that is associated with this transparent bridge.
from BRIDGE-MIB
Integer32 (1..65535)
The port number of the port for which this entry contains bridge management information.
1.3.6.1.4.1.5624.1.2.48.1.2.1.1.1
EnabledStatus1 = enabled2 = disabledA simple status value for the object. · Integer32
The enabled/disabled status for the application of VLAN authorization on this port, if disabled, the information returned in the VLAN-Tunnel-Type from the authentication will not be applied to the port (although it should be represented in this table). If enabled, those results will be applied to the port.
1.3.6.1.4.1.5624.1.2.48.1.2.1.1.2
VlanAuthEgressStatus1 = none2 = tagged3 = untagged4 = dynamicThe possible egress configurations which may be applied in response to a successful authentication. none(1) No egress manipulation will be made. tagged(2) The authenticating port will be added to the current egress for the VLAN-ID returned. untagged(3) The authenticating port will be added to the current untagged egress for the VLAN-ID returned. dynamic(4) The authenticating port will use information returned in the authentication response to modify the current egress lists. · Integer32
Controls the modification of the current vlan egress list (of the vlan returned in the VLAN-Tunnel-Type, and reported by etsysVlanAuthorizationVlanID) upon successful authentication in the following manner: none(1) No egress manipulation will be made. tagged(2) The authenticating port will be added to the current egress for the VLAN-ID returned. untagged(3) The authenticating port will be added to the current untagged egress for the VLAN-ID returned. dynamic(4) The authenticating port will use information returned in the authentication response to modify the current egress lists. This value is supported only if the device supports a mechanism through which the egress status may be returned through the RADIUS response. Should etsysVlanAuthorizationEnable become disabled, etsysVlanAuthorizationStatus become disabled for a port, or should etsysVlanAuthorizationVlanID become 0 or 4095, all effect on the port egress MUST be removed.
1.3.6.1.4.1.5624.1.2.48.1.2.1.1.3
VlanAuthEgressStatus1 = none2 = tagged3 = untagged4 = dynamicThe possible egress configurations which may be applied in response to a successful authentication. none(1) No egress manipulation will be made. tagged(2) The authenticating port will be added to the current egress for the VLAN-ID returned. untagged(3) The authenticating port will be added to the current untagged egress for the VLAN-ID returned. dynamic(4) The authenticating port will use information returned in the authentication response to modify the current egress lists. · Integer32
Reports the current state of modification to the current vlan egress list (of the vlan returned in the VLAN-Tunnel-Type) upon successful authentication, if etsysVlanAuthorizationStatus is enabled, in the following manner: none(1) No egress manipulation will be made. tagged(2) The authenticating port will be added to the current egress for the VLAN-ID returned. untagged(3) The authenticating port will be added to the current untagged egress for the VLAN-ID returned. The purpose of this leaf is to report, specifically when etsysVlanAuthorizationAdminEgress has been set to dynamic(4), the currently enforced egress modification. If the port is unauthenticated, or no VLAN-ID has been applied, this leaf should return none(1).
1.3.6.1.4.1.5624.1.2.48.1.2.1.1.4
Integer32 (0 | 1..4094 | 4095)
The 12 bit VLAN identifier for a given port, used to override the PVID of the given port, obtained as a result of an authentication. A value of zero indicates that there is no authenticated VLAN ID for the given port. Should a port become unauthenticated this value MUST be returned to zero. A value of 4095 indicates that a the port has been authenticated, but that the VLAN returned could not be applied to the port (possibly because of resource constraints or misconfiguration). In this instance, the original PVID should still be applied. Should the feature become disabled or the session terminate, all effect on the Port VLAN ID MUST be removed.