FASTPATH-DOT1X-ADVANCED-FEATURES-MIB

Dot1xPortControlMode1 = forceUnauthorized2 = auto3 = forceAuthorized4 = macBasedThe control values of the Authenticator PAE controlled Port. · Integer32

Dot1x port control mode of this port.The Port control mode . The port control mode for this interface can take the following values , force-unauthorized - the port is in unauthorized mode, auto-Port based mode. If a client authenticates suscessfully, then the interface is authorized . Otherwise, the port is in unauthorized mode. If more than one clients are attached to the port , then only one client needs to authenticate to allow other clients access. force-authorized - The port is placed in authorized mode macBased - If more than one client is attached to the port, then each client needs to authenticate separately. This object depcreates dot1xAuthAuthControlledPortControl object in IEEE8021-PAE-MIB

Unsigned32

Specifies the Guest Vlan of the port. A port will be moved to its Guest Vlan if no client sucessfully authenticates on that port for the Guest Vlan Period. A value of zero indicates no Guest Vlan is configured for the interface.

Unsigned32 (0..65535)

The value, in seconds, of the guestVlanPeriod constant currently in use for Guest Vlan Assignment for the port .

Unsigned32

Specifies the Unauthenticated Vlan of the port. A port will be moved to its unauthenticated Vlan if the client authenticates unsucessfully on that port . A value of zero indicates no Unauthenticated Vlan is configured for the port.

Unsigned32

Specifies the maximum users or clients that can authenticate on this port when the port control mode is macBased.

Unsigned32

Specifies the vlan the port is assigned to by Dot1x . Only relevant if the port control mode of the port is auto.

INTEGER1 = default2 = radius3 = unauthenticatedVlan4 = guestVlan5 = notAssigned · Integer32

Reason the port is assigned to the vlan specified by agentDot1xPortVlanAssigned . Only relevant if the port control mode of the port is auto.

Unsigned32

Specifies the session timeout value assigned by the Radius server for this port . Only relevant if the port control mode of the port is auto.

Dot1xSessionTerminationAction1 = default2 = reauthenticateThe action to be taken on session termination . · Integer32

Specifies the session termination action assigned by the Radius Server .This is the action taken when the session times out . Only relevant if the port control mode of the port is auto.

INTEGER1 = enable2 = disable · Integer32

Specifies if Mac-based bypass authentication is configured for the port.

INTEGER1 = enable2 = disable · Integer32

Displays the operational value of the Mac-based authentication bypass mode (MAB) on the port.

MacAddressRepresents an 802 MAC address represented in the `canonical' order defined by IEEE 802.1a, i.e., as if it were transmitted least significant bit first, even though 802.5 (in contrast to other 802.x protocols) requires MAC addresses to be transmitted most significant bit first. SIZE (6) · OCTET STRING · hint 1x:

Specifies the client MAC address of the client.

Unsigned32

Specifies the client MAC address of the client .

Unsigned32

Specifies the physical interface to which the client is attached .

INTEGER1 = initialize2 = disconnected3 = connecting4 = authenticating5 = authenticated6 = aborting7 = held8 = forceAuth9 = forceUnauth · Integer32

The current value of the Authenticator PAE state machine for the client.

INTEGER1 = request2 = response3 = success4 = fail5 = timeout6 = idle7 = initialize · Integer32

The current state of the Backend Authentication state machine.

DisplayStringRepresents textual information taken from the NVT ASCII character set, as defined in pages 4, 10-11 of RFC 854. To summarize RFC 854, the NVT ASCII repertoire specifies: - the use of character codes 0-127 (decimal) - the graphics characters (32-126) are interpreted as US ASCII - NUL, LF, CR, BEL, BS, HT, VT and FF have the special meanings specified in RFC 854 - the other 25 codes have no standard interpretation - the sequence 'CR LF' means newline - the sequence 'CR NUL' means carriage-return - an 'LF' not preceded by a 'CR' means moving to the same column on the next line. - the sequence 'CR x' for any x other than LF or NUL is illegal. (Note that this also means that a string may end with either 'CR LF' or 'CR NUL', but not with CR.) Any object defined using this syntax may not exceed 255 characters in length. SIZE (0..255) · OCTET STRING · hint 255a

Specifies the username with which the client is authenticated to the Radius server . This value is only valid when the client is in authenticated state.

Unsigned32

Specifies the time elapsed in seconds since the client was authenticated in this session. This value is only valid when the client is in authenticated state.

DisplayStringRepresents textual information taken from the NVT ASCII character set, as defined in pages 4, 10-11 of RFC 854. To summarize RFC 854, the NVT ASCII repertoire specifies: - the use of character codes 0-127 (decimal) - the graphics characters (32-126) are interpreted as US ASCII - NUL, LF, CR, BEL, BS, HT, VT and FF have the special meanings specified in RFC 854 - the other 25 codes have no standard interpretation - the sequence 'CR LF' means newline - the sequence 'CR NUL' means carriage-return - an 'LF' not preceded by a 'CR' means moving to the same column on the next line. - the sequence 'CR x' for any x other than LF or NUL is illegal. (Note that this also means that a string may end with either 'CR LF' or 'CR NUL', but not with CR.) Any object defined using this syntax may not exceed 255 characters in length. SIZE (0..255) · OCTET STRING · hint 255a

Specifies the Filter ID or Diffserv Policy name to be applied to the session . This vlaue is populated only if it has been assigned by the RADIUS server. This value is only valid when the client is in authenticated state.

Unsigned32

Specifies the vlan the client is associated with by Dot1x . This value is only valid when the client is in authenticated state.

INTEGER1 = default2 = radius3 = unauthenticatedVlan4 = invalid · Integer32

Reason the client is associated to the vlan specified by agentDot1xClientVlanAssigned . This value is only valid when the client is in authenticated state.

Unsigned32

Specifies the session time remaining for the client if assigned by the Radius server . A value of 0 indicates that no session timeout was assigned by the RADIUS server. This value is only valid when the client is in authenticated state.

Dot1xSessionTerminationAction1 = default2 = reauthenticateThe action to be taken on session termination . · Integer32

Specifies the session termination action assigned by the Radius Server . This is the action taken when the session times out . This value is only valid when the client is in authenticated state.