DLINKSW-NETWORK-ACCESS-MIB
AI MIB Summary
The DLINKSW-NETWORK-ACCESS-MIB enables monitoring and configuration of 802.1X, MAC Authentication Bypass (MAB), and RADIUS/TACACS+ authentication policies on D-Link managed switches, specifically tracking active session states, authentication method priorities, and failover sequences for network access control.
This MIB module defines objects for Network Access Authentication in the system.
Network Access Authentication provides generic configurations for authentication methods in the system and manages the failover sequence of these methods in a flexible manner.
Main OID:
dlinkSwNetworkAccessAuthMIB.1.3.6.1.4.1.171.14.151
66
Objects
Active
Status
9
Dependencies
Imported Objects
Objects
66 total| Object Name |
|---|
dlinkSwNetworkAccessAuthMIBThis MIB module defines objects for Network Access Authentication
in the system.
Network Access Authentication provides generic configurations
for authentication methods in the system and manages the
failover sequence of these methods in a flexible manner. MODULE-IDENTITY .1.3.6.1.4.1.171.14.151 |
dNetAccessAuthMIBNotifications OBJECT IDENTIFIER .1.3.6.1.4.1.171.14.151.0 |
dNetAccessAuthMIBObjects OBJECT IDENTIFIER .1.3.6.1.4.1.171.14.151.1 |
dNetAuthSystem OBJECT IDENTIFIER .1.3.6.1.4.1.171.14.151.1.1 |
dnaMacMoveModeThis object controls whether to allow authenticated hosts to do
roaming across different switch ports.
deny : When a host is authenticated on one port,
that address is not allowed to move on another
authenticated manager-enabled port of the device.
permit: Authenticated hosts are allowed to move from one
port to another on the same device. When a host moves to
a new port, the authenticated session on the original
port is deleted, and the host is re-authenticated on the
new port.rw Enumeration .1.3.6.1.4.1.171.14.151.1.1.1 |
dnaAuthorizationEnabledThis object indicates the state of acceptance of the authorized
configuration.
When authorization is enabled for authentication, the authorized
attributes (for example VLAN, 802.1p default priority, bandwidth,
and ACL) will be accepted.rw TruthValue (SNMPv2-TC) .1.3.6.1.4.1.171.14.151.1.1.2 |
dnaMacFormatCaseThis object indicates the format of the authentication MAC address.
uppercase: Using uppercase format, the formatted is: AA-BB-CC-DD-EE-FF.
lowercase: Using lowercase format, the formatted is: aa-bb-cc-dd-ee-ff.rw Enumeration .1.3.6.1.4.1.171.14.151.1.1.3 |
dnaMacFormatDelimiterThis object indicates the delimiter format of authentication MAC address.
none: Not using any delimiter, the format is: AABBCCDDEEFF
hyphen: Using '-' as delimiter, the format is: AA-BB-CC-DD-EE-FF
colon: Using ':' as delimiter, the format is: AA:BB:CC:DD:EE:FF
dot: Using '.' as delimiter, the format is: AA.BB.CC.DD.EE.FFrw Enumeration .1.3.6.1.4.1.171.14.151.1.1.4 |
dnaMacFormatDelimiterNumberThis object indicates the delimiter number of authentication MAC address.
1: single delimiter, the format is: AABBCC.DDEEFF
2: double delimiter, the format is: AABB.CCDD.EEFF
5: multiple delimiter, the format is: AA.BB.CC.DD.EE.FF
Note: while dnaMacFormatDelimiter is none(1), the delimiter number
will not take effect.rw Integer32 ( 1 | 2 | 5 ) .1.3.6.1.4.1.171.14.151.1.1.5 |
dNetAuthAuthenticator OBJECT IDENTIFIER .1.3.6.1.4.1.171.14.151.1.2 |
dnaMaxAuthedUserLimitThis object indicates the maximum authenticated users of the system.rw Unsigned32 .1.3.6.1.4.1.171.14.151.1.2.1 |
dnaPortConfigTableThis table is a list of configurations for ports. An entry will
exist for every interface which supports Network Access
Authentication feature. SEQUENCE OF DnaPortConfigEntry .1.3.6.1.4.1.171.14.151.1.2.2 |
dnaPortConfigEntryAn entry contains port-specific configuration for Network Access
Authentication. DnaPortConfigEntry .1.3.6.1.4.1.171.14.151.1.2.2.1 |
dnaPortMaxAuthedUserLimitThis object indicates the maximum authenticated users of this port.rw Unsigned32 .1.3.6.1.4.1.171.14.151.1.2.2.1.1 |
dnaPortAuthHostModeThis object indicates the authentication host mode of the entry.rw DlinkAuthHostMode .1.3.6.1.4.1.171.14.151.1.2.2.1.2 |
dnaPortAuthVlansFirst2KThis object specifies the authentication VLAN(s)
in a string of octets containing one bit per VLAN for VLANs 1 to
2048.
If the bit is set to '1', then the VLAN needs authentication.rw Dlink2kVlanList (DLINKSW-TC-MIB) .1.3.6.1.4.1.171.14.151.1.2.2.1.3 |
dnaPortAuthVlansSecond2KThis object specifies the authentication VLAN(s)
in a string of octets containing one bit per VLAN for VLANs 2049
to 4094.
If the bit is set to '1', then the VLAN needs authentication.rw Dlink2kVlanList (DLINKSW-TC-MIB) .1.3.6.1.4.1.171.14.151.1.2.2.1.4 |
dnaPortReauthEnabledThis object indicates whether the periodic re-authentication is
enabled.rw TruthValue (SNMPv2-TC) .1.3.6.1.4.1.171.14.151.1.2.2.1.5 |
dnaPortReauthIntervalSpecifies the re-authentication interval, after which the port
will be re-authenticated if value of the corresponding instance
of dnaPortReauthEnabled is 'true'.
A value of zero indicates that the re-authentication interval
is based on AAA server when this port is authenticated.
Besides, the action (re-authenticate or initialize) to take after
expiration of the timer is also based on server.rw Unsigned32 UNITS "seconds" .1.3.6.1.4.1.171.14.151.1.2.2.1.6 |
dnaPortRestartIntervalSpecifies the interval after which a further authentication
attempt should be made to this port if it is not authorized.rw Unsigned32 .1.3.6.1.4.1.171.14.151.1.2.2.1.7 |
dnaPortInactivityTimeoutSpecifies the period of time that a client associating with
this port is allowed to be inactive before being terminated.
A value of zero indicates that inactivity timeout is disabled on
this port.
A value of -1 indicates that inactivity timeout is based on
AAA server when this port is authenticated.rw Integer32 (-1 | 0 | 1..65535) UNITS "seconds" .1.3.6.1.4.1.171.14.151.1.2.2.1.8 |
dnaPortGuestVlanidSpecifies the VLAN ID of guest VLAN on the interface.
The guest VLAN allows the user access within the
guest VLAN before it is authenticated.
A value of zero for this object indicates guest
VLAN is not configured for the interface.rw VlanIdOrNone (Q-BRIDGE-MIB) .1.3.6.1.4.1.171.14.151.1.2.2.1.9 |
dnaPortMethodTableThe table contains a list of authentication methods information on
ports. An entry will exist for every port which supports Network
Access Authentication feature. SEQUENCE OF DnaPortMethodEntry .1.3.6.1.4.1.171.14.151.1.2.3 |
dnaPortMethodEntryAn entry contains configuration and information of
authentication methods for a particular port. DnaPortMethodEntry .1.3.6.1.4.1.171.14.151.1.2.3.1 |
dnaPortMethodAvailableThis object indicates the currently effective authentication methods
on the port.
e.g: The dnaPortMethodCompAuthMode of the interface is set to any(1),
but only dot1x is running on this interface, macAuth, webAuth
and jwac are disabled, only the bit of dot1x is '1'.ro DlinkAuthMethodList .1.3.6.1.4.1.171.14.151.1.2.3.1.1 |
dnaPortMethodCompAuthModeThis object indicates the compound authentication mode on the port.rw DlinkCompAuthMode .1.3.6.1.4.1.171.14.151.1.2.3.1.2 |
dNetAuthSession OBJECT IDENTIFIER .1.3.6.1.4.1.171.14.151.1.3 |
dnaSessionTableThe table contains a list of authentication sessions.
An entry is created when an authentication session has been
successfully created within Network Access Authentication.
An entry is deleted when an authentication session has been
removed. SEQUENCE OF DnaSessionEntry .1.3.6.1.4.1.171.14.151.1.3.1 |
dnaSessionEntryAn entry contains management information for a particular
authentication session. DnaSessionEntry .1.3.6.1.4.1.171.14.151.1.3.1.1 |
dnaSessionIdThis object indicates a unique identifier of the
authentication session. Unsigned32 .1.3.6.1.4.1.171.14.151.1.3.1.1.1 |
dnaSessionClientMacAddressThis object indicates the MAC address of the device associates with
the authentication session.ro MacAddress (SNMPv2-TC) .1.3.6.1.4.1.171.14.151.1.3.1.1.2 |
dnaSessionClientAddrTypeThis object indicates the type of Internet address of the client
associates with the authentication session.
This object is meaningful only when the corresponding dnaSessionAuthorizedBy
is webAuth or jwac.ro InetAddressType (INET-ADDRESS-MIB) .1.3.6.1.4.1.171.14.151.1.3.1.1.3 |
dnaSessionClientAddressThis object indicates the Internet address of the client associates
with the authentication session.
This object is meaningful only when the corresponding dnaSessionAuthorizedBy
is webAuth or jwac.ro InetAddress (INET-ADDRESS-MIB) .1.3.6.1.4.1.171.14.151.1.3.1.1.4 |
dnaSessionStatusThis object indicates the current status of the authentication session.
idle : the session has been initialized and no
method has run yet.
authenticating : an authentication method is running for
this session.
noMethod : no authentication method has provided a
result for this session.
authenticationSuccess: an authentication method has resulted
in authentication success for this session.
authenticationFailed: an authentication method has resulted
in authentication failed for this session.ro Enumeration .1.3.6.1.4.1.171.14.151.1.3.1.1.5 |
dnaSessionAuthUserNameThis object indicates the user name of the authentication session.
This object is meaningless when the corresponding dnaSessionAuthorizedBy
is macAuth and a zero length string will be returned.ro SnmpAdminString (SNMP-FRAMEWORK-MIB) .1.3.6.1.4.1.171.14.151.1.3.1.1.6 |
dnaSessionAuthorizedByThis object indicates the method which authorizes the
authentication session.ro DlinkAuthMethod .1.3.6.1.4.1.171.14.151.1.3.1.1.7 |
dnaSessionAuthVlanThis object indicates the authorized VLAN applied to the authentication
session. Value zero indicates that no authorized VLAN has been
applied, or it is not applicable.ro VlanIdOrNone (Q-BRIDGE-MIB) .1.3.6.1.4.1.171.14.151.1.3.1.1.8 |
dnaSessionAccountingIDThis object indicates the accounting session ID
that using to accounting after authenticated.ro SnmpAdminString (SNMP-FRAMEWORK-MIB) .1.3.6.1.4.1.171.14.151.1.3.1.1.9 |
dnaSessionAssignVidThis object indicates the effectively assigned VLAN ID
that are authorized after host pass authenticated.
A value of zero indicates that no valid VLAN ID is authorized.ro VlanIdOrNone (Q-BRIDGE-MIB) .1.3.6.1.4.1.171.14.151.1.3.1.1.10 |
dnaSessionAssignPriorityThis object indicates the effectively assigned priority
that is authorized after host pass authenticated.
A value of -1 indicates that no valid priority is authorized.ro Integer32 .1.3.6.1.4.1.171.14.151.1.3.1.1.11 |
dnaSessionAssignIngressBandwidthThis object indicates the effectively assigned ingress bandwidth
that is authorized after host pass authenticated.
A value of -1 indicates that no valid ingress is authorized.ro Integer32 .1.3.6.1.4.1.171.14.151.1.3.1.1.12 |
dnaSessionAssignEgressBandwidthThis object indicates the effectively assigned egress bandwidth
that is authorized after host pass authenticated.
A value of -1 indicates that no valid egress is authorized.ro Integer32 .1.3.6.1.4.1.171.14.151.1.3.1.1.13 |
dnaSessionTimeoutIndicates the session timeout used by Network Access
Authentication for the authentication session.ro Unsigned32 UNITS "seconds" .1.3.6.1.4.1.171.14.151.1.3.1.1.14 |
dnaSessionTimeLeftIndicates the leftover time of the authentication session.ro Unsigned32 UNITS "seconds" .1.3.6.1.4.1.171.14.151.1.3.1.1.15 |
dnaSessionInactivityTimeoutIndicates the inactivity timeout used by Network Access
Authentication for the authentication session.ro Unsigned32 UNITS "seconds" .1.3.6.1.4.1.171.14.151.1.3.1.1.16 |
dnaSessionInactivityTimeLeftIndicates the leftover time of the inactivity timer of
the authentication session.ro Unsigned32 UNITS "seconds" .1.3.6.1.4.1.171.14.151.1.3.1.1.17 |
dnaSessionTerminateSessionThis object terminates the authentication session, when set
to 'terminate'.
Setting this object to 'false' has no effect.
No action is taken if this object is set to 'noOp'.
When read, the value 'noOp' is returned.rw Enumeration .1.3.6.1.4.1.171.14.151.1.3.1.1.99 |
dnaSessionMethodInfoTableThe table contains a list of authenticating state information of
methods for every authentication session.
An entry exists for every authentication method that can
initiate the authentication session within Network Access
Authentication. SEQUENCE OF DnaSessionMethodInfoEntry .1.3.6.1.4.1.171.14.151.1.3.2 |
dnaSessionMethodInfoEntryAn entry contains information for a particular effective
authentication method which is associated with a session on an
interface. DnaSessionMethodInfoEntry .1.3.6.1.4.1.171.14.151.1.3.2.1 |
dnaSessionMethodIndicates the authentication method of the entry. DlinkAuthMethod .1.3.6.1.4.1.171.14.151.1.3.2.1.1 |
dnaSessionMethodStateIndicates the state of this authentication method.
notInitiated : The method hasn't initiated the authentication process
yet.
inProgress : The authentication method is in progress.
authcSuccess: The session has been authenticated by the method.
authcFailed : The session has failed to be authenticated by the method.ro Enumeration .1.3.6.1.4.1.171.14.151.1.3.2.1.2 |
dnaSessionTerminateIfTableThe table is used to terminate authentication sessions by interface. SEQUENCE OF DnaSessionTerminateIfEntry .1.3.6.1.4.1.171.14.151.1.3.3 |
dnaSessionTerminateIfEntryAn entry is used to terminate authentication sessions by specifying
authentication methods per Network Access Authentication managed
port. DnaSessionTerminateIfEntry .1.3.6.1.4.1.171.14.151.1.3.3.1 |
dnaSessionTerminateIfMethodListThis object is used to terminate authentication sessions by methods on
an interface by setting the corresponding bit to '1'.
This object always returns '00'H when read.rw DlinkAuthMethodList .1.3.6.1.4.1.171.14.151.1.3.3.1.1 |
dnaSessionTerminateMethodThis object is used to terminate the authentication sessions by
setting this object to valid value.
Setting this object to 'other' has no effect.
When read, the value 'other' is returned.rw DlinkAuthMethod .1.3.6.1.4.1.171.14.151.1.3.4 |
dnaSessionTerminateAllThis object is used to terminate all authentication sessions by
setting this object to 'terminateAll'.
Setting this object to 'noOp' has no effect.
When read, the value 'noOp' is returned.rw Enumeration .1.3.6.1.4.1.171.14.151.1.3.5 |
dNetAuthUser OBJECT IDENTIFIER .1.3.6.1.4.1.171.14.151.1.4 |
dnaUserTableA table contains a list of users in the local database for
authentication. SEQUENCE OF DnaUserEntry .1.3.6.1.4.1.171.14.151.1.4.1 |
dnaUserEntryAn entry consists of information for an account. DnaUserEntry .1.3.6.1.4.1.171.14.151.1.4.1.1 |
dnaUserNameThis object indicates the username for this user account. DisplayString .1.3.6.1.4.1.171.14.151.1.4.1.1.1 |
dnaUserPasswordThis object indicates the password in clear text form for this user
account.
When read, a zero length string will be returned for security reasons.rw DisplayString .1.3.6.1.4.1.171.14.151.1.4.1.1.2 |
dnaUserTargetVlanidThis object indicates the VLAN ID to be assigned for this user
account.rw VlanIdOrNone (Q-BRIDGE-MIB) .1.3.6.1.4.1.171.14.151.1.4.1.1.3 |
dnaUserRowStatusThis object manages this user account.rw RowStatus (SNMPv2-TC) .1.3.6.1.4.1.171.14.151.1.4.1.1.99 |
dNetAccessAuthMIBConformance OBJECT IDENTIFIER .1.3.6.1.4.1.171.14.151.2 |
dnaMIBCompliances OBJECT IDENTIFIER .1.3.6.1.4.1.171.14.151.2.1 |
dnaMIBGroups OBJECT IDENTIFIER .1.3.6.1.4.1.171.14.151.2.2 |