HUAWEI-8021x-EXT-MIB: View SNMP OID List / Download MIB

The MIB module defines the IEEE802.1x protocol MIB objects. IEEE802.1x protocol is mainly used to control the link layer access and identity verification for wireless users.

Silence period of the system, preventing malicious attack. By default, it is 60 seconds. DEFVAL { 60 }

Interval period of sending EAP_Request/Id packet. By default,30 seconds.DEFVAL { 30 }

Interval period of waiting for the supplicant to response to EAPoL packet.DEFVAL { 30 }

Configure the period of waiting for the response of Server. By default, it is 30 seconds.DEFVAL { 30 }

Maximum times of authentication.DEFVAL { 2 }

Configure the reauthentication period. By default, it is 3600 seconds.DEFVAL { 3600 }.

It is an extension of the public MIB table dot1xAuthConfigTable, with certain leaves added for describing the configuration of the object of the port authenticator. The index of this table is dot1xPaePortNumber.

It is an extension of the public MIB table dot1xAuthConfigTable, with certain leaves added for describing the configuration of the object of the port authenticator. The index of this entry is dot1xPaePortNumber.

Indicates he switch of port protocol, enabling or disenabling port 8021X. Options: 1. enabled(1) -indicates port 8021X is enabled 2. disabled(2) -indicates port 8021X is disabled Enumeration: 'disabled': 2, 'enabled': 1.

Port Access Control type, base port access control or base MAC access control. Options: 1. port(1) -base port access control 2. mac(2) -base MAC access control Enumeration: 'mac': 2, 'port': 1.

Indicates the maximum number of online users in a port.

Indicates the number of online users in a port now.

Indicates clear various Statistics viz. Options: 1. clear(1) -indicates clearing various statistics viz Enumeration: 'clear': 1.

Indicates the status of the handshake function. Options: 1. open(1) -indicates the handshake function is enabled 2. close(0) -indicates the handshake function is disabled Default: close(0) Enumeration: 'close': 0, 'open': 1.

Indicates the permitted handshake failures. Range: 0-10 The value 0 is meaningless in current version. Default: 3

Indicates the handshake interval. Unit: second Range: 1-1800 Default: 15s

Indicates which EAP authentication mode is adopted for port or virtual port. In the 802.1x function, the authentication packet can be processed in two modes: EAP end and EAP relay. Options: 1. eapEnd(1) -indicates the EAP authentication mode is eapEnd 2. eapRelay(2) -indicates the EAP authentication mode is eapRelay Default: eapReplay(2) Enumeration: 'eapRelay': 2, 'eapEnd': 1.

The device processes the DHCP DISCOVER and DHCP REQUEST packets only after the DHCP-trigger authentication function is enabled. Otherwise, the device does not process the DHCP DISCOVER or DHCP REQUEST packet. After the DHCP-trigger authentication function is enabled, the device triggers the authentication when receiving the DHCP DISCOVER and DHCP REQUEST packets. Indicates the status of the DHCP-trigger authentication function of the device. Options: 1. enabled(1) -indicates the DHCP-trigger authentication function is enabled 2. disabled(2) -indicates the DHCP-trigger authentication function is disabled Default: disable(2) Enumeration: 'disabled': 2, 'enabled': 1.

It is used to configure the profile used to control the user authentication through 802.1x. Profile 1 exists permanently, and it cannot be created or deleted. Other profiles can be created or deleted. The index of this table is hwDot1xTemplateIndex. This table supports only the profile mode. To create a profile, set hwDot1xTempRowStatus to createAndGo(4). The index is the ID of the profile to be created. To delete a profile, set hwDot1xTempRowStatus to destroy(6). The index is the ID of the profile to be deleted.

It is used to configure the profile used to control the user authentication through 802.1x. Profile 1 exists permanently, and it cannot be created or deleted. Other profiles can be created or deleted. The index of this entry is hwDot1xTemplateIndex. This table supports only the profile mode. To create a profile, set hwDot1xTempRowStatus to createAndGo(4). The index is the ID of the profile to be created. To delete a profile, set hwDot1xTempRowStatus to destroy(6). The index is the ID of the profile to be deleted.

Indicates the profile ID. Range: 1-256

Indicates the status of the handshake function. Options: 1. open(1) -indicates the handshake function is enabled 2. close(0) -indicates the handshake function is disabled Default: close(0) Enumeration: 'close': 0, 'open': 1.

Indicates the permitted handshake failures. Range: 0-10 Default: 0

Indicates the handshake interval. Unit: second Range: 1-1800 Default: 15s

Indicates which EAP authentication mode is adopted for the specified 802.1x profile. In the 802.1x function, the authentication packet can be processed in two modes: EAP end and EAP relay. Options: 1. eapEnd(1) -indicates the EAP end authentication mode. If local user authenticates on DSLAM directly, it does not need to communicate with the remote RADIUS server. If the user is not local user, it must be authenticated on the remote RADIUS server. 2. eapRelay(2) -the user must be authenticated on the remote RADIUS server Default: eapReplay(2) Enumeration: 'eapRelay': 2, 'eapEnd': 1.

Indicates whether the profile is used. When a profile is not used, the profile can be deleted. Options: 1. used(1) -indicates the profile is used 2. unused(0) -indicates the profile is not used Default: unused(0) Enumeration: 'unused': 0, 'used': 1.

Indicates the operation type of the table. Options: 1. active(1) -indicates query operation 2. createAndGo(4) -indicates creating a profile 3. destroy(6) -indicates deleting a profile

It is an extension table of dot1xPaePortTable and is used for describing the authorization mode and authentication status of the port. The index of this table is dot1xPaePortNumber (defined in dot1xPaePortTable). This version supports authentication based on the port or service port; therefore, dot1xPaePortNumber indicates the ID of a port or service port. When the input value exceeds the maximum ID of the service port, dot1xPaePortNumber is treated as ifIndex. The range of the service port IDs depends on the version. This table supports the creation of the port table. After the port table is created, the 802.1x authentication is bound to the port. The create operation is as follows: Specify the ID of the port to which the 802.1x authentication needs to be bound. Set hwDot1xPortRowStatus to createAndGo(4), and issue the set operation. Optionally specify hwDot1xPortMacControl. However, if the ID of the port is the ID of the service port, hwDot1xPortMacControl cannot be specified. hwDot1xPortMacControl cannot be issued independently, and it must be issued together with hwDot1xPortRowStatus during the create operation.

It is an extension table of dot1xPaePortTable and is used for describing the authorization mode and authentication status of the port. The index of this entry is dot1xPaePortNumber (defined in dot1xPaePortTable). This version supports authentication based on the port or service port; therefore, dot1xPaePortNumber indicates the ID of a port or service port. When the input value exceeds the maximum ID of the service port, dot1xPaePortNumber is treated as ifIndex. The range of the service port IDs depends on the version. This table supports the creation of the port table. After the port table is created, the 802.1x authentication is bound to the port. The create operation is as follows: Specify the ID of the port to which the 802.1x authentication needs to be bound. Set hwDot1xPortRowStatus to createAndGo(4), and issue the set operation. Optionally specify hwDot1xPortMacControl. However, if the ID of the port is the ID of the service port, hwDot1xPortMacControl cannot be specified. hwDot1xPortMacControl cannot be issued independently, and it must be issued together with hwDot1xPortRowStatus during the create operation.

Indicates the control type of the port. The port can be controlled in the following two ways: physical port control and service port control. Options: 1. physicalPort(1) -physical port control 2. servicePort(2) -service port control Enumeration: 'physicalPort': 1, 'servicePort': 2.

Indicates that the 802.1x authentication is bound to the port. Options: 1. binding(1) -indicates the 802.1x authentication is bound to the port Enumeration: 'binding': 1.

Indicates the control parameters of the controlled port. A port has three authorization control modes: force-authorized mode, force-unauthorized mode, and auto mode. According to different networks, different port control modes can be selected. By default, a port is in the unauthorized state, and users connected to the port cannot access network resources. If the authentication passes, the port state switches to the authorized state and users can access the network resources. Options: 1. forceUnauthorized(1) -indicates force-authorized mode 2. auto(2) -auto mode 3. forceAuthorized(3) -indicates force-unauthorized mode Default: auto(2) Enumeration: 'auto': 2, 'forceUnauthorized': 1, 'forceAuthorized': 3.

Indicates the port authentication status. Options: 1. auth(1) -indicates the port is authenticated 2. unAuth(2) -indicates the port is not authenticated Default: unauth(2) Enumeration: 'unAuth': 2, 'auth': 1.

Indicates the user name bound to the port.

Indicates the address pool of the port binding.

Indicates the operation type of the port table: binding the port to the 802.1x authentication, and unbinding the port from the 802.1x authentication. Options: 1. active(1) -indicates query operation 2. createAndGo(4) -indicates binding a port to the 802.1x authentication 3. destroy(6) -indicates unbinding a port from the 802.1x authentication

Indicates whether to enable the MAC-based control function. This leaf can be issued with parameters during the create operation. This function supports port-based rather than service-port-based configuration. When hwDot1xPortMacControl is set to enable(1), only the packets whose source MAC address is the MAC address of the authorized user can reach the network side. This leaf does not support the modify operation. Options: 1. enable(1) -indicates the MAC-based control function is enabled 2. disable(2) -indicates the MAC-based control function is disabled Default: disable(2) Enumeration: 'enable': 1, 'disable': 2.

It is an extension of the public MIB table dot1xAuthStatsEntry, with certain leaves added for describing the packet statistics of the port. The index of this table is dot1xPaePortNumber (defined in dot1xPaePortTable). The following tables list the leaves of this table. Only hwDot1xPortClearStatistics in this table supports the modify operation. The modification process is as follows: Specify the ID of the port to be modified. Set hwDot1xPortClearStatistics to the required value. The option is clear(1). Therefore, directly perform the set operation.

It is an extension of the public MIB table dot1xAuthStatsEntry, with certain leaves added for describing the packet statistics of the port. The index of this entry is dot1xPaePortNumber (defined in dot1xPaePortTable). The following tables list the leaves of this table. Only hwDot1xPortClearStatistics in this table supports the modify operation. The modification process is as follows: Specify the ID of the port to be modified. Set hwDot1xPortClearStatistics to the required value. The option is clear(1). Therefore, directly perform the set operation.

Indicates the number of authentication successes.

Indicates the number of authentication failures.

Indicates the number of the transmitted Eapol-Failure packets.

Indicates the number of the transmitted Eapol-Success packets.

Indicates the number of the unsupported EAPoL packets that are received.

Clears the port statistics. Options: 1. clear(1) -indicates clearing the port statistics Enumeration: 'clear': 1.

Indicates the status of the auto-detect function of the device. After the 802.1x auto-detect function is enabled, the system automatically detects the port status and requests the user authentication. Options: 1. enabled(1) -indicates the auto-detect function of the device is enabled 2. disabled(2) -indicates the auto-detect function of the device is disabled Default: disable(2) Enumeration: 'disabled': 2, 'enabled': 1.

Indicates the intermittent blinking protection function, which is used to reduce the duration of service interruption caused by port intermittent blinking. After the intermittent blinking protection function is enabled, the system does not force the 802.1x user to go offline when the port is down. In this case, if the handshake function is already enabled, the system detects the user by using the handshake mechanism; if the handshake function is disabled, the system waits for the duration of keepalive interval x number of handshake failures, and then forces the user to go offline if the port is still down. After the intermittent blinking protection function is enabled, the count of user online duration may be incorrect. Therefore, this function is applicable to the provisioning of services with the monthly flat rate rather than in the duration-based charging mode. Indicates the status of the intermittent blinking protection function of the device. Options: 1. enabled(1) -indicates the intermittent blinking protection function is enabled 2. disabled(2) -indicates the intermittent blinking protection function is disabled Default: disable(2) Enumeration: 'disabled': 2, 'enabled': 1.

Whether the global mac control is enabled in the device. Enable indicate that global mac control enable in the device; Disabled indicate that global mac control disable in the device. DEFVAL { 2 } Options: 1. enabled(1) -indicates the global mac control is enabled 2. disabled(2) -indicates the global mac control is disabled Enumeration: 'disabled': 2, 'enabled': 1.

This table describes the port information of 802.1x, The index of this table is mac address.

This table describes the port information of 802.1x, The index of this entry is mac address.

Mac address.

Authentication state.

Authentication Type.

This table describes the port statistics of 802.1x, The index of this table is mac address.

This table describes the port statistics of 802.1x, The index of this entry is mac address.

Authentication success times

Authentication Failure times

The numbers of the Eapol-Failure Packets which has been send by the port

The numbers of the Eapol-Success Packets which has been send by the port

The numbers of the Eapol packets which are not supported have been received in this port

Clear the information of the packets statistics in this port Options: 1. clear(1) -indicates clearing the information of the packets statistics in this port Enumeration: 'clear': 1.

The number of valid EAPOL frames of any type that has been received by this Authenticator.

The number of EAPOL frames of any type that has been transmitted by this Authenticator.

The number of EAPOL Start frames that have been received by this Authenticator.

The number of EAPOL Logoff frames that have been received by this Authenticator.

The number of EAP Resp/Id frames that have been received by this Authenticator.

The number of valid EAP Response frames (other than Resp/Id frames) that have been received by this Authenticator.

The number of EAP Req/Id frames that have been transmitted by this Authenticator.

The number of EAP Request frames (other than Rq/Id frames) that have been transmitted by this Authenticator.

The number of EAPOL frames that have been received by this Authenticator in which the frame type is not recognized.

The number of EAPOL frames that have been received by this Authenticator in which the Packet Body Length field is invalid.

The protocol version number carried in the most recently received EAPOL frame.

The number of EAPOL key frames that have been received by this Authenticator.

The number of EAPOL key frames that have been sent by this Authenticator.

The number of EAPOL peap frames that have been received by this Authenticator.

The number of EAPOL peap frames that have been sent by this Authenticator.

Indicates the status of the mac-conflict-detect function of the device. After the 802.1x mac-conflict-detect function is enabled, the system detects the mac conflicts. Options: 1. enabled(1) -indicates the mac-conflict-detect of the device is enabled 2. disabled(2) -indicates the mac-conflict-detect of the device is disabled Default: disable(2) Enumeration: 'disabled': 2, 'enabled': 1.