868 lines
35 KiB
Plaintext
868 lines
35 KiB
Plaintext
|
-- *****************************************************************
|
||
|
|
-- TN-NAS-MIB.mib : TN Network Access Service MIB
|
||
|
|
--
|
||
|
|
-- Copyright (c) 2013 by Transition Networks, Inc.
|
||
|
|
-- All rights reserved.
|
||
|
|
--
|
||
|
|
-- *************************************************************************************************
|
||
|
|
--
|
||
|
|
|
||
|
|
TN-NAS-MIB DEFINITIONS ::= BEGIN
|
||
|
|
|
||
|
|
IMPORTS
|
||
|
|
MODULE-IDENTITY,
|
||
|
|
NOTIFICATION-TYPE,
|
||
|
|
OBJECT-TYPE,
|
||
|
|
Unsigned32,
|
||
|
|
Gauge32,
|
||
|
|
TimeTicks
|
||
|
|
FROM SNMPv2-SMI
|
||
|
|
MODULE-COMPLIANCE,
|
||
|
|
OBJECT-GROUP,
|
||
|
|
NOTIFICATION-GROUP
|
||
|
|
FROM SNMPv2-CONF
|
||
|
|
RowStatus,TruthValue,
|
||
|
|
MacAddress,
|
||
|
|
DisplayString
|
||
|
|
FROM SNMPv2-TC -- [RFC2579]
|
||
|
|
VlanId
|
||
|
|
FROM Q-BRIDGE-MIB
|
||
|
|
tnProducts
|
||
|
|
FROM TRANSITION-SMI;
|
||
|
|
|
||
|
|
TnNASAdminStateType ::= TEXTUAL-CONVENTION
|
||
|
|
STATUS current
|
||
|
|
DESCRIPTION
|
||
|
|
"Indicates the type of network access server admin state type.
|
||
|
|
"
|
||
|
|
SYNTAX INTEGER {
|
||
|
|
forceAuthorized (1),
|
||
|
|
portBased802dot1x (2),
|
||
|
|
forceUnauthorized (3),
|
||
|
|
macBasedAuth (4),
|
||
|
|
single802dot1x (5),
|
||
|
|
multi802dot1x (6)
|
||
|
|
}
|
||
|
|
|
||
|
|
--
|
||
|
|
-- main body
|
||
|
|
--
|
||
|
|
tnNASMIB MODULE-IDENTITY
|
||
|
|
LAST-UPDATED "201204051930Z"
|
||
|
|
ORGANIZATION "Transition Networks, Inc."
|
||
|
|
CONTACT-INFO
|
||
|
|
"Transition Networks
|
||
|
|
Technical Support
|
||
|
|
10900 Red Circle Drive
|
||
|
|
Minnetonka, MN 55343 USA
|
||
|
|
Tel: +1-800-526-9267
|
||
|
|
E-mail: techsupport@transition.com
|
||
|
|
"
|
||
|
|
DESCRIPTION
|
||
|
|
"TBD"
|
||
|
|
REVISION "201204200000Z"
|
||
|
|
DESCRIPTION
|
||
|
|
"Initial version of this MIB module."
|
||
|
|
::= { tnProducts 125 }
|
||
|
|
|
||
|
|
tnNASMIBNotifications OBJECT IDENTIFIER ::= { tnNASMIB 0 }
|
||
|
|
|
||
|
|
tnNASMIBObjects OBJECT IDENTIFIER ::= { tnNASMIB 1 }
|
||
|
|
|
||
|
|
tnNASMIBConformance OBJECT IDENTIFIER ::= { tnNASMIB 2 }
|
||
|
|
|
||
|
|
--
|
||
|
|
-- sub Objects list
|
||
|
|
--
|
||
|
|
tnNASSysMgmt OBJECT IDENTIFIER ::= { tnNASMIBObjects 1 }
|
||
|
|
tnNASPortMgmt OBJECT IDENTIFIER ::= { tnNASMIBObjects 2 }
|
||
|
|
tnNASAuthCountMgmt OBJECT IDENTIFIER ::= { tnNASMIBObjects 3 }
|
||
|
|
tnNASPortStatus OBJECT IDENTIFIER ::= { tnNASMIBObjects 4 }
|
||
|
|
tnNASClientStatus OBJECT IDENTIFIER ::= { tnNASMIBObjects 5 }
|
||
|
|
tnNASSelectedBackendServerCounter OBJECT IDENTIFIER ::= { tnNASMIBObjects 6 }
|
||
|
|
tnNASSelectedEapolCounter OBJECT IDENTIFIER ::= { tnNASMIBObjects 7 }
|
||
|
|
tnNASAttachedClientStatus OBJECT IDENTIFIER ::= { tnNASMIBObjects 8 }
|
||
|
|
tnNASClearCounter OBJECT IDENTIFIER ::= { tnNASMIBObjects 9 }
|
||
|
|
|
||
|
|
-- ******************************************************************
|
||
|
|
-- system configuration
|
||
|
|
-- ******************************************************************
|
||
|
|
tnNASSysReAuthEnabled OBJECT-TYPE
|
||
|
|
SYNTAX INTEGER{
|
||
|
|
enable (1),
|
||
|
|
disable (2)
|
||
|
|
}
|
||
|
|
MAX-ACCESS read-write
|
||
|
|
STATUS current
|
||
|
|
DESCRIPTION
|
||
|
|
"If checked, successfully authenticated supplicants/clients are reauthenticated after the interval specified by
|
||
|
|
the Reauthentication Period.Reauthentication for 802.1X-enabled ports can be used to detect if a new device is plugged into
|
||
|
|
a switch port or if a supplicant is no longer attached.
|
||
|
|
For MAC-based ports, reauthentication is only useful if the RADIUS server configuration has changed.
|
||
|
|
It does not involve communication between the switch and the client, and therefore doesn't imply that a client is still present on a port.
|
||
|
|
"
|
||
|
|
::= { tnNASSysMgmt 1 }
|
||
|
|
|
||
|
|
tnNASSysReAuthPeriod OBJECT-TYPE
|
||
|
|
SYNTAX INTEGER(1..3600)
|
||
|
|
MAX-ACCESS read-write
|
||
|
|
STATUS current
|
||
|
|
DESCRIPTION
|
||
|
|
"Determines the period, in seconds, after which a connected client must be reauthenticated.
|
||
|
|
This is only active if the Reauthentication Enabled checkbox is checked. Valid values are in the range 1 to 3600 seconds.
|
||
|
|
"
|
||
|
|
::= { tnNASSysMgmt 2 }
|
||
|
|
|
||
|
|
tnNASSysEAPOLTimeout OBJECT-TYPE
|
||
|
|
SYNTAX INTEGER(1..65535)
|
||
|
|
MAX-ACCESS read-write
|
||
|
|
STATUS current
|
||
|
|
DESCRIPTION
|
||
|
|
"Determines the time for retransmission of Request Identity EAPOL frames.
|
||
|
|
Valid values are in the range 1 to 65535 seconds. This has no effect for MAC-based ports..
|
||
|
|
"
|
||
|
|
::= { tnNASSysMgmt 3 }
|
||
|
|
|
||
|
|
tnNASSysAgingPeriod OBJECT-TYPE
|
||
|
|
SYNTAX Unsigned32(10..1000000)
|
||
|
|
MAX-ACCESS read-write
|
||
|
|
STATUS current
|
||
|
|
DESCRIPTION
|
||
|
|
"This setting applies to the following modes, i.e. modes using the Port Security functionality to secure MAC addresses:
|
||
|
|
Single 802.1X, Multi 802.1X, MAC-Based Auth.
|
||
|
|
When the NAS module uses the Port Security module to secure MAC addresses, the Port Security module needs to
|
||
|
|
check for activity on the MAC address in question at regular intervals and free resources if no activity is seen within
|
||
|
|
a given period of time. This parameter controls exactly this period and can be set to a number between 10 and 1000000 seconds.
|
||
|
|
If reauthentication is enabled and the port is in an 802.1X-based mode, this is not so critical, since supplicants that are
|
||
|
|
no longer attached to the port will get removed upon the next reauthentication, which will fail. But if reauthentication is not enabled,
|
||
|
|
the only way to free resources is by aging the entries.
|
||
|
|
For ports in MAC-based Auth. mode, reauthentication doesn't cause direct communication between the switch and the client,
|
||
|
|
so this will not detect whether the client is still attached or not, and the only way to free any resources is to age the entry..
|
||
|
|
"
|
||
|
|
::= { tnNASSysMgmt 4 }
|
||
|
|
|
||
|
|
tnNASSysHoldTime OBJECT-TYPE
|
||
|
|
SYNTAX Unsigned32(10..1000000)
|
||
|
|
MAX-ACCESS read-write
|
||
|
|
STATUS current
|
||
|
|
DESCRIPTION
|
||
|
|
"This setting applies to the following modes, i.e. modes using the Port Security functionality to secure MAC addresses:
|
||
|
|
Single 802.1X, Multi 802.1X, MAC-Based Auth.
|
||
|
|
If a client is denied access - either because the RADIUS server denies the client access or because the RADIUS server request times out,
|
||
|
|
the client is put on hold in the Unauthorized state. The hold timer does not count during an on-going authentication.
|
||
|
|
In MAC-based Auth. mode, the switch will ignore new frames coming from the client during the hold time.
|
||
|
|
The Hold Time can be set to a number between 10 and 1000000 seconds..
|
||
|
|
"
|
||
|
|
::= { tnNASSysMgmt 5 }
|
||
|
|
|
||
|
|
tnNASSysRadiusAssignedQosEnable OBJECT-TYPE
|
||
|
|
SYNTAX INTEGER{
|
||
|
|
enable (1),
|
||
|
|
disable (2)
|
||
|
|
}
|
||
|
|
MAX-ACCESS read-write
|
||
|
|
STATUS current
|
||
|
|
DESCRIPTION
|
||
|
|
"RADIUS-assigned QoS provides a means to centrally control the traffic class to which traffic coming from
|
||
|
|
a successfully authenticated supplicant is assigned on the switch. The RADIUS server must be configured to
|
||
|
|
transmit special RADIUS attributes to take advantage of this feature.
|
||
|
|
|
||
|
|
When checked, the individual ports' ditto setting determine whether RADIUS-assigned QoS Class is enabled on that port.
|
||
|
|
When unchecked, RADIUS-server assigned QoS Class is disabled on all ports..
|
||
|
|
"
|
||
|
|
::= { tnNASSysMgmt 6 }
|
||
|
|
|
||
|
|
tnNASSysRadiusAssignedVlanEnable OBJECT-TYPE
|
||
|
|
SYNTAX INTEGER{
|
||
|
|
enable (1),
|
||
|
|
disable (2)
|
||
|
|
}
|
||
|
|
MAX-ACCESS read-write
|
||
|
|
STATUS current
|
||
|
|
DESCRIPTION
|
||
|
|
"RADIUS-assigned VLAN provides a means to centrally control the VLAN on which a successfully authenticated supplicant
|
||
|
|
is placed on the switch. Incoming traffic will be classified to and switched on the RADIUS-assigned VLAN.
|
||
|
|
The RADIUS server must be configured to transmit special RADIUS attributes to take advantage of this feature.
|
||
|
|
|
||
|
|
When checked, the individual ports' ditto setting determine whether RADIUS-assigned VLAN is enabled on that port.
|
||
|
|
When unchecked, RADIUS-server assigned VLAN is disabled on all ports..
|
||
|
|
"
|
||
|
|
::= { tnNASSysMgmt 7 }
|
||
|
|
|
||
|
|
tnNASSysGuestVlanEnable OBJECT-TYPE
|
||
|
|
SYNTAX INTEGER{
|
||
|
|
enable (1),
|
||
|
|
disable (2)
|
||
|
|
}
|
||
|
|
MAX-ACCESS read-write
|
||
|
|
STATUS current
|
||
|
|
DESCRIPTION
|
||
|
|
"A Guest VLAN is a special VLAN - typically with limited network access - on which 802.1X-unaware clients are placed after
|
||
|
|
a network administrator-defined timeout. The switch follows a set of rules for entering and leaving the Guest VLAN as listed below.
|
||
|
|
|
||
|
|
When checked, the individual ports' ditto setting determines whether the port can be moved into Guest VLAN.
|
||
|
|
When unchecked, the ability to move to the Guest VLAN is disabled on all ports..
|
||
|
|
"
|
||
|
|
::= { tnNASSysMgmt 8 }
|
||
|
|
|
||
|
|
tnNASSysGuestVlanId OBJECT-TYPE
|
||
|
|
SYNTAX VlanId
|
||
|
|
MAX-ACCESS read-write
|
||
|
|
STATUS current
|
||
|
|
DESCRIPTION
|
||
|
|
"This is the value that a port's Port VLAN ID is set to if a port is moved into the Guest VLAN.
|
||
|
|
It is only changeable if the Guest VLAN option is globally enabled.
|
||
|
|
Valid values are in the range [1; 4094].
|
||
|
|
"
|
||
|
|
::= { tnNASSysMgmt 9 }
|
||
|
|
|
||
|
|
tnNASSysMaxReAuthCount OBJECT-TYPE
|
||
|
|
SYNTAX INTEGER(1..255)
|
||
|
|
MAX-ACCESS read-write
|
||
|
|
STATUS current
|
||
|
|
DESCRIPTION
|
||
|
|
"The number of times the switch transmits an EAPOL Request Identity frame without response before considering entering
|
||
|
|
the Guest VLAN is adjusted with this setting. The value can only be changed if the Guest VLAN option is globally enabled.
|
||
|
|
Valid values are in the range [1; 255]..
|
||
|
|
"
|
||
|
|
::= { tnNASSysMgmt 10 }
|
||
|
|
|
||
|
|
tnNASSysAllowGuestVlanIFEAPOLSeen OBJECT-TYPE
|
||
|
|
SYNTAX INTEGER{
|
||
|
|
enable (1),
|
||
|
|
disable (2)
|
||
|
|
}
|
||
|
|
MAX-ACCESS read-write
|
||
|
|
STATUS current
|
||
|
|
DESCRIPTION
|
||
|
|
"The switch remembers if an EAPOL frame has been received on the port for the life-time of the port.
|
||
|
|
Once the switch considers whether to enter the Guest VLAN, it will first check if this option is enabled or disabled.
|
||
|
|
If disabled (unchecked; default), the switch will only enter the Guest VLAN if an EAPOL frame has not been received
|
||
|
|
on the port for the life-time of the port.
|
||
|
|
If enabled (checked), the switch will consider entering the Guest VLAN even if an EAPOL frame has been received
|
||
|
|
on the port for the life-time of the port.
|
||
|
|
The value can only be changed if the Guest VLAN option is globally enabled..
|
||
|
|
"
|
||
|
|
::= { tnNASSysMgmt 11 }
|
||
|
|
|
||
|
|
-- ******************************************************************
|
||
|
|
-- NAS port configuration table
|
||
|
|
-- ******************************************************************
|
||
|
|
tnNASPortCfgTable OBJECT-TYPE
|
||
|
|
SYNTAX SEQUENCE OF TnNASPortCfgEntry
|
||
|
|
MAX-ACCESS not-accessible
|
||
|
|
STATUS current
|
||
|
|
DESCRIPTION
|
||
|
|
"This table displays and sets port configuratio.
|
||
|
|
"
|
||
|
|
::= { tnNASPortMgmt 1 }
|
||
|
|
|
||
|
|
tnNASPortCfgEntry OBJECT-TYPE
|
||
|
|
SYNTAX TnNASPortCfgEntry
|
||
|
|
MAX-ACCESS not-accessible
|
||
|
|
STATUS current
|
||
|
|
DESCRIPTION
|
||
|
|
"This entry represents a port configuration."
|
||
|
|
INDEX { tnNASPortNum }
|
||
|
|
::= { tnNASPortCfgTable 1 }
|
||
|
|
|
||
|
|
TnNASPortCfgEntry ::= SEQUENCE {
|
||
|
|
tnNASPortNum Unsigned32,
|
||
|
|
tnNASAdminState INTEGER,
|
||
|
|
tnNASRadiusAssignedQosEnabled INTEGER,
|
||
|
|
tnNASRadiusAssignedVlanEnabled INTEGER,
|
||
|
|
tnNASGuestVlanEnabled INTEGER,
|
||
|
|
tnNASPortCfgState INTEGER
|
||
|
|
}
|
||
|
|
|
||
|
|
tnNASPortNum OBJECT-TYPE
|
||
|
|
SYNTAX Unsigned32
|
||
|
|
MAX-ACCESS not-accessible
|
||
|
|
STATUS current
|
||
|
|
DESCRIPTION
|
||
|
|
"The port number for which the configuration below applies.
|
||
|
|
"
|
||
|
|
::= { tnNASPortCfgEntry 1 }
|
||
|
|
|
||
|
|
tnNASAdminState OBJECT-TYPE
|
||
|
|
SYNTAX TnNASAdminStateType
|
||
|
|
MAX-ACCESS read-write
|
||
|
|
STATUS current
|
||
|
|
DESCRIPTION
|
||
|
|
"If NAS is globally enabled, this selection controls the port's authentication mode.
|
||
|
|
"
|
||
|
|
::= { tnNASPortCfgEntry 2 }
|
||
|
|
|
||
|
|
tnNASRadiusAssignedQosEnabled OBJECT-TYPE
|
||
|
|
SYNTAX INTEGER{
|
||
|
|
enable (1),
|
||
|
|
disable (2)
|
||
|
|
}
|
||
|
|
MAX-ACCESS read-write
|
||
|
|
STATUS current
|
||
|
|
DESCRIPTION
|
||
|
|
"When RADIUS-Assigned QoS is both globally enabled and enabled (checked) on a given port, the switch reacts to QoS Class information
|
||
|
|
carried in the RADIUS Access-Accept packet transmitted by the RADIUS server when a supplicant is successfully authenticated.
|
||
|
|
If present and valid, traffic received on the supplicant's port will be classified to the given QoS Class. If (re-)authentication fails
|
||
|
|
or the RADIUS Access-Accept packet no longer carries a QoS Class or it's invalid, or the supplicant is otherwise no longer present on
|
||
|
|
the port, the port's QoS Class is immediately reverted to the original QoS Class (which may be changed by the administrator
|
||
|
|
in the meanwhile without affecting the RADIUS-assigned).
|
||
|
|
This option is only available for single-client modes, i.e Port-based 802.1X, Single 802.1X
|
||
|
|
"
|
||
|
|
::= { tnNASPortCfgEntry 3 }
|
||
|
|
|
||
|
|
tnNASRadiusAssignedVlanEnabled OBJECT-TYPE
|
||
|
|
SYNTAX INTEGER{
|
||
|
|
enable (1),
|
||
|
|
disable (2)
|
||
|
|
}
|
||
|
|
MAX-ACCESS read-write
|
||
|
|
STATUS current
|
||
|
|
DESCRIPTION
|
||
|
|
"When RADIUS-Assigned VLAN is both globally enabled and enabled (checked) for a given port, the switch reacts to VLAN ID information
|
||
|
|
carried in the RADIUS Access-Accept packet transmitted by the RADIUS server when a supplicant is successfully authenticated.
|
||
|
|
If present and valid, the port's Port VLAN ID will be changed to this VLAN ID, the port will be set to be a member of that VLAN ID,
|
||
|
|
and the port will be forced into VLAN unaware mode. Once assigned, all traffic arriving on the port will be classified and switched
|
||
|
|
on the RADIUS-assigned VLAN ID.
|
||
|
|
If (re-)authentication fails or the RADIUS Access-Accept packet no longer carries a VLAN ID or it's invalid, or the supplicant
|
||
|
|
is otherwise no longer present on the port, the port's VLAN ID is immediately reverted to the original VLAN ID
|
||
|
|
(which may be changed by the administrator in the meanwhile without affecting the RADIUS-assigned).
|
||
|
|
This option is only available for single-client modes, i.e. Port-based 802.1X, Single 802.1X.
|
||
|
|
"
|
||
|
|
::= { tnNASPortCfgEntry 4 }
|
||
|
|
|
||
|
|
tnNASGuestVlanEnabled OBJECT-TYPE
|
||
|
|
SYNTAX INTEGER{
|
||
|
|
enable (1),
|
||
|
|
disable (2)
|
||
|
|
}
|
||
|
|
MAX-ACCESS read-write
|
||
|
|
STATUS current
|
||
|
|
DESCRIPTION
|
||
|
|
"TWhen Guest VLAN is both globally enabled and enabled (checked) for a given port, the switch considers moving the port into
|
||
|
|
the Guest VLAN according to the rules outlined below.
|
||
|
|
This option is only available for EAPOL-based modes, i.e.: Port-based 802.1X, Single 802.1X, Multi 802.1X
|
||
|
|
"
|
||
|
|
::= { tnNASPortCfgEntry 5 }
|
||
|
|
|
||
|
|
tnNASPortCfgState OBJECT-TYPE
|
||
|
|
SYNTAX INTEGER {
|
||
|
|
linkDown (0),
|
||
|
|
authorized(1),
|
||
|
|
unauthorized (2),
|
||
|
|
globallyDisabled (3),
|
||
|
|
authOrUnauth(4)
|
||
|
|
}
|
||
|
|
MAX-ACCESS read-only
|
||
|
|
STATUS current
|
||
|
|
DESCRIPTION
|
||
|
|
"The current state of the port.
|
||
|
|
"
|
||
|
|
::= { tnNASPortCfgEntry 6 }
|
||
|
|
|
||
|
|
-- ******************************************************************
|
||
|
|
-- NAS authorized count table
|
||
|
|
-- ******************************************************************
|
||
|
|
tnNASAuthCountTable OBJECT-TYPE
|
||
|
|
SYNTAX SEQUENCE OF TnNASAuthCountEntry
|
||
|
|
MAX-ACCESS not-accessible
|
||
|
|
STATUS current
|
||
|
|
DESCRIPTION
|
||
|
|
"This table contains the configuration of auth counter."
|
||
|
|
::= { tnNASAuthCountMgmt 1 }
|
||
|
|
|
||
|
|
tnNASAuthCountEntry OBJECT-TYPE
|
||
|
|
SYNTAX TnNASAuthCountEntry
|
||
|
|
MAX-ACCESS not-accessible
|
||
|
|
STATUS current
|
||
|
|
DESCRIPTION
|
||
|
|
"This entry represents an auth counter.
|
||
|
|
"
|
||
|
|
INDEX { tnNASPortNum }
|
||
|
|
::= { tnNASAuthCountTable 1 }
|
||
|
|
|
||
|
|
TnNASAuthCountEntry ::= SEQUENCE {
|
||
|
|
tnNASAuthCount INTEGER,
|
||
|
|
tnNASUnauthCount INTEGER
|
||
|
|
}
|
||
|
|
|
||
|
|
tnNASAuthCount OBJECT-TYPE
|
||
|
|
SYNTAX INTEGER
|
||
|
|
MAX-ACCESS read-only
|
||
|
|
STATUS current
|
||
|
|
DESCRIPTION
|
||
|
|
"NAS auththenticate count"
|
||
|
|
::= { tnNASAuthCountEntry 1 }
|
||
|
|
|
||
|
|
tnNASUnauthCount OBJECT-TYPE
|
||
|
|
SYNTAX INTEGER
|
||
|
|
MAX-ACCESS read-only
|
||
|
|
STATUS current
|
||
|
|
DESCRIPTION
|
||
|
|
"NAS unauththenticate count"
|
||
|
|
::= { tnNASAuthCountEntry 2 }
|
||
|
|
|
||
|
|
-- ******************************************************************
|
||
|
|
-- NAS port status table
|
||
|
|
-- ******************************************************************
|
||
|
|
tnNASPortStatusTable OBJECT-TYPE
|
||
|
|
SYNTAX SEQUENCE OF TnNASPortStatusEntry
|
||
|
|
MAX-ACCESS not-accessible
|
||
|
|
STATUS current
|
||
|
|
DESCRIPTION
|
||
|
|
"This table contains the configuration of port status."
|
||
|
|
::= { tnNASPortStatus 1 }
|
||
|
|
|
||
|
|
tnNASPortStatusEntry OBJECT-TYPE
|
||
|
|
SYNTAX TnNASPortStatusEntry
|
||
|
|
MAX-ACCESS not-accessible
|
||
|
|
STATUS current
|
||
|
|
DESCRIPTION
|
||
|
|
"This entry represents a port status.
|
||
|
|
"
|
||
|
|
INDEX { tnNASPortNum }
|
||
|
|
::= { tnNASPortStatusTable 1 }
|
||
|
|
|
||
|
|
TnNASPortStatusEntry ::= SEQUENCE {
|
||
|
|
tnNASPortAdminState INTEGER,
|
||
|
|
tnNASPortState INTEGER,
|
||
|
|
tnNASQosClass OCTET STRING,
|
||
|
|
tnNASPortVlanId VlanId
|
||
|
|
}
|
||
|
|
|
||
|
|
tnNASPortAdminState OBJECT-TYPE
|
||
|
|
SYNTAX TnNASAdminStateType
|
||
|
|
MAX-ACCESS read-only
|
||
|
|
STATUS current
|
||
|
|
DESCRIPTION
|
||
|
|
"The port's current administrative state.
|
||
|
|
"
|
||
|
|
::= { tnNASPortStatusEntry 1 }
|
||
|
|
|
||
|
|
tnNASPortState OBJECT-TYPE
|
||
|
|
SYNTAX INTEGER{
|
||
|
|
linkDown (0),
|
||
|
|
authorized(1),
|
||
|
|
unauthorized (2),
|
||
|
|
globallyDisabled (3),
|
||
|
|
authOrUnauth(4)
|
||
|
|
}
|
||
|
|
MAX-ACCESS read-only
|
||
|
|
STATUS current
|
||
|
|
DESCRIPTION
|
||
|
|
"The current state of the port.
|
||
|
|
"
|
||
|
|
::= { tnNASPortStatusEntry 2 }
|
||
|
|
|
||
|
|
tnNASQosClass OBJECT-TYPE
|
||
|
|
SYNTAX OCTET STRING
|
||
|
|
MAX-ACCESS read-only
|
||
|
|
STATUS current
|
||
|
|
DESCRIPTION
|
||
|
|
"The QoS class assigned by the RADIUS server. The field is blank if no QoS class is assigned.
|
||
|
|
"
|
||
|
|
::= { tnNASPortStatusEntry 3 }
|
||
|
|
|
||
|
|
tnNASPortVlanId OBJECT-TYPE
|
||
|
|
SYNTAX VlanId
|
||
|
|
MAX-ACCESS read-only
|
||
|
|
STATUS current
|
||
|
|
DESCRIPTION
|
||
|
|
"The VLAN ID that NAS has put the port in. The field is blank, if the Port VLAN ID is not overridden by NAS.
|
||
|
|
"
|
||
|
|
::= { tnNASPortStatusEntry 4 }
|
||
|
|
|
||
|
|
-- ******************************************************************
|
||
|
|
-- NAS client and supplication status table
|
||
|
|
-- ******************************************************************
|
||
|
|
tnNASClientStatusTable OBJECT-TYPE
|
||
|
|
SYNTAX SEQUENCE OF TnNASClientStatusEntry
|
||
|
|
MAX-ACCESS not-accessible
|
||
|
|
STATUS current
|
||
|
|
DESCRIPTION
|
||
|
|
"This table contains the configuration of client status."
|
||
|
|
::= { tnNASClientStatus 1 }
|
||
|
|
|
||
|
|
tnNASClientStatusEntry OBJECT-TYPE
|
||
|
|
SYNTAX TnNASClientStatusEntry
|
||
|
|
MAX-ACCESS not-accessible
|
||
|
|
STATUS current
|
||
|
|
DESCRIPTION
|
||
|
|
"This entry represents a client status.
|
||
|
|
"
|
||
|
|
INDEX { tnNASPortNum, tnNASClientNum }
|
||
|
|
::= { tnNASClientStatusTable 1 }
|
||
|
|
|
||
|
|
TnNASClientStatusEntry ::= SEQUENCE {
|
||
|
|
tnNASClientNum Unsigned32,
|
||
|
|
tnNASMacAddr MacAddress,
|
||
|
|
tnNASVlanId VlanId,
|
||
|
|
tnNASVersion INTEGER,
|
||
|
|
tnNASIdentify OCTET STRING
|
||
|
|
}
|
||
|
|
|
||
|
|
tnNASClientNum OBJECT-TYPE
|
||
|
|
SYNTAX Unsigned32(1..2)
|
||
|
|
MAX-ACCESS not-accessible
|
||
|
|
STATUS current
|
||
|
|
DESCRIPTION
|
||
|
|
"1 for last client/supplication; 2 for selected client/supplication."
|
||
|
|
::= { tnNASClientStatusEntry 1 }
|
||
|
|
|
||
|
|
tnNASMacAddr OBJECT-TYPE
|
||
|
|
SYNTAX MacAddress
|
||
|
|
MAX-ACCESS read-only
|
||
|
|
STATUS current
|
||
|
|
DESCRIPTION "The MAC address of the last supplicant/client.
|
||
|
|
"
|
||
|
|
::= { tnNASClientStatusEntry 2 }
|
||
|
|
|
||
|
|
tnNASVlanId OBJECT-TYPE
|
||
|
|
SYNTAX VlanId
|
||
|
|
MAX-ACCESS read-only
|
||
|
|
STATUS current
|
||
|
|
DESCRIPTION "The VLAN ID on which the last frame from the last supplicant/client was received.
|
||
|
|
"
|
||
|
|
::= { tnNASClientStatusEntry 3 }
|
||
|
|
|
||
|
|
tnNASIdentify OBJECT-TYPE
|
||
|
|
SYNTAX OCTET STRING
|
||
|
|
MAX-ACCESS read-only
|
||
|
|
STATUS current
|
||
|
|
DESCRIPTION "802.1X-based: The user name (supplicant identity) carried in the most recently received Response Identity EAPOL frame.
|
||
|
|
MAC-based: Not applicable.
|
||
|
|
"
|
||
|
|
::= { tnNASClientStatusEntry 4 }
|
||
|
|
|
||
|
|
-- ******************************************************************
|
||
|
|
-- NAS selected client backend server counter table
|
||
|
|
-- ******************************************************************
|
||
|
|
tnNASSelectedBackendServerCounterTable OBJECT-TYPE
|
||
|
|
SYNTAX SEQUENCE OF TnNASSelectedBackendServerCounterEntry
|
||
|
|
MAX-ACCESS not-accessible
|
||
|
|
STATUS current
|
||
|
|
DESCRIPTION
|
||
|
|
"This table contains the configuration of Selected backend server counter."
|
||
|
|
::= { tnNASSelectedBackendServerCounter 1 }
|
||
|
|
|
||
|
|
tnNASSelectedBackendServerCounterEntry OBJECT-TYPE
|
||
|
|
SYNTAX TnNASSelectedBackendServerCounterEntry
|
||
|
|
MAX-ACCESS not-accessible
|
||
|
|
STATUS current
|
||
|
|
DESCRIPTION
|
||
|
|
"This entry represents an Selected backend server counter.
|
||
|
|
"
|
||
|
|
INDEX { tnNASPortNum }
|
||
|
|
::= { tnNASSelectedBackendServerCounterTable 1 }
|
||
|
|
|
||
|
|
TnNASSelectedBackendServerCounterEntry ::= SEQUENCE {
|
||
|
|
tnNASRxAccessChallenges Gauge32,
|
||
|
|
tnNASRxOtherRequests Gauge32,
|
||
|
|
tnNASRxAuthSuccesses Gauge32,
|
||
|
|
tnNASRxAuthFailures Gauge32,
|
||
|
|
tnNASTxResponses Gauge32
|
||
|
|
}
|
||
|
|
|
||
|
|
tnNASRxAccessChallenges OBJECT-TYPE
|
||
|
|
SYNTAX Gauge32
|
||
|
|
MAX-ACCESS read-only
|
||
|
|
STATUS current
|
||
|
|
DESCRIPTION "802.1X-based: Counts the number of times that the switch receives the first request from the backend server
|
||
|
|
following the first response from the supplicant. Indicates that the backend server has communication with the switch.
|
||
|
|
MAC-based: Counts all Access Challenges received from the backend server for this port (left-most table) or client (right-most table).
|
||
|
|
"
|
||
|
|
::= { tnNASSelectedBackendServerCounterEntry 1 }
|
||
|
|
|
||
|
|
tnNASRxOtherRequests OBJECT-TYPE
|
||
|
|
SYNTAX Gauge32
|
||
|
|
MAX-ACCESS read-only
|
||
|
|
STATUS current
|
||
|
|
DESCRIPTION "802.1X-based: Counts the number of times that the switch sends an EAP Request packet following the first to the supplicant.
|
||
|
|
Indicates that the backend server chose an EAP-method.
|
||
|
|
MAC-based: Not applicable.
|
||
|
|
"
|
||
|
|
::= { tnNASSelectedBackendServerCounterEntry 2 }
|
||
|
|
|
||
|
|
tnNASRxAuthSuccesses OBJECT-TYPE
|
||
|
|
SYNTAX Gauge32
|
||
|
|
MAX-ACCESS read-only
|
||
|
|
STATUS current
|
||
|
|
DESCRIPTION "802.1X- and MAC-based: Counts the number of times that the switch receives a success indication.
|
||
|
|
Indicates that the supplicant/client has successfully authenticated to the backend server.
|
||
|
|
"
|
||
|
|
::= { tnNASSelectedBackendServerCounterEntry 3 }
|
||
|
|
|
||
|
|
tnNASRxAuthFailures OBJECT-TYPE
|
||
|
|
SYNTAX Gauge32
|
||
|
|
MAX-ACCESS read-only
|
||
|
|
STATUS current
|
||
|
|
DESCRIPTION "802.1X- and MAC-based: Counts the number of times that the switch receives a failure message.
|
||
|
|
This indicates that the supplicant/client has not authenticated to the backend server.
|
||
|
|
"
|
||
|
|
::= { tnNASSelectedBackendServerCounterEntry 4 }
|
||
|
|
|
||
|
|
tnNASTxResponses OBJECT-TYPE
|
||
|
|
SYNTAX Gauge32
|
||
|
|
MAX-ACCESS read-only
|
||
|
|
STATUS current
|
||
|
|
DESCRIPTION " 802.1X-based: Counts the number of times that the switch attempts to send a supplicant's first response packet to
|
||
|
|
the backend server. Indicates the switch attempted communication with the backend server. Possible retransmissions are
|
||
|
|
not counted.
|
||
|
|
MAC-based: Counts all the backend server packets sent from the switch towards the backend server for a given port
|
||
|
|
or client (right-most table). Possible retransmissions are not counted.
|
||
|
|
"
|
||
|
|
::= { tnNASSelectedBackendServerCounterEntry 5 }
|
||
|
|
|
||
|
|
-- ******************************************************************
|
||
|
|
-- NAS selected client EAPOL counter table
|
||
|
|
-- ******************************************************************
|
||
|
|
tnNASSelectedEapolCounterTable OBJECT-TYPE
|
||
|
|
SYNTAX SEQUENCE OF TnNASSelectedEapolCounterEntry
|
||
|
|
MAX-ACCESS not-accessible
|
||
|
|
STATUS current
|
||
|
|
DESCRIPTION
|
||
|
|
"This table contains the configuration of selected EAPOL counter."
|
||
|
|
::= { tnNASSelectedEapolCounter 1 }
|
||
|
|
|
||
|
|
tnNASSelectedEapolCounterEntry OBJECT-TYPE
|
||
|
|
SYNTAX TnNASSelectedEapolCounterEntry
|
||
|
|
MAX-ACCESS not-accessible
|
||
|
|
STATUS current
|
||
|
|
DESCRIPTION
|
||
|
|
"This entry represents a selected EAPOL counter.
|
||
|
|
"
|
||
|
|
INDEX { tnNASPortNum }
|
||
|
|
::= { tnNASSelectedEapolCounterTable 1 }
|
||
|
|
|
||
|
|
TnNASSelectedEapolCounterEntry ::= SEQUENCE {
|
||
|
|
tnNASRxTotal Gauge32,
|
||
|
|
tnNASRxResponseId Gauge32,
|
||
|
|
tnNASRxResponses Gauge32,
|
||
|
|
tnNASRxStart Gauge32,
|
||
|
|
tnNASRxLogoff Gauge32,
|
||
|
|
tnNASRxInvalidType Gauge32,
|
||
|
|
tnNASRxInvalidLength Gauge32,
|
||
|
|
tnNASTxTotal Gauge32,
|
||
|
|
tnNASTxRequestId Gauge32,
|
||
|
|
tnNASTxRequests Gauge32
|
||
|
|
}
|
||
|
|
|
||
|
|
tnNASRxTotal OBJECT-TYPE
|
||
|
|
SYNTAX Gauge32
|
||
|
|
MAX-ACCESS read-only
|
||
|
|
STATUS current
|
||
|
|
DESCRIPTION "The number of valid EAPOL frames of any type that have been received by the switch.
|
||
|
|
"
|
||
|
|
::= { tnNASSelectedEapolCounterEntry 1 }
|
||
|
|
|
||
|
|
tnNASRxResponseId OBJECT-TYPE
|
||
|
|
SYNTAX Gauge32
|
||
|
|
MAX-ACCESS read-only
|
||
|
|
STATUS current
|
||
|
|
DESCRIPTION "The number of valid EAPOL Response Identity frames that have been received by the switch.
|
||
|
|
"
|
||
|
|
::= { tnNASSelectedEapolCounterEntry 2 }
|
||
|
|
|
||
|
|
tnNASRxResponses OBJECT-TYPE
|
||
|
|
SYNTAX Gauge32
|
||
|
|
MAX-ACCESS read-only
|
||
|
|
STATUS current
|
||
|
|
DESCRIPTION "The number of valid EAPOL response frames (other than Response Identity frames) that have been received by the switch.
|
||
|
|
"
|
||
|
|
::= { tnNASSelectedEapolCounterEntry 3 }
|
||
|
|
|
||
|
|
tnNASRxStart OBJECT-TYPE
|
||
|
|
SYNTAX Gauge32
|
||
|
|
MAX-ACCESS read-only
|
||
|
|
STATUS current
|
||
|
|
DESCRIPTION "The number of EAPOL Start frames that have been received by the switch.
|
||
|
|
"
|
||
|
|
::= { tnNASSelectedEapolCounterEntry 4 }
|
||
|
|
|
||
|
|
tnNASRxLogoff OBJECT-TYPE
|
||
|
|
SYNTAX Gauge32
|
||
|
|
MAX-ACCESS read-only
|
||
|
|
STATUS current
|
||
|
|
DESCRIPTION "The number of valid EAPOL Logoff frames that have been received by the switch.
|
||
|
|
"
|
||
|
|
::= { tnNASSelectedEapolCounterEntry 5 }
|
||
|
|
|
||
|
|
tnNASRxInvalidType OBJECT-TYPE
|
||
|
|
SYNTAX Gauge32
|
||
|
|
MAX-ACCESS read-only
|
||
|
|
STATUS current
|
||
|
|
DESCRIPTION "The number of EAPOL frames that have been received by the switch in which the frame type is not recognized.
|
||
|
|
"
|
||
|
|
::= { tnNASSelectedEapolCounterEntry 6 }
|
||
|
|
|
||
|
|
tnNASRxInvalidLength OBJECT-TYPE
|
||
|
|
SYNTAX Gauge32
|
||
|
|
MAX-ACCESS read-only
|
||
|
|
STATUS current
|
||
|
|
DESCRIPTION "The number of EAPOL frames that have been received by the switch in which the Packet Body Length field is invalid.
|
||
|
|
"
|
||
|
|
::= { tnNASSelectedEapolCounterEntry 7 }
|
||
|
|
|
||
|
|
tnNASTxTotal OBJECT-TYPE
|
||
|
|
SYNTAX Gauge32
|
||
|
|
MAX-ACCESS read-only
|
||
|
|
STATUS current
|
||
|
|
DESCRIPTION "The number of EAPOL frames of any type that have been transmitted by the switch.
|
||
|
|
"
|
||
|
|
::= { tnNASSelectedEapolCounterEntry 8 }
|
||
|
|
|
||
|
|
tnNASTxRequestId OBJECT-TYPE
|
||
|
|
SYNTAX Gauge32
|
||
|
|
MAX-ACCESS read-only
|
||
|
|
STATUS current
|
||
|
|
DESCRIPTION "The number of EAPOL Request Identity frames that have been transmitted by the switch.
|
||
|
|
"
|
||
|
|
::= { tnNASSelectedEapolCounterEntry 9 }
|
||
|
|
|
||
|
|
tnNASTxRequests OBJECT-TYPE
|
||
|
|
SYNTAX Gauge32
|
||
|
|
MAX-ACCESS read-only
|
||
|
|
STATUS current
|
||
|
|
DESCRIPTION "The number of valid EAPOL Request frames (other than Request Identity frames) that have been transmitted by the switch.
|
||
|
|
"
|
||
|
|
::= { tnNASSelectedEapolCounterEntry 10 }
|
||
|
|
|
||
|
|
-- ******************************************************************
|
||
|
|
-- NAS attached client/supplication status table
|
||
|
|
-- ******************************************************************
|
||
|
|
tnNASAttachedClientStatusTable OBJECT-TYPE
|
||
|
|
SYNTAX SEQUENCE OF TnNASAttachedClientStatusEntry
|
||
|
|
MAX-ACCESS not-accessible
|
||
|
|
STATUS current
|
||
|
|
DESCRIPTION
|
||
|
|
"This table contains the configuration of attached client status."
|
||
|
|
::= { tnNASAttachedClientStatus 1 }
|
||
|
|
|
||
|
|
tnNASAttachedClientStatusEntry OBJECT-TYPE
|
||
|
|
SYNTAX TnNASAttachedClientStatusEntry
|
||
|
|
MAX-ACCESS not-accessible
|
||
|
|
STATUS current
|
||
|
|
DESCRIPTION
|
||
|
|
"This entry represents an attached client status.
|
||
|
|
"
|
||
|
|
INDEX { tnNASPortNum, tnNASAttachedNum }
|
||
|
|
::= { tnNASAttachedClientStatusTable 1 }
|
||
|
|
|
||
|
|
TnNASAttachedClientStatusEntry ::= SEQUENCE {
|
||
|
|
tnNASAttachedNum Unsigned32,
|
||
|
|
tnNASAttachedIdentify OCTET STRING,
|
||
|
|
tnNASMacAddress MacAddress,
|
||
|
|
tnNASAttachedVlanId VlanId,
|
||
|
|
tnNASState INTEGER,
|
||
|
|
tnNASLastAuthentication OCTET STRING,
|
||
|
|
tnNASSelected INTEGER
|
||
|
|
}
|
||
|
|
|
||
|
|
tnNASAttachedNum OBJECT-TYPE
|
||
|
|
SYNTAX Unsigned32
|
||
|
|
MAX-ACCESS not-accessible
|
||
|
|
STATUS current
|
||
|
|
DESCRIPTION "The number of attached clients/supplications.
|
||
|
|
"
|
||
|
|
::= { tnNASAttachedClientStatusEntry 1 }
|
||
|
|
|
||
|
|
tnNASAttachedIdentify OBJECT-TYPE
|
||
|
|
SYNTAX OCTET STRING
|
||
|
|
MAX-ACCESS read-only
|
||
|
|
STATUS current
|
||
|
|
DESCRIPTION "Shows the identity of the supplicant, as received in the Response Identity EAPOL frame.
|
||
|
|
If no supplicants are attached, it shows No supplicants attached.
|
||
|
|
This is not available for MAC-based Auth..
|
||
|
|
"
|
||
|
|
::= { tnNASAttachedClientStatusEntry 2 }
|
||
|
|
|
||
|
|
tnNASMacAddress OBJECT-TYPE
|
||
|
|
SYNTAX MacAddress
|
||
|
|
MAX-ACCESS read-only
|
||
|
|
STATUS current
|
||
|
|
DESCRIPTION "For Multi 802.1X, this column holds the MAC address of the attached supplicant.
|
||
|
|
For MAC-based Auth., this column holds the MAC address of the attached client.
|
||
|
|
If no clients are attached, it shows No clients attached.
|
||
|
|
"
|
||
|
|
::= { tnNASAttachedClientStatusEntry 3 }
|
||
|
|
|
||
|
|
tnNASAttachedVlanId OBJECT-TYPE
|
||
|
|
SYNTAX VlanId
|
||
|
|
MAX-ACCESS read-only
|
||
|
|
STATUS current
|
||
|
|
DESCRIPTION "This column holds the VLAN ID that the corresponding client is currently secured through the Port Security module.
|
||
|
|
"
|
||
|
|
::= { tnNASAttachedClientStatusEntry 4 }
|
||
|
|
|
||
|
|
tnNASState OBJECT-TYPE
|
||
|
|
SYNTAX INTEGER {
|
||
|
|
linkDown (0),
|
||
|
|
authorized(1),
|
||
|
|
unauthorized (2),
|
||
|
|
globallyDisabled (3)
|
||
|
|
}
|
||
|
|
MAX-ACCESS read-only
|
||
|
|
STATUS current
|
||
|
|
DESCRIPTION "The client can either be authenticated or unauthenticated. In the authenticated state, it is allowed to forward frames
|
||
|
|
on the port, and in the unauthenticated state, it is blocked. As long as the backend server hasn't successfully
|
||
|
|
authenticated the client, it is unauthenticated. If an authentication fails for one or the other reason,
|
||
|
|
the client will remain in the unauthenticated state for Hold Time seconds.
|
||
|
|
"
|
||
|
|
::= { tnNASAttachedClientStatusEntry 5 }
|
||
|
|
|
||
|
|
tnNASLastAuthentication OBJECT-TYPE
|
||
|
|
SYNTAX OCTET STRING
|
||
|
|
MAX-ACCESS read-only
|
||
|
|
STATUS current
|
||
|
|
DESCRIPTION "Shows the date and time of the last authentication of the client (successful as well as unsuccessful).
|
||
|
|
"
|
||
|
|
::= { tnNASAttachedClientStatusEntry 6 }
|
||
|
|
|
||
|
|
tnNASSelected OBJECT-TYPE
|
||
|
|
SYNTAX INTEGER {
|
||
|
|
unselected(0),
|
||
|
|
selected(1)
|
||
|
|
}
|
||
|
|
MAX-ACCESS read-write
|
||
|
|
STATUS current
|
||
|
|
DESCRIPTION "select specific attached client.
|
||
|
|
"
|
||
|
|
::= { tnNASAttachedClientStatusEntry 7 }
|
||
|
|
|
||
|
|
-- ******************************************************************
|
||
|
|
-- NAS clear counter table
|
||
|
|
-- ******************************************************************
|
||
|
|
tnNASClearCounterTable OBJECT-TYPE
|
||
|
|
SYNTAX SEQUENCE OF TnNASClearCounterEntry
|
||
|
|
MAX-ACCESS not-accessible
|
||
|
|
STATUS current
|
||
|
|
DESCRIPTION
|
||
|
|
"This table contains the configuration of clearing counter."
|
||
|
|
::= { tnNASClearCounter 1 }
|
||
|
|
|
||
|
|
tnNASClearCounterEntry OBJECT-TYPE
|
||
|
|
SYNTAX TnNASClearCounterEntry
|
||
|
|
MAX-ACCESS not-accessible
|
||
|
|
STATUS current
|
||
|
|
DESCRIPTION
|
||
|
|
"This entry represents a clear counter.
|
||
|
|
"
|
||
|
|
INDEX { tnNASPortNum }
|
||
|
|
::= { tnNASClearCounterTable 1 }
|
||
|
|
|
||
|
|
TnNASClearCounterEntry ::= SEQUENCE {
|
||
|
|
tnNASClear INTEGER
|
||
|
|
}
|
||
|
|
|
||
|
|
tnNASClear OBJECT-TYPE
|
||
|
|
SYNTAX INTEGER {
|
||
|
|
unclear(0),
|
||
|
|
clear(1)
|
||
|
|
}
|
||
|
|
MAX-ACCESS read-write
|
||
|
|
STATUS current
|
||
|
|
DESCRIPTION "The action of clearing counter.
|
||
|
|
"
|
||
|
|
::= { tnNASClearCounterEntry 1 }
|
||
|
|
END
|