ALCATEL-IND1-DOT1X-MIB DEFINITIONS ::= BEGIN IMPORTS MODULE-IDENTITY, OBJECT-IDENTITY, OBJECT-TYPE, Integer32, IpAddress FROM SNMPv2-SMI DisplayString, MacAddress, TimeStamp, TEXTUAL-CONVENTION, TruthValue FROM SNMPv2-TC softentIND1Dot1X FROM ALCATEL-IND1-BASE MODULE-COMPLIANCE, OBJECT-GROUP FROM SNMPv2-CONF InterfaceIndex, InterfaceIndexOrZero FROM IF-MIB SnmpAdminString FROM SNMP-FRAMEWORK-MIB dot1xPaePortNumber FROM IEEE8021-PAE-MIB ; alcatelIND1Dot1XMIB MODULE-IDENTITY LAST-UPDATED "201002100000Z" ORGANIZATION "Alcatel-Lucent" CONTACT-INFO "Please consult with Customer Service to ensure the most appropriate version of this document is used with the products in question: Alcatel-Lucent, Enterprise Solutions Division (Formerly Alcatel Internetworking, Incorporated) 26801 West Agoura Road Agoura Hills, CA 91301-5122 United States Of America Telephone: North America +1 800 995 2696 Latin America +1 877 919 9526 Europe +31 23 556 0100 Asia +65 394 7933 All Other +1 818 878 4507 Electronic Mail: support@ind.alcatel.com World Wide Web: http://alcatel-lucent.com/wps/portal/enterprise File Transfer Protocol: ftp://ftp.ind.alcatel.com/pub/products/mibs" DESCRIPTION "This module describes an authoritative enterprise-specific Simple Network Management Protocol (SNMP) Management Information Base (MIB): The Port Access Entity module for managing 802.1X for the Birds Of Prey Product Line The right to make changes in specification and other information contained in this document without prior notice is reserved. No liability shall be assumed for any incidental, indirect, special, or consequential damages whatsoever arising from or related to this document or the information contained herein. Vendors, end-users, and other interested parties are granted non-exclusive license to use this specification in connection with management of the products for which it is intended to be used. Copyright (C) 1995-2007 Alcatel-Lucent ALL RIGHTS RESERVED WORLDWIDE" REVISION "201002100000Z" DESCRIPTION "Addressing maximum number character supported in URL and DNS mibs." REVISION "200704030000Z" DESCRIPTION "Addressing discrepancies with Alcatel Standard." ::= { softentIND1Dot1X 1} alaIND1Dot1XMIBObjects OBJECT-IDENTITY STATUS current DESCRIPTION "Branch For 802.1X Subsystem Managed Objects." ::= { alcatelIND1Dot1XMIB 1 } alaIND1Dot1XMIBConformance OBJECT-IDENTITY STATUS current DESCRIPTION "Branch For 802.1X Subsystem Conformance Information." ::= { alcatelIND1Dot1XMIB 2 } alaIND1Dot1XMIBGroups OBJECT-IDENTITY STATUS current DESCRIPTION "Branch For 802.1X Subsystem Units Of Conformance." ::= { alaIND1Dot1XMIBConformance 1 } ALADot1xClassificationPolicyType ::= TEXTUAL-CONVENTION STATUS current DESCRIPTION "This policy type is the classification policy used to classify a device onto the system. " SYNTAX INTEGER { dotXAuthentication (0), macAuthentication (1), groupMobilityRules (2), vlanId (3), defaultVlan (4), block (5), internalUseOnlyA (6), internalUseOnlyB (7), internalUseOnlyC (8), captivePortalAuthentication (9), captivePortalGroupMobility (10), captivePortalDefaultVlan (11), captivePortalVlanId (12), captivePortalBlock (13), captivePortalUnknown (14), captivePortalUnpAuthSrv (15), captivePortalUnpUsrCfg (16), captivePortalUnpAAArule (17), authServerUNP (18), userConfigUNP (19), aaaRuleUNP (20), aaaAuthSvrDownUNP (21), aaaAuthSvrDownBlock (22) } ALADot1xAuthenticationType ::= TEXTUAL-CONVENTION STATUS current DESCRIPTION "The type of authentication used" SYNTAX INTEGER { noAuthentication (0), dotXAuthentication (1), macAuthentication (2), captivePortal (3) } ALADot1xAuthenticationResult ::= TEXTUAL-CONVENTION STATUS current DESCRIPTION "The result of the authentication. If the ALADot1xAuthenticationType of this device is noAuthentication then this object will return notApplicable. If the authentication has not completed then this object will return inProgress." SYNTAX INTEGER { notApplicable (0), inProgress (1), success (2), fail (3) } ALADot1xMacLearntState ::= TEXTUAL-CONVENTION STATUS current DESCRIPTION "The state of MAC address in the system" SYNTAX INTEGER { bridging (0), -- Normal access to the network. filtering (1), -- Access to the network blocked. hicInProgress (2), -- Host Integrity Check in progress. qmrInProgress (3) -- QMR in progress. } ALADot1xMacQueryType ::= TEXTUAL-CONVENTION STATUS current DESCRIPTION "The query type of MAC address in the system. This query MAC address type is used to specify which type of MAC address to query from the alaDot1xDeviceStatusTable." SYNTAX INTEGER { all (0), -- All devices on the port. supplicant (1), -- All supplicants on the port. nonSupplicant (2), -- All non-supplicant on the port. captivePortal (3) -- All devices on the port that used Captive Portal. } ALADot1xDeviceType ::= TEXTUAL-CONVENTION STATUS current DESCRIPTION "The type of device. Either supplicant or non-supplicant." SYNTAX INTEGER { supplicant (1), nonSupplicant (2) } ---------------------------------------------------------- ---------- Logical Port table ---------------------------- ---------------------------------------------------------- alaDot1xPortTable OBJECT-TYPE SYNTAX SEQUENCE OF AlaDot1xPortEntry MAX-ACCESS not-accessible STATUS deprecated DESCRIPTION "A table of system level information for each port supported by the Port Access Entity. An entry appears in this table for each port of this system." REFERENCE "9.6.1" ::= { alaIND1Dot1XMIBObjects 1 } alaDot1xPortEntry OBJECT-TYPE SYNTAX AlaDot1xPortEntry MAX-ACCESS not-accessible STATUS deprecated DESCRIPTION "TP DO: Add description here " INDEX { dot1xPaePortNumber } ::= { alaDot1xPortTable 1 } AlaDot1xPortEntry ::= SEQUENCE { alaDot1xPortSlotNumber INTEGER, alaDot1xPortPortNumber INTEGER, alaDot1xPortMACAddress MacAddress, alaDot1xPortVlan INTEGER, alaDot1xPortProtocol INTEGER, alaDot1xPortUserName DisplayString, alaDot1xPortState INTEGER, alaDot1xSupplicantPolicyUsed ALADot1xClassificationPolicyType } alaDot1xPortSlotNumber OBJECT-TYPE SYNTAX INTEGER (1..16) MAX-ACCESS read-only STATUS deprecated DESCRIPTION "The slot that the logical port represented by the dot1xPaePortNumber resides." ::= { alaDot1xPortEntry 1 } alaDot1xPortPortNumber OBJECT-TYPE SYNTAX INTEGER (1..48) MAX-ACCESS read-only STATUS deprecated DESCRIPTION "The user port that the logical port represented by the dot1xPaePortNumber resides." ::= { alaDot1xPortEntry 2 } alaDot1xPortMACAddress OBJECT-TYPE SYNTAX MacAddress MAX-ACCESS read-only STATUS deprecated DESCRIPTION "The MAC address of the supplicant that along with the slot and port uniquely form the logical port represented by the dot1xPaePortNumber." ::= { alaDot1xPortEntry 3 } alaDot1xPortVlan OBJECT-TYPE SYNTAX INTEGER (1..4096) MAX-ACCESS read-only STATUS deprecated DESCRIPTION "The vlan that the supplicant is authorized to access." ::= { alaDot1xPortEntry 4 } alaDot1xPortProtocol OBJECT-TYPE SYNTAX INTEGER (1..6) MAX-ACCESS read-only STATUS deprecated DESCRIPTION "The protocol that is authorized for the supplicant. This is used in conjunction with the alaDot1xPortVlan object. Supplicant can be authorized to different vlans for different protocol." ::= { alaDot1xPortEntry 5 } alaDot1xPortUserName OBJECT-TYPE SYNTAX DisplayString MAX-ACCESS read-only STATUS deprecated DESCRIPTION "The user name of the supplicant used for authentication." ::= { alaDot1xPortEntry 6 } alaDot1xPortState OBJECT-TYPE SYNTAX INTEGER{ initialize (1), disconnected (2), connecting (3), authenticating (4), authenticated (5), aborting (6), held (7), forceAuthenticated (8), forceUnauthenticated (9), authenticatedLocally (10) } MAX-ACCESS read-only STATUS deprecated DESCRIPTION "The State of the port." ::= { alaDot1xPortEntry 7 } alaDot1xSupplicantPolicyUsed OBJECT-TYPE SYNTAX ALADot1xClassificationPolicyType MAX-ACCESS read-only STATUS deprecated DESCRIPTION "Classification Policy under which the 802.1x supplicant is learned." ::= { alaDot1xPortEntry 8 } ---------------------------------------------------------- ----------Dot1x MAC table -------------------------------- ---------------------------------------------------------- alaDot1xMacTable OBJECT-TYPE SYNTAX SEQUENCE OF AlaDot1xMacEntry MAX-ACCESS not-accessible STATUS current DESCRIPTION "Provide the list of users currently authenticated into the switch for bridging purpose." ::= { alaIND1Dot1XMIBObjects 4 } alaDot1xMacEntry OBJECT-TYPE SYNTAX AlaDot1xMacEntry MAX-ACCESS not-accessible STATUS current DESCRIPTION "An entry in the AaaAuthenticatedUserTable." INDEX {alaDot1xMACAddress} ::= { alaDot1xMacTable 1 } AlaDot1xMacEntry ::= SEQUENCE { alaDot1xMACAddress MacAddress, alaDot1xMacIfIndex InterfaceIndex, alaDot1xMacSlotNumber Integer32, alaDot1xMacPortNumber Integer32, alaDot1xMacVlan Integer32, alaDot1xMacProtocol Integer32, alaDot1xMacUserName DisplayString, alaDot1xMacState INTEGER, alaDot1xMacSupplicantPolicyUsed ALADot1xClassificationPolicyType } alaDot1xMACAddress OBJECT-TYPE SYNTAX MacAddress MAX-ACCESS not-accessible STATUS current DESCRIPTION "The MAC address of the supplicant that along with the slot and port uniquely form the logical port represented by the dot1xPaePortNumber." ::= { alaDot1xMacEntry 1 } alaDot1xMacIfIndex OBJECT-TYPE SYNTAX InterfaceIndex MAX-ACCESS read-only STATUS current DESCRIPTION "Interface index in which alaDot1xMACAddress was learned." ::= { alaDot1xMacEntry 2 } alaDot1xMacSlotNumber OBJECT-TYPE SYNTAX Integer32 (1..16) MAX-ACCESS read-only STATUS current DESCRIPTION "The slot in which alaDot1xMACAddress was learned." ::= { alaDot1xMacEntry 3 } alaDot1xMacPortNumber OBJECT-TYPE SYNTAX Integer32 (1..48) MAX-ACCESS read-only STATUS current DESCRIPTION "The user port in which alaDot1xMACAddress was learned." ::= { alaDot1xMacEntry 4 } alaDot1xMacVlan OBJECT-TYPE SYNTAX Integer32 (1..4096) MAX-ACCESS read-only STATUS current DESCRIPTION "The vlan that the supplicant is authorized to access." ::= { alaDot1xMacEntry 5 } alaDot1xMacProtocol OBJECT-TYPE SYNTAX Integer32 (1..6) MAX-ACCESS read-only STATUS current DESCRIPTION "The protocol that is authorized for the supplicant. This is used in conjunction with the alaDot1xMacVlan object. Supplicant can be authorized to different vlans for different protocol." ::= { alaDot1xMacEntry 6 } alaDot1xMacUserName OBJECT-TYPE SYNTAX DisplayString (SIZE (0..64)) MAX-ACCESS read-only STATUS current DESCRIPTION "The user name of the supplicant used for authentication." ::= { alaDot1xMacEntry 7 } alaDot1xMacState OBJECT-TYPE SYNTAX INTEGER{ initialize (1), disconnected (2), connecting (3), authenticating (4), authenticated (5), aborting (6), held (7), forceAuthenticated (8), forceUnauthenticated (9), authenticatedLocally (10) } MAX-ACCESS read-only STATUS current DESCRIPTION "The State of the port in which the current mac-address was learned." ::= { alaDot1xMacEntry 8 } alaDot1xMacSupplicantPolicyUsed OBJECT-TYPE SYNTAX ALADot1xClassificationPolicyType MAX-ACCESS read-only STATUS current DESCRIPTION "Classification Policy under which the 802.1x supplicant is learned." ::= { alaDot1xMacEntry 9 } ---------------------------------------------------------- ---------------------------------------------------------- -------------- Reverse lookup table ---------------------- ---------------------------------------------------------- alaDot1xPortLookupTable OBJECT-TYPE SYNTAX SEQUENCE OF AlaDot1xPortLookupEntry MAX-ACCESS not-accessible STATUS current DESCRIPTION "A table of which allows to find the logical port number given the physical slot/port/MAC. An entry appears in this table for each logical port of this system." ::= { alaIND1Dot1XMIBObjects 2 } alaDot1xPortLookupEntry OBJECT-TYPE SYNTAX AlaDot1xPortLookupEntry MAX-ACCESS not-accessible STATUS current DESCRIPTION "The translation table to look up the dot1xPaePortNumber." INDEX { alaDot1xPortLookupSlotNumber, alaDot1xPortLookupPortNumber, alaDot1xPortLookupMACAddress } ::= { alaDot1xPortLookupTable 1 } AlaDot1xPortLookupEntry ::= SEQUENCE { alaDot1xPortLookupSlotNumber INTEGER, alaDot1xPortLookupPortNumber INTEGER, alaDot1xPortLookupMACAddress MacAddress, alaDot1xPortLookupInterfaceNumber InterfaceIndex } alaDot1xPortLookupSlotNumber OBJECT-TYPE SYNTAX INTEGER (1..16) MAX-ACCESS read-only STATUS current DESCRIPTION "The slot that the logical port represented by the dot1xPaePortNumber resides." ::= { alaDot1xPortLookupEntry 1 } alaDot1xPortLookupPortNumber OBJECT-TYPE SYNTAX INTEGER (1..48) MAX-ACCESS read-only STATUS current DESCRIPTION "The physical port that the logical port represented by the dot1xPaePortNumber resides." ::= { alaDot1xPortLookupEntry 2 } alaDot1xPortLookupMACAddress OBJECT-TYPE SYNTAX MacAddress MAX-ACCESS read-only STATUS current DESCRIPTION "The MAC address of the supplicant that along with the slot and port uniquely form the logical port represented by the dot1xPaePortNumber." ::= { alaDot1xPortLookupEntry 3 } alaDot1xPortLookupInterfaceNumber OBJECT-TYPE SYNTAX InterfaceIndex MAX-ACCESS read-only STATUS current DESCRIPTION "The ifIndex that represnets the slot and port where the dot1xPaePortNumber resides." ::= { alaDot1xPortLookupEntry 4 } -- xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx -- Guest VLAN Configuration table - WILL NEVER BE SUPPORTED -- but keep the OID reserved -- xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx -- alaDot1xGuestVlanConfTable OBJECT-TYPE -- SYNTAX SEQUENCE OF AlaDot1xGuestVlanConfEntry -- MAX-ACCESS not-accessible -- STATUS current -- DESCRIPTION -- "A table of guest vlan ID supported by the Port Access Entity. -- An entry appears in this table for each port of this system." -- ::= { alaIND1Dot1XMIBObjects 3 } -- xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx -- Non 802.1x supplicant table -- xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx alaDot1xNonSupplicantTable OBJECT-TYPE SYNTAX SEQUENCE OF AlaDot1xNonSupplicantEntry MAX-ACCESS not-accessible STATUS current DESCRIPTION "A table of non 802.1x supplicants learned on 802.1x authenticated ports." ::= { alaIND1Dot1XMIBObjects 5 } alaDot1xNonSupplicantEntry OBJECT-TYPE SYNTAX AlaDot1xNonSupplicantEntry MAX-ACCESS not-accessible STATUS current DESCRIPTION "Non 802.1x supplicant information." INDEX { alaDot1xNonSupplicantIntfNum, alaDot1xNonSupplicantMACAddress } ::= { alaDot1xNonSupplicantTable 1 } AlaDot1xNonSupplicantEntry ::= SEQUENCE { alaDot1xNonSupplicantIntfNum InterfaceIndex, alaDot1xNonSupplicantMACAddress MacAddress, alaDot1xNonSupplicantVlanID INTEGER, alaDot1xNonSupplicantPolicyUsed ALADot1xClassificationPolicyType, alaDot1xAuthenticationStatus INTEGER } alaDot1xNonSupplicantIntfNum OBJECT-TYPE SYNTAX InterfaceIndex MAX-ACCESS read-only STATUS current DESCRIPTION "The ifIndex represneting the slot and port where the non 802.1x supplicant is learned." ::= { alaDot1xNonSupplicantEntry 1 } alaDot1xNonSupplicantMACAddress OBJECT-TYPE SYNTAX MacAddress MAX-ACCESS read-only STATUS current DESCRIPTION "The MAC address of the non 802.1x supplicant." ::= { alaDot1xNonSupplicantEntry 2 } alaDot1xNonSupplicantVlanID OBJECT-TYPE SYNTAX INTEGER (1..4096) MAX-ACCESS read-only STATUS current DESCRIPTION "The Id of the VLAN on which the non 802.1x supplicant is learned." ::= { alaDot1xNonSupplicantEntry 3 } alaDot1xNonSupplicantPolicyUsed OBJECT-TYPE SYNTAX ALADot1xClassificationPolicyType MAX-ACCESS read-only STATUS current DESCRIPTION "Classification policy under which the non 802.1x supplicant is learned." ::= { alaDot1xNonSupplicantEntry 4 } alaDot1xAuthenticationStatus OBJECT-TYPE SYNTAX INTEGER { idle (1), inProgress (2), authenticated (3), failed (4), failedTimeout (5), failedNoServer (6), failedNoResources (7) } MAX-ACCESS read-only STATUS current DESCRIPTION "Authentication status of the non 802.1x supplicant." ::= { alaDot1xNonSupplicantEntry 5 } -- alaDot1xNonSuppPolicy -- alaDot1xSuppPolicy -- xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx -- Authentication Policy Configuration table -- xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx alaDot1xAuthPolicyTable OBJECT-TYPE SYNTAX SEQUENCE OF AlaDot1xAuthPolicyEntry MAX-ACCESS not-accessible STATUS current DESCRIPTION "A table of supplicant and non supplicant device classification policies as they are configured on 802.1x authenticated ports." ::= { alaIND1Dot1XMIBObjects 6 } alaDot1xAuthPolicyEntry OBJECT-TYPE SYNTAX AlaDot1xAuthPolicyEntry MAX-ACCESS not-accessible STATUS current DESCRIPTION "Device classification policies information." INDEX { alaDot1xAuthPolicyIntfNumber } ::= { alaDot1xAuthPolicyTable 1 } AlaDot1xAuthPolicyEntry ::= SEQUENCE { alaDot1xAuthPolicyIntfNumber InterfaceIndex, alaDot1xNonSuppPolicy DisplayString, alaDot1xSuppPolicy DisplayString, alaDot1xPollingCnt Integer32, alaDot1xCaptivePortalPolicy DisplayString, alaDot1xCPortalSessionLimit Integer32, alaDot1xCPortalRetryCnt Integer32 } alaDot1xAuthPolicyIntfNumber OBJECT-TYPE SYNTAX InterfaceIndex MAX-ACCESS not-accessible STATUS current DESCRIPTION "The ifIndex that represnets the slot and port where the device classification policies are configured." ::= { alaDot1xAuthPolicyEntry 1 } alaDot1xNonSuppPolicy OBJECT-TYPE SYNTAX DisplayString (SIZE (0..127)) MAX-ACCESS read-write STATUS current DESCRIPTION "MAC based authentication -> M Group Mobility -> G VLAN ID -> Default VLAN -> D Block -> B Fail -> , Captive Portal -> C Examples: MGD,GB. The default value is B (block). If the string size is zero (0), the default value is used." ::= { alaDot1xAuthPolicyEntry 2 } alaDot1xSuppPolicy OBJECT-TYPE SYNTAX DisplayString (SIZE (0..127)) MAX-ACCESS read-write STATUS current DESCRIPTION "802.1x authentication -> X Group Mobility -> G VLAN ID -> Default VLAN -> D Block -> B Fail -> , Captive Portal -> C Default value: XGD,B. If the string size is zero (0), the default value is used." ::= { alaDot1xAuthPolicyEntry 3 } alaDot1xPollingCnt OBJECT-TYPE SYNTAX Integer32 (0..99) MAX-ACCESS read-write STATUS current DESCRIPTION "Number of retries to poll the end station for EAPoL frame before classifying the end station with group mobility or guest vlan ID configured. If the value is set to zero (0), it indicates a special case where the port will ignore any EAP frame from the client and this will force all devices to the non-supplicant policy for classification." ::= { alaDot1xAuthPolicyEntry 4 } alaDot1xCaptivePortalPolicy OBJECT-TYPE SYNTAX DisplayString (SIZE (0..127)) MAX-ACCESS read-write STATUS current DESCRIPTION "Web authentication -> W Group Mobility -> G VLAN ID -> Default VLAN -> D Block -> B Fail -> , Default value: XGD,B, if string size is zero, the default value is used." ::= { alaDot1xAuthPolicyEntry 5 } alaDot1xCPortalSessionLimit OBJECT-TYPE SYNTAX Integer32 (0..999) MAX-ACCESS read-write STATUS current DESCRIPTION "Captive Portal Session limit is the interval that a Captive Portal user can login. User is to be logged off after the session limit. If the session limit is set to zero (0), it means the session is unlimited, user will not be automatically logged off." ::= { alaDot1xAuthPolicyEntry 6 } alaDot1xCPortalRetryCnt OBJECT-TYPE SYNTAX Integer32 (0..999) MAX-ACCESS read-write STATUS current DESCRIPTION "Number of retries for the Captive Portal user to provide the user credential before the software will classify the user to the failed policy according the the alaDot1xCaptivePortalPolicy." ::= { alaDot1xAuthPolicyEntry 7 } alaDot1xCportalConfig OBJECT IDENTIFIER ::= { alaIND1Dot1XMIBObjects 7 } alaDot1xCPortalIpAddress OBJECT-TYPE SYNTAX IpAddress MAX-ACCESS read-write STATUS current DESCRIPTION "The factory default Captive Portal IP address is 10.123.0.1. If the 10.123.0.0 subnet is already in use, user can change the Captive Portal IP address to another 10.x.0.0 subnet. Only the second octet of the Captive Portal IP address can be changed." ::= { alaDot1xCportalConfig 1 } alaDot1xCPortalProxyURL OBJECT-TYPE SYNTAX SnmpAdminString (SIZE (0..64)) MAX-ACCESS read-write STATUS current DESCRIPTION "The factory default for Captive Portal working with proxy server url has the key word proxy. If the user's proxy server url does not have the key work proxy, user can use this object to specify the proxy server url. If none is specified this object will return the default value - proxy." ::= { alaDot1xCportalConfig 2 } alaDot1xCPortalPostAuthSuccessRedirectURL OBJECT-TYPE SYNTAX SnmpAdminString (SIZE (0..63)) MAX-ACCESS read-write STATUS current DESCRIPTION "Captive Portal's Redirect URL upon successful authentication." ::= { alaDot1xCportalConfig 3 } alaDot1xCPortalPostAuthFailRedirectURL OBJECT-TYPE SYNTAX SnmpAdminString (SIZE (0..63)) MAX-ACCESS read-write STATUS current DESCRIPTION "Captive Portal's Redirect URL upon failed authentication." ::= { alaDot1xCportalConfig 4 } alaDot1xCPortalDNSKeyword1 OBJECT-TYPE SYNTAX SnmpAdminString (SIZE (0..63)) MAX-ACCESS read-write STATUS current DESCRIPTION "Captive Portal's DNS keyword string." ::= { alaDot1xCportalConfig 5 } alaDot1xCPortalDNSKeyword2 OBJECT-TYPE SYNTAX SnmpAdminString (SIZE (0..63)) MAX-ACCESS read-write STATUS current DESCRIPTION "Captive Portal's DNS keyword string." ::= { alaDot1xCportalConfig 6 } alaDot1xCPortalDNSKeyword3 OBJECT-TYPE SYNTAX SnmpAdminString (SIZE (0..63)) MAX-ACCESS read-write STATUS current DESCRIPTION "Captive Portal's DNS keyword string." ::= { alaDot1xCportalConfig 7 } alaDot1xCPortalDNSKeyword4 OBJECT-TYPE SYNTAX SnmpAdminString (SIZE (0..63)) MAX-ACCESS read-write STATUS current DESCRIPTION "Captive Portal's DNS keyword string." ::= { alaDot1xCportalConfig 8 } ---------------------------------------------------------- ---------- Device Status Table ---------------------------- ---------------------------------------------------------- alaDot1xDeviceStatusTable OBJECT-TYPE SYNTAX SEQUENCE OF AlaDot1xDeviceStatusEntry MAX-ACCESS not-accessible STATUS current DESCRIPTION "A table of system level information for each port supported by the Port Access Entity. An entry appears in this table for each port of this system." ::= { alaIND1Dot1XMIBObjects 8 } alaDot1xDeviceStatusEntry OBJECT-TYPE SYNTAX AlaDot1xDeviceStatusEntry MAX-ACCESS not-accessible STATUS current DESCRIPTION "One entry of the Device Status Table. " INDEX { alaDot1xDeviceStatusMacQueryType, alaDot1xDeviceStatusSlotNumber, alaDot1xDeviceStatusPortNumber, alaDot1xDeviceStatusMACAddress, alaDot1xDeviceStatusDeviceType } ::= { alaDot1xDeviceStatusTable 1 } AlaDot1xDeviceStatusEntry ::= SEQUENCE { alaDot1xDeviceStatusMacQueryType ALADot1xMacQueryType, alaDot1xDeviceStatusSlotNumber INTEGER, alaDot1xDeviceStatusPortNumber INTEGER, alaDot1xDeviceStatusMACAddress MacAddress, alaDot1xDeviceStatusDeviceType ALADot1xDeviceType, alaDot1xDeviceStatusVlan INTEGER, alaDot1xDeviceStatusIPAddress IpAddress, alaDot1xDeviceStatusUserName SnmpAdminString, alaDot1xDeviceStatusProfileUsed SnmpAdminString, alaDot1xDeviceStatusAuthType ALADot1xAuthenticationType, alaDot1xDeviceStatusPolicyUsed ALADot1xClassificationPolicyType, alaDot1xDeviceStatusAuthResult ALADot1xAuthenticationResult, alaDot1xDeviceStatusMacLearntState ALADot1xMacLearntState, alaDot1xDeviceStatusTimeLearned TimeStamp, alaDot1xDeviceStatusCaptivePortalUsed TruthValue } alaDot1xDeviceStatusMacQueryType OBJECT-TYPE SYNTAX ALADot1xMacQueryType MAX-ACCESS not-accessible STATUS current DESCRIPTION "The type of MAC address to query." ::= { alaDot1xDeviceStatusEntry 1 } alaDot1xDeviceStatusSlotNumber OBJECT-TYPE SYNTAX INTEGER (1..16) MAX-ACCESS not-accessible STATUS current DESCRIPTION "The slot that the device reporting the status resides." ::= { alaDot1xDeviceStatusEntry 2 } alaDot1xDeviceStatusPortNumber OBJECT-TYPE SYNTAX INTEGER (1..48) MAX-ACCESS not-accessible STATUS current DESCRIPTION "The user port that the device reporting the status resides." ::= { alaDot1xDeviceStatusEntry 3 } alaDot1xDeviceStatusMACAddress OBJECT-TYPE SYNTAX MacAddress MAX-ACCESS not-accessible STATUS current DESCRIPTION "The MAC address of the device reporting the status." ::= { alaDot1xDeviceStatusEntry 4 } alaDot1xDeviceStatusDeviceType OBJECT-TYPE SYNTAX ALADot1xDeviceType MAX-ACCESS not-accessible STATUS current DESCRIPTION "The type of device. Either supplicant or non-supplicant." ::= { alaDot1xDeviceStatusEntry 5 } alaDot1xDeviceStatusVlan OBJECT-TYPE SYNTAX INTEGER (1..4096) MAX-ACCESS read-only STATUS current DESCRIPTION "The vlan that the device reporting the status is authorized to access." ::= { alaDot1xDeviceStatusEntry 6 } alaDot1xDeviceStatusIPAddress OBJECT-TYPE SYNTAX IpAddress MAX-ACCESS read-only STATUS current DESCRIPTION "The IP address of the device reporting the status." ::= { alaDot1xDeviceStatusEntry 7 } alaDot1xDeviceStatusUserName OBJECT-TYPE SYNTAX SnmpAdminString MAX-ACCESS read-only STATUS current DESCRIPTION "The user name of the device reporting the status." ::= { alaDot1xDeviceStatusEntry 8 } alaDot1xDeviceStatusProfileUsed OBJECT-TYPE SYNTAX SnmpAdminString MAX-ACCESS read-only STATUS current DESCRIPTION "The name of the User Network Profile entry used when the device reporting the status is classified." ::= { alaDot1xDeviceStatusEntry 9 } alaDot1xDeviceStatusAuthType OBJECT-TYPE SYNTAX ALADot1xAuthenticationType MAX-ACCESS read-only STATUS current DESCRIPTION "The type of authentication used by the device reporting the status to obtain network access." ::= { alaDot1xDeviceStatusEntry 10 } alaDot1xDeviceStatusPolicyUsed OBJECT-TYPE SYNTAX ALADot1xClassificationPolicyType MAX-ACCESS read-only STATUS current DESCRIPTION "Classification Policy under which the device is learned." ::= { alaDot1xDeviceStatusEntry 11 } alaDot1xDeviceStatusAuthResult OBJECT-TYPE SYNTAX ALADot1xAuthenticationResult MAX-ACCESS read-only STATUS current DESCRIPTION "The State of the port." ::= { alaDot1xDeviceStatusEntry 12 } alaDot1xDeviceStatusMacLearntState OBJECT-TYPE SYNTAX ALADot1xMacLearntState MAX-ACCESS read-only STATUS current DESCRIPTION "The State of the MAC classified in the switch." ::= { alaDot1xDeviceStatusEntry 13 } alaDot1xDeviceStatusTimeLearned OBJECT-TYPE SYNTAX TimeStamp MAX-ACCESS read-only STATUS current DESCRIPTION "The time that the MAC address is learned in the system." ::= { alaDot1xDeviceStatusEntry 14 } alaDot1xDeviceStatusCaptivePortalUsed OBJECT-TYPE SYNTAX TruthValue MAX-ACCESS read-only STATUS current DESCRIPTION "The object indicates if the device is classified in the system using Captive Portal. A value of True means that the device has used Captive Portal to authenticate its credential and a value of False means that the device has not used Captive Portal to authenticate its credential." ::= { alaDot1xDeviceStatusEntry 15 } alaDot1xAdminLogoutParams OBJECT IDENTIFIER ::= { alaIND1Dot1XMIBObjects 9 } -- -- ala Dot1x Admin Logout Parameters group -- alaDot1xAdminLogoutType OBJECT-TYPE SYNTAX INTEGER { noOperation (0), macAddress (1), username (2), networkProfileName (3), interfaceId (4) } MAX-ACCESS read-write STATUS current DESCRIPTION "When this variable is set, the switch is to logout the user based on the logout type. The associated MIB object should be correctly set based on the logout type. If the corresponding MIB object that contain the criteria is not set correctly the switch will not be able to perform the logout operation. After the logout operation is done, the switch will set the corresponding criteria to back to its default value. Also when the logout operation is done, the switch is to set this variable back to zero (0)." ::= { alaDot1xAdminLogoutParams 1} alaDot1xAdminLogoutMacAddress OBJECT-TYPE SYNTAX MacAddress MAX-ACCESS read-write STATUS current DESCRIPTION "This value is used only if alaDot1xAdminLogoutType is set to MAC address. The default value is set to ff:ff:ff:ff:ff:ff. This well know broadcast MAC address will not be learned by the switch. The switch will reset this to the default value after the logout operation is performed" ::= { alaDot1xAdminLogoutParams 2} alaDot1xAdminLogoutUserName OBJECT-TYPE SYNTAX SnmpAdminString (SIZE(0..32)) MAX-ACCESS read-write STATUS current DESCRIPTION "This value is used only if alaDot1xAdminLogoutType is set to username. The default is a NULL string. The switch will reset this to the default value after the logout operation is performed. User is not allowed to set the value to NULL." ::= { alaDot1xAdminLogoutParams 3} alaDot1xAdminLogoutNetworkProfileName OBJECT-TYPE SYNTAX SnmpAdminString (SIZE(0..32)) MAX-ACCESS read-write STATUS current DESCRIPTION "This value is used only if alaDot1xAdminLogoutType is set to networkprofilename. The default is a NULL string. The switch will reset this to the default value after the logout operation is performed. User is not allowed to set the value to NULL." ::= { alaDot1xAdminLogoutParams 4} alaDot1xAdminLogoutInterfaceId OBJECT-TYPE SYNTAX InterfaceIndexOrZero MAX-ACCESS read-write STATUS current DESCRIPTION "This value is used only if alaDot1xAdminLogoutType is set to interfaceId. The default value is zero (0). The switch will reset this to the default value after the logout operation is performed." ::= { alaDot1xAdminLogoutParams 5} alaDot1xAuthServerTimeout OBJECT IDENTIFIER ::= { alaIND1Dot1XMIBObjects 10 } alaDot1xAuthSvrTimeoutPolicy OBJECT-TYPE SYNTAX DisplayString (SIZE (0..127)) MAX-ACCESS read-write STATUS current DESCRIPTION "Block -> B User Network Profile -> 'user network profile name' Default value is B." ::= { alaDot1xAuthServerTimeout 1 } alaDot1xAuthSvrTimeoutReAuthPeriod OBJECT-TYPE SYNTAX Integer32 (30..9999) MAX-ACCESS read-write STATUS current DESCRIPTION "This is the time interval in second that the supplicant is to be classified according to the Auth Server Down Policy (alaDot1xAuthServerTimeoutPolicy). When this time is expired, the supplicant will be prompted to re-authenticate and see if the Auth Server is back up. The default value is 30 seconds." ::= { alaDot1xAuthServerTimeout 2 } alaDot1xAuthSvrTimeoutStatus OBJECT-TYPE SYNTAX INTEGER { enabled (1), disabled(2) } MAX-ACCESS read-write STATUS current DESCRIPTION "This is object is to enable or disable the use of alaDot1xAuthSvrTimeoutPolicy and alaDot1xAuthSvrTimeoutReAuthPeriod. Default is disabled." DEFVAL { disabled } ::= { alaDot1xAuthServerTimeout 3 } ---------------------------------------------------------- ---------- Passthrough Mode Status Table ----------------- ---------------------------------------------------------- AlaPassThroughStatus ::= TEXTUAL-CONVENTION STATUS obsolete DESCRIPTION " Admin status" SYNTAX INTEGER { enabled(1), disabled(2) } alaPassthroughConfig OBJECT IDENTIFIER ::= { alaIND1Dot1XMIBObjects 11 } alaDot1xPassthroughStatus OBJECT-TYPE SYNTAX AlaPassThroughStatus MAX-ACCESS read-write STATUS obsolete DESCRIPTION "Passthrough of 802.1x packets. Force the 802.1x packet to flood in the VLAN." ::= { alaPassthroughConfig 1 } alaAvlanPassthroughStatus OBJECT-TYPE SYNTAX AlaPassThroughStatus MAX-ACCESS read-write STATUS obsolete DESCRIPTION "Passthrough of AVLAN packets. Force the AVLAN packet to flood in the VLAN." ::= { alaPassthroughConfig 2 } -- xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx -- COMPLIANCE -- xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx alaIND1Dot1XMIBCompliances MODULE-COMPLIANCE STATUS current DESCRIPTION "Compliance statement for Alcatel 802.1x." MODULE MANDATORY-GROUPS { alaINDDot1XPortGroup, alaDot1xPortLookupGroup, alaINDDot1XPolicyGroup, alaINDDot1XDeviceStatusGroup, alaDot1xAuthSvrTimeoutGroup } ::= { alaIND1Dot1XMIBConformance 2 } -- xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx -- UNITS OF CONFORMANCE -- xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx alaINDDot1XPortGroup OBJECT-GROUP OBJECTS { alaDot1xPortSlotNumber, alaDot1xPortPortNumber, alaDot1xPortMACAddress, alaDot1xPortVlan, alaDot1xPortProtocol, alaDot1xPortUserName, alaDot1xPortState } STATUS current DESCRIPTION "Collection of 802.1x objects for port status." ::= { alaIND1Dot1XMIBGroups 1 } alaDot1xPortLookupGroup OBJECT-GROUP OBJECTS { alaDot1xPortLookupSlotNumber, alaDot1xPortLookupPortNumber, alaDot1xPortLookupMACAddress, alaDot1xPortLookupInterfaceNumber } STATUS current DESCRIPTION "Collection of 802.1x objects for port lookup." ::= { alaIND1Dot1XMIBGroups 2 } alaINDDot1XPolicyGroup OBJECT-GROUP OBJECTS { alaDot1xNonSuppPolicy, alaDot1xSuppPolicy, alaDot1xPollingCnt, alaDot1xCaptivePortalPolicy, alaDot1xCPortalSessionLimit, alaDot1xCPortalRetryCnt } STATUS current DESCRIPTION "Collection of 802.1x objects for supplicant and non-supplicant policies." ::= { alaIND1Dot1XMIBGroups 3 } alaINDDot1XDeviceStatusGroup OBJECT-GROUP OBJECTS { alaDot1xDeviceStatusVlan, alaDot1xDeviceStatusIPAddress, alaDot1xDeviceStatusUserName, alaDot1xDeviceStatusProfileUsed, alaDot1xDeviceStatusAuthType, alaDot1xDeviceStatusPolicyUsed, alaDot1xDeviceStatusAuthResult, alaDot1xDeviceStatusMacLearntState, alaDot1xDeviceStatusTimeLearned, alaDot1xDeviceStatusCaptivePortalUsed } STATUS current DESCRIPTION "Collection of 802.1x objects for the status of the devices on an 802.1X enable port." ::= { alaIND1Dot1XMIBGroups 4 } alaDot1xAuthSvrTimeoutGroup OBJECT-GROUP OBJECTS { alaDot1xAuthSvrTimeoutPolicy, alaDot1xAuthSvrTimeoutReAuthPeriod, alaDot1xAuthSvrTimeoutStatus } STATUS current DESCRIPTION "Collection of 802.1x objects for the Authentication Server Timeout." ::= { alaIND1Dot1XMIBGroups 5 } alaPassthroughConfigGroup OBJECT-GROUP OBJECTS { alaDot1xPassthroughStatus, alaAvlanPassthroughStatus } STATUS obsolete DESCRIPTION " Status of passthrough for 802.1x and avlan configuration in devices." ::= { alaIND1Dot1XMIBGroups 6 } END