mibs/MIBS/nokia/ALCATEL-IND1-DOT1X-MIB
2023-12-05 12:25:34 +01:00

1252 lines
42 KiB
Plaintext

ALCATEL-IND1-DOT1X-MIB DEFINITIONS ::= BEGIN
IMPORTS
MODULE-IDENTITY,
OBJECT-IDENTITY,
OBJECT-TYPE,
Integer32, IpAddress
FROM SNMPv2-SMI
DisplayString, MacAddress, TimeStamp, TEXTUAL-CONVENTION, TruthValue
FROM SNMPv2-TC
softentIND1Dot1X
FROM ALCATEL-IND1-BASE
MODULE-COMPLIANCE, OBJECT-GROUP
FROM SNMPv2-CONF
InterfaceIndex, InterfaceIndexOrZero
FROM IF-MIB
SnmpAdminString
FROM SNMP-FRAMEWORK-MIB
dot1xPaePortNumber
FROM IEEE8021-PAE-MIB
;
alcatelIND1Dot1XMIB MODULE-IDENTITY
LAST-UPDATED "201002100000Z"
ORGANIZATION "Alcatel-Lucent"
CONTACT-INFO
"Please consult with Customer Service to ensure the most appropriate
version of this document is used with the products in question:
Alcatel-Lucent, Enterprise Solutions Division
(Formerly Alcatel Internetworking, Incorporated)
26801 West Agoura Road
Agoura Hills, CA 91301-5122
United States Of America
Telephone: North America +1 800 995 2696
Latin America +1 877 919 9526
Europe +31 23 556 0100
Asia +65 394 7933
All Other +1 818 878 4507
Electronic Mail: support@ind.alcatel.com
World Wide Web: http://alcatel-lucent.com/wps/portal/enterprise
File Transfer Protocol: ftp://ftp.ind.alcatel.com/pub/products/mibs"
DESCRIPTION
"This module describes an authoritative enterprise-specific Simple
Network Management Protocol (SNMP) Management Information Base (MIB):
The Port Access Entity module for managing 802.1X for
the Birds Of Prey Product Line
The right to make changes in specification and other information
contained in this document without prior notice is reserved.
No liability shall be assumed for any incidental, indirect, special, or
consequential damages whatsoever arising from or related to this
document or the information contained herein.
Vendors, end-users, and other interested parties are granted
non-exclusive license to use this specification in connection with
management of the products for which it is intended to be used.
Copyright (C) 1995-2007 Alcatel-Lucent
ALL RIGHTS RESERVED WORLDWIDE"
REVISION "201002100000Z"
DESCRIPTION
"Addressing maximum number character supported in URL and DNS mibs."
REVISION "200704030000Z"
DESCRIPTION
"Addressing discrepancies with Alcatel Standard."
::= { softentIND1Dot1X 1}
alaIND1Dot1XMIBObjects OBJECT-IDENTITY
STATUS current
DESCRIPTION
"Branch For 802.1X
Subsystem Managed Objects."
::= { alcatelIND1Dot1XMIB 1 }
alaIND1Dot1XMIBConformance OBJECT-IDENTITY
STATUS current
DESCRIPTION
"Branch For 802.1X
Subsystem Conformance Information."
::= { alcatelIND1Dot1XMIB 2 }
alaIND1Dot1XMIBGroups OBJECT-IDENTITY
STATUS current
DESCRIPTION
"Branch For 802.1X
Subsystem Units Of Conformance."
::= { alaIND1Dot1XMIBConformance 1 }
ALADot1xClassificationPolicyType ::= TEXTUAL-CONVENTION
STATUS current
DESCRIPTION
"This policy type is the classification policy used to classify
a device onto the system. "
SYNTAX INTEGER {
dotXAuthentication (0),
macAuthentication (1),
groupMobilityRules (2),
vlanId (3),
defaultVlan (4),
block (5),
internalUseOnlyA (6),
internalUseOnlyB (7),
internalUseOnlyC (8),
captivePortalAuthentication (9),
captivePortalGroupMobility (10),
captivePortalDefaultVlan (11),
captivePortalVlanId (12),
captivePortalBlock (13),
captivePortalUnknown (14),
captivePortalUnpAuthSrv (15),
captivePortalUnpUsrCfg (16),
captivePortalUnpAAArule (17),
authServerUNP (18),
userConfigUNP (19),
aaaRuleUNP (20),
aaaAuthSvrDownUNP (21),
aaaAuthSvrDownBlock (22)
}
ALADot1xAuthenticationType ::= TEXTUAL-CONVENTION
STATUS current
DESCRIPTION
"The type of authentication used"
SYNTAX INTEGER {
noAuthentication (0),
dotXAuthentication (1),
macAuthentication (2),
captivePortal (3)
}
ALADot1xAuthenticationResult ::= TEXTUAL-CONVENTION
STATUS current
DESCRIPTION
"The result of the authentication. If the ALADot1xAuthenticationType of this
device is noAuthentication then this object will return notApplicable. If the
authentication has not completed then this object will return inProgress."
SYNTAX INTEGER {
notApplicable (0),
inProgress (1),
success (2),
fail (3)
}
ALADot1xMacLearntState ::= TEXTUAL-CONVENTION
STATUS current
DESCRIPTION
"The state of MAC address in the system"
SYNTAX INTEGER {
bridging (0), -- Normal access to the network.
filtering (1), -- Access to the network blocked.
hicInProgress (2), -- Host Integrity Check in progress.
qmrInProgress (3) -- QMR in progress.
}
ALADot1xMacQueryType ::= TEXTUAL-CONVENTION
STATUS current
DESCRIPTION
"The query type of MAC address in the system. This query MAC address type
is used to specify which type of MAC address to query from the
alaDot1xDeviceStatusTable."
SYNTAX INTEGER {
all (0), -- All devices on the port.
supplicant (1), -- All supplicants on the port.
nonSupplicant (2), -- All non-supplicant on the port.
captivePortal (3) -- All devices on the port that used Captive Portal.
}
ALADot1xDeviceType ::= TEXTUAL-CONVENTION
STATUS current
DESCRIPTION
"The type of device. Either supplicant or non-supplicant."
SYNTAX INTEGER {
supplicant (1),
nonSupplicant (2)
}
----------------------------------------------------------
---------- Logical Port table ----------------------------
----------------------------------------------------------
alaDot1xPortTable OBJECT-TYPE
SYNTAX SEQUENCE OF AlaDot1xPortEntry
MAX-ACCESS not-accessible
STATUS deprecated
DESCRIPTION
"A table of system level information for each port
supported by the Port Access Entity. An entry appears
in this table for each port of this system."
REFERENCE
"9.6.1"
::= { alaIND1Dot1XMIBObjects 1 }
alaDot1xPortEntry OBJECT-TYPE
SYNTAX AlaDot1xPortEntry
MAX-ACCESS not-accessible
STATUS deprecated
DESCRIPTION
"TP DO: Add description here "
INDEX { dot1xPaePortNumber }
::= { alaDot1xPortTable 1 }
AlaDot1xPortEntry ::=
SEQUENCE {
alaDot1xPortSlotNumber
INTEGER,
alaDot1xPortPortNumber
INTEGER,
alaDot1xPortMACAddress
MacAddress,
alaDot1xPortVlan
INTEGER,
alaDot1xPortProtocol
INTEGER,
alaDot1xPortUserName
DisplayString,
alaDot1xPortState
INTEGER,
alaDot1xSupplicantPolicyUsed
ALADot1xClassificationPolicyType
}
alaDot1xPortSlotNumber OBJECT-TYPE
SYNTAX INTEGER (1..16)
MAX-ACCESS read-only
STATUS deprecated
DESCRIPTION
"The slot that the logical port represented by the dot1xPaePortNumber resides."
::= { alaDot1xPortEntry 1 }
alaDot1xPortPortNumber OBJECT-TYPE
SYNTAX INTEGER (1..48)
MAX-ACCESS read-only
STATUS deprecated
DESCRIPTION
"The user port that the logical port represented by the dot1xPaePortNumber resides."
::= { alaDot1xPortEntry 2 }
alaDot1xPortMACAddress OBJECT-TYPE
SYNTAX MacAddress
MAX-ACCESS read-only
STATUS deprecated
DESCRIPTION
"The MAC address of the supplicant that along with the slot and port uniquely
form the logical port represented by the dot1xPaePortNumber."
::= { alaDot1xPortEntry 3 }
alaDot1xPortVlan OBJECT-TYPE
SYNTAX INTEGER (1..4096)
MAX-ACCESS read-only
STATUS deprecated
DESCRIPTION
"The vlan that the supplicant is authorized to access."
::= { alaDot1xPortEntry 4 }
alaDot1xPortProtocol OBJECT-TYPE
SYNTAX INTEGER (1..6)
MAX-ACCESS read-only
STATUS deprecated
DESCRIPTION
"The protocol that is authorized for the supplicant. This is used in conjunction
with the alaDot1xPortVlan object. Supplicant can be authorized to different vlans
for different protocol."
::= { alaDot1xPortEntry 5 }
alaDot1xPortUserName OBJECT-TYPE
SYNTAX DisplayString
MAX-ACCESS read-only
STATUS deprecated
DESCRIPTION
"The user name of the supplicant used for authentication."
::= { alaDot1xPortEntry 6 }
alaDot1xPortState OBJECT-TYPE
SYNTAX INTEGER{
initialize (1),
disconnected (2),
connecting (3),
authenticating (4),
authenticated (5),
aborting (6),
held (7),
forceAuthenticated (8),
forceUnauthenticated (9),
authenticatedLocally (10)
}
MAX-ACCESS read-only
STATUS deprecated
DESCRIPTION
"The State of the port."
::= { alaDot1xPortEntry 7 }
alaDot1xSupplicantPolicyUsed OBJECT-TYPE
SYNTAX ALADot1xClassificationPolicyType
MAX-ACCESS read-only
STATUS deprecated
DESCRIPTION
"Classification Policy under which the 802.1x supplicant is learned."
::= { alaDot1xPortEntry 8 }
----------------------------------------------------------
----------Dot1x MAC table --------------------------------
----------------------------------------------------------
alaDot1xMacTable OBJECT-TYPE
SYNTAX SEQUENCE OF AlaDot1xMacEntry
MAX-ACCESS not-accessible
STATUS current
DESCRIPTION
"Provide the list of users currently authenticated into the
switch for bridging purpose."
::= { alaIND1Dot1XMIBObjects 4 }
alaDot1xMacEntry OBJECT-TYPE
SYNTAX AlaDot1xMacEntry
MAX-ACCESS not-accessible
STATUS current
DESCRIPTION
"An entry in the AaaAuthenticatedUserTable."
INDEX {alaDot1xMACAddress}
::= { alaDot1xMacTable 1 }
AlaDot1xMacEntry ::=
SEQUENCE {
alaDot1xMACAddress
MacAddress,
alaDot1xMacIfIndex
InterfaceIndex,
alaDot1xMacSlotNumber
Integer32,
alaDot1xMacPortNumber
Integer32,
alaDot1xMacVlan
Integer32,
alaDot1xMacProtocol
Integer32,
alaDot1xMacUserName
DisplayString,
alaDot1xMacState
INTEGER,
alaDot1xMacSupplicantPolicyUsed
ALADot1xClassificationPolicyType
}
alaDot1xMACAddress OBJECT-TYPE
SYNTAX MacAddress
MAX-ACCESS not-accessible
STATUS current
DESCRIPTION
"The MAC address of the supplicant that along with the slot and port uniquely
form the logical port represented by the dot1xPaePortNumber."
::= { alaDot1xMacEntry 1 }
alaDot1xMacIfIndex OBJECT-TYPE
SYNTAX InterfaceIndex
MAX-ACCESS read-only
STATUS current
DESCRIPTION
"Interface index in which alaDot1xMACAddress was learned."
::= { alaDot1xMacEntry 2 }
alaDot1xMacSlotNumber OBJECT-TYPE
SYNTAX Integer32 (1..16)
MAX-ACCESS read-only
STATUS current
DESCRIPTION
"The slot in which alaDot1xMACAddress was learned."
::= { alaDot1xMacEntry 3 }
alaDot1xMacPortNumber OBJECT-TYPE
SYNTAX Integer32 (1..48)
MAX-ACCESS read-only
STATUS current
DESCRIPTION
"The user port in which alaDot1xMACAddress was learned."
::= { alaDot1xMacEntry 4 }
alaDot1xMacVlan OBJECT-TYPE
SYNTAX Integer32 (1..4096)
MAX-ACCESS read-only
STATUS current
DESCRIPTION
"The vlan that the supplicant is authorized to access."
::= { alaDot1xMacEntry 5 }
alaDot1xMacProtocol OBJECT-TYPE
SYNTAX Integer32 (1..6)
MAX-ACCESS read-only
STATUS current
DESCRIPTION
"The protocol that is authorized for the supplicant. This is used in conjunction
with the alaDot1xMacVlan object. Supplicant can be authorized to different vlans
for different protocol."
::= { alaDot1xMacEntry 6 }
alaDot1xMacUserName OBJECT-TYPE
SYNTAX DisplayString (SIZE (0..64))
MAX-ACCESS read-only
STATUS current
DESCRIPTION
"The user name of the supplicant used for authentication."
::= { alaDot1xMacEntry 7 }
alaDot1xMacState OBJECT-TYPE
SYNTAX INTEGER{
initialize (1),
disconnected (2),
connecting (3),
authenticating (4),
authenticated (5),
aborting (6),
held (7),
forceAuthenticated (8),
forceUnauthenticated (9),
authenticatedLocally (10)
}
MAX-ACCESS read-only
STATUS current
DESCRIPTION
"The State of the port in which the current mac-address was learned."
::= { alaDot1xMacEntry 8 }
alaDot1xMacSupplicantPolicyUsed OBJECT-TYPE
SYNTAX ALADot1xClassificationPolicyType
MAX-ACCESS read-only
STATUS current
DESCRIPTION
"Classification Policy under which the 802.1x supplicant is learned."
::= { alaDot1xMacEntry 9 }
----------------------------------------------------------
----------------------------------------------------------
-------------- Reverse lookup table ----------------------
----------------------------------------------------------
alaDot1xPortLookupTable OBJECT-TYPE
SYNTAX SEQUENCE OF AlaDot1xPortLookupEntry
MAX-ACCESS not-accessible
STATUS current
DESCRIPTION
"A table of which allows to find the logical port number
given the physical slot/port/MAC. An entry appears
in this table for each logical port of this system."
::= { alaIND1Dot1XMIBObjects 2 }
alaDot1xPortLookupEntry OBJECT-TYPE
SYNTAX AlaDot1xPortLookupEntry
MAX-ACCESS not-accessible
STATUS current
DESCRIPTION
"The translation table to look up the dot1xPaePortNumber."
INDEX { alaDot1xPortLookupSlotNumber,
alaDot1xPortLookupPortNumber,
alaDot1xPortLookupMACAddress }
::= { alaDot1xPortLookupTable 1 }
AlaDot1xPortLookupEntry ::=
SEQUENCE {
alaDot1xPortLookupSlotNumber
INTEGER,
alaDot1xPortLookupPortNumber
INTEGER,
alaDot1xPortLookupMACAddress
MacAddress,
alaDot1xPortLookupInterfaceNumber
InterfaceIndex
}
alaDot1xPortLookupSlotNumber OBJECT-TYPE
SYNTAX INTEGER (1..16)
MAX-ACCESS read-only
STATUS current
DESCRIPTION
"The slot that the logical port represented by the dot1xPaePortNumber resides."
::= { alaDot1xPortLookupEntry 1 }
alaDot1xPortLookupPortNumber OBJECT-TYPE
SYNTAX INTEGER (1..48)
MAX-ACCESS read-only
STATUS current
DESCRIPTION
"The physical port that the logical port represented by the dot1xPaePortNumber resides."
::= { alaDot1xPortLookupEntry 2 }
alaDot1xPortLookupMACAddress OBJECT-TYPE
SYNTAX MacAddress
MAX-ACCESS read-only
STATUS current
DESCRIPTION
"The MAC address of the supplicant that along with the slot and port uniquely
form the logical port represented by the dot1xPaePortNumber."
::= { alaDot1xPortLookupEntry 3 }
alaDot1xPortLookupInterfaceNumber OBJECT-TYPE
SYNTAX InterfaceIndex
MAX-ACCESS read-only
STATUS current
DESCRIPTION
"The ifIndex that represnets the slot and port where the dot1xPaePortNumber resides."
::= { alaDot1xPortLookupEntry 4 }
-- xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx
-- Guest VLAN Configuration table - WILL NEVER BE SUPPORTED
-- but keep the OID reserved
-- xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx
-- alaDot1xGuestVlanConfTable OBJECT-TYPE
-- SYNTAX SEQUENCE OF AlaDot1xGuestVlanConfEntry
-- MAX-ACCESS not-accessible
-- STATUS current
-- DESCRIPTION
-- "A table of guest vlan ID supported by the Port Access Entity.
-- An entry appears in this table for each port of this system."
-- ::= { alaIND1Dot1XMIBObjects 3 }
-- xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx
-- Non 802.1x supplicant table
-- xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx
alaDot1xNonSupplicantTable OBJECT-TYPE
SYNTAX SEQUENCE OF AlaDot1xNonSupplicantEntry
MAX-ACCESS not-accessible
STATUS current
DESCRIPTION
"A table of non 802.1x supplicants learned on 802.1x authenticated ports."
::= { alaIND1Dot1XMIBObjects 5 }
alaDot1xNonSupplicantEntry OBJECT-TYPE
SYNTAX AlaDot1xNonSupplicantEntry
MAX-ACCESS not-accessible
STATUS current
DESCRIPTION
"Non 802.1x supplicant information."
INDEX { alaDot1xNonSupplicantIntfNum,
alaDot1xNonSupplicantMACAddress }
::= { alaDot1xNonSupplicantTable 1 }
AlaDot1xNonSupplicantEntry ::=
SEQUENCE {
alaDot1xNonSupplicantIntfNum InterfaceIndex,
alaDot1xNonSupplicantMACAddress MacAddress,
alaDot1xNonSupplicantVlanID INTEGER,
alaDot1xNonSupplicantPolicyUsed ALADot1xClassificationPolicyType,
alaDot1xAuthenticationStatus INTEGER
}
alaDot1xNonSupplicantIntfNum OBJECT-TYPE
SYNTAX InterfaceIndex
MAX-ACCESS read-only
STATUS current
DESCRIPTION
"The ifIndex represneting the slot and port where the non 802.1x supplicant is learned."
::= { alaDot1xNonSupplicantEntry 1 }
alaDot1xNonSupplicantMACAddress OBJECT-TYPE
SYNTAX MacAddress
MAX-ACCESS read-only
STATUS current
DESCRIPTION
"The MAC address of the non 802.1x supplicant."
::= { alaDot1xNonSupplicantEntry 2 }
alaDot1xNonSupplicantVlanID OBJECT-TYPE
SYNTAX INTEGER (1..4096)
MAX-ACCESS read-only
STATUS current
DESCRIPTION
"The Id of the VLAN on which the non 802.1x supplicant is learned."
::= { alaDot1xNonSupplicantEntry 3 }
alaDot1xNonSupplicantPolicyUsed OBJECT-TYPE
SYNTAX ALADot1xClassificationPolicyType
MAX-ACCESS read-only
STATUS current
DESCRIPTION
"Classification policy under which the non 802.1x supplicant is learned."
::= { alaDot1xNonSupplicantEntry 4 }
alaDot1xAuthenticationStatus OBJECT-TYPE
SYNTAX INTEGER {
idle (1),
inProgress (2),
authenticated (3),
failed (4),
failedTimeout (5),
failedNoServer (6),
failedNoResources (7)
}
MAX-ACCESS read-only
STATUS current
DESCRIPTION
"Authentication status of the non 802.1x supplicant."
::= { alaDot1xNonSupplicantEntry 5 }
-- alaDot1xNonSuppPolicy
-- alaDot1xSuppPolicy
-- xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx
-- Authentication Policy Configuration table
-- xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx
alaDot1xAuthPolicyTable OBJECT-TYPE
SYNTAX SEQUENCE OF AlaDot1xAuthPolicyEntry
MAX-ACCESS not-accessible
STATUS current
DESCRIPTION
"A table of supplicant and non supplicant device classification policies
as they are configured on 802.1x authenticated ports."
::= { alaIND1Dot1XMIBObjects 6 }
alaDot1xAuthPolicyEntry OBJECT-TYPE
SYNTAX AlaDot1xAuthPolicyEntry
MAX-ACCESS not-accessible
STATUS current
DESCRIPTION
"Device classification policies information."
INDEX { alaDot1xAuthPolicyIntfNumber }
::= { alaDot1xAuthPolicyTable 1 }
AlaDot1xAuthPolicyEntry ::=
SEQUENCE {
alaDot1xAuthPolicyIntfNumber InterfaceIndex,
alaDot1xNonSuppPolicy DisplayString,
alaDot1xSuppPolicy DisplayString,
alaDot1xPollingCnt Integer32,
alaDot1xCaptivePortalPolicy DisplayString,
alaDot1xCPortalSessionLimit Integer32,
alaDot1xCPortalRetryCnt Integer32
}
alaDot1xAuthPolicyIntfNumber OBJECT-TYPE
SYNTAX InterfaceIndex
MAX-ACCESS not-accessible
STATUS current
DESCRIPTION
"The ifIndex that represnets the slot and port where the device classification
policies are configured."
::= { alaDot1xAuthPolicyEntry 1 }
alaDot1xNonSuppPolicy OBJECT-TYPE
SYNTAX DisplayString (SIZE (0..127))
MAX-ACCESS read-write
STATUS current
DESCRIPTION
"MAC based authentication -> M
Group Mobility -> G
VLAN ID -> <vlan id>
Default VLAN -> D
Block -> B
Fail -> ,
Captive Portal -> C
Examples: MGD,GB. The default value is B (block). If the string size is zero (0), the
default value is used."
::= { alaDot1xAuthPolicyEntry 2 }
alaDot1xSuppPolicy OBJECT-TYPE
SYNTAX DisplayString (SIZE (0..127))
MAX-ACCESS read-write
STATUS current
DESCRIPTION
"802.1x authentication -> X
Group Mobility -> G
VLAN ID -> <vlan id>
Default VLAN -> D
Block -> B
Fail -> ,
Captive Portal -> C
Default value: XGD,B. If the string size is zero (0), the default value is used."
::= { alaDot1xAuthPolicyEntry 3 }
alaDot1xPollingCnt OBJECT-TYPE
SYNTAX Integer32 (0..99)
MAX-ACCESS read-write
STATUS current
DESCRIPTION
"Number of retries to poll the end station for EAPoL frame before
classifying the end station with group mobility or guest vlan ID configured.
If the value is set to zero (0), it indicates a special case where the port will
ignore any EAP frame from the client and this will force all devices to the
non-supplicant policy for classification."
::= { alaDot1xAuthPolicyEntry 4 }
alaDot1xCaptivePortalPolicy OBJECT-TYPE
SYNTAX DisplayString (SIZE (0..127))
MAX-ACCESS read-write
STATUS current
DESCRIPTION
"Web authentication -> W
Group Mobility -> G
VLAN ID -> <vlan id>
Default VLAN -> D
Block -> B
Fail -> ,
Default value: XGD,B, if string size is zero, the default value is used."
::= { alaDot1xAuthPolicyEntry 5 }
alaDot1xCPortalSessionLimit OBJECT-TYPE
SYNTAX Integer32 (0..999)
MAX-ACCESS read-write
STATUS current
DESCRIPTION
"Captive Portal Session limit is the interval that a Captive Portal user can login.
User is to be logged off after the session limit. If the session limit is set to
zero (0), it means the session is unlimited, user will not be automatically logged off."
::= { alaDot1xAuthPolicyEntry 6 }
alaDot1xCPortalRetryCnt OBJECT-TYPE
SYNTAX Integer32 (0..999)
MAX-ACCESS read-write
STATUS current
DESCRIPTION
"Number of retries for the Captive Portal user to provide the user
credential before the software will classify the user to the failed
policy according the the alaDot1xCaptivePortalPolicy."
::= { alaDot1xAuthPolicyEntry 7 }
alaDot1xCportalConfig OBJECT IDENTIFIER ::= { alaIND1Dot1XMIBObjects 7 }
alaDot1xCPortalIpAddress OBJECT-TYPE
SYNTAX IpAddress
MAX-ACCESS read-write
STATUS current
DESCRIPTION
"The factory default Captive Portal IP address is 10.123.0.1.
If the 10.123.0.0 subnet is already in use, user can change
the Captive Portal IP address to another 10.x.0.0 subnet.
Only the second octet of the Captive Portal IP address can
be changed."
::= { alaDot1xCportalConfig 1 }
alaDot1xCPortalProxyURL OBJECT-TYPE
SYNTAX SnmpAdminString (SIZE (0..64))
MAX-ACCESS read-write
STATUS current
DESCRIPTION
"The factory default for Captive Portal working with proxy
server url has the key word proxy. If the user's proxy
server url does not have the key work proxy, user can use
this object to specify the proxy server url. If none is specified
this object will return the default value - proxy."
::= { alaDot1xCportalConfig 2 }
alaDot1xCPortalPostAuthSuccessRedirectURL OBJECT-TYPE
SYNTAX SnmpAdminString (SIZE (0..63))
MAX-ACCESS read-write
STATUS current
DESCRIPTION
"Captive Portal's Redirect URL upon successful authentication."
::= { alaDot1xCportalConfig 3 }
alaDot1xCPortalPostAuthFailRedirectURL OBJECT-TYPE
SYNTAX SnmpAdminString (SIZE (0..63))
MAX-ACCESS read-write
STATUS current
DESCRIPTION
"Captive Portal's Redirect URL upon failed authentication."
::= { alaDot1xCportalConfig 4 }
alaDot1xCPortalDNSKeyword1 OBJECT-TYPE
SYNTAX SnmpAdminString (SIZE (0..63))
MAX-ACCESS read-write
STATUS current
DESCRIPTION
"Captive Portal's DNS keyword string."
::= { alaDot1xCportalConfig 5 }
alaDot1xCPortalDNSKeyword2 OBJECT-TYPE
SYNTAX SnmpAdminString (SIZE (0..63))
MAX-ACCESS read-write
STATUS current
DESCRIPTION
"Captive Portal's DNS keyword string."
::= { alaDot1xCportalConfig 6 }
alaDot1xCPortalDNSKeyword3 OBJECT-TYPE
SYNTAX SnmpAdminString (SIZE (0..63))
MAX-ACCESS read-write
STATUS current
DESCRIPTION
"Captive Portal's DNS keyword string."
::= { alaDot1xCportalConfig 7 }
alaDot1xCPortalDNSKeyword4 OBJECT-TYPE
SYNTAX SnmpAdminString (SIZE (0..63))
MAX-ACCESS read-write
STATUS current
DESCRIPTION
"Captive Portal's DNS keyword string."
::= { alaDot1xCportalConfig 8 }
----------------------------------------------------------
---------- Device Status Table ----------------------------
----------------------------------------------------------
alaDot1xDeviceStatusTable OBJECT-TYPE
SYNTAX SEQUENCE OF AlaDot1xDeviceStatusEntry
MAX-ACCESS not-accessible
STATUS current
DESCRIPTION
"A table of system level information for each port
supported by the Port Access Entity. An entry appears
in this table for each port of this system."
::= { alaIND1Dot1XMIBObjects 8 }
alaDot1xDeviceStatusEntry OBJECT-TYPE
SYNTAX AlaDot1xDeviceStatusEntry
MAX-ACCESS not-accessible
STATUS current
DESCRIPTION
"One entry of the Device Status Table. "
INDEX { alaDot1xDeviceStatusMacQueryType,
alaDot1xDeviceStatusSlotNumber,
alaDot1xDeviceStatusPortNumber,
alaDot1xDeviceStatusMACAddress,
alaDot1xDeviceStatusDeviceType }
::= { alaDot1xDeviceStatusTable 1 }
AlaDot1xDeviceStatusEntry ::=
SEQUENCE {
alaDot1xDeviceStatusMacQueryType
ALADot1xMacQueryType,
alaDot1xDeviceStatusSlotNumber
INTEGER,
alaDot1xDeviceStatusPortNumber
INTEGER,
alaDot1xDeviceStatusMACAddress
MacAddress,
alaDot1xDeviceStatusDeviceType
ALADot1xDeviceType,
alaDot1xDeviceStatusVlan
INTEGER,
alaDot1xDeviceStatusIPAddress
IpAddress,
alaDot1xDeviceStatusUserName
SnmpAdminString,
alaDot1xDeviceStatusProfileUsed
SnmpAdminString,
alaDot1xDeviceStatusAuthType
ALADot1xAuthenticationType,
alaDot1xDeviceStatusPolicyUsed
ALADot1xClassificationPolicyType,
alaDot1xDeviceStatusAuthResult
ALADot1xAuthenticationResult,
alaDot1xDeviceStatusMacLearntState
ALADot1xMacLearntState,
alaDot1xDeviceStatusTimeLearned
TimeStamp,
alaDot1xDeviceStatusCaptivePortalUsed
TruthValue
}
alaDot1xDeviceStatusMacQueryType OBJECT-TYPE
SYNTAX ALADot1xMacQueryType
MAX-ACCESS not-accessible
STATUS current
DESCRIPTION
"The type of MAC address to query."
::= { alaDot1xDeviceStatusEntry 1 }
alaDot1xDeviceStatusSlotNumber OBJECT-TYPE
SYNTAX INTEGER (1..16)
MAX-ACCESS not-accessible
STATUS current
DESCRIPTION
"The slot that the device reporting the status resides."
::= { alaDot1xDeviceStatusEntry 2 }
alaDot1xDeviceStatusPortNumber OBJECT-TYPE
SYNTAX INTEGER (1..48)
MAX-ACCESS not-accessible
STATUS current
DESCRIPTION
"The user port that the device reporting the status resides."
::= { alaDot1xDeviceStatusEntry 3 }
alaDot1xDeviceStatusMACAddress OBJECT-TYPE
SYNTAX MacAddress
MAX-ACCESS not-accessible
STATUS current
DESCRIPTION
"The MAC address of the device reporting the status."
::= { alaDot1xDeviceStatusEntry 4 }
alaDot1xDeviceStatusDeviceType OBJECT-TYPE
SYNTAX ALADot1xDeviceType
MAX-ACCESS not-accessible
STATUS current
DESCRIPTION
"The type of device. Either supplicant or non-supplicant."
::= { alaDot1xDeviceStatusEntry 5 }
alaDot1xDeviceStatusVlan OBJECT-TYPE
SYNTAX INTEGER (1..4096)
MAX-ACCESS read-only
STATUS current
DESCRIPTION
"The vlan that the device reporting the status is authorized to access."
::= { alaDot1xDeviceStatusEntry 6 }
alaDot1xDeviceStatusIPAddress OBJECT-TYPE
SYNTAX IpAddress
MAX-ACCESS read-only
STATUS current
DESCRIPTION
"The IP address of the device reporting the status."
::= { alaDot1xDeviceStatusEntry 7 }
alaDot1xDeviceStatusUserName OBJECT-TYPE
SYNTAX SnmpAdminString
MAX-ACCESS read-only
STATUS current
DESCRIPTION
"The user name of the device reporting the status."
::= { alaDot1xDeviceStatusEntry 8 }
alaDot1xDeviceStatusProfileUsed OBJECT-TYPE
SYNTAX SnmpAdminString
MAX-ACCESS read-only
STATUS current
DESCRIPTION
"The name of the User Network Profile entry used when the
device reporting the status is classified."
::= { alaDot1xDeviceStatusEntry 9 }
alaDot1xDeviceStatusAuthType OBJECT-TYPE
SYNTAX ALADot1xAuthenticationType
MAX-ACCESS read-only
STATUS current
DESCRIPTION
"The type of authentication used by the device reporting
the status to obtain network access."
::= { alaDot1xDeviceStatusEntry 10 }
alaDot1xDeviceStatusPolicyUsed OBJECT-TYPE
SYNTAX ALADot1xClassificationPolicyType
MAX-ACCESS read-only
STATUS current
DESCRIPTION
"Classification Policy under which the device is learned."
::= { alaDot1xDeviceStatusEntry 11 }
alaDot1xDeviceStatusAuthResult OBJECT-TYPE
SYNTAX ALADot1xAuthenticationResult
MAX-ACCESS read-only
STATUS current
DESCRIPTION
"The State of the port."
::= { alaDot1xDeviceStatusEntry 12 }
alaDot1xDeviceStatusMacLearntState OBJECT-TYPE
SYNTAX ALADot1xMacLearntState
MAX-ACCESS read-only
STATUS current
DESCRIPTION
"The State of the MAC classified in the switch."
::= { alaDot1xDeviceStatusEntry 13 }
alaDot1xDeviceStatusTimeLearned OBJECT-TYPE
SYNTAX TimeStamp
MAX-ACCESS read-only
STATUS current
DESCRIPTION
"The time that the MAC address is learned in the system."
::= { alaDot1xDeviceStatusEntry 14 }
alaDot1xDeviceStatusCaptivePortalUsed OBJECT-TYPE
SYNTAX TruthValue
MAX-ACCESS read-only
STATUS current
DESCRIPTION
"The object indicates if the device is classified in the system using
Captive Portal. A value of True means that the device has used Captive Portal
to authenticate its credential and a value of False means that the device
has not used Captive Portal to authenticate its credential."
::= { alaDot1xDeviceStatusEntry 15 }
alaDot1xAdminLogoutParams OBJECT IDENTIFIER ::= { alaIND1Dot1XMIBObjects 9 }
--
-- ala Dot1x Admin Logout Parameters group
--
alaDot1xAdminLogoutType OBJECT-TYPE
SYNTAX INTEGER {
noOperation (0),
macAddress (1),
username (2),
networkProfileName (3),
interfaceId (4)
}
MAX-ACCESS read-write
STATUS current
DESCRIPTION
"When this variable is set, the switch is to logout the user based on the
logout type. The associated MIB object should be correctly set
based on the logout type. If the corresponding MIB object that contain the
criteria is not set correctly the switch will not be able to perform the
logout operation. After the logout operation is done, the switch will set
the corresponding criteria to back to its default value. Also when the
logout operation is done, the switch is to set this variable back to zero (0)."
::= { alaDot1xAdminLogoutParams 1}
alaDot1xAdminLogoutMacAddress OBJECT-TYPE
SYNTAX MacAddress
MAX-ACCESS read-write
STATUS current
DESCRIPTION
"This value is used only if alaDot1xAdminLogoutType is set to MAC address.
The default value is set to ff:ff:ff:ff:ff:ff. This well know broadcast MAC
address will not be learned by the switch. The switch will reset this to the
default value after the logout operation is performed"
::= { alaDot1xAdminLogoutParams 2}
alaDot1xAdminLogoutUserName OBJECT-TYPE
SYNTAX SnmpAdminString (SIZE(0..32))
MAX-ACCESS read-write
STATUS current
DESCRIPTION
"This value is used only if alaDot1xAdminLogoutType is set to username.
The default is a NULL string. The switch will reset this to the default value
after the logout operation is performed. User is not allowed to set the value
to NULL."
::= { alaDot1xAdminLogoutParams 3}
alaDot1xAdminLogoutNetworkProfileName OBJECT-TYPE
SYNTAX SnmpAdminString (SIZE(0..32))
MAX-ACCESS read-write
STATUS current
DESCRIPTION
"This value is used only if alaDot1xAdminLogoutType is set to networkprofilename.
The default is a NULL string. The switch will reset this to the default value
after the logout operation is performed. User is not allowed to set the value
to NULL."
::= { alaDot1xAdminLogoutParams 4}
alaDot1xAdminLogoutInterfaceId OBJECT-TYPE
SYNTAX InterfaceIndexOrZero
MAX-ACCESS read-write
STATUS current
DESCRIPTION
"This value is used only if alaDot1xAdminLogoutType is set to interfaceId.
The default value is zero (0). The switch will reset this to the default value
after the logout operation is performed."
::= { alaDot1xAdminLogoutParams 5}
alaDot1xAuthServerTimeout OBJECT IDENTIFIER ::= { alaIND1Dot1XMIBObjects 10 }
alaDot1xAuthSvrTimeoutPolicy OBJECT-TYPE
SYNTAX DisplayString (SIZE (0..127))
MAX-ACCESS read-write
STATUS current
DESCRIPTION
"Block -> B
User Network Profile -> 'user network profile name'
Default value is B."
::= { alaDot1xAuthServerTimeout 1 }
alaDot1xAuthSvrTimeoutReAuthPeriod OBJECT-TYPE
SYNTAX Integer32 (30..9999)
MAX-ACCESS read-write
STATUS current
DESCRIPTION
"This is the time interval in second that the supplicant is to be
classified according to the Auth Server Down Policy
(alaDot1xAuthServerTimeoutPolicy). When this time is expired,
the supplicant will be prompted to re-authenticate and see if
the Auth Server is back up. The default value is 30 seconds."
::= { alaDot1xAuthServerTimeout 2 }
alaDot1xAuthSvrTimeoutStatus OBJECT-TYPE
SYNTAX INTEGER {
enabled (1),
disabled(2)
}
MAX-ACCESS read-write
STATUS current
DESCRIPTION
"This is object is to enable or disable the use of alaDot1xAuthSvrTimeoutPolicy and
alaDot1xAuthSvrTimeoutReAuthPeriod. Default is disabled."
DEFVAL { disabled }
::= { alaDot1xAuthServerTimeout 3 }
----------------------------------------------------------
---------- Passthrough Mode Status Table -----------------
----------------------------------------------------------
AlaPassThroughStatus ::= TEXTUAL-CONVENTION
STATUS obsolete
DESCRIPTION
" Admin status"
SYNTAX INTEGER { enabled(1),
disabled(2)
}
alaPassthroughConfig OBJECT IDENTIFIER ::= { alaIND1Dot1XMIBObjects 11 }
alaDot1xPassthroughStatus OBJECT-TYPE
SYNTAX AlaPassThroughStatus
MAX-ACCESS read-write
STATUS obsolete
DESCRIPTION
"Passthrough of 802.1x packets.
Force the 802.1x packet to flood in the VLAN."
::= { alaPassthroughConfig 1 }
alaAvlanPassthroughStatus OBJECT-TYPE
SYNTAX AlaPassThroughStatus
MAX-ACCESS read-write
STATUS obsolete
DESCRIPTION
"Passthrough of AVLAN packets.
Force the AVLAN packet to flood in the VLAN."
::= { alaPassthroughConfig 2 }
-- xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx
-- COMPLIANCE
-- xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx
alaIND1Dot1XMIBCompliances MODULE-COMPLIANCE
STATUS current
DESCRIPTION
"Compliance statement for Alcatel 802.1x."
MODULE
MANDATORY-GROUPS
{
alaINDDot1XPortGroup,
alaDot1xPortLookupGroup,
alaINDDot1XPolicyGroup,
alaINDDot1XDeviceStatusGroup,
alaDot1xAuthSvrTimeoutGroup
}
::= { alaIND1Dot1XMIBConformance 2 }
-- xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx
-- UNITS OF CONFORMANCE
-- xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx
alaINDDot1XPortGroup OBJECT-GROUP
OBJECTS
{
alaDot1xPortSlotNumber,
alaDot1xPortPortNumber,
alaDot1xPortMACAddress,
alaDot1xPortVlan,
alaDot1xPortProtocol,
alaDot1xPortUserName,
alaDot1xPortState
}
STATUS current
DESCRIPTION
"Collection of 802.1x objects for port status."
::= { alaIND1Dot1XMIBGroups 1 }
alaDot1xPortLookupGroup OBJECT-GROUP
OBJECTS
{
alaDot1xPortLookupSlotNumber,
alaDot1xPortLookupPortNumber,
alaDot1xPortLookupMACAddress,
alaDot1xPortLookupInterfaceNumber
}
STATUS current
DESCRIPTION
"Collection of 802.1x objects for port lookup."
::= { alaIND1Dot1XMIBGroups 2 }
alaINDDot1XPolicyGroup OBJECT-GROUP
OBJECTS
{
alaDot1xNonSuppPolicy,
alaDot1xSuppPolicy,
alaDot1xPollingCnt,
alaDot1xCaptivePortalPolicy,
alaDot1xCPortalSessionLimit,
alaDot1xCPortalRetryCnt
}
STATUS current
DESCRIPTION
"Collection of 802.1x objects for supplicant and non-supplicant policies."
::= { alaIND1Dot1XMIBGroups 3 }
alaINDDot1XDeviceStatusGroup OBJECT-GROUP
OBJECTS
{
alaDot1xDeviceStatusVlan,
alaDot1xDeviceStatusIPAddress,
alaDot1xDeviceStatusUserName,
alaDot1xDeviceStatusProfileUsed,
alaDot1xDeviceStatusAuthType,
alaDot1xDeviceStatusPolicyUsed,
alaDot1xDeviceStatusAuthResult,
alaDot1xDeviceStatusMacLearntState,
alaDot1xDeviceStatusTimeLearned,
alaDot1xDeviceStatusCaptivePortalUsed
}
STATUS current
DESCRIPTION
"Collection of 802.1x objects for the status of the devices on an 802.1X enable port."
::= { alaIND1Dot1XMIBGroups 4 }
alaDot1xAuthSvrTimeoutGroup OBJECT-GROUP
OBJECTS
{
alaDot1xAuthSvrTimeoutPolicy,
alaDot1xAuthSvrTimeoutReAuthPeriod,
alaDot1xAuthSvrTimeoutStatus
}
STATUS current
DESCRIPTION
"Collection of 802.1x objects for the Authentication Server Timeout."
::= { alaIND1Dot1XMIBGroups 5 }
alaPassthroughConfigGroup OBJECT-GROUP
OBJECTS
{
alaDot1xPassthroughStatus,
alaAvlanPassthroughStatus
}
STATUS obsolete
DESCRIPTION
" Status of passthrough for 802.1x and avlan configuration in devices."
::= { alaIND1Dot1XMIBGroups 6 }
END