path: root/MIBS/transition/TN-NAS-MIB

-- *****************************************************************
-- TN-NAS-MIB.mib : TN Network Access Service MIB
--
-- Copyright (c) 2013 by Transition Networks, Inc.
-- All rights reserved.
--
-- *************************************************************************************************
--

TN-NAS-MIB DEFINITIONS ::= BEGIN

IMPORTS
    MODULE-IDENTITY,
    NOTIFICATION-TYPE,
    OBJECT-TYPE,
    Unsigned32,
    Gauge32,
    TimeTicks
        FROM SNMPv2-SMI
    MODULE-COMPLIANCE,
    OBJECT-GROUP,
    NOTIFICATION-GROUP
        FROM SNMPv2-CONF
    RowStatus,TruthValue,
    MacAddress,
    DisplayString
        FROM SNMPv2-TC     -- [RFC2579]  
    VlanId
        FROM Q-BRIDGE-MIB
    tnProducts
        FROM TRANSITION-SMI; 
        
TnNASAdminStateType ::= TEXTUAL-CONVENTION
    STATUS      current
    DESCRIPTION
       "Indicates the type of network access server admin state type.
       "
    SYNTAX      INTEGER {
                  forceAuthorized (1),
                  portBased802dot1x (2),
                  forceUnauthorized (3),
                  macBasedAuth (4),
                  single802dot1x (5),
                  multi802dot1x (6)
                } 

--
-- main body
--
tnNASMIB MODULE-IDENTITY
    LAST-UPDATED    "201204051930Z"
    ORGANIZATION    "Transition Networks, Inc."
    CONTACT-INFO
            "Transition Networks
             Technical Support
             10900 Red Circle Drive
             Minnetonka, MN 55343 USA
             Tel: +1-800-526-9267
             E-mail: techsupport@transition.com
            "
    DESCRIPTION
        "TBD"
    REVISION        "201204200000Z"
    DESCRIPTION
        "Initial version of this MIB module."
    ::= { tnProducts 125 }

tnNASMIBNotifications  OBJECT IDENTIFIER ::= { tnNASMIB 0 }

tnNASMIBObjects  OBJECT IDENTIFIER ::= { tnNASMIB 1 }

tnNASMIBConformance  OBJECT IDENTIFIER ::= { tnNASMIB 2 }

--
-- sub Objects list
--
tnNASSysMgmt                                   OBJECT IDENTIFIER ::= { tnNASMIBObjects 1 }
tnNASPortMgmt                                  OBJECT IDENTIFIER ::= { tnNASMIBObjects 2 }
tnNASAuthCountMgmt                             OBJECT IDENTIFIER ::= { tnNASMIBObjects 3 }
tnNASPortStatus                                OBJECT IDENTIFIER ::= { tnNASMIBObjects 4 }
tnNASClientStatus                              OBJECT IDENTIFIER ::= { tnNASMIBObjects 5 }
tnNASSelectedBackendServerCounter              OBJECT IDENTIFIER ::= { tnNASMIBObjects 6 }
tnNASSelectedEapolCounter                      OBJECT IDENTIFIER ::= { tnNASMIBObjects 7 }
tnNASAttachedClientStatus                      OBJECT IDENTIFIER ::= { tnNASMIBObjects 8 }
tnNASClearCounter                              OBJECT IDENTIFIER ::= { tnNASMIBObjects 9 }

-- ******************************************************************
-- system configuration
-- ******************************************************************
tnNASSysReAuthEnabled OBJECT-TYPE
    SYNTAX          INTEGER{
                       enable (1),
                       disable (2)
                    }
    MAX-ACCESS      read-write
    STATUS          current
    DESCRIPTION
        "If checked, successfully authenticated supplicants/clients are reauthenticated after the interval specified by 
         the Reauthentication Period.Reauthentication for 802.1X-enabled ports can be used to detect if a new device is plugged into 
         a switch port or if a supplicant is no longer attached.
         For MAC-based ports, reauthentication is only useful if the RADIUS server configuration has changed. 
         It does not involve communication between the switch and the client, and therefore doesn't imply that a client is still present on a port.
         "
    ::= { tnNASSysMgmt 1 }

tnNASSysReAuthPeriod OBJECT-TYPE
    SYNTAX          INTEGER(1..3600)
    MAX-ACCESS      read-write
    STATUS          current
    DESCRIPTION
        "Determines the period, in seconds, after which a connected client must be reauthenticated. 
         This is only active if the Reauthentication Enabled checkbox is checked. Valid values are in the range 1 to 3600 seconds.
         "
    ::= { tnNASSysMgmt 2 }
  
tnNASSysEAPOLTimeout OBJECT-TYPE
    SYNTAX          INTEGER(1..65535)
    MAX-ACCESS      read-write
    STATUS          current
    DESCRIPTION
        "Determines the time for retransmission of Request Identity EAPOL frames.
         Valid values are in the range 1 to 65535 seconds. This has no effect for MAC-based ports..
         "
    ::= { tnNASSysMgmt 3 }

tnNASSysAgingPeriod OBJECT-TYPE
    SYNTAX          Unsigned32(10..1000000)
    MAX-ACCESS      read-write
    STATUS          current
    DESCRIPTION
        "This setting applies to the following modes, i.e. modes using the Port Security functionality to secure MAC addresses:
         Single 802.1X, Multi 802.1X, MAC-Based Auth.
         When the NAS module uses the Port Security module to secure MAC addresses, the Port Security module needs to 
         check for activity on the MAC address in question at regular intervals and free resources if no activity is seen within 
         a given period of time. This parameter controls exactly this period and can be set to a number between 10 and 1000000 seconds. 
         If reauthentication is enabled and the port is in an 802.1X-based mode, this is not so critical, since supplicants that are 
         no longer attached to the port will get removed upon the next reauthentication, which will fail. But if reauthentication is not enabled, 
         the only way to free resources is by aging the entries. 
         For ports in MAC-based Auth. mode, reauthentication doesn't cause direct communication between the switch and the client, 
         so this will not detect whether the client is still attached or not, and the only way to free any resources is to age the entry..
         "
    ::= { tnNASSysMgmt 4 }
    
tnNASSysHoldTime OBJECT-TYPE
    SYNTAX          Unsigned32(10..1000000)
    MAX-ACCESS      read-write
    STATUS          current
    DESCRIPTION
        "This setting applies to the following modes, i.e. modes using the Port Security functionality to secure MAC addresses:
         Single 802.1X, Multi 802.1X, MAC-Based Auth.
         If a client is denied access - either because the RADIUS server denies the client access or because the RADIUS server request times out,
         the client is put on hold in the Unauthorized state. The hold timer does not count during an on-going authentication.
         In MAC-based Auth. mode, the switch will ignore new frames coming from the client during the hold time.
         The Hold Time can be set to a number between 10 and 1000000 seconds..
         "
    ::= { tnNASSysMgmt 5 }
    
tnNASSysRadiusAssignedQosEnable OBJECT-TYPE
    SYNTAX          INTEGER{
                       enable (1),
                       disable (2)
                    }
    MAX-ACCESS      read-write
    STATUS          current
    DESCRIPTION
        "RADIUS-assigned QoS provides a means to centrally control the traffic class to which traffic coming from 
        a successfully authenticated supplicant is assigned on the switch. The RADIUS server must be configured to 
        transmit special RADIUS attributes to take advantage of this feature.

        When checked, the individual ports' ditto setting determine whether RADIUS-assigned QoS Class is enabled on that port. 
        When unchecked, RADIUS-server assigned QoS Class is disabled on all ports..
         "
    ::= { tnNASSysMgmt 6 }
    
tnNASSysRadiusAssignedVlanEnable OBJECT-TYPE
    SYNTAX          INTEGER{
                       enable (1),
                       disable (2)
                    }
    MAX-ACCESS      read-write
    STATUS          current
    DESCRIPTION
        "RADIUS-assigned VLAN provides a means to centrally control the VLAN on which a successfully authenticated supplicant 
        is placed on the switch. Incoming traffic will be classified to and switched on the RADIUS-assigned VLAN. 
        The RADIUS server must be configured to transmit special RADIUS attributes to take advantage of this feature.

        When checked, the individual ports' ditto setting determine whether RADIUS-assigned VLAN is enabled on that port. 
        When unchecked, RADIUS-server assigned VLAN is disabled on all ports..
         "
    ::= { tnNASSysMgmt 7 }

tnNASSysGuestVlanEnable OBJECT-TYPE
    SYNTAX          INTEGER{
                       enable (1),
                       disable (2)
                    }
    MAX-ACCESS      read-write
    STATUS          current
    DESCRIPTION
        "A Guest VLAN is a special VLAN - typically with limited network access - on which 802.1X-unaware clients are placed after 
         a network administrator-defined timeout. The switch follows a set of rules for entering and leaving the Guest VLAN as listed below.

         When checked, the individual ports' ditto setting determines whether the port can be moved into Guest VLAN. 
         When unchecked, the ability to move to the Guest VLAN is disabled on all ports..
         "
    ::= { tnNASSysMgmt 8 }
    
tnNASSysGuestVlanId OBJECT-TYPE
    SYNTAX          VlanId
    MAX-ACCESS      read-write
    STATUS          current
    DESCRIPTION
        "This is the value that a port's Port VLAN ID is set to if a port is moved into the Guest VLAN. 
         It is only changeable if the Guest VLAN option is globally enabled.
         Valid values are in the range [1; 4094].
         "
    ::= { tnNASSysMgmt 9 }
    
tnNASSysMaxReAuthCount OBJECT-TYPE
    SYNTAX          INTEGER(1..255)
    MAX-ACCESS      read-write
    STATUS          current
    DESCRIPTION
        "The number of times the switch transmits an EAPOL Request Identity frame without response before considering entering 
         the Guest VLAN is adjusted with this setting. The value can only be changed if the Guest VLAN option is globally enabled.
         Valid values are in the range [1; 255]..
         "
    ::= { tnNASSysMgmt 10 }
    
tnNASSysAllowGuestVlanIFEAPOLSeen OBJECT-TYPE
    SYNTAX          INTEGER{
                       enable (1),
                       disable (2)
                    }
    MAX-ACCESS      read-write
    STATUS          current
    DESCRIPTION
        "The switch remembers if an EAPOL frame has been received on the port for the life-time of the port. 
         Once the switch considers whether to enter the Guest VLAN, it will first check if this option is enabled or disabled. 
         If disabled (unchecked; default), the switch will only enter the Guest VLAN if an EAPOL frame has not been received 
         on the port for the life-time of the port. 
         If enabled (checked), the switch will consider entering the Guest VLAN even if an EAPOL frame has been received 
         on the port for the life-time of the port.
         The value can only be changed if the Guest VLAN option is globally enabled..
         "
    ::= { tnNASSysMgmt 11 }
 
-- ******************************************************************
-- NAS port configuration table
-- ******************************************************************
tnNASPortCfgTable OBJECT-TYPE
    SYNTAX          SEQUENCE OF TnNASPortCfgEntry
    MAX-ACCESS      not-accessible
    STATUS          current
    DESCRIPTION
        "This table displays and sets port configuratio.
        "
    ::= { tnNASPortMgmt 1 }

tnNASPortCfgEntry OBJECT-TYPE
    SYNTAX          TnNASPortCfgEntry
    MAX-ACCESS      not-accessible
    STATUS          current
    DESCRIPTION
        "This entry represents a port configuration."
    INDEX           { tnNASPortNum }
    ::= { tnNASPortCfgTable 1 }

TnNASPortCfgEntry ::= SEQUENCE {
        tnNASPortNum                                Unsigned32,
        tnNASAdminState                             INTEGER,
        tnNASRadiusAssignedQosEnabled               INTEGER,
        tnNASRadiusAssignedVlanEnabled              INTEGER,
        tnNASGuestVlanEnabled                       INTEGER,
        tnNASPortCfgState                           INTEGER
}

tnNASPortNum OBJECT-TYPE
     SYNTAX     Unsigned32
     MAX-ACCESS not-accessible
     STATUS     current
     DESCRIPTION
        "The port number for which the configuration below applies.
        "
    ::= { tnNASPortCfgEntry 1 }

tnNASAdminState OBJECT-TYPE
    SYNTAX          TnNASAdminStateType
    MAX-ACCESS      read-write
    STATUS          current
    DESCRIPTION
        "If NAS is globally enabled, this selection controls the port's authentication mode. 
        "
    ::= { tnNASPortCfgEntry 2 }

tnNASRadiusAssignedQosEnabled  OBJECT-TYPE
    SYNTAX         INTEGER{
                       enable (1),
                       disable (2)
                    }
    MAX-ACCESS      read-write
    STATUS          current
    DESCRIPTION
        "When RADIUS-Assigned QoS is both globally enabled and enabled (checked) on a given port, the switch reacts to QoS Class information 
        carried in the RADIUS Access-Accept packet transmitted by the RADIUS server when a supplicant is successfully authenticated. 
        If present and valid, traffic received on the supplicant's port will be classified to the given QoS Class. If (re-)authentication fails 
        or the RADIUS Access-Accept packet no longer carries a QoS Class or it's invalid, or the supplicant is otherwise no longer present on 
        the port, the port's QoS Class is immediately reverted to the original QoS Class (which may be changed by the administrator 
        in the meanwhile without affecting the RADIUS-assigned).
        This option is only available for single-client modes, i.e Port-based 802.1X, Single 802.1X
        "
    ::= { tnNASPortCfgEntry 3 }

tnNASRadiusAssignedVlanEnabled OBJECT-TYPE
    SYNTAX          INTEGER{
                       enable (1),
                       disable (2)
                    }
    MAX-ACCESS      read-write
    STATUS          current
    DESCRIPTION
        "When RADIUS-Assigned VLAN is both globally enabled and enabled (checked) for a given port, the switch reacts to VLAN ID information 
         carried in the RADIUS Access-Accept packet transmitted by the RADIUS server when a supplicant is successfully authenticated. 
         If present and valid, the port's Port VLAN ID will be changed to this VLAN ID, the port will be set to be a member of that VLAN ID, 
         and the port will be forced into VLAN unaware mode. Once assigned, all traffic arriving on the port will be classified and switched 
         on the RADIUS-assigned VLAN ID.
         If (re-)authentication fails or the RADIUS Access-Accept packet no longer carries a VLAN ID or it's invalid, or the supplicant 
         is otherwise no longer present on the port, the port's VLAN ID is immediately reverted to the original VLAN ID 
         (which may be changed by the administrator in the meanwhile without affecting the RADIUS-assigned).
         This option is only available for single-client modes, i.e. Port-based 802.1X, Single 802.1X.
         "
    ::= { tnNASPortCfgEntry 4 }

tnNASGuestVlanEnabled OBJECT-TYPE
    SYNTAX          INTEGER{
                       enable (1),
                       disable (2)
                    }
    MAX-ACCESS      read-write
    STATUS          current
    DESCRIPTION
        "TWhen Guest VLAN is both globally enabled and enabled (checked) for a given port, the switch considers moving the port into 
        the Guest VLAN according to the rules outlined below.
        This option is only available for EAPOL-based modes, i.e.: Port-based 802.1X, Single 802.1X, Multi 802.1X  
         "
    ::= { tnNASPortCfgEntry 5 }
          
tnNASPortCfgState OBJECT-TYPE
    SYNTAX          INTEGER {
                       linkDown (0),
                       authorized(1),
                       unauthorized (2),
                       globallyDisabled (3),
                       authOrUnauth(4) 
                    }
    MAX-ACCESS      read-only
    STATUS          current
    DESCRIPTION
        "The current state of the port.
         "
    ::= { tnNASPortCfgEntry 6 }       
                                              
-- ******************************************************************
-- NAS authorized count table
-- ******************************************************************
tnNASAuthCountTable OBJECT-TYPE
    SYNTAX          SEQUENCE OF TnNASAuthCountEntry
    MAX-ACCESS      not-accessible
    STATUS          current
    DESCRIPTION
        "This table contains the configuration of auth counter."
    ::= { tnNASAuthCountMgmt 1 }

tnNASAuthCountEntry OBJECT-TYPE
    SYNTAX        TnNASAuthCountEntry
    MAX-ACCESS      not-accessible
    STATUS          current
    DESCRIPTION
        "This entry represents an auth counter.
        "
    INDEX           { tnNASPortNum }
    ::= { tnNASAuthCountTable 1 }

TnNASAuthCountEntry ::= SEQUENCE {
        tnNASAuthCount        INTEGER,
        tnNASUnauthCount      INTEGER
}
        
tnNASAuthCount OBJECT-TYPE
    SYNTAX    INTEGER
    MAX-ACCESS  read-only
    STATUS current
    DESCRIPTION
        "NAS auththenticate count"
    ::= { tnNASAuthCountEntry 1 }
        
tnNASUnauthCount OBJECT-TYPE
    SYNTAX    INTEGER
    MAX-ACCESS  read-only
    STATUS current
    DESCRIPTION
        "NAS unauththenticate count"
    ::= { tnNASAuthCountEntry 2 }
 
-- ******************************************************************
-- NAS port status table
-- ******************************************************************  
tnNASPortStatusTable OBJECT-TYPE
    SYNTAX          SEQUENCE OF TnNASPortStatusEntry
    MAX-ACCESS      not-accessible
    STATUS          current
    DESCRIPTION
        "This table contains the configuration of port status."
    ::= { tnNASPortStatus 1 }

tnNASPortStatusEntry OBJECT-TYPE
    SYNTAX        TnNASPortStatusEntry
    MAX-ACCESS      not-accessible
    STATUS          current
    DESCRIPTION
        "This entry represents a port status.
        "
    INDEX           { tnNASPortNum }
    ::= { tnNASPortStatusTable 1 }

TnNASPortStatusEntry ::= SEQUENCE {
        tnNASPortAdminState       INTEGER,
        tnNASPortState            INTEGER,
        tnNASQosClass             OCTET STRING,
        tnNASPortVlanId           VlanId
}

tnNASPortAdminState OBJECT-TYPE
    SYNTAX    TnNASAdminStateType
    MAX-ACCESS  read-only
    STATUS current
    DESCRIPTION
        "The port's current administrative state.
        "
    ::= { tnNASPortStatusEntry 1 }

tnNASPortState OBJECT-TYPE
    SYNTAX    INTEGER{
                       linkDown (0),
                       authorized(1),
                       unauthorized (2),
                       globallyDisabled (3),
                       authOrUnauth(4) 
                    }
    MAX-ACCESS  read-only
    STATUS current
    DESCRIPTION
        "The current state of the port.
        "
    ::= { tnNASPortStatusEntry 2 }
   
tnNASQosClass OBJECT-TYPE
    SYNTAX    OCTET STRING
    MAX-ACCESS  read-only
    STATUS current
    DESCRIPTION
        "The QoS class assigned by the RADIUS server. The field is blank if no QoS class is assigned.
        "
    ::= { tnNASPortStatusEntry 3 }
    
tnNASPortVlanId OBJECT-TYPE
    SYNTAX    VlanId
    MAX-ACCESS  read-only
    STATUS current
    DESCRIPTION
        "The VLAN ID that NAS has put the port in. The field is blank, if the Port VLAN ID is not overridden by NAS. 
        "
    ::= { tnNASPortStatusEntry 4 }
  
-- ******************************************************************
-- NAS client and supplication status table
-- ****************************************************************** 
tnNASClientStatusTable OBJECT-TYPE
    SYNTAX          SEQUENCE OF TnNASClientStatusEntry
    MAX-ACCESS      not-accessible
    STATUS          current
    DESCRIPTION
        "This table contains the configuration of client status."
    ::= { tnNASClientStatus 1 }

tnNASClientStatusEntry OBJECT-TYPE
    SYNTAX          TnNASClientStatusEntry
    MAX-ACCESS      not-accessible
    STATUS          current
    DESCRIPTION
        "This entry represents a client status.
        "
    INDEX           { tnNASPortNum, tnNASClientNum }
    ::= { tnNASClientStatusTable 1 }

TnNASClientStatusEntry ::= SEQUENCE { 
        tnNASClientNum                Unsigned32,
        tnNASMacAddr                  MacAddress,
        tnNASVlanId                   VlanId,
        tnNASVersion                  INTEGER,
        tnNASIdentify                 OCTET STRING
}      

tnNASClientNum OBJECT-TYPE
         SYNTAX     Unsigned32(1..2)
         MAX-ACCESS not-accessible
         STATUS     current
         DESCRIPTION
            "1 for last client/supplication; 2 for selected client/supplication."
        ::= { tnNASClientStatusEntry 1 }

tnNASMacAddr OBJECT-TYPE
        SYNTAX      MacAddress
        MAX-ACCESS  read-only
        STATUS      current
        DESCRIPTION "The MAC address of the last supplicant/client.
                    "
        ::= { tnNASClientStatusEntry 2 }

tnNASVlanId OBJECT-TYPE
        SYNTAX      VlanId
        MAX-ACCESS  read-only
        STATUS      current
        DESCRIPTION "The VLAN ID on which the last frame from the last supplicant/client was received.
                    "
        ::= { tnNASClientStatusEntry 3 } 
        
tnNASIdentify OBJECT-TYPE
        SYNTAX      OCTET STRING
        MAX-ACCESS  read-only
        STATUS      current
        DESCRIPTION "802.1X-based: The user name (supplicant identity) carried in the most recently received Response Identity EAPOL frame. 
                     MAC-based: Not applicable.
                    "
        ::= { tnNASClientStatusEntry 4 }        
   
-- ******************************************************************
-- NAS selected client backend server counter table
-- ****************************************************************** 
tnNASSelectedBackendServerCounterTable OBJECT-TYPE
    SYNTAX          SEQUENCE OF TnNASSelectedBackendServerCounterEntry
    MAX-ACCESS      not-accessible
    STATUS          current
    DESCRIPTION
        "This table contains the configuration of Selected backend server counter."
    ::= { tnNASSelectedBackendServerCounter 1 }

tnNASSelectedBackendServerCounterEntry OBJECT-TYPE
    SYNTAX          TnNASSelectedBackendServerCounterEntry
    MAX-ACCESS      not-accessible
    STATUS          current
    DESCRIPTION
        "This entry represents an Selected backend server counter.
        "
    INDEX           { tnNASPortNum }
    ::= { tnNASSelectedBackendServerCounterTable 1 }

TnNASSelectedBackendServerCounterEntry ::= SEQUENCE {
        tnNASRxAccessChallenges        Gauge32,
        tnNASRxOtherRequests           Gauge32,
        tnNASRxAuthSuccesses           Gauge32,
        tnNASRxAuthFailures            Gauge32,
        tnNASTxResponses               Gauge32
}

tnNASRxAccessChallenges OBJECT-TYPE
        SYNTAX      Gauge32
        MAX-ACCESS  read-only
        STATUS      current
        DESCRIPTION "802.1X-based: Counts the number of times that the switch receives the first request from the backend server 
                     following the first response from the supplicant. Indicates that the backend server has communication with the switch. 
                     MAC-based: Counts all Access Challenges received from the backend server for this port (left-most table) or client (right-most table).
                    "
        ::= { tnNASSelectedBackendServerCounterEntry 1 }

tnNASRxOtherRequests OBJECT-TYPE
        SYNTAX      Gauge32
        MAX-ACCESS  read-only
        STATUS      current
        DESCRIPTION "802.1X-based: Counts the number of times that the switch sends an EAP Request packet following the first to the supplicant. 
                     Indicates that the backend server chose an EAP-method. 
                     MAC-based: Not applicable.
                    "
        ::= { tnNASSelectedBackendServerCounterEntry 2 }
        
tnNASRxAuthSuccesses OBJECT-TYPE
        SYNTAX      Gauge32
        MAX-ACCESS  read-only
        STATUS      current
        DESCRIPTION "802.1X- and MAC-based: Counts the number of times that the switch receives a success indication. 
                     Indicates that the supplicant/client has successfully authenticated to the backend server.
                    "
        ::= { tnNASSelectedBackendServerCounterEntry 3 }
        
tnNASRxAuthFailures OBJECT-TYPE
        SYNTAX      Gauge32
        MAX-ACCESS  read-only
        STATUS      current
        DESCRIPTION "802.1X- and MAC-based: Counts the number of times that the switch receives a failure message. 
                     This indicates that the supplicant/client has not authenticated to the backend server.
                    "
        ::= { tnNASSelectedBackendServerCounterEntry 4 }
        
tnNASTxResponses OBJECT-TYPE
        SYNTAX      Gauge32
        MAX-ACCESS  read-only
        STATUS      current
        DESCRIPTION "    802.1X-based: Counts the number of times that the switch attempts to send a supplicant's first response packet to 
                        the backend server. Indicates the switch attempted communication with the backend server. Possible retransmissions are 
                        not counted. 
                        MAC-based: Counts all the backend server packets sent from the switch towards the backend server for a given port
                        or client (right-most table). Possible retransmissions are not counted.
                    "
        ::= { tnNASSelectedBackendServerCounterEntry 5 }

-- ******************************************************************
-- NAS selected client EAPOL counter table
-- ****************************************************************** 
tnNASSelectedEapolCounterTable OBJECT-TYPE
    SYNTAX          SEQUENCE OF TnNASSelectedEapolCounterEntry
    MAX-ACCESS      not-accessible
    STATUS          current
    DESCRIPTION
        "This table contains the configuration of selected EAPOL counter."
    ::= { tnNASSelectedEapolCounter 1 }

tnNASSelectedEapolCounterEntry OBJECT-TYPE
    SYNTAX          TnNASSelectedEapolCounterEntry
    MAX-ACCESS      not-accessible
    STATUS          current
    DESCRIPTION
        "This entry represents a selected EAPOL counter.
        "
    INDEX           { tnNASPortNum }
    ::= { tnNASSelectedEapolCounterTable 1 }

TnNASSelectedEapolCounterEntry ::= SEQUENCE {
        tnNASRxTotal                       Gauge32,
        tnNASRxResponseId                  Gauge32,
        tnNASRxResponses                   Gauge32,
        tnNASRxStart                       Gauge32,
        tnNASRxLogoff                      Gauge32,
        tnNASRxInvalidType                 Gauge32,
        tnNASRxInvalidLength               Gauge32,
        tnNASTxTotal                       Gauge32,
        tnNASTxRequestId                   Gauge32,
        tnNASTxRequests                    Gauge32
}

tnNASRxTotal OBJECT-TYPE
        SYNTAX      Gauge32
        MAX-ACCESS  read-only
        STATUS      current
        DESCRIPTION "The number of valid EAPOL frames of any type that have been received by the switch.
                    "
        ::= { tnNASSelectedEapolCounterEntry 1 }

tnNASRxResponseId OBJECT-TYPE
        SYNTAX      Gauge32
        MAX-ACCESS  read-only
        STATUS      current
        DESCRIPTION "The number of valid EAPOL Response Identity frames that have been received by the switch.
                    "
        ::= { tnNASSelectedEapolCounterEntry 2 }
        
tnNASRxResponses OBJECT-TYPE
        SYNTAX      Gauge32
        MAX-ACCESS  read-only
        STATUS      current
        DESCRIPTION "The number of valid EAPOL response frames (other than Response Identity frames) that have been received by the switch.
                    "
        ::= { tnNASSelectedEapolCounterEntry 3 }
        
tnNASRxStart OBJECT-TYPE
        SYNTAX      Gauge32
        MAX-ACCESS  read-only
        STATUS      current
        DESCRIPTION "The number of EAPOL Start frames that have been received by the switch.
                    "
        ::= { tnNASSelectedEapolCounterEntry 4 }
        
tnNASRxLogoff OBJECT-TYPE
        SYNTAX      Gauge32
        MAX-ACCESS  read-only
        STATUS      current
        DESCRIPTION "The number of valid EAPOL Logoff frames that have been received by the switch.
                    "
        ::= { tnNASSelectedEapolCounterEntry 5 }
        
tnNASRxInvalidType OBJECT-TYPE
        SYNTAX      Gauge32
        MAX-ACCESS  read-only
        STATUS      current
        DESCRIPTION "The number of EAPOL frames that have been received by the switch in which the frame type is not recognized.
                    "
        ::= { tnNASSelectedEapolCounterEntry 6 }
        
tnNASRxInvalidLength OBJECT-TYPE
        SYNTAX      Gauge32
        MAX-ACCESS  read-only
        STATUS      current
        DESCRIPTION "The number of EAPOL frames that have been received by the switch in which the Packet Body Length field is invalid.
                    "
        ::= { tnNASSelectedEapolCounterEntry 7 }
        
tnNASTxTotal OBJECT-TYPE
        SYNTAX      Gauge32
        MAX-ACCESS  read-only
        STATUS      current
        DESCRIPTION "The number of EAPOL frames of any type that have been transmitted by the switch.
                    "
        ::= { tnNASSelectedEapolCounterEntry 8 }
        
tnNASTxRequestId OBJECT-TYPE
        SYNTAX      Gauge32
        MAX-ACCESS  read-only
        STATUS      current
        DESCRIPTION "The number of EAPOL Request Identity frames that have been transmitted by the switch.
                    "
        ::= { tnNASSelectedEapolCounterEntry 9 }
        
tnNASTxRequests OBJECT-TYPE
        SYNTAX      Gauge32
        MAX-ACCESS  read-only
        STATUS      current
        DESCRIPTION "The number of valid EAPOL Request frames (other than Request Identity frames) that have been transmitted by the switch.
                    "
        ::= { tnNASSelectedEapolCounterEntry 10 }        
        
-- ******************************************************************
-- NAS attached client/supplication status table
-- ******************************************************************  
tnNASAttachedClientStatusTable OBJECT-TYPE
    SYNTAX          SEQUENCE OF TnNASAttachedClientStatusEntry
    MAX-ACCESS      not-accessible
    STATUS          current
    DESCRIPTION
        "This table contains the configuration of attached client status."
    ::= { tnNASAttachedClientStatus 1 }

tnNASAttachedClientStatusEntry OBJECT-TYPE
    SYNTAX          TnNASAttachedClientStatusEntry
    MAX-ACCESS      not-accessible
    STATUS          current
    DESCRIPTION
        "This entry represents an attached client status.
        "
    INDEX           { tnNASPortNum, tnNASAttachedNum }
    ::= { tnNASAttachedClientStatusTable 1 }

TnNASAttachedClientStatusEntry ::= SEQUENCE {
        tnNASAttachedNum                   Unsigned32,
        tnNASAttachedIdentify              OCTET STRING,
        tnNASMacAddress                    MacAddress,
        tnNASAttachedVlanId                VlanId,
        tnNASState                         INTEGER,
        tnNASLastAuthentication            OCTET STRING,
        tnNASSelected                      INTEGER
}

tnNASAttachedNum OBJECT-TYPE
        SYNTAX     Unsigned32
        MAX-ACCESS not-accessible
        STATUS      current
        DESCRIPTION "The number of attached clients/supplications.
                    "
        ::= { tnNASAttachedClientStatusEntry 1 } 
        
tnNASAttachedIdentify OBJECT-TYPE
        SYNTAX     OCTET STRING
        MAX-ACCESS read-only
        STATUS      current
        DESCRIPTION "Shows the identity of the supplicant, as received in the Response Identity EAPOL frame.
                     If no supplicants are attached, it shows No supplicants attached. 
                     This is not available for MAC-based Auth..
                    "
        ::= { tnNASAttachedClientStatusEntry 2 }
        
tnNASMacAddress OBJECT-TYPE
        SYNTAX     MacAddress
        MAX-ACCESS read-only
        STATUS      current
        DESCRIPTION "For Multi 802.1X, this column holds the MAC address of the attached supplicant.
                     For MAC-based Auth., this column holds the MAC address of the attached client.
                     If no clients are attached, it shows No clients attached.
                    "
        ::= { tnNASAttachedClientStatusEntry 3 }
        
tnNASAttachedVlanId OBJECT-TYPE
        SYNTAX     VlanId
        MAX-ACCESS read-only
        STATUS      current
        DESCRIPTION "This column holds the VLAN ID that the corresponding client is currently secured through the Port Security module.
                    "
        ::= { tnNASAttachedClientStatusEntry 4 }
        
tnNASState OBJECT-TYPE
        SYNTAX     INTEGER {
                       linkDown (0),
                       authorized(1),
                       unauthorized (2),
                       globallyDisabled (3) 
                    }
        MAX-ACCESS read-only
        STATUS      current
        DESCRIPTION "The client can either be authenticated or unauthenticated. In the authenticated state, it is allowed to forward frames 
                     on the port, and in the unauthenticated state, it is blocked. As long as the backend server hasn't successfully 
                     authenticated the client, it is unauthenticated. If an authentication fails for one or the other reason, 
                     the client will remain in the unauthenticated state for Hold Time seconds.
                    "
        ::= { tnNASAttachedClientStatusEntry 5 }
        
tnNASLastAuthentication OBJECT-TYPE
        SYNTAX     OCTET STRING
        MAX-ACCESS read-only
        STATUS      current
        DESCRIPTION "Shows the date and time of the last authentication of the client (successful as well as unsuccessful).
                    "
        ::= { tnNASAttachedClientStatusEntry 6 }
        
tnNASSelected OBJECT-TYPE
        SYNTAX     INTEGER {
                       unselected(0),
                       selected(1) 
                    }
        MAX-ACCESS read-write
        STATUS      current
        DESCRIPTION "select specific attached client.
                    "
        ::= { tnNASAttachedClientStatusEntry 7 } 
        
-- ******************************************************************
-- NAS clear counter table
-- ******************************************************************        
 tnNASClearCounterTable OBJECT-TYPE
    SYNTAX          SEQUENCE OF TnNASClearCounterEntry
    MAX-ACCESS      not-accessible
    STATUS          current
    DESCRIPTION
        "This table contains the configuration of clearing counter."
    ::= { tnNASClearCounter 1 }

tnNASClearCounterEntry OBJECT-TYPE
    SYNTAX          TnNASClearCounterEntry
    MAX-ACCESS      not-accessible
    STATUS          current
    DESCRIPTION
        "This entry represents a clear counter.
        "
    INDEX           { tnNASPortNum }
    ::= { tnNASClearCounterTable 1 }

TnNASClearCounterEntry ::= SEQUENCE {
        tnNASClear                      INTEGER
}

tnNASClear OBJECT-TYPE
        SYNTAX     INTEGER {
                       unclear(0),
                       clear(1) 
                    }
        MAX-ACCESS read-write
        STATUS      current
        DESCRIPTION "The action of clearing counter.
                    "
        ::= { tnNASClearCounterEntry 1 }
END