Standard view Table view

CISCO-AUTH-FRAMEWORK-MIB

        MIB module for Authentication Framework in the system.
        
Authentication Framework provides generic configurations
for authentication methods in the system and manage the
failover sequence of these methods in a flexible manner.
Source file
CISCO-AUTH-FRAMEWORK-MIB
Last revised
Identity
ciscoAuthFrameworkMIB
Base OID
1.3.6.1.4.1.9.9.656
Imported Objects
CISCO-NAC-TC-MIB CnnEouPostureTokenString
CISCO-PRIVATE-VLAN-MIB VlanIndexOrZero
CISCO-SMI ciscoMgmt
IF-MIB ifIndex ifName
INET-ADDRESS-MIB InetAddress InetAddressType
SNMP-FRAMEWORK-MIB SnmpAdminString
SNMPv2-CONF MODULE-COMPLIANCE NOTIFICATION-GROUP OBJECT-GROUP
SNMPv2-SMI Integer32 MODULE-IDENTITY NOTIFICATION-TYPE OBJECT-TYPE Unsigned32
SNMPv2-TC MacAddress TEXTUAL-CONVENTION TruthValue
Net-SNMP examples using the cisco MIB directory Show commands

These commands use the standard Observium installation path and load the selected MIB variant before the RFC and Net-SNMP directories.

Translate the module identity
/usr/bin/snmptranslate -Pud -Ir -On -m 'CISCO-AUTH-FRAMEWORK-MIB' -M '/opt/observium/mibs/cisco:/opt/observium/mibs/rfc:/opt/observium/mibs/net-snmp' 'CISCO-AUTH-FRAMEWORK-MIB::ciscoAuthFrameworkMIB'
Walk the MIB subtree
/usr/bin/snmpbulkwalk -v2c -c '<community>' -Pud -Ir -OQUs -m 'CISCO-AUTH-FRAMEWORK-MIB' -M '/opt/observium/mibs/cisco:/opt/observium/mibs/rfc:/opt/observium/mibs/net-snmp' 'udp:<hostname>:161' 'CISCO-AUTH-FRAMEWORK-MIB::ciscoAuthFrameworkMIB'
How SNMP, Net-SNMP, MIB paths, and variants work
Objects (88)
ciscoAuthFrameworkMIB
.1.3.6.1.4.1.9.9.656
ciscoAuthFrameworkMIBNotifs
.1.3.6.1.4.1.9.9.656.0
ciscoAuthFrameworkMIBObjects
.1.3.6.1.4.1.9.9.656.1
ciscoAuthFrameworkSystem
.1.3.6.1.4.1.9.9.656.1.1
cafAaaNoRespRecoveryDelay r/w
millisecondsSNMPv2-SMIUnsigned32
 .1.3.6.1.4.1.9.9.656.1.1.1
cafAuthMethodRegTable
.1.3.6.1.4.1.9.9.656.1.1.2
cafAuthMethodRegEntry
cafAuthMethod
 .1.3.6.1.4.1.9.9.656.1.1.2.1
cafAuthMethod
CiscoAuthMethod
 .1.3.6.1.4.1.9.9.656.1.1.2.1.1
cafAuthMethodDefaultPriority
SNMPv2-SMIUnsigned32
 .1.3.6.1.4.1.9.9.656.1.1.2.1.2
cafAuthMethodDefaultExecOrder
SNMPv2-SMIUnsigned32
 .1.3.6.1.4.1.9.9.656.1.1.2.1.3
cafMacMoveMode r/w
Enumeration
 .1.3.6.1.4.1.9.9.656.1.1.3
cafCoABouncePortCommandIgnoreEnabled r/w
SNMPv2-TCTruthValue
 .1.3.6.1.4.1.9.9.656.1.1.4
cafCoADisablePortCommandIgnoreEnabled r/w
SNMPv2-TCTruthValue
 .1.3.6.1.4.1.9.9.656.1.1.5
ciscoAuthFrwkAuthenticator
.1.3.6.1.4.1.9.9.656.1.2
cafPortConfigTable
.1.3.6.1.4.1.9.9.656.1.2.1
cafPortConfigEntry
IF-MIBifIndex
 .1.3.6.1.4.1.9.9.656.1.2.1.1
cafPortControlledDirection r/w
CiscoAuthControlledDirections
 .1.3.6.1.4.1.9.9.656.1.2.1.1.1
cafPortViolationAction r/w
Enumeration
 .1.3.6.1.4.1.9.9.656.1.2.1.1.10
cafPortFallBackProfile r/w
SNMP-FRAMEWORK-MIBSnmpAdminString
 .1.3.6.1.4.1.9.9.656.1.2.1.1.2
cafPortAuthHostMode r/w
CiscoAuthHostMode
 .1.3.6.1.4.1.9.9.656.1.2.1.1.3
cafPortPreAuthOpenAccess r/w
SNMPv2-TCTruthValue
 .1.3.6.1.4.1.9.9.656.1.2.1.1.4
cafPortAuthorizeControl r/w
CiscoAuthControlledPortControl
 .1.3.6.1.4.1.9.9.656.1.2.1.1.5
cafPortReauthEnabled r/w
SNMPv2-TCTruthValue
 .1.3.6.1.4.1.9.9.656.1.2.1.1.6
cafPortReauthInterval r/w
secondsSNMPv2-SMIUnsigned32
 .1.3.6.1.4.1.9.9.656.1.2.1.1.7
cafPortRestartInterval r/w
secondsSNMPv2-SMIUnsigned32
 .1.3.6.1.4.1.9.9.656.1.2.1.1.8
cafPortInactivityTimeout r/w
secondsInteger32
 .1.3.6.1.4.1.9.9.656.1.2.1.1.9
cafPortMethodTable
.1.3.6.1.4.1.9.9.656.1.2.2
cafPortMethodEntry
IF-MIBifIndex
 .1.3.6.1.4.1.9.9.656.1.2.2.1
cafPortMethodAdminExecOrder r/w
CiscoAuthMethodList
 .1.3.6.1.4.1.9.9.656.1.2.2.1.1
cafPortMethodAdminPriority r/w
CiscoAuthMethodList
 .1.3.6.1.4.1.9.9.656.1.2.2.1.2
cafPortMethodAvailable
CiscoAuthMethodList
 .1.3.6.1.4.1.9.9.656.1.2.2.1.3
cafPortMethodOperExecOrder
CiscoAuthMethodList
 .1.3.6.1.4.1.9.9.656.1.2.2.1.4
cafPortMethodOperPriority
CiscoAuthMethodList
 .1.3.6.1.4.1.9.9.656.1.2.2.1.5
ciscoAuthFrameworkEvent
.1.3.6.1.4.1.9.9.656.1.3
cafAuthFailedEventPortTable
.1.3.6.1.4.1.9.9.656.1.3.1
cafAuthFailedEventPortEntry
IF-MIBifIndex
 .1.3.6.1.4.1.9.9.656.1.3.1.1
cafAuthFailedMaxRetry r/w
SNMPv2-SMIUnsigned32
 .1.3.6.1.4.1.9.9.656.1.3.1.1.1
cafAuthFailedNoActionEnabled r/w
SNMPv2-TCTruthValue
 .1.3.6.1.4.1.9.9.656.1.3.1.1.2
cafAuthFailedAuthorizedVlan r/w
Integer32
 .1.3.6.1.4.1.9.9.656.1.3.1.1.3
cafAuthFailedNextMethodEnabled r/w
SNMPv2-TCTruthValue
 .1.3.6.1.4.1.9.9.656.1.3.1.1.4
cafClientNoRespEventPortTable
.1.3.6.1.4.1.9.9.656.1.3.2
cafClientNoRespEventPortEntry
IF-MIBifIndex
 .1.3.6.1.4.1.9.9.656.1.3.2.1
cafClientNoRespNoActionEnabled r/w
SNMPv2-TCTruthValue
 .1.3.6.1.4.1.9.9.656.1.3.2.1.1
cafClientNoRespAuthorizedVlan r/w
Integer32
 .1.3.6.1.4.1.9.9.656.1.3.2.1.2
cafServerEventPortTable
.1.3.6.1.4.1.9.9.656.1.3.3
cafServerEventPortEntry
IF-MIBifIndex
 .1.3.6.1.4.1.9.9.656.1.3.3.1
cafServerDeadNoActionEnabled r/w
SNMPv2-TCTruthValue
 .1.3.6.1.4.1.9.9.656.1.3.3.1.1
cafServerDeadRemainAuthorized r/w
SNMPv2-TCTruthValue
 .1.3.6.1.4.1.9.9.656.1.3.3.1.2
cafServerDeadAuthorizedVlan r/w
Integer32
 .1.3.6.1.4.1.9.9.656.1.3.3.1.3
cafServerAliveAction r/w
Enumeration
 .1.3.6.1.4.1.9.9.656.1.3.3.1.4
ciscoAuthFrameworkSession
.1.3.6.1.4.1.9.9.656.1.4
cafSessionTable
.1.3.6.1.4.1.9.9.656.1.4.1
cafSessionEntry
IF-MIBifIndexcafSessionId
 .1.3.6.1.4.1.9.9.656.1.4.1.1
cafSessionId
OctetString
 .1.3.6.1.4.1.9.9.656.1.4.1.1.1
cafSessionAuthUserName
SNMP-FRAMEWORK-MIBSnmpAdminString
 .1.3.6.1.4.1.9.9.656.1.4.1.1.10
cafSessionClientFramedIpPool
SNMP-FRAMEWORK-MIBSnmpAdminString
 .1.3.6.1.4.1.9.9.656.1.4.1.1.11
cafSessionAuthorizedBy
SNMP-FRAMEWORK-MIBSnmpAdminString
 .1.3.6.1.4.1.9.9.656.1.4.1.1.12
cafSessionCriticalTimeLeft
secondsSNMPv2-SMIUnsigned32
 .1.3.6.1.4.1.9.9.656.1.4.1.1.13
cafSessionAuthVlan
CISCO-PRIVATE-VLAN-MIBVlanIndexOrZero
 .1.3.6.1.4.1.9.9.656.1.4.1.1.14
cafSessionTimeout
secondsSNMPv2-SMIUnsigned32
 .1.3.6.1.4.1.9.9.656.1.4.1.1.15
cafSessionTimeLeft
secondsSNMPv2-SMIUnsigned32
 .1.3.6.1.4.1.9.9.656.1.4.1.1.16
cafSessionTimeoutAction
Enumeration
 .1.3.6.1.4.1.9.9.656.1.4.1.1.17
cafSessionInactivityTimeout
secondsSNMPv2-SMIUnsigned32
 .1.3.6.1.4.1.9.9.656.1.4.1.1.18
cafSessionInactivityTimeLeft
secondsSNMPv2-SMIUnsigned32
 .1.3.6.1.4.1.9.9.656.1.4.1.1.19
cafSessionClientMacAddress
SNMPv2-TCMacAddress
 .1.3.6.1.4.1.9.9.656.1.4.1.1.2
cafSessionReauth r/w
SNMPv2-TCTruthValue
 .1.3.6.1.4.1.9.9.656.1.4.1.1.20
cafSessionTerminate r/w
SNMPv2-TCTruthValue
 .1.3.6.1.4.1.9.9.656.1.4.1.1.21
cafSessionVlanGroupName
SNMP-FRAMEWORK-MIBSnmpAdminString
 .1.3.6.1.4.1.9.9.656.1.4.1.1.22
cafSessionClientAddrType
INET-ADDRESS-MIBInetAddressType
 .1.3.6.1.4.1.9.9.656.1.4.1.1.3
cafSessionClientAddress
INET-ADDRESS-MIBInetAddress
 .1.3.6.1.4.1.9.9.656.1.4.1.1.4
cafSessionStatus
Enumeration
 .1.3.6.1.4.1.9.9.656.1.4.1.1.5
cafSessionDomain
Enumeration
 .1.3.6.1.4.1.9.9.656.1.4.1.1.6
cafSessionAuthHostMode
CiscoAuthHostMode
 .1.3.6.1.4.1.9.9.656.1.4.1.1.7
cafSessionControlledDirection
CiscoAuthControlledDirections
 .1.3.6.1.4.1.9.9.656.1.4.1.1.8
cafSessionPostureToken
CISCO-NAC-TC-MIBCnnEouPostureTokenString
 .1.3.6.1.4.1.9.9.656.1.4.1.1.9
cafSessionMethodsInfoTable
.1.3.6.1.4.1.9.9.656.1.4.2
cafSessionMethodsInfoEntry
IF-MIBifIndexcafSessionIdcafSessionMethod
 .1.3.6.1.4.1.9.9.656.1.4.2.1
cafSessionMethod
CiscoAuthMethod
 .1.3.6.1.4.1.9.9.656.1.4.2.1.1
cafSessionMethodState
Enumeration
 .1.3.6.1.4.1.9.9.656.1.4.2.1.2
ciscoAuthFrwkNotifControl
.1.3.6.1.4.1.9.9.656.1.5
cafSecurityViolationNotifEnable r/w
SNMPv2-TCTruthValue
 .1.3.6.1.4.1.9.9.656.1.5.1
cafAuthFailNotifEnable r/w
SNMPv2-TCTruthValue
 .1.3.6.1.4.1.9.9.656.1.5.2
ciscoAuthFrwkNotifInfo
.1.3.6.1.4.1.9.9.656.1.6
cafSecurityViolationClient
SNMPv2-TCMacAddress
 .1.3.6.1.4.1.9.9.656.1.6.1
cafAuthFailClient
SNMPv2-TCMacAddress
 .1.3.6.1.4.1.9.9.656.1.6.2
ciscoAuthFrameworkMIBConform
.1.3.6.1.4.1.9.9.656.2
ciscoAuthFrameworkMIBCompliances
.1.3.6.1.4.1.9.9.656.2.1
ciscoAuthFrameworkMIBGroups
.1.3.6.1.4.1.9.9.656.2.2
Dependencies (14) 9 direct · 5 transitive Show tree and compile order Hide dependency details

Each imported module is resolved in the importing module's source directory first, then through the normal default-variant rules.

Dependency tree
Dependency-first compile order
  1. SNMPv2-SMIrfc
  2. CISCO-SMIcisco
  3. SNMPv2-TCrfc
  4. CISCO-NAC-TC-MIBcisco
  5. CISCO-TCcisco
  6. IANAifType-MIBrfc
  7. SNMPv2-CONFrfc
  8. SNMPv2-MIBrfc
  9. IF-MIBrfc
  10. INET-ADDRESS-MIBrfc
  11. RMON-MIBrfc
  12. SNMP-FRAMEWORK-MIBrfc
  13. CISCO-VTP-MIBcisco
  14. CISCO-PRIVATE-VLAN-MIBcisco
  15. CISCO-AUTH-FRAMEWORK-MIBciscoselected
Type Definitions (5)
CiscoAuthControlledDirections
Enumeration
both(0)
in(1)
CiscoAuthControlledPortControl
Enumeration
forceUnauthorized(1)
auto(2)
forceAuthorized(3)
CiscoAuthHostMode
Enumeration
singleHost(1)
multiHost(2)
multiAuth(3)
multiDomain(4)
CiscoAuthMethod
Enumeration
other(1)
dot1x(2)
macAuthBypass(3)
webAuth(4)
CiscoAuthMethodList
OctetString
Conformance Groups (18)
cafAuthMethodRegGroup
cafAuthMethodDefaultPriority cafAuthMethodDefaultExecOrder
A collection of objects that provides registration
information of authentication methods in Authentication
Framework.
 .1.3.6.1.4.1.9.9.656.2.2.1
cafAaaNoRespRecoveryDelayGroup
cafAaaNoRespRecoveryDelay
A collection of objects that provides AAA recovery delay
configuration for Authentication Framework in the system.
 .1.3.6.1.4.1.9.9.656.2.2.2
cafAuthPortConfigGroup
cafPortControlledDirection cafPortFallBackProfile cafPortAuthHostMode cafPortPreAuthOpenAccess cafPortAuthorizeControl cafPortReauthEnabled cafPortReauthInterval cafPortRestartInterval cafPortInactivityTimeout cafPortViolationAction
A collection of objects that provides configuration of
Authentication Framework for capable ports in the system.
 .1.3.6.1.4.1.9.9.656.2.2.3
cafPortMethodGroup
cafPortMethodAdminExecOrder cafPortMethodAdminPriority cafPortMethodAvailable cafPortMethodOperExecOrder cafPortMethodOperPriority
A collection of objects that provides configuration and
information of authentication methods within Authentication
Framework for capable ports in the system.
 .1.3.6.1.4.1.9.9.656.2.2.4
cafAuthFailedEventGroup
cafAuthFailedMaxRetry cafAuthFailedNoActionEnabled cafAuthFailedAuthorizedVlan cafAuthFailedNextMethodEnabled
A collection of objects that provides configuration of
Auth-Failed behaviour of Authentication Framework for
ports in the system.
 .1.3.6.1.4.1.9.9.656.2.2.5
cafClientNoRespEventGroup
cafClientNoRespNoActionEnabled cafClientNoRespAuthorizedVlan
A collection of objects that provides configuration of
Authentication Framework when no-responsive client is detected
on a port in the system.
 .1.3.6.1.4.1.9.9.656.2.2.6
cafServerEventGroup
cafServerDeadNoActionEnabled cafServerDeadRemainAuthorized cafServerDeadAuthorizedVlan cafServerAliveAction
A collection of objects that provides configuration of
Authentication Framework when AAA Server Reachability event
occurs.
 .1.3.6.1.4.1.9.9.656.2.2.7
cafSessionGroup
cafSessionClientMacAddress cafSessionClientAddrType cafSessionClientAddress cafSessionDomain cafSessionStatus cafSessionAuthHostMode cafSessionControlledDirection cafSessionPostureToken cafSessionAuthUserName cafSessionClientFramedIpPool cafSessionAuthorizedBy cafSessionCriticalTimeLeft cafSessionAuthVlan cafSessionTimeout cafSessionTimeLeft cafSessionTimeoutAction cafSessionInactivityTimeout cafSessionInactivityTimeLeft cafSessionReauth cafSessionTerminate
A collection of objects that provides authentication session
management information for Authentication Framework.
 .1.3.6.1.4.1.9.9.656.2.2.8
cafSessionMethodInfoGroup
cafSessionMethodState
A collection of objects that provides information about
authentication methods associate with Authentication Framework
's authentication sessions in the system.
 .1.3.6.1.4.1.9.9.656.2.2.9
cafSecViolationNotifEnableGroup
cafSecurityViolationNotifEnable
A collection of objects that provides control over
security violation notification for Authentication
Framework in the system.
 .1.3.6.1.4.1.9.9.656.2.2.10
cafSecurityViolationNotifGroup
cafSecurityViolationNotif
A collection of notification providing information
about port's security violation in Authentication
Framework.
 .1.3.6.1.4.1.9.9.656.2.2.11
cafSecurityViolationClientGroup
cafSecurityViolationClient
A collection of objects providing MAC address of the offending
client in the security violation notification.
 .1.3.6.1.4.1.9.9.656.2.2.12
cafSessionVlanGroupNameGroup
cafSessionVlanGroupName
A collection of objects providing VLAN group information of
authenticated session in Authentication Framework.
 .1.3.6.1.4.1.9.9.656.2.2.13
cafMacMoveConfigGroup
cafMacMoveMode
A collection of objects providing MAC move cofiguration
information for Authentication Framework on the device.
 .1.3.6.1.4.1.9.9.656.2.2.14
cafCoACommandConfigGroup
cafCoABouncePortCommandIgnoreEnabled cafCoADisablePortCommandIgnoreEnabled
A collection of objects providing configuration information
for the device's behaviour on CoA commands.
 .1.3.6.1.4.1.9.9.656.2.2.15
cafAuthFailNotifGroup
cafAuthFailNotif
A collection of notification providing information
about port's authentication failure in Authentication
Framework.
 .1.3.6.1.4.1.9.9.656.2.2.16
cafAuthFailNotifEnableGroup
cafAuthFailNotifEnable
A collection of objects that provides control over
authentication failure notification for Authentication
Framework in the system.
 .1.3.6.1.4.1.9.9.656.2.2.17
cafAuthFailClientGroup
cafAuthFailClient
A collection of objects providing MAC address of the failed
client in the authentication failure notification.
 .1.3.6.1.4.1.9.9.656.2.2.18
Compliance Statements (4)

OID .1.3.6.1.4.1.9.9.656.2.1.1
The compliance statement for entities which implement
CISCO-AUTH-FRAMEWORK-MIB.
Required groups
mandatory cafAuthMethodRegGroup
mandatory cafAuthPortConfigGroup
mandatory cafPortMethodGroup
mandatory cafSessionGroup
mandatory cafSessionMethodInfoGroup
optional cafAaaNoRespRecoveryDelayGroup This group is mandatory in devices running software which
provide AAA recovery delay configuration for Authentication
Framework.
optional cafAuthFailedEventGroup This group is mandatory in devices running software which
provide configuration for Authentication Framework on its
capable ports, when Authentication Fail event occurs.
optional cafClientNoRespEventGroup This group is mandatory in devices running software which
provide configuration for Authentication Framework to authorize
ports in a special VLAN when non-capable clients are
detected.
optional cafServerEventGroup This group is mandatory in devices running software which
provide configuration for Authentication Framework on
authenticated ports when AAA Server Reachability event occurs.
optional cafSecViolationNotifEnableGroup This group is mandatory in devices running software which
support security violation notification for Authentication
Framework.
optional cafSecurityViolationNotifGroup This group is mandatory in devices running software which
support security violation notification for Authentication
Framework.
optional cafSecurityViolationClientGroup This group is mandatory in devices running software which
support security violation notification for Authentication
Framework.
Object refinements
ObjectAccessSyntaxDescription
cafAaaNoRespRecoveryDelay readonly
Write access is not required.
cafPortControlledDirection readonly
Write access is not required.
cafPortFallBackProfile readonly
Write access is not required.
cafPortAuthHostMode readonly
Write access is not required.
cafPortPreAuthOpenAccess readonly
Write access is not required.
cafPortAuthorizeControl readonly
Write access is not required.
cafPortReauthEnabled readonly
Write access is not required.
cafPortReauthInterval readonly
Write access is not required.
cafPortRestartInterval readonly
Write access is not required.
cafPortInactivityTimeout readonly
Write access is not required.
cafPortViolationAction readonly
Write access is not required.
cafPortMethodAdminExecOrder readonly
Write access is not required.
cafPortMethodAdminPriority readonly
Write access is not required.
cafAuthFailedMaxRetry readonly
Write access is not required.
cafAuthFailedNoActionEnabled readonly
Write access is not required.
cafAuthFailedAuthorizedVlan readonly
Write access is not required.
cafAuthFailedNextMethodEnabled readonly
Write access is not required.
cafClientNoRespNoActionEnabled readonly
Write access is not required.
cafClientNoRespAuthorizedVlan readonly
Write access is not required.
cafServerDeadNoActionEnabled readonly
Write access is not required.
cafServerDeadRemainAuthorized readonly
Write access is not required.
cafServerDeadAuthorizedVlan readonly
Write access is not required.
cafServerAliveAction readonly
Write access is not required.
cafSessionReauth readonly
Write access is not required.
cafSessionTerminate readonly
Write access is not required.
cafSecurityViolationNotifEnable readonly
Write access is not required.

OID .1.3.6.1.4.1.9.9.656.2.1.2
The compliance statement for entities which implement
CISCO-AUTH-FRAMEWORK-MIB.
Required groups
mandatory cafAuthMethodRegGroup
mandatory cafAuthPortConfigGroup
mandatory cafPortMethodGroup
mandatory cafSessionGroup
mandatory cafSessionMethodInfoGroup
optional cafAaaNoRespRecoveryDelayGroup This group is mandatory in devices running software which
provide AAA recovery delay configuration for Authentication
Framework.
optional cafAuthFailedEventGroup This group is mandatory in devices running software which
provide configuration for Authentication Framework on its
capable ports, when Authentication Fail event occurs.
optional cafClientNoRespEventGroup This group is mandatory in devices running software which
provide configuration for Authentication Framework to authorize
ports in a special VLAN when non-capable clients are
detected.
optional cafServerEventGroup This group is mandatory in devices running software which
provide configuration for Authentication Framework on
authenticated ports when AAA Server Reachability event occurs.
optional cafSecViolationNotifEnableGroup This group is mandatory in devices running software which
support security violation notification for Authentication
Framework.
optional cafSecurityViolationNotifGroup This group is mandatory in devices running software which
support security violation notification for Authentication
Framework.
optional cafSecurityViolationClientGroup This group is mandatory in devices running software which
support security violation notification for Authentication
Framework.
optional cafSessionVlanGroupNameGroup This group is mandatory in devices running software which
provide VLAN group information for Authentication
Framework.
Object refinements
ObjectAccessSyntaxDescription
cafAaaNoRespRecoveryDelay readonly
Write access is not required.
cafPortControlledDirection readonly
Write access is not required.
cafPortFallBackProfile readonly
Write access is not required.
cafPortAuthHostMode readonly
Write access is not required.
cafPortPreAuthOpenAccess readonly
Write access is not required.
cafPortAuthorizeControl readonly
Write access is not required.
cafPortReauthEnabled readonly
Write access is not required.
cafPortReauthInterval readonly
Write access is not required.
cafPortRestartInterval readonly
Write access is not required.
cafPortInactivityTimeout readonly
Write access is not required.
cafPortViolationAction readonly
Write access is not required.
cafPortMethodAdminExecOrder readonly
Write access is not required.
cafPortMethodAdminPriority readonly
Write access is not required.
cafAuthFailedMaxRetry readonly
Write access is not required.
cafAuthFailedNoActionEnabled readonly
Write access is not required.
cafAuthFailedAuthorizedVlan readonly
Write access is not required.
cafAuthFailedNextMethodEnabled readonly
Write access is not required.
cafClientNoRespNoActionEnabled readonly
Write access is not required.
cafClientNoRespAuthorizedVlan readonly
Write access is not required.
cafServerDeadNoActionEnabled readonly
Write access is not required.
cafServerDeadRemainAuthorized readonly
Write access is not required.
cafServerDeadAuthorizedVlan readonly
Write access is not required.
cafServerAliveAction readonly
Write access is not required.
cafSessionReauth readonly
Write access is not required.
cafSessionTerminate readonly
Write access is not required.
cafSecurityViolationNotifEnable readonly
Write access is not required.

OID .1.3.6.1.4.1.9.9.656.2.1.3
The compliance statement for entities which implement
CISCO-AUTH-FRAMEWORK-MIB.
Required groups
mandatory cafAuthMethodRegGroup
mandatory cafAuthPortConfigGroup
mandatory cafPortMethodGroup
mandatory cafSessionGroup
mandatory cafSessionMethodInfoGroup
optional cafAaaNoRespRecoveryDelayGroup This group is mandatory in devices running software which
provide AAA recovery delay configuration for Authentication
Framework.
optional cafAuthFailedEventGroup This group is mandatory in devices running software which
provide configuration for Authentication Framework on its
capable ports, when Authentication Fail event occurs.
optional cafClientNoRespEventGroup This group is mandatory in devices running software which
provide configuration for Authentication Framework to authorize
ports in a special VLAN when non-capable clients are
detected.
optional cafServerEventGroup This group is mandatory in devices running software which
provide configuration for Authentication Framework on
authenticated ports when AAA Server Reachability event occurs.
optional cafSecViolationNotifEnableGroup This group is mandatory in devices running software which
support security violation notification for Authentication
Framework.
optional cafSecurityViolationNotifGroup This group is mandatory in devices running software which
support security violation notification for Authentication
Framework.
optional cafSecurityViolationClientGroup This group is mandatory in devices running software which
support security violation notification for Authentication
Framework.
optional cafSessionVlanGroupNameGroup This group is mandatory in devices running software which
provide VLAN group information for Authentication
Framework.
optional cafMacMoveConfigGroup This group is mandatory in devices running software which
provide MAC move configuration for Authentication Framework.
optional cafCoACommandConfigGroup This group is mandatory in devices running software which
provide configuration for behavor for CoA commands for
Authentication Framework.
Object refinements
ObjectAccessSyntaxDescription
cafAaaNoRespRecoveryDelay readonly
Write access is not required.
cafPortControlledDirection readonly
Write access is not required.
cafPortFallBackProfile readonly
Write access is not required.
cafPortAuthHostMode readonly
Write access is not required.
cafPortPreAuthOpenAccess readonly
Write access is not required.
cafPortAuthorizeControl readonly
Write access is not required.
cafPortReauthEnabled readonly
Write access is not required.
cafPortReauthInterval readonly
Write access is not required.
cafPortRestartInterval readonly
Write access is not required.
cafPortInactivityTimeout readonly
Write access is not required.
cafPortViolationAction readonly
Write access is not required.
cafPortMethodAdminExecOrder readonly
Write access is not required.
cafPortMethodAdminPriority readonly
Write access is not required.
cafAuthFailedMaxRetry readonly
Write access is not required.
cafAuthFailedNoActionEnabled readonly
Write access is not required.
cafAuthFailedAuthorizedVlan readonly
Write access is not required.
cafAuthFailedNextMethodEnabled readonly
Write access is not required.
cafClientNoRespNoActionEnabled readonly
Write access is not required.
cafClientNoRespAuthorizedVlan readonly
Write access is not required.
cafServerDeadNoActionEnabled readonly
Write access is not required.
cafServerDeadRemainAuthorized readonly
Write access is not required.
cafServerDeadAuthorizedVlan readonly
Write access is not required.
cafServerAliveAction readonly
Write access is not required.
cafSessionReauth readonly
Write access is not required.
cafSessionTerminate readonly
Write access is not required.
cafSecurityViolationNotifEnable readonly
Write access is not required.
cafMacMoveMode readonly
Write access is not required.
cafCoABouncePortCommandIgnoreEnabled readonly
Write access is not required.
cafCoADisablePortCommandIgnoreEnabled readonly
Write access is not required.

OID .1.3.6.1.4.1.9.9.656.2.1.4
The compliance statement for entities which implement
CISCO-AUTH-FRAMEWORK-MIB.
Required groups
mandatory cafAuthMethodRegGroup
mandatory cafAuthPortConfigGroup
mandatory cafPortMethodGroup
mandatory cafSessionGroup
mandatory cafSessionMethodInfoGroup
optional cafAaaNoRespRecoveryDelayGroup This group is mandatory in devices running software which
provide AAA recovery delay configuration for Authentication
Framework.
optional cafAuthFailedEventGroup This group is mandatory in devices running software which
provide configuration for Authentication Framework on its
capable ports, when Authentication Fail event occurs.
optional cafClientNoRespEventGroup This group is mandatory in devices running software which
provide configuration for Authentication Framework to authorize
ports in a special VLAN when non-capable clients are
detected.
optional cafServerEventGroup This group is mandatory in devices running software which
provide configuration for Authentication Framework on
authenticated ports when AAA Server Reachability event occurs.
optional cafSecViolationNotifEnableGroup This group is mandatory in devices running software which
support security violation notification for Authentication
Framework.
optional cafSecurityViolationNotifGroup This group is mandatory in devices running software which
support security violation notification for Authentication
Framework.
optional cafSecurityViolationClientGroup This group is mandatory in devices running software which
support security violation notification for Authentication
Framework.
optional cafSessionVlanGroupNameGroup This group is mandatory in devices running software which
provide VLAN group information for Authentication
Framework.
optional cafMacMoveConfigGroup This group is mandatory in devices running software which
provide MAC move configuration for Authentication Framework.
optional cafCoACommandConfigGroup This group is mandatory in devices running software which
provide configuration for behavor for CoA commands for
Authentication Framework.
optional cafAuthFailNotifGroup This group is mandatory in devices running software which
support authentication failure notification for Authentication
Framework.
optional cafAuthFailNotifEnableGroup This group is mandatory in devices running software which
support authentication failure notification for Authentication
Framework.
optional cafAuthFailClientGroup This group is mandatory in devices running software which
support authentication failure notification for Authentication
Framework.
Object refinements
ObjectAccessSyntaxDescription
cafAaaNoRespRecoveryDelay readonly
Write access is not required.
cafPortControlledDirection readonly
Write access is not required.
cafPortFallBackProfile readonly
Write access is not required.
cafPortAuthHostMode readonly
Write access is not required.
cafPortPreAuthOpenAccess readonly
Write access is not required.
cafPortAuthorizeControl readonly
Write access is not required.
cafPortReauthEnabled readonly
Write access is not required.
cafPortReauthInterval readonly
Write access is not required.
cafPortRestartInterval readonly
Write access is not required.
cafPortInactivityTimeout readonly
Write access is not required.
cafPortViolationAction readonly
Write access is not required.
cafPortMethodAdminExecOrder readonly
Write access is not required.
cafPortMethodAdminPriority readonly
Write access is not required.
cafAuthFailedMaxRetry readonly
Write access is not required.
cafAuthFailedNoActionEnabled readonly
Write access is not required.
cafAuthFailedAuthorizedVlan readonly
Write access is not required.
cafAuthFailedNextMethodEnabled readonly
Write access is not required.
cafClientNoRespNoActionEnabled readonly
Write access is not required.
cafClientNoRespAuthorizedVlan readonly
Write access is not required.
cafServerDeadNoActionEnabled readonly
Write access is not required.
cafServerDeadRemainAuthorized readonly
Write access is not required.
cafServerDeadAuthorizedVlan readonly
Write access is not required.
cafServerAliveAction readonly
Write access is not required.
cafSessionReauth readonly
Write access is not required.
cafSessionTerminate readonly
Write access is not required.
cafSecurityViolationNotifEnable readonly
Write access is not required.
cafMacMoveMode readonly
Write access is not required.
cafCoABouncePortCommandIgnoreEnabled readonly
Write access is not required.
cafCoADisablePortCommandIgnoreEnabled readonly
Write access is not required.
Notifications / Traps (2)
NameOIDDescription
cafSecurityViolationNotif
IF-MIBifIndex IF-MIBifName cafSecurityViolationClient
.1.3.6.1.4.1.9.9.656.0.1
A cafSecurityViolationNotif is sent if a security violation
is detected on a port, and the instance value of
cafSecurityViolationNotifEnable is 'true'.
cafAuthFailNotif
IF-MIBifName cafAuthFailClient
.1.3.6.1.4.1.9.9.656.0.2
A cafAuthFailNotif is sent if an authentication failure is
detected on a port, and the instance value of
cafAuthFailNotifEnable is 'true'.

ifName contains the name of the interface where the
authentication failure happened.

cafAuthFailClient contains the mac address of the client which
failed to authenticate.