CISCO-NAC-NAD-MIB Table View

A list of statically authorized IP devices in the system.

cnnEouAuthIpEntry row .1.3.6.1.4.1.9.9.484.1.2.1.1

An entry containing the associated policy information of
the statically authorized IP device. An entry can be created,
or deleted by using cnnEouAuthIpRowStatus.

Each statically authorized IP device is ass…

Indexes

cnnEouAuthIpAddrType cnnEouAuthIpAddr

Column	Syntax	OID
cnnEouAuthIpAddrType The type of Internet address by which the statically authorized IP device is reachable.	INET-ADDRESS-MIBInetAddressType Type Values: 0 unknown 1 ipv4 2 ipv6 3 ipv4z 4 ipv6z 16 dns 25 l2vpn	.1.3.6.1.4.1.9.9.484.1.2.1.1.1
cnnEouAuthIpAddr The Internet address for the statically authorized IP device. The type of this address is determined by the value of the cnnEouAuthIpAddrType object.	OctetString Constraints: range: 1-64	.1.3.6.1.4.1.9.9.484.1.2.1.1.2
cnnEouAuthIpAddrMask Using 'inverse mask' to support IP wildcards. The mask used with the source IP address will specify what traffic is exempted from EAP validation. e.g. cnnEouAuthIpAddr: 10.0.0.0 cnnEouAuthIpAddrMask…	INET-ADDRESS-MIBInetAddressPrefixLengthr/w Type Constraints: range: 0..2040	.1.3.6.1.4.1.9.9.484.1.2.1.1.3
cnnEouAuthIpPolicy The policy associate with the statically authorized IP device. The policy needs to be present in the policy-database before an statically authorized IP device can be associated to it.	SNMP-FRAMEWORK-MIBSnmpAdminStringr/w Type Constraints: range: 0..255	.1.3.6.1.4.1.9.9.484.1.2.1.1.4
cnnEouAuthIpStorageType The storage type for this conceptual row.	SNMPv2-TCStorageTyper/w Type Values: 1 other 2 volatile 3 nonVolatile 4 permanent 5 readOnly Description: Describes the memory realization of a conceptual row. A row which is volatile(2) is lost upon reboot. A row which is either nonVolatile(3), permanent(4) or readOnly(5), is backed up by stable storage. A row which is …	.1.3.6.1.4.1.9.9.484.1.2.1.1.5
cnnEouAuthIpRowStatus The status of this conceptual row. To create an entry, users set the value of this object to 'createAndGo'. The transition from 'active' to 'notInService' may not be supported. …	SNMPv2-TCRowStatusr/w Type Values: 1 active 2 notInService 3 notReady 4 createAndGo 5 createAndWait 6 destroy Description: The RowStatus textual convention is used to manage the creation and deletion of conceptual rows, and is used as the value of the SYNTAX clause for the status column of a conceptual row (as described in Section 7.7.1 of …	.1.3.6.1.4.1.9.9.484.1.2.1.1.6

A list of static authorized devices identified by MAC address.

cnnEouAuthMacEntry row .1.3.6.1.4.1.9.9.484.1.2.2.1

An entry containing the associated policy information of
the statically authorized device identified by MAC address.
The entry is created, and deleted by using
cnnEouAuthMacRowStatus.

Indexes

cnnEouAuthMacAddr

Column	Syntax	OID
cnnEouAuthMacAddr The MAC address of the static authorized device.	SNMPv2-TCMacAddress Type Constraints: range: 6 Description: Represents an 802 MAC address represented in the `canonical' order defined by IEEE 802.1a, i.e., as if it were transmitted least significant bit first, even though 802.5 (in contrast to other 802.x protocols) requires M…	.1.3.6.1.4.1.9.9.484.1.2.2.1.1
cnnEouAuthMacAddrMask Using 'inverse mask' support MAC wildcards. The mask used with the source MAC address will specify what traffic is exempted from EAP validation. e.g. cnnEouAuthMacAddr: 00:0d:bc:ef:eb:bd cnnEouAuthMacAddrMask: 00:…	SNMPv2-TCMacAddressr/w Type Constraints: range: 6 Description: Represents an 802 MAC address represented in the `canonical' order defined by IEEE 802.1a, i.e., as if it were transmitted least significant bit first, even though 802.5 (in contrast to other 802.x protocols) requires M…	.1.3.6.1.4.1.9.9.484.1.2.2.1.2
cnnEouAuthMacPolicy The policy associate with the statically authorized device identified by MAC address. The policy needs to be present in the policy-database before an device can be associated to it.	SNMP-FRAMEWORK-MIBSnmpAdminStringr/w Type Constraints: range: 0..255	.1.3.6.1.4.1.9.9.484.1.2.2.1.3
cnnEouAuthMacStorageType The storage type for this conceptual row.	SNMPv2-TCStorageTyper/w Type Values: 1 other 2 volatile 3 nonVolatile 4 permanent 5 readOnly Description: Describes the memory realization of a conceptual row. A row which is volatile(2) is lost upon reboot. A row which is either nonVolatile(3), permanent(4) or readOnly(5), is backed up by stable storage. A row which is …	.1.3.6.1.4.1.9.9.484.1.2.2.1.4
cnnEouAuthMacRowStatus The status of this conceptual row. To create an entry, users set the value of this object to 'createAndGo'. The transition from 'active' to 'notInService' may not be supported. …	SNMPv2-TCRowStatusr/w Type Values: 1 active 2 notInService 3 notReady 4 createAndGo 5 createAndWait 6 destroy Description: The RowStatus textual convention is used to manage the creation and deletion of conceptual rows, and is used as the value of the SYNTAX clause for the status column of a conceptual row (as described in Section 7.7.1 of …	.1.3.6.1.4.1.9.9.484.1.2.2.1.5

A list of static authorized devices indexed by device type.

cnnEouAuthDeviceTypeEntry row .1.3.6.1.4.1.9.9.484.1.2.3.1

An entry containing the information of the static authorized
device indexed by device type.

Indexes

cnnEouAuthDeviceType

Column	Syntax	OID
cnnEouAuthDeviceType The static authorize device type.	CISCO-NAC-TC-MIBCnnEouDeviceType Type Values: 1 ciscoIpPhone	.1.3.6.1.4.1.9.9.484.1.2.3.1.1
cnnEouAuthDeviceTypeStorageType The storage type for this conceptual row.	SNMPv2-TCStorageTyper/w Type Values: 1 other 2 volatile 3 nonVolatile 4 permanent 5 readOnly Description: Describes the memory realization of a conceptual row. A row which is volatile(2) is lost upon reboot. A row which is either nonVolatile(3), permanent(4) or readOnly(5), is backed up by stable storage. A row which is …	.1.3.6.1.4.1.9.9.484.1.2.3.1.2
cnnEouAuthDeviceTypeRowStatus This object is used to create or delete an entry in the cnnEouAuthDeviceTypeTable. A row may be created using the 'CreateAndGo' option. A row may be deleted by setting the RowStatus to 'des…	SNMPv2-TCRowStatusr/w Type Values: 1 active 2 notInService 3 notReady 4 createAndGo 5 createAndWait 6 destroy Description: The RowStatus textual convention is used to manage the creation and deletion of conceptual rows, and is used as the value of the SYNTAX clause for the status column of a conceptual row (as described in Section 7.7.1 of …	.1.3.6.1.4.1.9.9.484.1.2.3.1.3

A list of EOU configurations for the EOU capable interfaces.

cnnEouIfConfigEntry row .1.3.6.1.4.1.9.9.484.1.3.1.1

An entry containing the EOU configuration information for a
particular EOU capable interface.

Indexes

IF-MIBifIndex

Column	Syntax	OID
cnnEouIfAdminStatus Setting this object to 'auto' means the Posture Validation via EOU ability at this interface would be enabled if a end point device is found. If the value of this object is 'disabled' then the interface w…	Enumerationr/w Enumerated Values: 1 auto 2 disabled 3 bypass	.1.3.6.1.4.1.9.9.484.1.3.1.1.1
cnnEouIfMaxRetry The maximum number of retry by EOU for this interface.	SNMPv2-SMIInteger32r/w Type Constraints: range: -2147483648..2147483647	.1.3.6.1.4.1.9.9.484.1.3.1.1.2
cnnEouIfValidateAction An EOU validate action to the devices associated with the interface. This object always has the value 'none' when read. none(1) no operation is performed. initiali…	Enumerationr/w Enumerated Values: 1 none 2 initialize 3 revalidate 4 noRevalidate	.1.3.6.1.4.1.9.9.484.1.3.1.1.3
cnnEouIfTimeoutGlobalConfig This object indicates whether the timeout configurations on this interface are based on the corresponding global timeout configurations or not. aaa(0) If this bit is set, the value of …	Bitsr/w Enumerated Values: 0 aaa 1 holdPeriod 2 retransmit 3 revalidation 4 statusQuery 5 maxRetry 6 clientless 7 ipStationId	.1.3.6.1.4.1.9.9.484.1.3.1.1.4
cnnEouIfTimeoutAAA The timeout period used by EOU for the AAA server connection on this interface.	secondsSNMPv2-SMIUnsigned32r/w Type Constraints: range: 0..4294967295	.1.3.6.1.4.1.9.9.484.1.3.1.1.5
cnnEouIfTimeoutHoldPeriod The hold period of this interface. The hold period is the length of the time that can elapse before the client session entries are purged from the system due to client inactivity.	secondsSNMPv2-SMIUnsigned32r/w Type Constraints: range: 0..4294967295	.1.3.6.1.4.1.9.9.484.1.3.1.1.6
cnnEouIfTimeoutRetransmit The timeout period for the EOU message retransmitted at this interface.	secondsSNMPv2-SMIUnsigned32r/w Type Constraints: range: 0..4294967295	.1.3.6.1.4.1.9.9.484.1.3.1.1.7
cnnEouIfTimeoutRevalidation The timeout period for the revalidation at this interface. Setting this object to 0 will disable periodic revalidation on this device.	secondsSNMPv2-SMIUnsigned32r/w Type Constraints: range: 0..4294967295	.1.3.6.1.4.1.9.9.484.1.3.1.1.8
cnnEouIfTimeoutStatusQuery The timeout period for the status query after revalidation at this interface.	secondsSNMPv2-SMIUnsigned32r/w Type Constraints: range: 0..4294967295	.1.3.6.1.4.1.9.9.484.1.3.1.1.9
cnnEouIfAaaFailPolicy Specified the name of the policy template to be applied when cnnEouHostResultState is 'aaaFail'. The specified policy name must exist in cpgPolicyTable if it is not empty string.	CISCO-POLICY-GROUP-MIBCpgPolicyNameOrEmptyr/w Type Constraints: range: 0..128	.1.3.6.1.4.1.9.9.484.1.3.1.1.10
cnnEouIfAllowClientless This object specifies whether to allow authentication of clientless hosts (system that does not run Cisco Trust Agent) on the interface.	SNMPv2-TCTruthValuer/w Type Values: 1 true 2 false Description: Represents a boolean value.	.1.3.6.1.4.1.9.9.484.1.3.1.1.11
cnnEouIfAllowIpStationId This object specifies whether to send the host IP address in the calling station ID field of RADIUS request for hosts on the interface.	SNMPv2-TCTruthValuer/w Type Values: 1 true 2 false Description: Represents a boolean value.	.1.3.6.1.4.1.9.9.484.1.3.1.1.12

A control table used to query the client host by
specifying retrieval criteria for the EOU information.
Each row instance in the table represents a query with
its parameters.  The resulting data for each instance of
a query in this table is returned in the
cnnHostQueryResultTable.
          
The maximum number of entries (rows) in this table cannot
exceed the value of cnnEouHostMaxQueries object.

cnnEouHostQueryEntry row .1.3.6.1.4.1.9.9.484.1.4.7.1

A conceptual row of the cnnEouHostQueryTable used to setup
retrieval criteria to search for the EOU hosts on the system.
The actual search is started by setting the value of
cnnEouHostQueryStatus to 'active'. Once a row…

Indexes

cnnEouHostQueryIndex

Column	Syntax	OID
cnnEouHostQueryIndex An arbitrary integer in the range of 1 to cnnEouHostMaxQueries to identify this control query.	SNMPv2-SMIUnsigned32 Type Constraints: range: 0..4294967295	.1.3.6.1.4.1.9.9.484.1.4.7.1.1
cnnEouHostQueryMask Setting each value causes the appropriate action: authenClientless(1) - causes the creation of row(s) in the cnnHostQueryResultTable corresponding to the current EOU information for th…	Enumerationr/w Enumerated Values: 1 authenClientless 2 authenEap 3 authenStatic 4 interface 5 ip 6 mac 7 postureToken 8 all 9 postureTokenString	.1.3.6.1.4.1.9.9.484.1.4.7.1.2
cnnEouHostQueryInterface An index value that uniquely identifies an interface where the end point device is connected. The interface identified by a particular value of this index is the same interface as identified by the same value of ifIndex.	IF-MIBInterfaceIndexOrZeror/w Type Constraints: range: 0..2147483647 Description: This textual convention is an extension of the InterfaceIndex convention. The latter defines a greater than zero value used to identify an interface or interface sub-layer in the managed system. This extension permits…	.1.3.6.1.4.1.9.9.484.1.4.7.1.3
cnnEouHostQueryIpAddrType The internet address type for the queried host.	INET-ADDRESS-MIBInetAddressTyper/w Type Values: 0 unknown 1 ipv4 2 ipv6 3 ipv4z 4 ipv6z 16 dns 25 l2vpn	.1.3.6.1.4.1.9.9.484.1.4.7.1.4
cnnEouHostQueryIpAddr The Internet address for the queried host. The type of this address is determined by the value of the cnnEouHostQueryIpAddrType. If the 'ip' option of cnnEouHostQueryMask is selected, an appropriate IP a…	INET-ADDRESS-MIBInetAddressr/w Type Constraints: range: 0..255	.1.3.6.1.4.1.9.9.484.1.4.7.1.5
cnnEouHostQueryMacAddr The Mac address for the queried host. If the 'mac' option of cnnEouHostQueryMask is selected, an appropriate MAC address is assigned to this object then only the host with the specified MAC address will b…	SNMPv2-TCMacAddressr/w Type Constraints: range: 6 Description: Represents an 802 MAC address represented in the `canonical' order defined by IEEE 802.1a, i.e., as if it were transmitted least significant bit first, even though 802.5 (in contrast to other 802.x protocols) requires M…	.1.3.6.1.4.1.9.9.484.1.4.7.1.6
cnnEouHostQueryPostureTokendeprecated The assigned posture token for the queried host. If the 'postureToken' option of cnnEouHostQueryMask is selected, an appropriate posture token is assigned to this object then only the host with the specif…	CISCO-NAC-TC-MIBCnnEouPostureTokenr/w Type Values: 1 unknown 2 healthy 3 checkup 4 quarantine 5 infected	.1.3.6.1.4.1.9.9.484.1.4.7.1.7
cnnEouHostQuerySkipNHosts The number of searched detected hosts to be skipped before storing any host in cnnEouHostResultTable. This object can be used along with cnnEouHostQueryTotalHosts object to skip previously found hosts by …	SNMPv2-SMIUnsigned32r/w Type Constraints: range: 0..4294967295	.1.3.6.1.4.1.9.9.484.1.4.7.1.8
cnnEouHostQueryMaxResultRows This is the maximum number of rows in the cnnEouHostResultTable, resulting from this query. A value of zero (0) indicates no limit rows in cnnEouHostResultTable, resulting from this query.	SNMPv2-SMIUnsigned32r/w Type Constraints: range: 0..4294967295	.1.3.6.1.4.1.9.9.484.1.4.7.1.9
cnnEouHostQueryTotalHosts Indicating the total number of the hosts matching the query criterion. -1 - Either the query has not been started or the agent is still processing this query instance. It is the default value w…	Integer32 Constraints: range: -1-2147483647	.1.3.6.1.4.1.9.9.484.1.4.7.1.10
cnnEouHostQueryRows Indicating the status of the query by following values: -1 - Either the query has not been started or the agent is still processing this query instance. It is the default value when the row is …	Integer32 Constraints: range: -1-2147483647	.1.3.6.1.4.1.9.9.484.1.4.7.1.11
cnnEouHostQueryCreateTime Time when this query was last set to active.	SNMPv2-TCTimeStamp Based On: SNMPv2-SMITimeTicks Description: The value of the sysUpTime object at which a specific occurrence happened. The specific occurrence must be defined in the description of any object defined using this type. If sysUpTime is reset t…	.1.3.6.1.4.1.9.9.484.1.4.7.1.12
cnnEouHostQueryStatus The status object used to manage rows in this table. When set to 'createAndGo', the query is initiated. The completion of the query is indicated by the value of cnnEouHostQueryRows as soon as it becomes g…	SNMPv2-TCRowStatusr/w Type Values: 1 active 2 notInService 3 notReady 4 createAndGo 5 createAndWait 6 destroy Description: The RowStatus textual convention is used to manage the creation and deletion of conceptual rows, and is used as the value of the SYNTAX clause for the status column of a conceptual row (as described in Section 7.7.1 of …	.1.3.6.1.4.1.9.9.484.1.4.7.1.13
cnnEouHostQueryPostureTokenStr The assigned posture token string for the queried host. If the 'postureTokenString' option of cnnEouHostQueryMask is selected, an appropriate posture token string is assigned to this object then only the host with the …	CISCO-NAC-TC-MIBCnnEouPostureTokenStringr/w Type Constraints: range: 0..255	.1.3.6.1.4.1.9.9.484.1.4.7.1.14

A table containing current detected host information
corresponding to all the completed queries set up in
the cnnEouHostQueryTable, that were detected in the device.
The query result will not become available until the current
search completes.

cnnEouHostResultEntry row .1.3.6.1.4.1.9.9.484.1.4.8.1

A conceptual row of cnnEouHostResultTable, containing
posture validation information of an detected host that
matches the search criteria set in the corresponding row of
cnnEouHostQueryTable.

Indexes

cnnEouHostQueryIndex cnnEouHostResultIndex

Column	Syntax	OID
cnnEouHostResultIndex A number which uniquely identifies a result entry matching a particular query.	SNMPv2-SMIUnsigned32 Type Constraints: range: 0..4294967295	.1.3.6.1.4.1.9.9.484.1.4.8.1.1
cnnEouHostResultAssocIf An index value that uniquely identifies an interface where the end point device is currently connected. The interface identified by a particular value of this index is the same interface as identified by the same value …	IF-MIBInterfaceIndex Type Constraints: range: 1..2147483647 Description: A unique value, greater than zero, for each interface or interface sub-layer in the managed system. It is recommended that values are assigned contiguously starting from 1. The value for each interface sub-layer must …	.1.3.6.1.4.1.9.9.484.1.4.8.1.2
cnnEouHostResultIpAddrType The type of Internet address by which the detected host is reachable.	INET-ADDRESS-MIBInetAddressType Type Values: 0 unknown 1 ipv4 2 ipv6 3 ipv4z 4 ipv6z 16 dns 25 l2vpn	.1.3.6.1.4.1.9.9.484.1.4.8.1.3
cnnEouHostResultIpAddr The internet address for the detected host. The type of this address is determined by the value of the cnnEouHostResultIpAddrType object.	INET-ADDRESS-MIBInetAddress Type Constraints: range: 0..255	.1.3.6.1.4.1.9.9.484.1.4.8.1.4
cnnEouHostResultMacAddr Indicates The MAC address of the detected host.	SNMPv2-TCMacAddress Type Constraints: range: 6 Description: Represents an 802 MAC address represented in the `canonical' order defined by IEEE 802.1a, i.e., as if it were transmitted least significant bit first, even though 802.5 (in contrast to other 802.x protocols) requires M…	.1.3.6.1.4.1.9.9.484.1.4.8.1.5
cnnEouHostResultAuthType This object indicates the authentication type used in the posture validation process for this detected host.	CISCO-NAC-TC-MIBCnnEouAuthType Type Values: 1 clientless 2 eap 3 static 4 unknown	.1.3.6.1.4.1.9.9.484.1.4.8.1.6
cnnEouHostResultPostureTokendeprecated Indicates the posture token of the detected host. During the posture validation process, the host will be placed into a particular category and have a token assigned to it. This assignment will depend on the state of t…	CISCO-NAC-TC-MIBCnnEouPostureToken Type Values: 1 unknown 2 healthy 3 checkup 4 quarantine 5 infected	.1.3.6.1.4.1.9.9.484.1.4.8.1.7
cnnEouHostResultAge Indicates the length of time, in minutes, that host has been connected.	minutesSNMPv2-SMIUnsigned32 Type Constraints: range: 0..4294967295	.1.3.6.1.4.1.9.9.484.1.4.8.1.8
cnnEouHostResultUrlRedir This object specifies the URL(Web page) where the latest Anti-Virus file can be downloaded or upgraded, if the detected host fails the credential validation then it may require remediation.	CISCO-TCCiscoURLString Type Constraints: range: 1..255	.1.3.6.1.4.1.9.9.484.1.4.8.1.9
cnnEouHostResultAclName The mapped ACL to this detected host. A character string for an ACL (Access Control List) name. Valid characters are a-z, A-Z, 0-9, ,'#', '-', '_' and '.'. Some devices may require that an ACL name contains at least…	SNMP-FRAMEWORK-MIBSnmpAdminString Type Constraints: range: 0..255	.1.3.6.1.4.1.9.9.484.1.4.8.1.10
cnnEouHostResultStatusQryPeriod The timeout period, in seconds, for the status query after revalidation at this interface.	secondsSNMPv2-SMIUnsigned32 Type Constraints: range: 0..4294967295	.1.3.6.1.4.1.9.9.484.1.4.8.1.11
cnnEouHostResultRevalidatePeriod The timeout period, in second, for the revalidation at this interface.	secondsSNMPv2-SMIUnsigned32 Type Constraints: range: 0..4294967295	.1.3.6.1.4.1.9.9.484.1.4.8.1.12
cnnEouHostResultState Indicates the current EOU state of this detected host.	CISCO-NAC-TC-MIBCnnEouState Type Values: 1 initialize 2 hello 3 clientless 4 eapRequest 5 response 6 authenticated 7 fail 8 abort 9 aaaFail 10 hold 11 client 12 server	.1.3.6.1.4.1.9.9.484.1.4.8.1.13
cnnEouHostResultPostureTokenStr Indicates the posture token string of the detected host. During the posture validation process, the host will be placed into a particular category and have a token assigned to it. This assignment will depend on the sta…	CISCO-NAC-TC-MIBCnnEouPostureTokenString Type Constraints: range: 0..255	.1.3.6.1.4.1.9.9.484.1.4.8.1.14
cnnEouHostResultUrlRedirectAcl Indicates the name of the access control list(ACL) for URL redirection. Any ingress HTTP from the host that matches this ACL will be subjected to redirection to the URL (Web page) specified in cnnEouHostResultUrlRedir.	SNMP-FRAMEWORK-MIBSnmpAdminString Type Constraints: range: 0..255	.1.3.6.1.4.1.9.9.484.1.4.8.1.15
cnnEouHostResultTagName Indicates the tag which is received as a policy response from the ACS server for the detected host.	SNMP-FRAMEWORK-MIBSnmpAdminString Type Constraints: range: 0..255	.1.3.6.1.4.1.9.9.484.1.4.8.1.16
cnnEouHostResultAuditSessionId This object uniquely identifies a host session. Session ID is included in access requests to AAA server and in Web requests to Audit server.	SNMP-FRAMEWORK-MIBSnmpAdminString Type Constraints: range: 0..255	.1.3.6.1.4.1.9.9.484.1.4.8.1.17
cnnEouHostResultAaaFailPolicy This object indicates the name of policy template to be applied when EouHostResultState is 'aaaFail'.	SNMP-FRAMEWORK-MIBSnmpAdminString Type Constraints: range: 0..255	.1.3.6.1.4.1.9.9.484.1.4.8.1.18

A table of IP Device Tracking configuration for EOU
interfaces in the system.

cnnEouIfIpDevTrackConfigEntry row .1.3.6.1.4.1.9.9.484.1.5.4.1

A set of EOU IP Device Tracking configuration information on
an EOU interface.

Indexes

IF-MIBifIndex

Column	Syntax	OID
cnnEouIfIpDevTrackEnabled Specifies if IP Device Tracking feature is enabled on this interface.	SNMPv2-TCTruthValuer/w Type Values: 1 true 2 false Description: Represents a boolean value.	.1.3.6.1.4.1.9.9.484.1.5.4.1.1