Standard view Table view

CISCO-PAE-MIB

        Cisco Port Access Entity (PAE) module for managing
IEEE Std 802.1x.
        
This MIB provides Port Access Entity information
that are either excluded by IEEE8021-PAE-MIB or
specific to Cisco products.
Source file
CISCO-PAE-MIB
Last revised
Identity
ciscoPaeMIB
Base OID
1.3.6.1.4.1.9.9.220
Imported Objects
CISCO-NAC-TC-MIB CnnEouPostureToken CnnEouPostureTokenString
CISCO-POLICY-GROUP-MIB CpgPolicyNameOrEmpty
CISCO-SMI ciscoMgmt
CISCO-TC CiscoURLString
CISCO-VTP-MIB VlanIndex
IEEE8021-PAE-MIB dot1xAuthConfigEntry dot1xAuthPaeState dot1xPaePortEntry dot1xPaePortNumber PaeControlledPortStatus
IF-MIB InterfaceIndex
INET-ADDRESS-MIB InetAddress InetAddressType
SNMP-FRAMEWORK-MIB SnmpAdminString
SNMPv2-CONF MODULE-COMPLIANCE NOTIFICATION-GROUP OBJECT-GROUP
SNMPv2-SMI MODULE-IDENTITY NOTIFICATION-TYPE OBJECT-TYPE Unsigned32
SNMPv2-TC MacAddress RowStatus TEXTUAL-CONVENTION TruthValue
Net-SNMP examples using the cisco MIB directory Show commands

These commands use the standard Observium installation path and load the selected MIB variant before the RFC and Net-SNMP directories.

Translate the module identity
/usr/bin/snmptranslate -Pud -Ir -On -m 'CISCO-PAE-MIB' -M '/opt/observium/mibs/cisco:/opt/observium/mibs/rfc:/opt/observium/mibs/net-snmp' 'CISCO-PAE-MIB::ciscoPaeMIB'
Walk the MIB subtree
/usr/bin/snmpbulkwalk -v2c -c '<community>' -Pud -Ir -OQUs -m 'CISCO-PAE-MIB' -M '/opt/observium/mibs/cisco:/opt/observium/mibs/rfc:/opt/observium/mibs/net-snmp' 'udp:<hostname>:161' 'CISCO-PAE-MIB::ciscoPaeMIB'
How SNMP, Net-SNMP, MIB paths, and variants work
Objects (134)
ciscoPaeMIB
.1.3.6.1.4.1.9.9.220
cpaeMIBNotification
.1.3.6.1.4.1.9.9.220.0
cpaeMIBObject
.1.3.6.1.4.1.9.9.220.1
cpaePortTable
.1.3.6.1.4.1.9.9.220.1.1
cpaePortEntry
.1.3.6.1.4.1.9.9.220.1.1.1
cpaeMultipleHost deprecated r/w
SNMPv2-TCTruthValue
 .1.3.6.1.4.1.9.9.220.1.1.1.1
cpaePortCapabilitiesEnabled r/w
Bits
 .1.3.6.1.4.1.9.9.220.1.1.1.10
cpaePortMode r/w
Enumeration
 .1.3.6.1.4.1.9.9.220.1.1.1.2
cpaeGuestVlanNumber r/w
CISCO-VTP-MIBVlanIndex
 .1.3.6.1.4.1.9.9.220.1.1.1.3
cpaeInGuestVlan deprecated
SNMPv2-TCTruthValue
 .1.3.6.1.4.1.9.9.220.1.1.1.4
cpaeShutdownTimeoutEnabled r/w
SNMPv2-TCTruthValue
 .1.3.6.1.4.1.9.9.220.1.1.1.5
cpaePortAuthFailVlan r/w
CISCO-VTP-MIBVlanIndex
 .1.3.6.1.4.1.9.9.220.1.1.1.6
cpaePortOperVlan
CISCO-VTP-MIBVlanIndex
 .1.3.6.1.4.1.9.9.220.1.1.1.7
cpaePortOperVlanType
Enumeration
 .1.3.6.1.4.1.9.9.220.1.1.1.8
cpaeAuthFailVlanMaxAttempts r/w
SNMPv2-SMIUnsigned32
 .1.3.6.1.4.1.9.9.220.1.1.1.9
cpaeAuthConfigTable
.1.3.6.1.4.1.9.9.220.1.10
cpaeAuthConfigEntry
.1.3.6.1.4.1.9.9.220.1.10.1
cpaeAuthReAuthPeriodSrcAdmin r/w
ReAuthPeriodSource
 .1.3.6.1.4.1.9.9.220.1.10.1.1
cpaeAuthReAuthPeriodSrcOper
ReAuthPeriodSource
 .1.3.6.1.4.1.9.9.220.1.10.1.2
cpaeAuthReAuthPeriodOper
secondsSNMPv2-SMIUnsigned32
 .1.3.6.1.4.1.9.9.220.1.10.1.3
cpaeAuthTimeToNextReAuth
secondsSNMPv2-SMIUnsigned32
 .1.3.6.1.4.1.9.9.220.1.10.1.4
cpaeAuthReAuthAction
Enumeration
 .1.3.6.1.4.1.9.9.220.1.10.1.5
cpaeAuthReAuthMax r/w
SNMPv2-SMIUnsigned32
 .1.3.6.1.4.1.9.9.220.1.10.1.6
cpaeAuthIabEnabled r/w
SNMPv2-TCTruthValue
 .1.3.6.1.4.1.9.9.220.1.10.1.7
cpaeAuthPaeState
CpaeAuthState
 .1.3.6.1.4.1.9.9.220.1.10.1.8
cpaeHostInfoTable
.1.3.6.1.4.1.9.9.220.1.11
cpaeHostInfoEntry
IEEE8021-PAE-MIBdot1xPaePortNumbercpaeHostInfoHostIndex
 .1.3.6.1.4.1.9.9.220.1.11.1
cpaeHostInfoHostIndex
SNMPv2-SMIUnsigned32
 .1.3.6.1.4.1.9.9.220.1.11.1.1
cpaeHostBackendState
Enumeration
 .1.3.6.1.4.1.9.9.220.1.11.1.10
cpaeHostSessionId
OctetString
 .1.3.6.1.4.1.9.9.220.1.11.1.11
cpaeHostInfoMacAddress
SNMPv2-TCMacAddress
 .1.3.6.1.4.1.9.9.220.1.11.1.2
cpaeHostInfoPostureToken obsolete
CISCO-NAC-TC-MIBCnnEouPostureToken
 .1.3.6.1.4.1.9.9.220.1.11.1.3
cpaeHostInfoUserName
SNMP-FRAMEWORK-MIBSnmpAdminString
 .1.3.6.1.4.1.9.9.220.1.11.1.4
cpaeHostInfoAddrType
INET-ADDRESS-MIBInetAddressType
 .1.3.6.1.4.1.9.9.220.1.11.1.5
cpaeHostInfoAddr
INET-ADDRESS-MIBInetAddress
 .1.3.6.1.4.1.9.9.220.1.11.1.6
cpaeHostPostureTokenStr
CISCO-NAC-TC-MIBCnnEouPostureTokenString
 .1.3.6.1.4.1.9.9.220.1.11.1.7
cpaeHostUrlRedirection
SNMP-FRAMEWORK-MIBSnmpAdminString
 .1.3.6.1.4.1.9.9.220.1.11.1.8
cpaeHostAuthPaeState
CpaeAuthState
 .1.3.6.1.4.1.9.9.220.1.11.1.9
cpaePortEapolTestLimits
SNMPv2-SMIUnsigned32
 .1.3.6.1.4.1.9.9.220.1.12
cpaePortEapolTestTable
.1.3.6.1.4.1.9.9.220.1.13
cpaePortEapolTestEntry
IEEE8021-PAE-MIBdot1xPaePortNumber
 .1.3.6.1.4.1.9.9.220.1.13.1
cpaePortEapolTestResult
Enumeration
 .1.3.6.1.4.1.9.9.220.1.13.1.1
cpaePortEapolTestStatus r/w
SNMPv2-TCRowStatus
 .1.3.6.1.4.1.9.9.220.1.13.1.2
cpaeCriticalConfig
.1.3.6.1.4.1.9.9.220.1.14
cpaeCriticalEapolEnabled r/w
SNMPv2-TCTruthValue
 .1.3.6.1.4.1.9.9.220.1.14.1
cpaeCriticalRecoveryDelay r/w
milli-secondsSNMPv2-SMIUnsigned32
 .1.3.6.1.4.1.9.9.220.1.14.2
cpaePortIpDevTrackConfigTable
.1.3.6.1.4.1.9.9.220.1.15
cpaePortIpDevTrackConfigEntry
IEEE8021-PAE-MIBdot1xPaePortNumber
 .1.3.6.1.4.1.9.9.220.1.15.1
cpaePortIpDevTrackEnabled r/w
SNMPv2-TCTruthValue
 .1.3.6.1.4.1.9.9.220.1.15.1.1
cpaeGlobalAuthFailMaxAttempts r/w
Unsigned32
 .1.3.6.1.4.1.9.9.220.1.16
cpaeGlobalSecViolationAction r/w
Enumeration
 .1.3.6.1.4.1.9.9.220.1.17
cpaeDot1xSuppToGuestVlanAllowed r/w
SNMPv2-TCTruthValue
 .1.3.6.1.4.1.9.9.220.1.18
cpaeSupplicantObjects
.1.3.6.1.4.1.9.9.220.1.19
cpaeSuppPortTable
.1.3.6.1.4.1.9.9.220.1.19.1
cpaeSuppPortEntry
IEEE8021-PAE-MIBdot1xPaePortNumber
 .1.3.6.1.4.1.9.9.220.1.19.1.1
cpaeSuppPortCredentialProfileName r/w
SNMP-FRAMEWORK-MIBSnmpAdminString
 .1.3.6.1.4.1.9.9.220.1.19.1.1.1
cpaeSuppPortEapProfileName r/w
SNMP-FRAMEWORK-MIBSnmpAdminString
 .1.3.6.1.4.1.9.9.220.1.19.1.1.2
cpaeSuppHostInfoTable
.1.3.6.1.4.1.9.9.220.1.19.2
cpaeSuppHostInfoEntry
IEEE8021-PAE-MIBdot1xPaePortNumbercpaeSuppHostInfoSuppIndex
 .1.3.6.1.4.1.9.9.220.1.19.2.1
cpaeSuppHostInfoSuppIndex
Unsigned32
 .1.3.6.1.4.1.9.9.220.1.19.2.1.1
cpaeSuppHostAuthMacAddress
SNMPv2-TCMacAddress
 .1.3.6.1.4.1.9.9.220.1.19.2.1.2
cpaeSuppHostPaeState
Enumeration
 .1.3.6.1.4.1.9.9.220.1.19.2.1.3
cpaeSuppHostBackendState
Enumeration
 .1.3.6.1.4.1.9.9.220.1.19.2.1.4
cpaeSuppHostStatus
IEEE8021-PAE-MIBPaeControlledPortStatus
 .1.3.6.1.4.1.9.9.220.1.19.2.1.5
cpaeGuestVlanId deprecated r/w
CISCO-VTP-MIBVlanIndex
 .1.3.6.1.4.1.9.9.220.1.2
cpaeShutdownTimeout r/w
secondsUnsigned32
 .1.3.6.1.4.1.9.9.220.1.3
cpaeRadiusAccountingEnabled r/w
SNMPv2-TCTruthValue
 .1.3.6.1.4.1.9.9.220.1.4
cpaeUserGroupTable
.1.3.6.1.4.1.9.9.220.1.5
cpaeUserGroupEntry
cpaeUserGroupNamecpaeUserGroupUserIndex
 .1.3.6.1.4.1.9.9.220.1.5.1
cpaeUserGroupName
OctetString
 .1.3.6.1.4.1.9.9.220.1.5.1.1
cpaeUserGroupUserIndex
SNMPv2-SMIUnsigned32
 .1.3.6.1.4.1.9.9.220.1.5.1.2
cpaeUserGroupUserName
SNMP-FRAMEWORK-MIBSnmpAdminString
 .1.3.6.1.4.1.9.9.220.1.5.1.3
cpaeUserGroupUserAddrType
INET-ADDRESS-MIBInetAddressType
 .1.3.6.1.4.1.9.9.220.1.5.1.4
cpaeUserGroupUserAddr
INET-ADDRESS-MIBInetAddress
 .1.3.6.1.4.1.9.9.220.1.5.1.5
cpaeUserGroupUserInterface
IF-MIBInterfaceIndex
 .1.3.6.1.4.1.9.9.220.1.5.1.6
cpaeUserGroupUserVlan
CISCO-VTP-MIBVlanIndex
 .1.3.6.1.4.1.9.9.220.1.5.1.7
cpaeAuthFailUserTable
.1.3.6.1.4.1.9.9.220.1.6
cpaeAuthFailUserEntry
IEEE8021-PAE-MIBdot1xPaePortNumber
 .1.3.6.1.4.1.9.9.220.1.6.1
cpaeAuthFailUserName
SNMP-FRAMEWORK-MIBSnmpAdminString
 .1.3.6.1.4.1.9.9.220.1.6.1.1
cpaeNotificationControl
.1.3.6.1.4.1.9.9.220.1.7
cpaeNoGuestVlanNotifEnable r/w
SNMPv2-TCTruthValue
 .1.3.6.1.4.1.9.9.220.1.7.1
cpaeNoAuthFailVlanNotifEnable r/w
SNMPv2-TCTruthValue
 .1.3.6.1.4.1.9.9.220.1.7.2
cpaeGuestVlanNotifEnable r/w
SNMPv2-TCTruthValue
 .1.3.6.1.4.1.9.9.220.1.7.3
cpaeAuthFailVlanNotifEnable r/w
SNMPv2-TCTruthValue
 .1.3.6.1.4.1.9.9.220.1.7.4
cpaeMacAuthBypass
.1.3.6.1.4.1.9.9.220.1.8
cpaeMacAuthBypassReAuthTimeout r/w
secondsSNMPv2-SMIUnsigned32
 .1.3.6.1.4.1.9.9.220.1.8.1
cpaeMacAuthBypassReAuthEnabled r/w
SNMPv2-TCTruthValue
 .1.3.6.1.4.1.9.9.220.1.8.2
cpaeMacAuthBypassViolation r/w
Enumeration
 .1.3.6.1.4.1.9.9.220.1.8.3
cpaeMacAuthBypassShutdownTimeout r/w
secondsSNMPv2-SMIUnsigned32
 .1.3.6.1.4.1.9.9.220.1.8.4
cpaeMacAuthBypassAuthFailTimeout r/w
secondsSNMPv2-SMIUnsigned32
 .1.3.6.1.4.1.9.9.220.1.8.5
cpaeMacAuthBypassPortTable
.1.3.6.1.4.1.9.9.220.1.8.6
cpaeMacAuthBypassPortEntry
IEEE8021-PAE-MIBdot1xPaePortNumber
 .1.3.6.1.4.1.9.9.220.1.8.6.1
cpaeMacAuthBypassPortEnabled r/w
SNMPv2-TCTruthValue
 .1.3.6.1.4.1.9.9.220.1.8.6.1.1
cpaeMacAuthBypassPortUrlRedirect
SNMP-FRAMEWORK-MIBSnmpAdminString
 .1.3.6.1.4.1.9.9.220.1.8.6.1.10
cpaeMacAuthBypassPortPostureTok
OctetString
 .1.3.6.1.4.1.9.9.220.1.8.6.1.11
cpaeMacAuthBypassPortInitialize r/w
SNMPv2-TCTruthValue
 .1.3.6.1.4.1.9.9.220.1.8.6.1.2
cpaeMacAuthBypassPortReAuth r/w
SNMPv2-TCTruthValue
 .1.3.6.1.4.1.9.9.220.1.8.6.1.3
cpaeMacAuthBypassPortMacAddress
SNMPv2-TCMacAddress
 .1.3.6.1.4.1.9.9.220.1.8.6.1.4
cpaeMacAuthBypassPortAuthState
Enumeration
 .1.3.6.1.4.1.9.9.220.1.8.6.1.5
cpaeMacAuthBypassPortTermAction
Enumeration
 .1.3.6.1.4.1.9.9.220.1.8.6.1.6
cpaeMacAuthBypassSessionTimeLeft
secondsSNMPv2-SMIUnsigned32
 .1.3.6.1.4.1.9.9.220.1.8.6.1.7
cpaeMacAuthBypassPortAuthMethod r/w
Enumeration
 .1.3.6.1.4.1.9.9.220.1.8.6.1.8
cpaeMacAuthBypassPortSessionId
SNMP-FRAMEWORK-MIBSnmpAdminString
 .1.3.6.1.4.1.9.9.220.1.8.6.1.9
cpaeMacAuthBypassAcctEnable r/w
SNMPv2-TCTruthValue
 .1.3.6.1.4.1.9.9.220.1.8.7
cpaeMabCriticalRecoveryDelay r/w
milli-secondsSNMPv2-SMIUnsigned32
 .1.3.6.1.4.1.9.9.220.1.8.8
cpaeMabPortIpDevTrackConfTable
.1.3.6.1.4.1.9.9.220.1.8.9
cpaeMabPortIpDevTrackConfEntry
IEEE8021-PAE-MIBdot1xPaePortNumber
 .1.3.6.1.4.1.9.9.220.1.8.9.1
cpaeMabPortIpDevTrackEnabled r/w
SNMPv2-TCTruthValue
 .1.3.6.1.4.1.9.9.220.1.8.9.1.1
cpaeWebAuth
.1.3.6.1.4.1.9.9.220.1.9
cpaeWebAuthEnabled r/w
SNMPv2-TCTruthValue
 .1.3.6.1.4.1.9.9.220.1.9.1
cpaeWebAuthUnAuthStateTimeout r/w
minutesUnsigned32
 .1.3.6.1.4.1.9.9.220.1.9.10
cpaeWebAuthSessionPeriod r/w
secondsSNMPv2-SMIUnsigned32
 .1.3.6.1.4.1.9.9.220.1.9.2
cpaeWebAuthLoginPage r/w
CISCO-TCCiscoURLString
 .1.3.6.1.4.1.9.9.220.1.9.3
cpaeWebAuthLoginFailedPage r/w
CISCO-TCCiscoURLString
 .1.3.6.1.4.1.9.9.220.1.9.4
cpaeWebAuthQuietPeriod r/w
secondsSNMPv2-SMIUnsigned32
 .1.3.6.1.4.1.9.9.220.1.9.5
cpaeWebAuthMaxRetries r/w
SNMPv2-SMIUnsigned32
 .1.3.6.1.4.1.9.9.220.1.9.6
cpaeWebAuthPortTable
.1.3.6.1.4.1.9.9.220.1.9.7
cpaeWebAuthPortEntry
IEEE8021-PAE-MIBdot1xPaePortNumber
 .1.3.6.1.4.1.9.9.220.1.9.7.1
cpaeWebAuthPortEnabled r/w
SNMPv2-TCTruthValue
 .1.3.6.1.4.1.9.9.220.1.9.7.1.1
cpaeWebAuthPortInitialize r/w
SNMPv2-TCTruthValue
 .1.3.6.1.4.1.9.9.220.1.9.7.1.2
cpaeWebAuthPortAaaFailPolicy r/w
CISCO-POLICY-GROUP-MIBCpgPolicyNameOrEmpty
 .1.3.6.1.4.1.9.9.220.1.9.7.1.3
cpaeWebAuthPortIpDevTrackEnabled r/w
SNMPv2-TCTruthValue
 .1.3.6.1.4.1.9.9.220.1.9.7.1.4
cpaeWebAuthHostTable
.1.3.6.1.4.1.9.9.220.1.9.8
cpaeWebAuthHostEntry
IEEE8021-PAE-MIBdot1xPaePortNumbercpaeWebAuthHostAddrTypecpaeWebAuthHostAddress
 .1.3.6.1.4.1.9.9.220.1.9.8.1
cpaeWebAuthHostAddrType
INET-ADDRESS-MIBInetAddressType
 .1.3.6.1.4.1.9.9.220.1.9.8.1.1
cpaeWebAuthHostAddress
OctetString
 .1.3.6.1.4.1.9.9.220.1.9.8.1.2
cpaeWebAuthAaaSessionPeriod
secondsSNMPv2-SMIUnsigned32
 .1.3.6.1.4.1.9.9.220.1.9.8.1.3
cpaeWebAuthHostSessionTimeLeft
secondsSNMPv2-SMIUnsigned32
 .1.3.6.1.4.1.9.9.220.1.9.8.1.4
cpaeWebAuthHostState
Enumeration
 .1.3.6.1.4.1.9.9.220.1.9.8.1.5
cpaeWebAuthHostInitialize r/w
SNMPv2-TCTruthValue
 .1.3.6.1.4.1.9.9.220.1.9.8.1.6
cpaeWebAuthCriticalRecoveryDelay r/w
milli-secondsSNMPv2-SMIUnsigned32
 .1.3.6.1.4.1.9.9.220.1.9.9
cpaeMIBConformance
.1.3.6.1.4.1.9.9.220.2
cpaeMIBCompliances
.1.3.6.1.4.1.9.9.220.2.1
cpaeMIBGroups
.1.3.6.1.4.1.9.9.220.2.2
Dependencies (15) 12 direct · 3 transitive Show tree and compile order Hide dependency details

Each imported module is resolved in the importing module's source directory first, then through the normal default-variant rules.

Dependency tree
Dependency-first compile order
  1. SNMPv2-SMIrfc
  2. CISCO-SMIcisco
  3. SNMPv2-TCrfc
  4. CISCO-NAC-TC-MIBcisco
  5. INET-ADDRESS-MIBrfc
  6. SNMPv2-CONFrfc
  7. CISCO-POLICY-GROUP-MIBcisco
  8. CISCO-TCcisco
  9. IANAifType-MIBrfc
  10. SNMPv2-MIBrfc
  11. IF-MIBrfc
  12. RMON-MIBrfc
  13. SNMP-FRAMEWORK-MIBrfc
  14. CISCO-VTP-MIBcisco
  15. IEEE8021-PAE-MIBrfc
  16. CISCO-PAE-MIBciscoselected
Type Definitions (2)
CpaeAuthState
Enumeration
other(1)
initialize(2)
disconnected(3)
connecting(4)
authenticating(5)
authenticated(6)
aborting(7)
held(8)
forceAuth(9)
forceUnauth(10)
guestVlan(11)
authFailVlan(12)
criticalAuth(13)
ipAwaiting(14)
policyConfig(15)
authFinished(16)
restart(17)
authFallback(18)
authCResult(19)
authZSuccess(20)
ReAuthPeriodSource
Enumeration
local(1)
server(2)
auto(3)
Conformance Groups (56)
cpaeMultipleHostGroup deprecated
cpaeMultipleHost
A collection of objects that provide the multiple
host configuration information for a PAE port.
These are additional to the IEEE Std 802.1x PAE MIB.
 .1.3.6.1.4.1.9.9.220.2.2.1
cpaePortEntryGroup
cpaePortMode
A collection of objects that provides the port-mode
configuration for a PAE port.
 .1.3.6.1.4.1.9.9.220.2.2.2
cpaeGuestVlanGroup deprecated
cpaeGuestVlanId
A collection of objects that provides the Guest Vlan
configuration information for the system.
 .1.3.6.1.4.1.9.9.220.2.2.3
cpaeGuestVlanGroup2 deprecated
cpaeGuestVlanNumber cpaeInGuestVlan
A collection of objects that provides the per-interface
Guest Vlan configuration information for the system.
 .1.3.6.1.4.1.9.9.220.2.2.4
cpaeShutdownTimeoutGroup
cpaeShutdownTimeout cpaeShutdownTimeoutEnabled
A collection of objects that provides the dot1x
shutdown timeout configuration information for
the system.
 .1.3.6.1.4.1.9.9.220.2.2.5
cpaeRadiusConfigGroup
cpaeRadiusAccountingEnabled
A collection of objects that provides the RADIUS
configuration information for the system.
 .1.3.6.1.4.1.9.9.220.2.2.6
cpaeUserGroupGroup
cpaeUserGroupUserName cpaeUserGroupUserAddrType cpaeUserGroupUserAddr cpaeUserGroupUserInterface cpaeUserGroupUserVlan
A collection of objects that provides the group manager
information of authenticated users in the system.
 .1.3.6.1.4.1.9.9.220.2.2.7
cpaeGuestVlanGroup3
cpaeGuestVlanNumber
A collection of objects that provides the per-interface
Guest Vlan configuration information for the system.
 .1.3.6.1.4.1.9.9.220.2.2.8
cpaePortOperVlanGroup
cpaePortOperVlan cpaePortOperVlanType
A collection of object(s) that provides the
information about Operational Vlan for each PAE port.
 .1.3.6.1.4.1.9.9.220.2.2.9
cpaePortAuthFailVlanGroup deprecated
cpaePortAuthFailVlan cpaeAuthFailUserName
A collection of object(s) that provides the
Auth-Fail (Authentication Fail) Vlan configuration
and Auth-Fail user information for the system.
 .1.3.6.1.4.1.9.9.220.2.2.10
cpaeNoGuestVlanNotifEnableGrp
cpaeNoGuestVlanNotifEnable
A collection of object(s) that provides control over
Guest Vlan related notification(s).
 .1.3.6.1.4.1.9.9.220.2.2.11
cpaeNoAuthFailVlanNotifEnableGrp
cpaeNoAuthFailVlanNotifEnable
A collection of object(s) that provides control over
Auth-Fail related notification(s).
 .1.3.6.1.4.1.9.9.220.2.2.12
cpaeNoGuestVlanNotifGroup
cpaeNoGuestVlanNotif
A collection of notification(s) providing the
information for unconfigured Guest Vlan.
 .1.3.6.1.4.1.9.9.220.2.2.13
cpaeNoAuthFailVlanNotifGroup
cpaeNoAuthFailVlanNotif
A collection of notifications providing the
information for unconfigured Auth-Fail Vlan.
 .1.3.6.1.4.1.9.9.220.2.2.14
cpaeMacAuthBypassGroup deprecated
cpaeMacAuthBypassReAuthTimeout cpaeMacAuthBypassReAuthEnabled cpaeMacAuthBypassViolation cpaeMacAuthBypassShutdownTimeout cpaeMacAuthBypassAuthFailTimeout cpaeMacAuthBypassPortEnabled cpaeMacAuthBypassPortInitialize cpaeMacAuthBypassPortReAuth cpaeMacAuthBypassPortMacAddress cpaeMacAuthBypassPortAuthState cpaeMacAuthBypassAcctEnable
A collection of object(s) that provides the
MAC Auth-Bypass configuration and information
for the system.
 .1.3.6.1.4.1.9.9.220.2.2.15
cpaeWebAuthGroup
cpaeWebAuthEnabled cpaeWebAuthSessionPeriod cpaeWebAuthLoginPage cpaeWebAuthLoginFailedPage cpaeWebAuthQuietPeriod cpaeWebAuthMaxRetries cpaeWebAuthPortEnabled cpaeWebAuthPortInitialize cpaeWebAuthAaaSessionPeriod cpaeWebAuthHostSessionTimeLeft cpaeWebAuthHostState cpaeWebAuthHostInitialize
A collection of object(s) that provides the
Web Proxy Authentication configuration and
information for the system.
 .1.3.6.1.4.1.9.9.220.2.2.16
cpaeAuthConfigGroup deprecated
cpaeAuthReAuthPeriodSrcAdmin cpaeAuthReAuthPeriodSrcOper cpaeAuthReAuthPeriodOper cpaeAuthTimeToNextReAuth cpaeAuthReAuthAction cpaeAuthReAuthMax cpaeAuthIabEnabled
A collection of object(s) that provides additional
configuration information about an Authenticator PAE.
 .1.3.6.1.4.1.9.9.220.2.2.17
cpaeHostInfoGroup obsolete
cpaeHostInfoMacAddress cpaeHostInfoPostureToken
A collection of object(s) that provides information
about an host connecting to a PAE port.
 .1.3.6.1.4.1.9.9.220.2.2.18
cpaeWebAuthAaaFailGroup
cpaeWebAuthPortAaaFailPolicy
A collection of object(s) that provides Inaccessible
Authentication Bypass configuration and information
for Web Proxy Authentication in the system.
 .1.3.6.1.4.1.9.9.220.2.2.19
cpaeMacAuthBypassGroup2
cpaeMacAuthBypassPortTermAction cpaeMacAuthBypassSessionTimeLeft
A collection of object(s) that provides additional
information of MAC Auth-bypass feature in the system.
 .1.3.6.1.4.1.9.9.220.2.2.20
cpaePortEapolTestGroup
cpaePortEapolTestLimits cpaePortEapolTestResult cpaePortEapolTestStatus
A collection of object(s) that provides information
about if connecting hosts are EAPOL capable.
 .1.3.6.1.4.1.9.9.220.2.2.21
cpaeHostInfoGroup2
cpaeHostInfoMacAddress
A collection of object(s) that provides information
about an host connecting to a PAE port.
 .1.3.6.1.4.1.9.9.220.2.2.22
cpaeMacAuthBypassGroup3
cpaeMacAuthBypassPortAuthMethod
A collection of object(s) that provides configuration
for authentication method for MAC Auth-bypass feature
in the system.
 .1.3.6.1.4.1.9.9.220.2.2.23
cpaePortAuthFailVlanGroup2
cpaeAuthFailVlanMaxAttempts
A collection of object(s) that provides configuration
for maximum authentication attempts for Auth-Fail Vlan
feature in the system.
 .1.3.6.1.4.1.9.9.220.2.2.24
cpaeAuthConfigGroup2
cpaeAuthPaeState
A collection of object(s) that provides additional
states in the PAE state machine.
 .1.3.6.1.4.1.9.9.220.2.2.25
cpaeCriticalRecoveryDelayGroup
cpaeCriticalRecoveryDelay
A collection of object(s) that provides recovery delay
configuration for 802.1x Critical Authentication
in the system.
 .1.3.6.1.4.1.9.9.220.2.2.26
cpaeAuthConfigGroup3
cpaeAuthReAuthPeriodSrcAdmin cpaeAuthReAuthPeriodSrcOper cpaeAuthReAuthPeriodOper cpaeAuthTimeToNextReAuth cpaeAuthReAuthAction
A collection of object(s) that provides configuration
and information related to re-authentication of 802.1x
ports in the system.
 .1.3.6.1.4.1.9.9.220.2.2.27
cpaeAuthConfigGroup4
cpaeAuthReAuthMax
A collection of object(s) that provides configuration
of maximum reauthentication attempts of 802.1x
ports in the system.
 .1.3.6.1.4.1.9.9.220.2.2.28
cpaeAuthIabConfigGroup
cpaeAuthIabEnabled
A collection of object(s) to enable/disable IAB feature
on capable interface for the system.
 .1.3.6.1.4.1.9.9.220.2.2.29
cpaeGlobalAuthFailVlanGroup
cpaeGlobalAuthFailMaxAttempts
A collection of object(s) that provides global configuration
and information about maximum authentication attempts for
Auth-Fail Vlan feature in the system.
 .1.3.6.1.4.1.9.9.220.2.2.30
cpaeMacAuthBypassCriticalGroup
cpaeMabCriticalRecoveryDelay
A collection of object(s) that provides control over
critical configuration for Mac Authentication Bypass.
 .1.3.6.1.4.1.9.9.220.2.2.31
cpaeWebAuthCriticalGroup
cpaeWebAuthCriticalRecoveryDelay
A collection of object(s) that provides control over
critical configuration for Web Proxy Authentication.
 .1.3.6.1.4.1.9.9.220.2.2.32
cpaeCriticalEapolConfigGroup
cpaeCriticalEapolEnabled
A collection of object(s) that provides EAPOL
configuration for 802.1x Critical Authentication
in the system.
 .1.3.6.1.4.1.9.9.220.2.2.33
cpaeHostPostureTokenGroup
cpaeHostPostureTokenStr
A collection of object(s) that provides information
about Posture Token of an host connecting to a PAE port.
 .1.3.6.1.4.1.9.9.220.2.2.34
cpaeMabAuditInfoGroup
cpaeMacAuthBypassPortSessionId cpaeMacAuthBypassPortUrlRedirect cpaeMacAuthBypassPortPostureTok
A collection of object(s) that provides information about
MAC Auth-Bypass Audit sessions.
 .1.3.6.1.4.1.9.9.220.2.2.35
cpaeMabPortIpDevTrackConfGroup
cpaeMabPortIpDevTrackEnabled
A collection of object(s) that provides configuration and
information about MAC Auth-Bypass IP Device Tracking
feature.
 .1.3.6.1.4.1.9.9.220.2.2.36
cpaePortIpDevTrackConfGroup
cpaePortIpDevTrackEnabled
A collection of object(s) that provides configuration and
information about 802.1x IP Device Tracking feature.
 .1.3.6.1.4.1.9.9.220.2.2.37
cpaeHostUrlRedirectGroup
cpaeHostUrlRedirection
A collection of object(s) that provides information about
URL-redirection of 802.1x authenticated hosts.
 .1.3.6.1.4.1.9.9.220.2.2.38
cpaeWebAuthIpDevTrackingGroup
cpaeWebAuthPortIpDevTrackEnabled
A collection of object(s) that provides configuration and
information about Web Proxy Authentication IP Device
Tracking feature.
 .1.3.6.1.4.1.9.9.220.2.2.39
cpaeWebAuthUnAuthTimeoutGroup
cpaeWebAuthUnAuthStateTimeout
A collection of object(s) that provides configuration and
information about Init State Timeout of Web Proxy
Authentication.
 .1.3.6.1.4.1.9.9.220.2.2.40
cpaeHostInfoGroup3
cpaeHostInfoUserName cpaeHostInfoAddrType cpaeHostInfoAddr
A collection of object(s) that provides user and the
address information for 802.1x authenticated host.
 .1.3.6.1.4.1.9.9.220.2.2.41
cpaeGlobalSecViolationGroup
cpaeGlobalSecViolationAction
A collection of object(s) that provides global configuration
and information about security violation action on PAE ports
in the system.
 .1.3.6.1.4.1.9.9.220.2.2.42
cpaeMacAuthBypassPortEnableGroup
cpaeMacAuthBypassPortEnabled
A collection of object(s) to enable/disable Mac Auth-Bypass
on capable interfaces for the system.
 .1.3.6.1.4.1.9.9.220.2.2.43
cpaeMacAuthBypassGroup4
cpaeMacAuthBypassReAuthEnabled cpaeMacAuthBypassReAuthTimeout cpaeMacAuthBypassViolation cpaeMacAuthBypassShutdownTimeout cpaeMacAuthBypassAuthFailTimeout cpaeMacAuthBypassPortInitialize cpaeMacAuthBypassPortReAuth cpaeMacAuthBypassPortMacAddress cpaeMacAuthBypassPortAuthState cpaeMacAuthBypassAcctEnable
A collection of object(s) that provides the
MAC Auth-Bypass configuration and information
for the system.
 .1.3.6.1.4.1.9.9.220.2.2.44
cpaeHostSessionIdGroup
cpaeHostSessionId
A collection of object(s) that provides session
identification information for 802.1x hosts in the system.
 .1.3.6.1.4.1.9.9.220.2.2.45
cpaeHostAuthInfoGroup
cpaeHostAuthPaeState cpaeHostBackendState
A collection of object(s) that provides state machines and
authentication information for 802.1x authenticated hosts
in the system.
 .1.3.6.1.4.1.9.9.220.2.2.46
cpaePortCapabilitiesConfigGroup
cpaePortCapabilitiesEnabled
A collection of object(s) that provides configuration and
information about PAE functionalities of ports in the systems.
 .1.3.6.1.4.1.9.9.220.2.2.47
cpaeDot1xSuppToGuestVlanGroup
cpaeDot1xSuppToGuestVlanAllowed
A collection of object(s) that provides configuration that
allows moving ports with 802.1x supplicants to Guest Vlan.
 .1.3.6.1.4.1.9.9.220.2.2.48
cpaeGuestVlanNotifEnableGroup
cpaeGuestVlanNotifEnable
A collection of object(s) that provides control over
Guest Vlan related notification(s).
 .1.3.6.1.4.1.9.9.220.2.2.49
cpaeGuestVlanNotifGroup
cpaeGuestVlanNotif
A collection of notifications providing information
for Guest Vlan.
 .1.3.6.1.4.1.9.9.220.2.2.50
cpaeAuthFailVlanNotifEnableGrp
cpaeAuthFailVlanNotifEnable
A collection of object(s) that provides control over
Auth-Fail Vlan related notification(s).
 .1.3.6.1.4.1.9.9.220.2.2.51
cpaeAuthFailVlanNotifGroup
cpaeAuthFailVlanNotif
A collection of notifications providing information
for Auth-Fail Vlan.
 .1.3.6.1.4.1.9.9.220.2.2.52
cpaePortAuthFailVlanConfigGroup
cpaePortAuthFailVlan
A collection of object(s) that provides the Auth-Fail
(Authentication Fail) Vlan configuration for the system.
 .1.3.6.1.4.1.9.9.220.2.2.53
cpaePortAuthFailUserInfoGroup
cpaeAuthFailUserName
A collection of object(s) that provides the Auth-Fail user
information for the system.
 .1.3.6.1.4.1.9.9.220.2.2.54
cpaeSuppPortProfileGroup
cpaeSuppPortCredentialProfileName cpaeSuppPortEapProfileName
A collection of object(s) that provides Credential and
EAP profiles configuration for a Supplicant PAE.
 .1.3.6.1.4.1.9.9.220.2.2.55
cpaeSuppHostInfoGroup
cpaeSuppHostAuthMacAddress cpaeSuppHostPaeState cpaeSuppHostBackendState cpaeSuppHostStatus
A collection of object(s) that provides information about
supplicants in the system.
 .1.3.6.1.4.1.9.9.220.2.2.56
Compliance Statements (10)

OID .1.3.6.1.4.1.9.9.220.2.1.1
The compliance statement for devices that implement
the CISCO-PAE-MIB.
Required groups
mandatory cpaeMultipleHostGroup

OID .1.3.6.1.4.1.9.9.220.2.1.2
The compliance statement for devices that implement
the CISCO-PAE-MIB.
Required groups
mandatory cpaePortEntryGroup
optional cpaeGuestVlanGroup This group is mandatory in devices running software
which supports Guest Vlan feature.

OID .1.3.6.1.4.1.9.9.220.2.1.3
The compliance statement for devices that implement
the CISCO-PAE-MIB.
Required groups
mandatory cpaePortEntryGroup
optional cpaeGuestVlanGroup2 This group is mandatory in devices running software
which supports per-interface Guest Vlan feature.
optional cpaeShutdownTimeoutGroup This group is mandatory in devices running software
which support Shutdown Timeout feature.

OID .1.3.6.1.4.1.9.9.220.2.1.4
The compliance statement for devices that implement
the CISCO-PAE-MIB.
Required groups
mandatory cpaePortEntryGroup
optional cpaeGuestVlanGroup2 This group is mandatory in devices running software
which supports per-interface Guest Vlan feature.
optional cpaeShutdownTimeoutGroup This group is mandatory in devices running software
which support Shutdown Timeout feature.
optional cpaeRadiusConfigGroup This group is mandatory in devices running software
which support RADIUS configuration for 802.1x feature.
optional cpaeUserGroupGroup This group is mandatory in devices running software
which support Group Manager for 802.1x feature.

OID .1.3.6.1.4.1.9.9.220.2.1.5
The compliance statement for devices that implement
the CISCO-PAE-MIB.
Required groups
mandatory cpaePortEntryGroup
optional cpaeGuestVlanGroup3 This group is mandatory in devices running software
which supports per-interface Guest Vlan feature.
optional cpaeShutdownTimeoutGroup This group is mandatory in devices running software
which support Shutdown Timeout feature.
optional cpaeRadiusConfigGroup This group is mandatory in devices running software
which support RADIUS configuration for 802.1x feature.
optional cpaeUserGroupGroup This group is mandatory in devices running software
which support Group Manager for 802.1x feature.
optional cpaePortOperVlanGroup Implementation of this group is optional.
optional cpaePortAuthFailVlanGroup This group is mandatory in devices running software
which support Auth-Fail Vlan configuration for
802.1x feature.
optional cpaeNoGuestVlanNotifEnableGrp This group is mandatory in devices running software
which supports per-interface Guest Vlan feature.
optional cpaeNoAuthFailVlanNotifEnableGrp This group is mandatory in devices running software
which supports Auth-Fail Vlan configuration for
802.1x feature.
optional cpaeNoGuestVlanNotifGroup Implementation of this group is optional.
optional cpaeNoAuthFailVlanNotifGroup Implementation of this group is optional.
optional cpaeMacAuthBypassGroup This group is mandatory in devices running software
which support MAC Authentication Bypass feature.
optional cpaeWebAuthGroup This group is mandatory in devices running software
which support Web Proxy Authentication feature.
optional cpaeAuthConfigGroup This group is mandatory in devices running software
which support remote reauthentication timer.
optional cpaeHostInfoGroup Implementation of this group is optional.

OID .1.3.6.1.4.1.9.9.220.2.1.6
The compliance statement for devices that implement
the CISCO-PAE-MIB.
Required groups
mandatory cpaePortEntryGroup
optional cpaeGuestVlanGroup3 This group is mandatory in devices running software
which supports per-interface Guest Vlan feature.
optional cpaeShutdownTimeoutGroup This group is mandatory in devices running software
which support Shutdown Timeout feature.
optional cpaeRadiusConfigGroup This group is mandatory in devices running software
which support RADIUS configuration for 802.1x feature.
optional cpaeUserGroupGroup This group is mandatory in devices running software
which support Group Manager for 802.1x feature.
optional cpaePortOperVlanGroup Implementation of this group is optional.
optional cpaePortAuthFailVlanGroup This group is mandatory in devices running software
which support Auth-Fail Vlan configuration for
802.1x feature.
optional cpaeNoGuestVlanNotifEnableGrp This group is mandatory in devices running software
which supports per-interface Guest Vlan feature.
optional cpaeNoAuthFailVlanNotifEnableGrp This group is mandatory in devices running software
which supports Auth-Fail Vlan configuration for
802.1x feature.
optional cpaeNoGuestVlanNotifGroup Implementation of this group is optional.
optional cpaeNoAuthFailVlanNotifGroup Implementation of this group is optional.
optional cpaeMacAuthBypassGroup This group is mandatory in devices running software
which support MAC Authentication Bypass feature.
optional cpaeMacAuthBypassGroup2 This group is mandatory in devices running software
which provides additional information of
MAC Authentication Bypass feature.
optional cpaeWebAuthGroup This group is mandatory in devices running software
which support Web Proxy Authentication feature.
optional cpaeWebAuthAaaFailGroup This group is mandatory in devices running software
which support Inaccessible Authentication Bypass
for Web Proxy Authentication feature.
optional cpaeHostInfoGroup2 Implementation of this group is optional.
optional cpaePortEapolTestGroup Implementation of this group is optional.
optional cpaePortAuthFailVlanGroup2 This group is mandatory in devices running software
which provides configuration for maximum authentication
attempts for Auth-Fail Vlan feature.
optional cpaeAuthConfigGroup This group is mandatory in devices running software
which support remote reauthentication timer,
re-authentication action, maximum re-authentication
attempts and critical configuration for PAE ports.
optional cpaeAuthConfigGroup2 This group is mandatory in devices running software
which provides additional states in the PAE state
machines.
optional cpaeCriticalRecoveryDelayGroup This group is mandatory in devices running software
which provides recovery delay configuration for 802.1x
Critical Authentication.
optional cpaeMacAuthBypassCriticalGroup This group is mandatory in devices running software
which support critical recovery delay configuration for
MAC Authentication Bypass.
optional cpaeWebAuthCriticalGroup This group is mandatory in devices running software
which support critical recovery delay configuration for
Web Proxy Authentication.
Object refinements
ObjectAccessSyntaxDescription
cpaePortEapolTestStatus
SNMPv2-TCRowStatus
active(1), createAndGo(4), destroy(6)
Only 'active', 'createAndGo' and 'destroy' are
needed to be supported.

OID .1.3.6.1.4.1.9.9.220.2.1.7
The compliance statement for devices that implement
the CISCO-PAE-MIB.
Required groups
mandatory cpaePortEntryGroup
optional cpaeGuestVlanGroup3 This group is mandatory in devices running software
which supports per-interface Guest Vlan feature.
optional cpaeShutdownTimeoutGroup This group is mandatory in devices running software
which support Shutdown Timeout feature.
optional cpaeRadiusConfigGroup This group is mandatory in devices running software
which support RADIUS configuration for 802.1x feature.
optional cpaeUserGroupGroup This group is mandatory in devices running software
which support Group Manager for 802.1x feature.
optional cpaePortOperVlanGroup Implementation of this group is optional.
optional cpaePortAuthFailVlanGroup This group is mandatory in devices running software
which support Auth-Fail Vlan configuration for
802.1x feature.
optional cpaeNoGuestVlanNotifEnableGrp This group is mandatory in devices running software
which supports per-interface Guest Vlan feature.
optional cpaeNoAuthFailVlanNotifEnableGrp This group is mandatory in devices running software
which supports Auth-Fail Vlan configuration for
802.1x feature.
optional cpaeNoGuestVlanNotifGroup Implementation of this group is optional.
optional cpaeNoAuthFailVlanNotifGroup Implementation of this group is optional.
optional cpaeMacAuthBypassGroup This group is mandatory in devices running software
which support MAC Authentication Bypass feature.
optional cpaeMacAuthBypassGroup2 This group is mandatory in devices running software
which provides additional information of
MAC Authentication Bypass feature.
optional cpaeMacAuthBypassGroup3 This group is mandatory in devices running software
which provides configuration for authentication
method for MAC Authentication Bypass feature.
optional cpaeWebAuthGroup This group is mandatory in devices running software
which support Web Proxy Authentication feature.
optional cpaeWebAuthAaaFailGroup This group is mandatory in devices running software
which support Inaccessible Authentication Bypass
for Web Proxy Authentication feature.
optional cpaeHostInfoGroup2 Implementation of this group is optional.
optional cpaeHostInfoGroup3 Implementation of this group is optional.
optional cpaePortEapolTestGroup Implementation of this group is optional.
optional cpaePortAuthFailVlanGroup2 This group is mandatory in devices running software
which provides configuration for maximum authentication
attempts for Auth-Fail Vlan feature.
optional cpaeAuthConfigGroup This group is mandatory in devices running software
which support remote reauthentication timer,
re-authentication action, maximum re-authentication
attempts and critical configuration for PAE ports.
optional cpaeAuthConfigGroup2 This group is mandatory in devices running software
which provides additional states in the PAE state
machines.
optional cpaeCriticalRecoveryDelayGroup This group is mandatory in devices running software
which provides recovery delay configuration for 802.1x
Critical Authentication.
optional cpaeMacAuthBypassCriticalGroup This group is mandatory in devices running software
which support critical recovery delay configuration for
MAC Authentication Bypass.
optional cpaeWebAuthCriticalGroup This group is mandatory in devices running software
which support critical recovery delay configuration for
Web Proxy Authentication.
optional cpaeHostPostureTokenGroup This group is mandatory in devices running software
which provides information about Posture Token of
host(s) connecting to a PAE port.
Object refinements
ObjectAccessSyntaxDescription
cpaePortEapolTestStatus
SNMPv2-TCRowStatus
active(1), createAndGo(4), destroy(6)
Only 'active', 'createAndGo' and 'destroy' are
needed to be supported.

OID .1.3.6.1.4.1.9.9.220.2.1.8
The compliance statement for devices that implement
the CISCO-PAE-MIB.
Required groups
mandatory cpaePortEntryGroup
optional cpaeGuestVlanGroup3 This group is mandatory in devices running software
which supports per-interface Guest Vlan feature.
optional cpaeShutdownTimeoutGroup Implementation of this group is optional.
optional cpaeRadiusConfigGroup Implementation of this group is optional.
optional cpaeUserGroupGroup Implementation of this group is optional.
optional cpaePortOperVlanGroup This group is mandatory for the devices which assign
interfaces to specific VLANs based on 802.1x authentication.
optional cpaePortAuthFailVlanGroup Implementation of this group is optional.
optional cpaeNoGuestVlanNotifEnableGrp This group is mandatory in devices running software
which supports per-interface Guest Vlan feature.
optional cpaeNoAuthFailVlanNotifEnableGrp This group is mandatory in devices running software
which supports Auth-Fail Vlan configuration for
802.1x feature.
optional cpaeNoGuestVlanNotifGroup This group is mandatory in devices running software
which supports per-interface Guest Vlan feature.
optional cpaeNoAuthFailVlanNotifGroup This group is mandatory in devices running software
which supports Auth-Fail Vlan configuration for
802.1x feature.
optional cpaeMacAuthBypassGroup2 Implementation of this group is optional.
optional cpaeMacAuthBypassGroup3 Implementation of this group is optional.
optional cpaeWebAuthGroup Implementation of this group is optional.
optional cpaeWebAuthAaaFailGroup Implementation of this group is optional.
optional cpaeHostInfoGroup2 Implementation of this group is optional.
optional cpaeHostInfoGroup3 Implementation of this group is optional.
optional cpaePortEapolTestGroup Implementation of this group is optional.
optional cpaePortAuthFailVlanGroup2 This group is mandatory in devices running software
which provides configuration for maximum authentication
attempts for Auth-Fail Vlan feature.
optional cpaeAuthConfigGroup2 Implementation of this group is optional.
optional cpaeCriticalRecoveryDelayGroup Implementation of this group is optional.
optional cpaeMacAuthBypassCriticalGroup Implementation of this group is optional.
optional cpaeWebAuthCriticalGroup Implementation of this group is optional.
optional cpaeHostPostureTokenGroup Implementation of this group is optional.
optional cpaeMabAuditInfoGroup Implementation of this group is optional.
optional cpaeMabPortIpDevTrackConfGroup Implementation of this group is optional.
optional cpaePortIpDevTrackConfGroup Implementation of this group is optional.
optional cpaeHostUrlRedirectGroup Implementation of this group is optional.
optional cpaeWebAuthIpDevTrackingGroup Implementation of this group is optional.
optional cpaeWebAuthUnAuthTimeoutGroup Implementation of this group is optional.
optional cpaeGlobalAuthFailVlanGroup Implementation of this group is optional.
optional cpaeGlobalSecViolationGroup Implementation of this group is optional.
optional cpaeCriticalEapolConfigGroup This group is mandatory in devices running software
which provides EAPOL configuration for 802.1x
Critical Authentication.
optional cpaeMacAuthBypassPortEnableGroup Implementation of this group is optional.
optional cpaeMacAuthBypassGroup4 Implementation of this group is optional.
optional cpaeAuthIabConfigGroup Implementation of this group is optional.
optional cpaeAuthConfigGroup3 This group is mandatory in devices running software
which provides configuration and information related
to re-authentication of 802.1x ports in the system.
optional cpaeAuthConfigGroup4 Implementation of this group is optional.
Object refinements
ObjectAccessSyntaxDescription
cpaePortEapolTestStatus
SNMPv2-TCRowStatus
active(1), createAndGo(4), destroy(6)
Only 'active', 'createAndGo' and 'destroy' are
needed to be supported.

OID .1.3.6.1.4.1.9.9.220.2.1.9
The compliance statement for devices that implement
the CISCO-PAE-MIB.
Required groups
mandatory cpaePortEntryGroup
optional cpaeGuestVlanGroup3 This group is mandatory in devices running software
which supports per-interface Guest Vlan feature.
optional cpaeShutdownTimeoutGroup Implementation of this group is optional.
optional cpaeRadiusConfigGroup Implementation of this group is optional.
optional cpaeUserGroupGroup Implementation of this group is optional.
optional cpaePortOperVlanGroup This group is mandatory for the devices which assign
interfaces to specific VLANs based on 802.1x authentication.
optional cpaePortAuthFailVlanGroup Implementation of this group is optional.
optional cpaeNoGuestVlanNotifEnableGrp This group is mandatory in devices running software
which supports per-interface Guest Vlan feature.
optional cpaeNoAuthFailVlanNotifEnableGrp This group is mandatory in devices running software
which supports Auth-Fail Vlan configuration for
802.1x feature.
optional cpaeNoGuestVlanNotifGroup This group is mandatory in devices running software
which supports per-interface Guest Vlan feature.
optional cpaeNoAuthFailVlanNotifGroup This group is mandatory in devices running software
which supports Auth-Fail Vlan configuration for
802.1x feature.
optional cpaeMacAuthBypassGroup2 Implementation of this group is optional.
optional cpaeMacAuthBypassGroup3 Implementation of this group is optional.
optional cpaeWebAuthGroup Implementation of this group is optional.
optional cpaeWebAuthAaaFailGroup Implementation of this group is optional.
optional cpaeHostInfoGroup2 Implementation of this group is optional.
optional cpaeHostInfoGroup3 Implementation of this group is optional.
optional cpaePortEapolTestGroup Implementation of this group is optional.
optional cpaePortAuthFailVlanGroup2 This group is mandatory in devices running software
which provides configuration for maximum authentication
attempts for Auth-Fail Vlan feature.
optional cpaeAuthConfigGroup2 Implementation of this group is optional.
optional cpaeCriticalRecoveryDelayGroup Implementation of this group is optional.
optional cpaeMacAuthBypassCriticalGroup Implementation of this group is optional.
optional cpaeWebAuthCriticalGroup Implementation of this group is optional.
optional cpaeHostPostureTokenGroup Implementation of this group is optional.
optional cpaeMabAuditInfoGroup Implementation of this group is optional.
optional cpaeMabPortIpDevTrackConfGroup Implementation of this group is optional.
optional cpaePortIpDevTrackConfGroup Implementation of this group is optional.
optional cpaeHostUrlRedirectGroup Implementation of this group is optional.
optional cpaeWebAuthIpDevTrackingGroup Implementation of this group is optional.
optional cpaeWebAuthUnAuthTimeoutGroup Implementation of this group is optional.
optional cpaeGlobalAuthFailVlanGroup Implementation of this group is optional.
optional cpaeGlobalSecViolationGroup Implementation of this group is optional.
optional cpaeCriticalEapolConfigGroup This group is mandatory in devices running software
which provides EAPOL configuration for 802.1x
Critical Authentication.
optional cpaeMacAuthBypassPortEnableGroup Implementation of this group is optional.
optional cpaeMacAuthBypassGroup4 Implementation of this group is optional.
optional cpaeAuthIabConfigGroup Implementation of this group is optional.
optional cpaeAuthConfigGroup3 This group is mandatory in devices running software
which provides configuration and information related
to re-authentication of 802.1x ports in the system.
optional cpaeAuthConfigGroup4 Implementation of this group is optional.
optional cpaeHostSessionIdGroup Implementation of this group is optional.
optional cpaeHostAuthInfoGroup Implementation of this group is optional.
optional cpaePortCapabilitiesConfigGroup Implementation of this group is optional.
optional cpaeDot1xSuppToGuestVlanGroup Implementation of this group is optional.
optional cpaeGuestVlanNotifEnableGroup Implementation of this group is optional.
optional cpaeGuestVlanNotifGroup Implementation of this group is optional.
optional cpaeAuthFailVlanNotifEnableGrp Implementation of this group is optional.
optional cpaeAuthFailVlanNotifGroup Implementation of this group is optional.
optional cpaePortAuthFailVlanConfigGroup This group is mandatory in devices running software which
supports Auth-Fail Vlan configuration for 802.1x feature.
optional cpaePortAuthFailUserInfoGroup Implementation of this group is optional.
Object refinements
ObjectAccessSyntaxDescription
cpaePortEapolTestStatus
SNMPv2-TCRowStatus
active(1), createAndGo(4), destroy(6)
Only 'active', 'createAndGo' and 'destroy' are
needed to be supported.

OID .1.3.6.1.4.1.9.9.220.2.1.10
The compliance statement for devices that implement
the CISCO-PAE-MIB.
Required groups
mandatory cpaePortEntryGroup
optional cpaeGuestVlanGroup3 This group is mandatory in devices running software
which supports per-interface Guest Vlan feature.
optional cpaeShutdownTimeoutGroup This group is mandatory in devices running software
which support Shutdown Timeout for 802.1x.
optional cpaeRadiusConfigGroup This group is mandatory in devices running software
which support RADIUS accounting configuration for 802.1x.
optional cpaeUserGroupGroup This group is mandatory in devices running software
which support Group Manager for 802.1x.
optional cpaePortOperVlanGroup This group is mandatory for the devices which assign
interfaces to specific VLANs based on 802.1x authentication.
optional cpaeNoGuestVlanNotifEnableGrp This group is mandatory in devices running software
which supports per-interface Guest Vlan feature.
optional cpaeNoAuthFailVlanNotifEnableGrp This group is mandatory in devices running software
which supports Auth-Fail Vlan configuration for
802.1x feature.
optional cpaeNoGuestVlanNotifGroup This group is mandatory in devices running software
which supports per-interface Guest Vlan feature.
optional cpaeNoAuthFailVlanNotifGroup This group is mandatory in devices running software
which supports Auth-Fail Vlan configuration for
802.1x feature.
optional cpaeMacAuthBypassGroup2 This group is mandatory in devices running software
which provides information about termination action and
session time left for Mac Authentication Bypass via
802.1x feature.
optional cpaeMacAuthBypassGroup3 This group is mandatory in devices running software
which provides configuration of authentication method
for Mac Authentication Bypass via 802.1x feature.
optional cpaeWebAuthGroup This group is mandatory in devices running software
which provides configuration for Web Proxy Authentication
via 802.1x feature.
optional cpaeWebAuthAaaFailGroup This group is mandatory in devices running software
which provides configuration of Inaccessible Authentication
Bypass for Web Proxy Authentication via 802.1x feature.
optional cpaeHostInfoGroup2 This group is mandatory in devices running software
which provides MAC address information of hosts connecting
to PAE ports in the system.
optional cpaeHostInfoGroup3 This group is mandatory in devices running software
which provides user and IP address information for 802.1x
authenticated host in the system.
optional cpaePortEapolTestGroup This group is mandatory in devices running software
which provides EAPOL capable information of hosts connecting
to PAE ports in the system.
optional cpaePortAuthFailVlanGroup2 This group is mandatory in devices running software
which provides configuration for maximum authentication
attempts for Auth-Fail Vlan feature.
optional cpaeAuthConfigGroup2 This group is mandatory in devices running software
which provides additional states in the PAE state machine.
optional cpaeCriticalRecoveryDelayGroup This group is mandatory in devices running software
which provides recovery delay configuration for 802.1x
Critical Authentication in the system.
optional cpaeMacAuthBypassCriticalGroup This group is mandatory in devices running software
which provides control over critical configuration for Mac
Authentication Bypass via 802.1x feature.
optional cpaeWebAuthCriticalGroup This group is mandatory in devices running software
which provides control over critical configuration for Web
Proxy Authentication via 802.1x feature.
optional cpaeHostPostureTokenGroup This group is mandatory in devices running software
which provides information about Posture Token of hosts
connecting to PAE ports.
optional cpaeMabAuditInfoGroup This group is mandatory in devices running software
which provides information about MAC Auth-Bypass Audit
sessions via 802.1x feature.
optional cpaeMabPortIpDevTrackConfGroup This group is mandatory in devices running software
which provides configuration and information about MAC
Auth-Bypass IP Device Tracking via 802.1x feature.
optional cpaePortIpDevTrackConfGroup This group is mandatory in devices running software
which provides configuration and information about
802.1x IP Device Tracking feature.
optional cpaeHostUrlRedirectGroup This group is mandatory in devices running software
which provides information about URL-redirection of 802.1x
authenticated hosts.
optional cpaeWebAuthIpDevTrackingGroup This group is mandatory in devices running software
which provides configuration and information about Web
Proxy Authentication IP Device Tracking via 802.1x feature.
optional cpaeWebAuthUnAuthTimeoutGroup This group is mandatory in devices running software
which provides configuration and information about Init State
Timeout of Web Proxy Authentication via 802.1x feature.
optional cpaeGlobalAuthFailVlanGroup This group is mandatory in devices running software
which provides global configuration and information about
maximum authentication attempts for Auth-Fail Vlan feature
in the system.
optional cpaeGlobalSecViolationGroup This group is mandatory in devices running software
which provides global configuration and information about
security violation action on PAE ports in the system.
optional cpaeCriticalEapolConfigGroup This group is mandatory in devices running software
which provides EAPOL configuration for 802.1x
Critical Authentication.
optional cpaeMacAuthBypassPortEnableGroup This group is mandatory in devices running software
which provides configuration to enable or disable MAC
Auth-Bypass on capable ports via 802.1x feature.
optional cpaeMacAuthBypassGroup4 This group is mandatory in devices running software
which provides configuration and information of MAC
Auth-Bypass parameters via 802.1x feature.
optional cpaeAuthIabConfigGroup This group is mandatory in devices running software
which provides configuration to enable or disable IAB
feature on capable ports in the system.
optional cpaeAuthConfigGroup3 This group is mandatory in devices running software
which provides configuration and information related
to re-authentication of 802.1x ports in the system.
optional cpaeAuthConfigGroup4 This group is mandatory in devices running software
which provides configuration of maximum reauthentication
attempts of 802.1x ports in the system.
optional cpaeHostSessionIdGroup This group is mandatory in devices running software
which provides session identification information for 802.1x
hosts in the system.
optional cpaeHostAuthInfoGroup This group is mandatory in devices running software
which provides information about state machines and
authentication information for 802.1x authenticated hosts in
the system.
optional cpaePortCapabilitiesConfigGroup This group is mandatory in devices running software
which provides configuration and information about PAE
functionalities of ports in the systems.
optional cpaeDot1xSuppToGuestVlanGroup This group is mandatory in devices running software
which provides configuration that allows moving ports with
802.1x supplicants to Guest Vlan.
optional cpaeGuestVlanNotifEnableGroup This group is mandatory in devices running software
which provides control over Guest Vlan related notification(s).
optional cpaeGuestVlanNotifGroup This group is mandatory in devices running software
which provides Guest-Vlan notification.
optional cpaeAuthFailVlanNotifEnableGrp This group is mandatory in devices running software
which provides control over Auth-Fail Vlan related
notification(s).
optional cpaeAuthFailVlanNotifGroup This group is mandatory in devices running software
which provides Auth-Fail Vlan notification.
optional cpaePortAuthFailVlanConfigGroup This group is mandatory in devices running software which
supports Auth-Fail Vlan configuration for 802.1x feature.
optional cpaePortAuthFailUserInfoGroup This group is mandatory in devices running software
which provides the Auth-Fail user information in the system.
optional cpaeSuppPortProfileGroup This group is mandatory in devices running software which
supports PAE supplicant credential and EAP profiles feature.
optional cpaeSuppHostInfoGroup This group is mandatory in devices running software which
supports per-host supplicant feature.
Object refinements
ObjectAccessSyntaxDescription
cpaePortMode readonly
Write access is not required.
cpaeGuestVlanNumber readonly
Write access is not required.
cpaeShutdownTimeoutEnabled readonly
Write access is not required.
cpaePortAuthFailVlan readonly
Write access is not required.
cpaeAuthFailVlanMaxAttempts readonly
Write access is not required.
cpaePortCapabilitiesEnabled readonly
Write access is not required.
cpaeShutdownTimeout readonly
Write access is not required.
cpaeRadiusAccountingEnabled readonly
Write access is not required.
cpaeNoGuestVlanNotifEnable readonly
Write access is not required.
cpaeNoAuthFailVlanNotifEnable readonly
Write access is not required.
cpaeGuestVlanNotifEnable readonly
Write access is not required.
cpaeAuthFailVlanNotifEnable readonly
Write access is not required.
cpaeMacAuthBypassReAuthTimeout readonly
Write access is not required.
cpaeMacAuthBypassReAuthEnabled readonly
Write access is not required.
cpaeMacAuthBypassViolation readonly
Write access is not required.
cpaeMacAuthBypassShutdownTimeout readonly
Write access is not required.
cpaeMacAuthBypassAuthFailTimeout readonly
Write access is not required.
cpaeMacAuthBypassPortEnabled readonly
Write access is not required.
cpaeMacAuthBypassPortInitialize readonly
Write access is not required.
cpaeMacAuthBypassPortReAuth readonly
Write access is not required.
cpaeMacAuthBypassPortAuthMethod readonly
Write access is not required.
cpaeMacAuthBypassAcctEnable readonly
Write access is not required.
cpaeMabCriticalRecoveryDelay readonly
Write access is not required.
cpaeMabPortIpDevTrackEnabled readonly
Write access is not required.
cpaeWebAuthEnabled readonly
Write access is not required.
cpaeWebAuthSessionPeriod readonly
Write access is not required.
cpaeWebAuthLoginPage readonly
Write access is not required.
cpaeWebAuthLoginFailedPage readonly
Write access is not required.
cpaeWebAuthQuietPeriod readonly
Write access is not required.
cpaeWebAuthMaxRetries readonly
Write access is not required.
cpaeWebAuthPortEnabled readonly
Write access is not required.
cpaeWebAuthPortInitialize readonly
Write access is not required.
cpaeWebAuthPortAaaFailPolicy readonly
Write access is not required.
cpaeWebAuthPortIpDevTrackEnabled readonly
Write access is not required.
cpaeWebAuthHostInitialize readonly
Write access is not required.
cpaeWebAuthCriticalRecoveryDelay readonly
Write access is not required.
cpaeWebAuthUnAuthStateTimeout readonly
Write access is not required.
cpaeAuthReAuthPeriodSrcAdmin readonly
Write access is not required.
cpaeAuthReAuthMax readonly
Write access is not required.
cpaeAuthIabEnabled readonly
Write access is not required.
cpaeCriticalEapolEnabled readonly
Write access is not required.
cpaeCriticalRecoveryDelay readonly
Write access is not required.
cpaePortIpDevTrackEnabled readonly
Write access is not required.
cpaeGlobalAuthFailMaxAttempts readonly
Write access is not required.
cpaeGlobalSecViolationAction readonly
Write access is not required.
cpaeDot1xSuppToGuestVlanAllowed readonly
Write access is not required.
cpaeSuppPortCredentialProfileName readonly
Write access is not required.
cpaeSuppPortEapProfileName readonly
Write access is not required.
cpaePortEapolTestStatus readonly
SNMPv2-TCRowStatus
active(1)
Write access is not required.

Support for createAndWait and notInService is not required.
Notifications / Traps (4)
NameOIDDescription
cpaeNoGuestVlanNotif
IEEE8021-PAE-MIBdot1xAuthPaeState
.1.3.6.1.4.1.9.9.220.0.1
A cpaeNoGuestVlanNotif is sent if a non-802.1x
supplicant is detected on a PAE port for which the
value of corresponding instance of
dot1xAuthAuthControlledPortControl is 'auto' and the
value of corresponding instance of cpaeGuestVlanNumber
is zero.
cpaeNoAuthFailVlanNotif
IEEE8021-PAE-MIBdot1xAuthPaeState
.1.3.6.1.4.1.9.9.220.0.2
A cpaeNoAuthFailVlanNotif is sent if a 802.1x
supplicant fails to authenticate on a PAE port for
which the value of corresponding instance of
dot1xAuthAuthControlledPortControl is 'auto' and the
value of corresponding instance of cpaePortAuthFailVlan
is zero.
cpaeGuestVlanNotif
cpaeGuestVlanNumber IEEE8021-PAE-MIBdot1xAuthPaeState
.1.3.6.1.4.1.9.9.220.0.3
A cpaeGuestVlanNotif is sent if value of the instance
of cpaeGuestVlanNotifEnable is set to 'true', and a PAE
port is being moved to the VLAN specified by value of
the corresponding instance of cpaeGuestVlanNumber.
cpaeAuthFailVlanNotif
cpaePortAuthFailVlan IEEE8021-PAE-MIBdot1xAuthPaeState
.1.3.6.1.4.1.9.9.220.0.4
A cpaeAuthFailVlanNotif is sent if value of the instance
of cpaeAuthFailVlanNotifEnable is set to 'true', and a PAE
port is being moved to the VLAN specified by value of
the corresponding instance of cpaePortAuthFailVlan.