HP-DOT1X-EXTENSIONS-MIB Table View

This table supplements the 'dot1xPaePortTable'.

hpicfDot1xPaePortEntry row .1.3.6.1.4.1.11.2.14.11.5.1.25.1.1.1.1

The fields in these entries will be used to supplement
'dot1xPaePortEntry'.

Indexes

No indexes recorded

Column	Syntax	OID
hpicfDot1xPaePortAuth This object allows enable/disable authenticator functionality on a port.	SNMPv2-TCTruthValuer/w Type Values: 1 true 2 false Description: Represents a boolean value.	.1.3.6.1.4.1.11.2.14.11.5.1.25.1.1.1.1.1
hpicfDot1xPaePortSupp This object allows enable/disable supplicant functionality on a port.	SNMPv2-TCTruthValuer/w Type Values: 1 true 2 false Description: Represents a boolean value.	.1.3.6.1.4.1.11.2.14.11.5.1.25.1.1.1.1.2
hpicfDot1xPaePortMixed This object allows enable/disable guests on ports with authenticated clients.	SNMPv2-TCTruthValuer/w Type Values: 1 true 2 false Description: Represents a boolean value.	.1.3.6.1.4.1.11.2.14.11.5.1.25.1.1.1.1.3
hpicfDot1xPaePortSpeedVSA This object allows enable or disable port speed VSA processing on a port.	SNMPv2-TCTruthValuer/w Type Values: 1 true 2 false Description: Represents a boolean value.	.1.3.6.1.4.1.11.2.14.11.5.1.25.1.1.1.1.4
hpicfDot1xPaePortMBV This object enables and disables the MAC-based VLANs feature on the port.	SNMPv2-TCTruthValuer/w Type Values: 1 true 2 false Description: Represents a boolean value.	.1.3.6.1.4.1.11.2.14.11.5.1.25.1.1.1.1.5
hpicfDot1xPaePortCritAuthVoiceVid The VLANID which is being assinged as a critical-auth voice vlan.	Q-BRIDGE-MIBVlanIndexr/w	.1.3.6.1.4.1.11.2.14.11.5.1.25.1.1.1.1.6
hpicfDot1xPaePortCritAuthDataVid The VLANID which is being assinged as a critical-auth data vlan.	Q-BRIDGE-MIBVlanIndexr/w	.1.3.6.1.4.1.11.2.14.11.5.1.25.1.1.1.1.7
hpicfDot1xPaePortCritAuthUserRole This object specifies the user role of the client for critical-auth.	OctetStringr/w Constraints: range: 0-64	.1.3.6.1.4.1.11.2.14.11.5.1.25.1.1.1.1.8
hpicfDot1xPaePortOpenAuthVoiceVid The VLANID which is being assinged as a open-auth voice vlan.	Q-BRIDGE-MIBVlanIndexr/w	.1.3.6.1.4.1.11.2.14.11.5.1.25.1.1.1.1.9
hpicfDot1xPaePortOpenAuthDataVid The VLANID which is being assinged as a open-auth data vlan.	Q-BRIDGE-MIBVlanIndexr/w	.1.3.6.1.4.1.11.2.14.11.5.1.25.1.1.1.1.10
hpicfDot1xPaePortOpenAuthUserRole This object specifies the user role of the client for open-auth.	OctetStringr/w Constraints: range: 0-64	.1.3.6.1.4.1.11.2.14.11.5.1.25.1.1.1.1.11
hpicfDot1xPaePortInitialRole This object specifies the initial role that is configured for a port.	OctetStringr/w Constraints: range: 0-64	.1.3.6.1.4.1.11.2.14.11.5.1.25.1.1.1.1.12

This table supplements the 'dot1xAuthConfigTable'.

hpicfDot1xAuthConfigEntry row .1.3.6.1.4.1.11.2.14.11.5.1.25.1.2.1.1

The fields in these entries will be used to supplement
'dot1xAuthConfigEntry'.

Indexes

No indexes recorded

Column	Syntax	OID
hpicfDot1xAuthAuthVid This object configures the PVID for the authorized 802.1x port. When hpSwitchAutzUserRoleEnabled is true, this value may be superseded by the value of hpSwitchAutzUserRoleVlanId or hpSwitchAutzUserRoleVlanName from th…	Q-BRIDGE-MIBVlanIndexr/w	.1.3.6.1.4.1.11.2.14.11.5.1.25.1.2.1.1.1
hpicfDot1xAuthUnauthVid This object configures the PVID for the unauthorized 802.1x port. When hpSwitchAutzUserRoleEnabled is true, this value may be superseded by the value of hpSwitchAutzUserRoleVlanId or hpSwitchAutzUserRoleVlanName from …	Q-BRIDGE-MIBVlanIndexr/w	.1.3.6.1.4.1.11.2.14.11.5.1.25.1.2.1.1.2
hpicfDot1xAuthUnauthPeriod This objects configures the period of time, in seconds, which the authenticator will wait for authentication before transitioning to guest VLAN mode, or assigning the role identified by hpSwitchAutzUserRoleInitialRoleNa…	secondsUnsigned32r/w Constraints: range: 0-255	.1.3.6.1.4.1.11.2.14.11.5.1.25.1.2.1.1.3
hpicfDot1xAuthClientLimitdeprecated *************THIS OBJECT IS DEPRECATED ********** The maximum number of authenticated clients to allow on the port.	Unsigned32r/w Constraints: range: 1-32	.1.3.6.1.4.1.11.2.14.11.5.1.25.1.2.1.1.4
hpicfDot1xAuthLogoffPeriod Specifies the period, in seconds, at which an authenticated client will be considered unauthenticated for a lack of activity (i.e. traffic originating from client).	secondsUnsigned32r/w Constraints: range: 1-999999999	.1.3.6.1.4.1.11.2.14.11.5.1.25.1.2.1.1.5
hpicfDot1xAuthClientLimit2 The maximum number of authenticated clients to allow on the port if greater than 0. If 0 then authenticator controls port as a single entity - no client limit.	Unsigned32r/w Constraints: range: 0-1024	.1.3.6.1.4.1.11.2.14.11.5.1.25.1.2.1.1.6
hpicfDot1xAuthCachedReauthPeriod The value indicates the period in seconds, during which cached reauthentication is allowed on the port. If value is zero then the period of cached reauthentication is unlimited.	secondsUnsigned32r/w Constraints: range: 0-2147483647	.1.3.6.1.4.1.11.2.14.11.5.1.25.1.2.1.1.7
hpicfDot1xAuthEnforceCacheReauth Setting this attribute TRUE(1) will allow cached reauthentication when server-timeout is configured lesser than radius connection timeout or when client initiates authentication before the radius connection timeout duri…	SNMPv2-TCTruthValuer/w Type Values: 1 true 2 false Description: Represents a boolean value.	.1.3.6.1.4.1.11.2.14.11.5.1.25.1.2.1.1.8
hpicfAuthMaxEapReq The value of the maxEapReq is used for sending by Auth Order to send EAP Identity requests.	SNMPv2-SMIUnsigned32r/w Type Constraints: range: 0..4294967295	.1.3.6.1.4.1.11.2.14.11.5.1.25.1.2.1.1.9
hpicfDot1xAuthUnauthVidLLDPNwkPolicy Setting this attribute TRUE(1) will suppress the transmission of LLDP Network Policy TLV from port when an unauthorized client is placed in unauth VLAN during 802.1x authentication.	SNMPv2-TCTruthValuer/w Type Values: 1 true 2 false Description: Represents a boolean value.	.1.3.6.1.4.1.11.2.14.11.5.1.25.1.2.1.1.11

A table that contains the configuration and basic status 
objects for Authenticator PAEs associated with each 
shared-media port.

hpicfDot1xSMAuthConfigEntry row .1.3.6.1.4.1.11.2.14.11.5.1.25.1.2.2.1

The configuration information for an Authenticator
PAE.

Indexes

hpicfDot1xSMAuthPaePort hpicfDot1xSMAuthMacAddr

Column	Syntax	OID
hpicfDot1xSMAuthPaePort The interface index associated with this Authenticator PAE. On wired HP products the interface index is the physical port. On wireless products it is the instance (whether real or virtual) of an AP.	IF-MIBInterfaceIndex Type Constraints: range: 1..2147483647 Description: A unique value, greater than zero, for each interface or interface sub-layer in the managed system. It is recommended that values are assigned contiguously starting from 1. The value for each interface sub-layer must …	.1.3.6.1.4.1.11.2.14.11.5.1.25.1.2.2.1.1
hpicfDot1xSMAuthMacAddr The 48-bit IEEE media access control address of The supplicant associated with this Authenticator PAE.	SNMPv2-TCMacAddress Type Constraints: range: 6 Description: Represents an 802 MAC address represented in the `canonical' order defined by IEEE 802.1a, i.e., as if it were transmitted least significant bit first, even though 802.5 (in contrast to other 802.x protocols) requires M…	.1.3.6.1.4.1.11.2.14.11.5.1.25.1.2.2.1.2
hpicfDot1xSMAuthInitialize The initialization control for this Authenticator PAE. Setting this attribute TRUE causes the PAE to be initialized. The attribute value reverts to FALSE once initialization has completed.	SNMPv2-TCTruthValuer/w Type Values: 1 true 2 false Description: Represents a boolean value.	.1.3.6.1.4.1.11.2.14.11.5.1.25.1.2.2.1.3
hpicfDot1xSMAuthReauthenticate The reauthentication control for this Authenticator PAE. Setting this attribute TRUE causes the Authenticator PAE state machine for the Port to reauthenticate the Supplicant. Setting this attribute FALSE has no effec…	SNMPv2-TCTruthValuer/w Type Values: 1 true 2 false Description: Represents a boolean value.	.1.3.6.1.4.1.11.2.14.11.5.1.25.1.2.2.1.4
hpicfDot1xSMAuthPaeState The current value of the Authenticator PAE state machine.	Enumeration Enumerated Values: 1 initialize 2 disconnected 3 connecting 4 authenticating 5 authenticated 6 aborting 7 held 8 forceAuth 9 forceUnauth 10 restart 11 heldNoVlan 12 heldUnauthVlan 14 initialRole 15 heldInitialRoleFailed 16 criticalAuth 17 openAuth	.1.3.6.1.4.1.11.2.14.11.5.1.25.1.2.2.1.5
hpicfDot1xSMAuthBackendAuthState The current state of the Backend Authentication state machine.	Enumeration Enumerated Values: 1 request 2 response 3 success 4 fail 5 timeout 6 idle 7 initialize 8 ignore 9 applyInitialRole	.1.3.6.1.4.1.11.2.14.11.5.1.25.1.2.2.1.6
hpicfDot1xSMAuthReAuthPeriod The value, in seconds, of the reAuthPeriod constant currently in use by the Reauthentication Timer state machine. When hpSwitchAutzUserRoleEnabled is true, this value will be superseded by the value of hpSwitchAutzUserR…	SNMPv2-SMIUnsigned32 Type Constraints: range: 0..4294967295	.1.3.6.1.4.1.11.2.14.11.5.1.25.1.2.2.1.7
hpicfDot1xSMAuthReAuthEnabled The enable/disable control used by the Reauthentication Timer state machine (8.5.5.1).	SNMPv2-TCTruthValue Type Values: 1 true 2 false Description: Represents a boolean value.	.1.3.6.1.4.1.11.2.14.11.5.1.25.1.2.2.1.8
hpicfDot1xSMAuthSessionTimeout Specifies the RADIUS Server set session timeout for reauthentication of the user. When ST = 0, user gets reauthenticated at reauth-period secs, ST < 60 it is set to 60 secs and then user is reauthenticated, ST > 60 user…	secondsUnsigned32 Constraints: range: 0-4294967295	.1.3.6.1.4.1.11.2.14.11.5.1.25.1.2.2.1.9

A table that contains the diagnostics objects for the
Authenticator PAE associated with each Port.
An entry appears in this table for each port that may
authenticate access to itself.

hpicfDot1xAuthDiagEntry row .1.3.6.1.4.1.11.2.14.11.5.1.25.1.2.3.1

The diagnostic information for an Authenticator PAE.

Indexes

IEEE8021-PAE-MIBdot1xPaePortNumber

Column	Syntax	OID
hpicfDot1xAuthNumberOfSuccessAuthentication Counts the number of times that authenticator received an EAP-Success message from Authentication Server. Indicates that Supplicant has successfully authenticated to the Authentication Server.	SNMPv2-SMICounter32 Type Constraints: range: 0..4294967295	.1.3.6.1.4.1.11.2.14.11.5.1.25.1.2.3.1.1
hpicfDot1xAuthNumberOfFailedAuthentication Counts the number of times that authenticator received an EAP-Failure message from Authentication Server. Indicates that Supplicant has failed to authenticate to the Authentication Server.	SNMPv2-SMICounter32 Type Constraints: range: 0..4294967295	.1.3.6.1.4.1.11.2.14.11.5.1.25.1.2.3.1.2

A table that contains the statistics objects for the
Authenticator PAE's associated with each shared-media 
Port.

hpicfDot1xAuthStatsEntry row .1.3.6.1.4.1.11.2.14.11.5.1.25.1.2.4.1

The statistics information for an Authenticator PAE.

Indexes

hpicfDot1xSMAuthPaePort hpicfDot1xSMAuthMacAddr

Column	Syntax	OID
hpicfDot1xAuthEapolFramesRx The number of valid EAPOL frames of any type that have been received by this Authenticator.	SNMPv2-SMICounter32 Type Constraints: range: 0..4294967295	.1.3.6.1.4.1.11.2.14.11.5.1.25.1.2.4.1.1
hpicfDot1xAuthEapolFramesTx The number of EAPOL frames of any type that have been transmitted by this Authenticator.	SNMPv2-SMICounter32 Type Constraints: range: 0..4294967295	.1.3.6.1.4.1.11.2.14.11.5.1.25.1.2.4.1.2
hpicfDot1xAuthEapolStartFramesRx The number of EAPOL Start frames that have been received by this Authenticator.	SNMPv2-SMICounter32 Type Constraints: range: 0..4294967295	.1.3.6.1.4.1.11.2.14.11.5.1.25.1.2.4.1.3
hpicfDot1xAuthEapolLogoffFramesRx The number of EAPOL Logoff frames that have been received by this Authenticator.	SNMPv2-SMICounter32 Type Constraints: range: 0..4294967295	.1.3.6.1.4.1.11.2.14.11.5.1.25.1.2.4.1.4
hpicfDot1xAuthEapolRespIdFramesRx The number of EAP Resp/Id frames that have been received by this Authenticator.	SNMPv2-SMICounter32 Type Constraints: range: 0..4294967295	.1.3.6.1.4.1.11.2.14.11.5.1.25.1.2.4.1.5
hpicfDot1xAuthEapolRespFramesRx The number of valid EAP Response frames (other than Resp/Id frames) that have been received by this Authenticator.	SNMPv2-SMICounter32 Type Constraints: range: 0..4294967295	.1.3.6.1.4.1.11.2.14.11.5.1.25.1.2.4.1.6
hpicfDot1xAuthEapolReqIdFramesTx The number of EAP Req/Id frames that have been transmitted by this Authenticator.	SNMPv2-SMICounter32 Type Constraints: range: 0..4294967295	.1.3.6.1.4.1.11.2.14.11.5.1.25.1.2.4.1.7
hpicfDot1xAuthEapolReqFramesTx The number of EAP Request frames (other than Rq/Id frames) that have been transmitted by this Authenticator.	SNMPv2-SMICounter32 Type Constraints: range: 0..4294967295	.1.3.6.1.4.1.11.2.14.11.5.1.25.1.2.4.1.8
hpicfDot1xAuthInvalidEapolFramesRx The number of EAPOL frames that have been received by this Authenticator in which the frame type is not recognized.	SNMPv2-SMICounter32 Type Constraints: range: 0..4294967295	.1.3.6.1.4.1.11.2.14.11.5.1.25.1.2.4.1.9
hpicfDot1xAuthEapLengthErrorFramesRx The number of EAPOL frames that have been received by this Authenticator in which the Packet Body Length field is invalid.	SNMPv2-SMICounter32 Type Constraints: range: 0..4294967295	.1.3.6.1.4.1.11.2.14.11.5.1.25.1.2.4.1.10
hpicfDot1xAuthLastEapolFrameVersion The protocol version number carried in the most recently received EAPOL frame.	SNMPv2-SMIUnsigned32 Type Constraints: range: 0..4294967295	.1.3.6.1.4.1.11.2.14.11.5.1.25.1.2.4.1.11
hpicfDot1xAuthLastEapolFrameSource The source MAC address carried in the most recently received EAPOL frame.	SNMPv2-TCMacAddress Type Constraints: range: 6 Description: Represents an 802 MAC address represented in the `canonical' order defined by IEEE 802.1a, i.e., as if it were transmitted least significant bit first, even though 802.5 (in contrast to other 802.x protocols) requires M…	.1.3.6.1.4.1.11.2.14.11.5.1.25.1.2.4.1.12

A table that contains the session statistics objects
for the Authenticator PAE's associated with each 
shared-media Port.

hpicfDot1xAuthSessionStatsEntry row .1.3.6.1.4.1.11.2.14.11.5.1.25.1.2.5.1

The session statistics information for an Authenticator
PAE. This shows the current values being collected for
each session that is still in progress, or the final
values for the last valid session on each port where
t…

Indexes

hpicfDot1xSMAuthPaePort hpicfDot1xSMAuthMacAddr

Column	Syntax	OID
hpicfDot1xAuthSessionPerPAECountersEnabled Specifies whether individualized PAE octet and frame counts are supported. If TRUE then system is capable of maintaining separate counter sets for each, of possibly many, Authenticator PAE instance o…	SNMPv2-TCTruthValue Type Values: 1 true 2 false Description: Represents a boolean value.	.1.3.6.1.4.1.11.2.14.11.5.1.25.1.2.5.1.1
hpicfDot1xAuthSessionOctetsRx The number of octets received in user data frames during the session.	SNMPv2-SMICounter64 Type Constraints: range: 0..18446744073709551615	.1.3.6.1.4.1.11.2.14.11.5.1.25.1.2.5.1.2
hpicfDot1xAuthSessionOctetsTx The number of octets transmitted in user data frames during the session.	SNMPv2-SMICounter64 Type Constraints: range: 0..18446744073709551615	.1.3.6.1.4.1.11.2.14.11.5.1.25.1.2.5.1.3
hpicfDot1xAuthSessionFramesRx The number of user data frames received during the session.	SNMPv2-SMICounter32 Type Constraints: range: 0..4294967295	.1.3.6.1.4.1.11.2.14.11.5.1.25.1.2.5.1.4
hpicfDot1xAuthSessionFramesTx The number of user data frames transmitted during the session.	SNMPv2-SMICounter32 Type Constraints: range: 0..4294967295	.1.3.6.1.4.1.11.2.14.11.5.1.25.1.2.5.1.5
hpicfDot1xAuthSessionId A unique identifier for the session, in the form of a printable ASCII string of at least three characters.	SNMP-FRAMEWORK-MIBSnmpAdminString Type Constraints: range: 0..255	.1.3.6.1.4.1.11.2.14.11.5.1.25.1.2.5.1.6
hpicfDot1xAuthSessionAuthenticMethod The authentication method used to establish the session.	Enumeration Enumerated Values: 1 remoteAuthServer 2 localAuthServer 3 localandremoteAuthServer	.1.3.6.1.4.1.11.2.14.11.5.1.25.1.2.5.1.7
hpicfDot1xAuthSessionTime The duration of the session in seconds.	SNMPv2-SMITimeTicks Type Constraints: range: 0..4294967295	.1.3.6.1.4.1.11.2.14.11.5.1.25.1.2.5.1.8
hpicfDot1xAuthSessionStartTime This object contains the value of sysUpTime at the time Supplicant was successfully authenticated.	SNMPv2-TCTimeStamp Based On: SNMPv2-SMITimeTicks Description: The value of the sysUpTime object at which a specific occurrence happened. The specific occurrence must be defined in the description of any object defined using this type. If sysUpTime is reset t…	.1.3.6.1.4.1.11.2.14.11.5.1.25.1.2.5.1.9
hpicfDot1xAuthSessionStopTime This object contains the value of sysUpTime at the time an authenticated Supplicant was de-authenticated, as a result of an EAPOL-Logoff, reauthentication period expiration, or forced asynchronous reauthentication.	SNMPv2-TCTimeStamp Based On: SNMPv2-SMITimeTicks Description: The value of the sysUpTime object at which a specific occurrence happened. The specific occurrence must be defined in the description of any object defined using this type. If sysUpTime is reset t…	.1.3.6.1.4.1.11.2.14.11.5.1.25.1.2.5.1.10
hpicfDot1xAuthSessionInactiveTime This time (in seconds) since last user data frames, either received or transmitted, were observed.	SNMPv2-SMITimeTicks Type Constraints: range: 0..4294967295	.1.3.6.1.4.1.11.2.14.11.5.1.25.1.2.5.1.11
hpicfDot1xAuthSessionTerminateCause The reason for the session termination.	Enumeration Enumerated Values: 1 supplicantLogoff 2 portFailure 3 supplicantRestart 4 reauthFailed 5 authControlForceUnauth 6 portReInit 7 portAdminDisabled 999 notTerminatedYet	.1.3.6.1.4.1.11.2.14.11.5.1.25.1.2.5.1.12
hpicfDot1xAuthSessionUserName The User-Name representing the identity of the Supplicant PAE.	SNMP-FRAMEWORK-MIBSnmpAdminString Type Constraints: range: 0..255	.1.3.6.1.4.1.11.2.14.11.5.1.25.1.2.5.1.13
hpicfDot1xAuthSessionIsForwarding Specifies whether traffic originating from Supplicant PAE is being forwarded by Authenticator PAE. If TRUE, then Authenticator is forwarding Supplicant's traffic If FALSE, then Authenti…	SNMPv2-TCTruthValue Type Values: 1 true 2 false Description: Represents a boolean value.	.1.3.6.1.4.1.11.2.14.11.5.1.25.1.2.5.1.14
hpicfDot1xAuthSessionVid The PVID on which user data frames are being forwarded.	Q-BRIDGE-MIBVlanIndex	.1.3.6.1.4.1.11.2.14.11.5.1.25.1.2.5.1.15
hpicfDot1xAuthSessionRoleName When hpSwitchAutzUserRoleEnabled is true, specifies the user role of the client assigned to the Supplicant PAE.	HP-AUTZ-MIBHpAutzUserRoleName Type Constraints: range: 1..63 Description: User role name type. All printable ASCII characters are allowed except '.', ' ', and '~'.	.1.3.6.1.4.1.11.2.14.11.5.1.25.1.2.5.1.16

This table supplements the 'dot1xSuppConfigTable'.

hpicfDot1xSuppConfigEntry row .1.3.6.1.4.1.11.2.14.11.5.1.25.1.3.1.1

The fields in these entries will be used to supplement
'dot1xSuppConfigEntry'.

Indexes

No indexes recorded

Column	Syntax	OID
hpicfDot1xSuppConfigIdentity This object can be used to set/get the identity 802.1x supplicant supplies to its authenticator.	OctetStringr/w Constraints: range: 0-64	.1.3.6.1.4.1.11.2.14.11.5.1.25.1.3.1.1.1
hpicfDot1xSuppConfigPassword This object can be used to set the password the supplicant uses for MD5 authentication.	OctetStringr/w Constraints: range: 0-64	.1.3.6.1.4.1.11.2.14.11.5.1.25.1.3.1.1.2
hpicfDot1xSuppConfigPasswordEncrypted The encrypted form of the password used by supplicant for MD5 authentication. This object may only be read or written when hpSwitchAuthenticationEncryptCredentialsMethod is set to a value other than none(0). At most …	OctetStringr/w Constraints: range: 0-256	.1.3.6.1.4.1.11.2.14.11.5.1.25.1.3.1.1.3