Standard view Table view

IEEE8021X-PAE-MIB

        The MIB module for managing the Port Access Entity (PAE)
functions of IEEE 802.1X (Revision of 802.1X-2004).
The PAE functions managed are summarized in Figure 12-3 of
IEEE 802.1X and include EAPOL PACP support for authentication
(EAP Supplicant and/or Authenticator), MACsec Key Agreement
(MKA), EAPOL, and transmission and reception of network
announcements.
        
The following acronyms and definitions are used in this MIB.
        
AN : Association Number, a number that is concatenated with a
    MACsec Secure Channel Identifier to identify a Secure
    Association (SA).
        
Announcer : EAPOL-Announcement transmission functionality.
        
Authenticator : An entity that facilitates authentication of
    other entities attached to the same LAN.
        
CA : secure Connectivity Association: A security relationship,
    established and maintained by key agreement protocols, that
    comprises a fully connected subset of the service access
    points in stations attached to a single LAN that are to be
    supported by MACsec.
        
CAK : secure Connectivity Association Key, a secret key
    possessed by members of a given CA.
        
CKN : secure Connectivity Association Key Name (CKN), a text
    that identifies a CAK.
        
Common Port : An instance of the MAC Internal Sublayer Service
    used by the SecY or PAC to provide transmission and
    reception of frames for both the Controlled and
    Uncontrolled Ports.
        
Controlled Port : The access point used to provide the secure
    MAC Service to a client of a PAC or SecY.
        
CP state machine : Controlled Port state machine is capable of
    controlling a SecY or a PAC.  The CP supports
    interoperability with unauthenticated systems that are not
    port-based network access control capable, or that lack 
    MKA.  When the access controlled port is supported by a
    SecY, the CP is capable of controlling the SecY so as to
    provide unsecured connectivity to systems that implement a
    PAC.
        
EAP : Extensible Authentication Protocol, RFC3748.
        
EAPOL : EAP over LANs.
        
KaY : Key Agreement Entity, a PAE entity responsible for MKA.
        
Key Server : Elected by MKA, to transport a succession of SAKs,
    for use by MACsec, to the other member(s) of a CA.
        
KMD : Key Management Domain, a string identifying systems that
     share cached CAKs.
        
Listener : The role is to receive the network announcement
    parameters in the authentication process.
        
Logon Process : The Logon Process is responsible for the
    managing the use of authentication credentials, for
    initiating use of the PAE's Supplicant and or Authenticator
    functionality, for deriving CAK, CKN tuples from PAE
    results, for maintaining PSKs (Pre-Sharing Keys), and for
    managing MKA instances.  In the absence of successful
    authentication, key agreement, or support for MAC Security,
    the Logon Process determines whether the CP state machine
    should provide unauthenticated connectivity or
    authenticated but unsecured connectivity.
        
MKA : MACsec Key Agreement protocol allows PAEs, each
    associated with a port that is an authenticated member of a
    secure connectivity association (CA) or a potential CA, to
    discover other PAEs attached to the same LAN, to confirm
    mutual possession of a CAK and hence to prove a past mutual
    authentication, to agree the secret keys (SAKs) used by
    MACsec for symmetric shared key cryptography, and to ensure
    that the data protected by MACsec has not been delayed.
        
MKPDU : MACsec Key Agreement Protocol Data Unit.
        
MPDU : MAC Protocol Data Unit.
        
NID : Network Identity, a UTF-8 string identifying an network
     or network service.
        
PAE : Port Access Entity, the protocol entity associated with a
     Port.  It can support the protocol functionality
     associated with the Authenticator, the Supplicant, or
     both.
        
PAC : Port Access Controller, a protocol-less shim that
     provides control over frame transmission and reception by
     clients attached to its Controlled Port, and uses the MAC
     Service provided by a Common Port.  The access control
     decision is made by the PAE, typically taking into
     account the success or failure of mutual authentication
     and authorization of the PAE's peer(s), and is
     communicated by the PAE using the LMI to set the PAC's
     Controlled Port enabled/disable.  Two different interfaces
     'Controlled Port' and 'Uncontrolled Port', are associated
     with a PAC, and that for each instance of a PAC, two
     ifTable rows (one for each interface) run on top of an
     ifTable row representing the 'Common Port' interface,
     such as a row with ifType = 'ethernetCsmacd(6)'.
        
     For example :
    -----------------------------------------------------------
    |                            |                            |
    |   Controlled Port          |   Uncontrolled Port        |
    |      Interface             |      Interface             |
    |    (ifEntry = j)           |     (ifEntry = k)          |
    | (ifType =                  | (ifType =                  |
    |  macSecControlledIF(231))  |  macSecUncontrolledIF(232))|
    |                            |                            |
    |---------------------------------------------------------|
    |                                                         |
    |                    Physical Interface                   |
    |                      (ifEntry = i)                      |
    |                (ifType = ethernetCsmacd(6))             |
    |_________________________________________________________|
                i, j, k are ifIndex to indicate
               an interface stack in the ifTable.
                Figure : PAC Interface Stack
        
     The 'Controlled Port' is the service point to provide one
     instance of the secure MAC service in a PAC.  The
     'Uncontrolled Port' is the service point to provide one
     instance of the insecure MAC service in a PAC.
        
PACP : Port Access Controller Protocol.
        
Port Identifier : A 16-bit number that is unique within the
    scope of the address of the port.
        
Real Port : Indicates the PAE is for a real port.  A port that
    is not created on demand by the mechanisms specified in
    this standard, but that can transmit and receive frames for
    one or more virtual ports.
        
SC : Secure Channel, a security relationship used to provide
    security guarantees for frames transmitted from one member
    of a CA to the others.  An SC is supported by a sequence of
    SAs thus allowing the periodic use of fresh keys without
    terminating the relationship.
        
SA : Secure Association, a security relationship that provides
    security guarantees for frames transmitted from one member
    of a CA to the others. Each SA is supported by a single
    secret key, or a single set of keys where the cryptographic
    operations used to protect one frame require more than one
    key. 
        
SAK : Secure Association key, the secret key used by an SA.
        
SCI : Secure Channel Identifier, a globally unique identifier
    for a secure channel, comprising a globally unique MAC
    Address and a Port Identifier, unique within the system
    allocated that address.
        
secured connectivity : Data transfer between two or 'Controlled
    Ports' that is protected by MACsec.
        
SecY : MAC Security Entity, the entity that operates the MAC
    Security protocol within a system.
        
Supplicant : An entity at one end of a point-to-point LAN
    segment that seeks to be authenticated by an Authenticator
    attached to the other end of that link.
            
Suspension: Temporary suspension of MKA operation to facilitate
    in-service control plane software upgrades without
    disrupting existing secure connectivity.
        
Uncontrolled Port : The access point used to provide the
    insecure MAC Service to a client of a SecY or PAC.
        
Virtual Port : Indicates the PAE is for a virtual port.  A MAC
    Service or Internal Sublayer service access point that is
    created on demand.  Virtual ports can be used to provide
    separate secure connectivity associations over the same
    LAN.
Source file
IEEE8021X-PAE-MIB
Last revised
Identity
ieee8021XPaeMIB
Base OID
1.3.111.2.802.1.1.15
Imported Objects
IEEE8021-SECY-MIB SecySCI
IF-MIB InterfaceIndex
SNMP-FRAMEWORK-MIB SnmpAdminString
SNMPv2-CONF MODULE-COMPLIANCE OBJECT-GROUP
SNMPv2-SMI Counter32 Counter64 Gauge32 Integer32 MODULE-IDENTITY OBJECT-TYPE Unsigned32
SNMPv2-TC MacAddress RowPointer RowStatus TEXTUAL-CONVENTION TimeInterval TimeStamp TruthValue
Net-SNMP examples using the rfc MIB directory Show commands

These commands use the standard Observium installation path and load the selected MIB variant before the RFC and Net-SNMP directories.

Translate the module identity
/usr/bin/snmptranslate -Pud -Ir -On -m 'IEEE8021X-PAE-MIB' -M '/opt/observium/mibs/rfc:/opt/observium/mibs/net-snmp' 'IEEE8021X-PAE-MIB::ieee8021XPaeMIB'
Walk the MIB subtree
/usr/bin/snmpbulkwalk -v2c -c '<community>' -Pud -Ir -OQUs -m 'IEEE8021X-PAE-MIB' -M '/opt/observium/mibs/rfc:/opt/observium/mibs/net-snmp' 'udp:<hostname>:161' 'IEEE8021X-PAE-MIB::ieee8021XPaeMIB'
How SNMP, Net-SNMP, MIB paths, and variants work
Objects (173)
ieee8021XPaeMIB
.1.3.111.2.802.1.1.15
ieee8021XPaeMIBNotifications
.1.3.111.2.802.1.1.15.0
ieee8021XPaeMIBObjects
.1.3.111.2.802.1.1.15.1
ieee8021XPaeSystem
.1.3.111.2.802.1.1.15.1.1
ieee8021XPaeSysAccessControl r/w
SNMPv2-TCTruthValue
 .1.3.111.2.802.1.1.15.1.1.1
ieee8021XPaeSysAnnouncements r/w
SNMPv2-TCTruthValue
 .1.3.111.2.802.1.1.15.1.1.2
ieee8021XPaeSysEapolVersion
SNMPv2-SMIUnsigned32
 .1.3.111.2.802.1.1.15.1.1.3
ieee8021XPaeSysMkaVersion
SNMPv2-SMIUnsigned32
 .1.3.111.2.802.1.1.15.1.1.4
ieee8021XPaePortTable
.1.3.111.2.802.1.1.15.1.1.5
ieee8021XPaePortEntry
ieee8021XPaePortNumber
 .1.3.111.2.802.1.1.15.1.1.5.1
ieee8021XPaePortNumber
IF-MIBInterfaceIndex
 .1.3.111.2.802.1.1.15.1.1.5.1.1
ieee8021XPaePortCurrentVirtualPorts
SNMPv2-SMIGauge32
 .1.3.111.2.802.1.1.15.1.1.5.1.10
ieee8021XPaePortVirtualPortStart
SNMPv2-TCTruthValue
 .1.3.111.2.802.1.1.15.1.1.5.1.11
ieee8021XPaePortVirtualPortPeerMAC
SNMPv2-TCMacAddress
 .1.3.111.2.802.1.1.15.1.1.5.1.12
ieee8021XPaePortLogonEnable r/w
SNMPv2-TCTruthValue
 .1.3.111.2.802.1.1.15.1.1.5.1.13
ieee8021XPaePortAuthenticatorEnable
SNMPv2-TCTruthValue
 .1.3.111.2.802.1.1.15.1.1.5.1.14
ieee8021XPaePortSupplicantEnable
SNMPv2-TCTruthValue
 .1.3.111.2.802.1.1.15.1.1.5.1.15
ieee8021XPaePortKayMkaEnable r/w
SNMPv2-TCTruthValue
 .1.3.111.2.802.1.1.15.1.1.5.1.16
ieee8021XPaePortAnnouncerEnable r/w
SNMPv2-TCTruthValue
 .1.3.111.2.802.1.1.15.1.1.5.1.17
ieee8021XPaePortListenerEnable r/w
SNMPv2-TCTruthValue
 .1.3.111.2.802.1.1.15.1.1.5.1.18
ieee8021XPaePortType
Enumeration
 .1.3.111.2.802.1.1.15.1.1.5.1.2
ieee8021XPaeControlledPortNumber
IF-MIBInterfaceIndex
 .1.3.111.2.802.1.1.15.1.1.5.1.3
ieee8021XPaeUncontrolledPortNumber
IF-MIBInterfaceIndex
 .1.3.111.2.802.1.1.15.1.1.5.1.4
ieee8021XPaeCommonPortNumber
IF-MIBInterfaceIndex
 .1.3.111.2.802.1.1.15.1.1.5.1.5
ieee8021XPaePortInitialize r/w
SNMPv2-TCTruthValue
 .1.3.111.2.802.1.1.15.1.1.5.1.6
ieee8021XPaePortCapabilities
Bits
 .1.3.111.2.802.1.1.15.1.1.5.1.7
ieee8021XPaePortVirtualPortsEnable r/w
SNMPv2-TCTruthValue
 .1.3.111.2.802.1.1.15.1.1.5.1.8
ieee8021XPaePortMaxVirtualPorts
SNMPv2-SMIUnsigned32
 .1.3.111.2.802.1.1.15.1.1.5.1.9
ieee8021XPacPortTable
.1.3.111.2.802.1.1.15.1.1.6
ieee8021XPacPortEntry
ieee8021XPacPortControlledPortNumber
 .1.3.111.2.802.1.1.15.1.1.6.1
ieee8021XPacPortControlledPortNumber
IF-MIBInterfaceIndex
 .1.3.111.2.802.1.1.15.1.1.6.1.1
ieee8021XPacPortAdminPt2PtMAC r/w
Enumeration
 .1.3.111.2.802.1.1.15.1.1.6.1.2
ieee8021XPacPortOperPt2PtMAC
SNMPv2-TCTruthValue
 .1.3.111.2.802.1.1.15.1.1.6.1.3
ieee8021XPaeLogon
.1.3.111.2.802.1.1.15.1.2
ieee8021XPaePortLogonTable
.1.3.111.2.802.1.1.15.1.2.1
ieee8021XPaePortLogonEntry
ieee8021XPaePortNumber
 .1.3.111.2.802.1.1.15.1.2.1.1
ieee8021XPaePortLogonConnectStatus
Enumeration
 .1.3.111.2.802.1.1.15.1.2.1.1.1
ieee8021XPaePortPortValid
SNMPv2-TCTruthValue
 .1.3.111.2.802.1.1.15.1.2.1.1.2
ieee8021XPaePortSessionTable
.1.3.111.2.802.1.1.15.1.2.2
ieee8021XPaePortSessionEntry
ieee8021XPaeSessionControlledPortNumber
 .1.3.111.2.802.1.1.15.1.2.2.1
ieee8021XPaeSessionControlledPortNumber
IF-MIBInterfaceIndex
 .1.3.111.2.802.1.1.15.1.2.2.1.1
ieee8021XPaePortSessionUserName
OctetString
 .1.3.111.2.802.1.1.15.1.2.2.1.10
ieee8021XPaePortSessionOctetsRx
OctetsSNMPv2-SMICounter64
 .1.3.111.2.802.1.1.15.1.2.2.1.2
ieee8021XPaePortSessionOctetsTx
OctetsSNMPv2-SMICounter64
 .1.3.111.2.802.1.1.15.1.2.2.1.3
ieee8021XPaePortSessionPktsRx
PacketsSNMPv2-SMICounter64
 .1.3.111.2.802.1.1.15.1.2.2.1.4
ieee8021XPaePortSessionPktsTx
PacketsSNMPv2-SMICounter64
 .1.3.111.2.802.1.1.15.1.2.2.1.5
ieee8021XPaePortSessionId
OctetString
 .1.3.111.2.802.1.1.15.1.2.2.1.6
ieee8021XPaePortSessionStartTime
SNMPv2-TCTimeStamp
 .1.3.111.2.802.1.1.15.1.2.2.1.7
ieee8021XPaePortSessionIntervalTime
SNMPv2-TCTimeInterval
 .1.3.111.2.802.1.1.15.1.2.2.1.8
ieee8021XPaePortSessionTerminate
Enumeration
 .1.3.111.2.802.1.1.15.1.2.2.1.9
ieee8021XLogonNIDTable
.1.3.111.2.802.1.1.15.1.2.3
ieee8021XLogonNIDEntry
ieee8021XPaePortNumber
 .1.3.111.2.802.1.1.15.1.2.3.1
ieee8021XLogonNIDConnectedNID
Ieee8021XPaeNID
 .1.3.111.2.802.1.1.15.1.2.3.1.1
ieee8021XLogonNIDRequestedNID
Ieee8021XPaeNIDOrNull
 .1.3.111.2.802.1.1.15.1.2.3.1.2
ieee8021XLogonNIDSelectedNID r/w
Ieee8021XPaeNIDOrNull
 .1.3.111.2.802.1.1.15.1.2.3.1.3
ieee8021XPaeAuthenticator
.1.3.111.2.802.1.1.15.1.3
ieee8021XAuthenticatorTable
.1.3.111.2.802.1.1.15.1.3.1
ieee8021XAuthenticatorEntry
ieee8021XPaePortNumber
 .1.3.111.2.802.1.1.15.1.3.1.1
ieee8021XAuthPaeAuthenticate
SNMPv2-TCTruthValue
 .1.3.111.2.802.1.1.15.1.3.1.1.1
ieee8021XAuthPaeAuthenticated
SNMPv2-TCTruthValue
 .1.3.111.2.802.1.1.15.1.3.1.1.2
ieee8021XAuthPaeFailed
SNMPv2-TCTruthValue
 .1.3.111.2.802.1.1.15.1.3.1.1.3
ieee8021XAuthPaeReAuthEnabled r/w
SNMPv2-TCTruthValue
 .1.3.111.2.802.1.1.15.1.3.1.1.4
ieee8021XAuthPaeQuietPeriod r/w
secondsUnsigned32
 .1.3.111.2.802.1.1.15.1.3.1.1.5
ieee8021XAuthPaeReauthPeriod r/w
secondsUnsigned32
 .1.3.111.2.802.1.1.15.1.3.1.1.6
ieee8021XAuthPaeRetryMax r/w
timesSNMPv2-SMIUnsigned32
 .1.3.111.2.802.1.1.15.1.3.1.1.7
ieee8021XAuthPaeRetryCount
timesSNMPv2-SMIGauge32
 .1.3.111.2.802.1.1.15.1.3.1.1.8
ieee8021XPaeSupplicant
.1.3.111.2.802.1.1.15.1.4
ieee8021XSupplicantTable
.1.3.111.2.802.1.1.15.1.4.1
ieee8021XSupplicantEntry
ieee8021XPaePortNumber
 .1.3.111.2.802.1.1.15.1.4.1.1
ieee8021XSuppPaeAuthenticate
SNMPv2-TCTruthValue
 .1.3.111.2.802.1.1.15.1.4.1.1.1
ieee8021XSuppPaeAuthenticated
SNMPv2-TCTruthValue
 .1.3.111.2.802.1.1.15.1.4.1.1.2
ieee8021XSuppPaeFailed
SNMPv2-TCTruthValue
 .1.3.111.2.802.1.1.15.1.4.1.1.3
ieee8021XSuppPaeHelloPeriod r/w
secondsUnsigned32
 .1.3.111.2.802.1.1.15.1.4.1.1.4
ieee8021XSuppPaeRetryMax r/w
timesSNMPv2-SMIUnsigned32
 .1.3.111.2.802.1.1.15.1.4.1.1.5
ieee8021XSuppPaeRetryCount
timesSNMPv2-SMIGauge32
 .1.3.111.2.802.1.1.15.1.4.1.1.6
ieee8021XPaeEapol
.1.3.111.2.802.1.1.15.1.5
ieee8021XEapolStatsTable
.1.3.111.2.802.1.1.15.1.5.1
ieee8021XEapolStatsEntry
ieee8021XPaePortNumber
 .1.3.111.2.802.1.1.15.1.5.1.1
ieee8021XEapolInvalidFramesRx
PacketsSNMPv2-SMICounter32
 .1.3.111.2.802.1.1.15.1.5.1.1.1
ieee8021XEapolMkInvalidFramesRx
PacketsSNMPv2-SMICounter32
 .1.3.111.2.802.1.1.15.1.5.1.1.10
ieee8021XEapolLastRxFrameVersion
SNMPv2-SMIUnsigned32
 .1.3.111.2.802.1.1.15.1.5.1.1.11
ieee8021XEapolLastRxFrameSource
SNMPv2-TCMacAddress
 .1.3.111.2.802.1.1.15.1.5.1.1.12
ieee8021XEapolSuppEapFramesTx
PacketsSNMPv2-SMICounter32
 .1.3.111.2.802.1.1.15.1.5.1.1.13
ieee8021XEapolLogoffFramesTx
PacketsSNMPv2-SMICounter32
 .1.3.111.2.802.1.1.15.1.5.1.1.14
ieee8021XEapolAnnouncementFramesTx
PacketsSNMPv2-SMICounter32
 .1.3.111.2.802.1.1.15.1.5.1.1.15
ieee8021XEapolAnnouncementReqFramesTx
PacketsSNMPv2-SMICounter32
 .1.3.111.2.802.1.1.15.1.5.1.1.16
ieee8021XEapolStartFramesTx
PacketsSNMPv2-SMICounter32
 .1.3.111.2.802.1.1.15.1.5.1.1.17
ieee8021XEapolAuthEapFramesTx
PacketsSNMPv2-SMICounter32
 .1.3.111.2.802.1.1.15.1.5.1.1.18
ieee8021XEapolMkaFramesTx
PacketsSNMPv2-SMICounter32
 .1.3.111.2.802.1.1.15.1.5.1.1.19
ieee8021XEapolEapLengthErrorFramesRx
PacketsSNMPv2-SMICounter32
 .1.3.111.2.802.1.1.15.1.5.1.1.2
ieee8021XEapolAnnouncementFramesRx
PacketsSNMPv2-SMICounter32
 .1.3.111.2.802.1.1.15.1.5.1.1.3
ieee8021XEapolAnnouncementReqFramesRx
PacketsSNMPv2-SMICounter32
 .1.3.111.2.802.1.1.15.1.5.1.1.4
ieee8021XEapolPortUnavailableFramesRx
PacketsSNMPv2-SMICounter32
 .1.3.111.2.802.1.1.15.1.5.1.1.5
ieee8021XEapolStartFramesRx
PacketsSNMPv2-SMICounter32
 .1.3.111.2.802.1.1.15.1.5.1.1.6
ieee8021XEapolEapFramesRx
PacketsSNMPv2-SMICounter32
 .1.3.111.2.802.1.1.15.1.5.1.1.7
ieee8021XEapolLogoffFramesRx
PacketsSNMPv2-SMICounter32
 .1.3.111.2.802.1.1.15.1.5.1.1.8
ieee8021XEapolMkNoCknFramesRx
PacketsSNMPv2-SMICounter32
 .1.3.111.2.802.1.1.15.1.5.1.1.9
ieee8021XPaeKaY
.1.3.111.2.802.1.1.15.1.6
ieee8021XKayMkaTable
.1.3.111.2.802.1.1.15.1.6.1
ieee8021XKayMkaEntry
ieee8021XPaePortNumber
 .1.3.111.2.802.1.1.15.1.6.1.1
ieee8021XKayMkaActive
SNMPv2-TCTruthValue
 .1.3.111.2.802.1.1.15.1.6.1.1.1
ieee8021XKayAllowedFormGroup
SNMPv2-TCTruthValue
 .1.3.111.2.802.1.1.15.1.6.1.1.10
ieee8021XKayCreateNewGroup r/w
SNMPv2-TCTruthValue
 .1.3.111.2.802.1.1.15.1.6.1.1.11
ieee8021XKayMacSecCapability
Enumeration
 .1.3.111.2.802.1.1.15.1.6.1.1.12
ieee8021XKayMacSecDesired r/w
SNMPv2-TCTruthValue
 .1.3.111.2.802.1.1.15.1.6.1.1.13
ieee8021XKayMacSecProtect
SNMPv2-TCTruthValue
 .1.3.111.2.802.1.1.15.1.6.1.1.14
ieee8021XKayMacSecReplayProtect
SNMPv2-TCTruthValue
 .1.3.111.2.802.1.1.15.1.6.1.1.15
ieee8021XKayMacSecValidate
SNMPv2-TCTruthValue
 .1.3.111.2.802.1.1.15.1.6.1.1.16
ieee8021XKayMacSecConfidentialityOffset r/w
bytesInteger32
 .1.3.111.2.802.1.1.15.1.6.1.1.17
ieee8021XKayMkaTxKN
Ieee8021XMkaKN
 .1.3.111.2.802.1.1.15.1.6.1.1.18
ieee8021XKayMkaTxAN
SNMPv2-TCRowPointer
 .1.3.111.2.802.1.1.15.1.6.1.1.19
ieee8021XKayMkaAuthenticated
SNMPv2-TCTruthValue
 .1.3.111.2.802.1.1.15.1.6.1.1.2
ieee8021XKayMkaRxKN
Ieee8021XMkaKN
 .1.3.111.2.802.1.1.15.1.6.1.1.20
ieee8021XKayMkaRxAN
SNMPv2-TCRowPointer
 .1.3.111.2.802.1.1.15.1.6.1.1.21
ieee8021XKayMkaSuspendFor r/w
Integer32
 .1.3.111.2.802.1.1.15.1.6.1.1.22
ieee8021XKayMkaSuspendOnRequest r/w
SNMPv2-TCTruthValue
 .1.3.111.2.802.1.1.15.1.6.1.1.23
ieee8021XKayMkaSuspendedWhile r/w
Integer32
 .1.3.111.2.802.1.1.15.1.6.1.1.24
ieee8021XKayMkaSecured
SNMPv2-TCTruthValue
 .1.3.111.2.802.1.1.15.1.6.1.1.3
ieee8021XKayMkaFailed
SNMPv2-TCTruthValue
 .1.3.111.2.802.1.1.15.1.6.1.1.4
ieee8021XKayMkaActorSCI
IEEE8021-SECY-MIBSecySCI
 .1.3.111.2.802.1.1.15.1.6.1.1.5
ieee8021XKayMkaActorsPriority r/w
Ieee8021XMkaKeyServerPriority
 .1.3.111.2.802.1.1.15.1.6.1.1.6
ieee8021XKayMkaKeyServerPriority
Ieee8021XMkaKeyServerPriority
 .1.3.111.2.802.1.1.15.1.6.1.1.7
ieee8021XKayMkaKeyServerSCI
IEEE8021-SECY-MIBSecySCI
 .1.3.111.2.802.1.1.15.1.6.1.1.8
ieee8021XKayAllowedJoinGroup
SNMPv2-TCTruthValue
 .1.3.111.2.802.1.1.15.1.6.1.1.9
ieee8021XKayMkaParticipantTable
.1.3.111.2.802.1.1.15.1.6.2
ieee8021XKayMkaParticipantEntry
ieee8021XPaePortNumberieee8021XKayMkaPartCKN
 .1.3.111.2.802.1.1.15.1.6.2.1
ieee8021XKayMkaPartCKN
Ieee8021XPaeCKN
 .1.3.111.2.802.1.1.15.1.6.2.1.1
ieee8021XKayMkaPartRowStatus r/w
SNMPv2-TCRowStatus
 .1.3.111.2.802.1.1.15.1.6.2.1.10
ieee8021XKayMkaPartKMD r/w
Ieee8021XPaeKMD
 .1.3.111.2.802.1.1.15.1.6.2.1.2
ieee8021XKayMkaPartNID r/w
Ieee8021XPaeNID
 .1.3.111.2.802.1.1.15.1.6.2.1.3
ieee8021XKayMkaPartCached r/w
SNMPv2-TCTruthValue
 .1.3.111.2.802.1.1.15.1.6.2.1.4
ieee8021XKayMkaPartActive
SNMPv2-TCTruthValue
 .1.3.111.2.802.1.1.15.1.6.2.1.5
ieee8021XKayMkaPartRetain r/w
SNMPv2-TCTruthValue
 .1.3.111.2.802.1.1.15.1.6.2.1.6
ieee8021XKayMkaPartActivateControl r/w
Enumeration
 .1.3.111.2.802.1.1.15.1.6.2.1.7
ieee8021XKayMkaPartPrincipal
SNMPv2-TCTruthValue
 .1.3.111.2.802.1.1.15.1.6.2.1.8
ieee8021XKayMkaPartDistCKN
Ieee8021XPaeCKNOrNull
 .1.3.111.2.802.1.1.15.1.6.2.1.9
ieee8021XKayMkaPeerListTable
.1.3.111.2.802.1.1.15.1.6.3
ieee8021XKayMkaPeerListEntry
ieee8021XPaePortNumberieee8021XKayMkaPartCKNieee8021XKayMkaPeerListMI
 .1.3.111.2.802.1.1.15.1.6.3.1
ieee8021XKayMkaPeerListMI
Ieee8021XMkaMI
 .1.3.111.2.802.1.1.15.1.6.3.1.1
ieee8021XKayMkaPeerListMN
Ieee8021XMkaMN
 .1.3.111.2.802.1.1.15.1.6.3.1.2
ieee8021XKayMkaPeerListType
Enumeration
 .1.3.111.2.802.1.1.15.1.6.3.1.3
ieee8021XKayMkaPeerListSCI
IEEE8021-SECY-MIBSecySCI
 .1.3.111.2.802.1.1.15.1.6.3.1.4
ieee8021XPaeNetworkIdentifier
.1.3.111.2.802.1.1.15.1.7
ieee8021XNidConfigTable
.1.3.111.2.802.1.1.15.1.7.1
ieee8021XNidConfigEntry
ieee8021XNidNID
 .1.3.111.2.802.1.1.15.1.7.1.1
ieee8021XNidNID
Ieee8021XPaeNID
 .1.3.111.2.802.1.1.15.1.7.1.1.1
ieee8021XNidUseEap r/w
Enumeration
 .1.3.111.2.802.1.1.15.1.7.1.1.2
ieee8021XNidUnauthAllowed r/w
Enumeration
 .1.3.111.2.802.1.1.15.1.7.1.1.3
ieee8021XNidUnsecuredAllowed r/w
Enumeration
 .1.3.111.2.802.1.1.15.1.7.1.1.4
ieee8021XNidUnauthenticatedAccess r/w
Ieee8021XPaeNIDUnauthenticatedStatus
 .1.3.111.2.802.1.1.15.1.7.1.1.5
ieee8021XNidAccessCapabilities r/w
Ieee8021XPaeNIDCapabilites
 .1.3.111.2.802.1.1.15.1.7.1.1.6
ieee8021XNidKMD r/w
Ieee8021XPaeKMD
 .1.3.111.2.802.1.1.15.1.7.1.1.7
ieee8021XNidRowStatus r/w
SNMPv2-TCRowStatus
 .1.3.111.2.802.1.1.15.1.7.1.1.8
ieee8021XAnnounceTable
.1.3.111.2.802.1.1.15.1.7.2
ieee8021XAnnounceEntry
ieee8021XPaePortNumberieee8021XAnnounceNID
 .1.3.111.2.802.1.1.15.1.7.2.1
ieee8021XAnnounceNID
Ieee8021XPaeNID
 .1.3.111.2.802.1.1.15.1.7.2.1.1
ieee8021XAnnounceAccessStatus
Ieee8021XPaeNIDAccessStatus
 .1.3.111.2.802.1.1.15.1.7.2.1.2
ieee8021XAnnouncementTable
.1.3.111.2.802.1.1.15.1.7.3
ieee8021XAnnouncementEntry
ieee8021XPaePortNumberieee8021XAnnouncementNID
 .1.3.111.2.802.1.1.15.1.7.3.1
ieee8021XAnnouncementNID
Ieee8021XPaeNID
 .1.3.111.2.802.1.1.15.1.7.3.1.1
ieee8021XAnnouncementKMD
Ieee8021XPaeKMD
 .1.3.111.2.802.1.1.15.1.7.3.1.2
ieee8021XAnnouncementSpecific
SNMPv2-TCTruthValue
 .1.3.111.2.802.1.1.15.1.7.3.1.3
ieee8021XAnnouncementAccessStatus
Ieee8021XPaeNIDAccessStatus
 .1.3.111.2.802.1.1.15.1.7.3.1.4
ieee8021XAnnouncementAccessRequested
SNMPv2-TCTruthValue
 .1.3.111.2.802.1.1.15.1.7.3.1.5
ieee8021XAnnouncementUnauthAccess
Ieee8021XPaeNIDUnauthenticatedStatus
 .1.3.111.2.802.1.1.15.1.7.3.1.6
ieee8021XAnnouncementCapabilities
Ieee8021XPaeNIDCapabilites
 .1.3.111.2.802.1.1.15.1.7.3.1.7
ieee8021XAnnouncementCipherSuitesTable
.1.3.111.2.802.1.1.15.1.7.4
ieee8021XAnnouncementCipherSuitesEntry
ieee8021XPaePortNumberieee8021XAnnouncementNIDieee8021XAnnouncementCipherSuite
 .1.3.111.2.802.1.1.15.1.7.4.1
ieee8021XAnnouncementCipherSuite
OctetString
 .1.3.111.2.802.1.1.15.1.7.4.1.1
ieee8021XAnnouncementCipherCapability
Unsigned32
 .1.3.111.2.802.1.1.15.1.7.4.1.2
ieee8021XPaeMIBConformance
.1.3.111.2.802.1.1.15.2
ieee8021XPaeCompliances
.1.3.111.2.802.1.1.15.2.1
ieee8021XPaeGroups
.1.3.111.2.802.1.1.15.2.2
Dependencies (8) 6 direct · 2 transitive Show tree and compile order Hide dependency details

Each imported module is resolved in the importing module's source directory first, then through the normal default-variant rules.

Dependency tree
Dependency-first compile order
  1. SNMPv2-SMIrfc
  2. SNMPv2-TCrfc
  3. IANAifType-MIBrfc
  4. SNMPv2-CONFrfc
  5. SNMPv2-MIBrfc
  6. IF-MIBrfc
  7. SNMP-FRAMEWORK-MIBrfc
  8. IEEE8021-SECY-MIBrfc
  9. IEEE8021X-PAE-MIBrfcselected
Type Definitions (12)
Ieee8021XMkaKN
Unsigned32 range: 1..2147483648
Ieee8021XMkaKeyServerPriority
OctetString range: 1
Ieee8021XMkaMI
OctetString range: 12
Ieee8021XMkaMN
Unsigned32 range: 1..2147483648
Ieee8021XPaeCKN
OctetString range: 1..16
Ieee8021XPaeCKNOrNull
OctetString range: 0..16
Ieee8021XPaeKMD
OctetString range: 0..253
Ieee8021XPaeNID
OctetString range: 1..100
Ieee8021XPaeNIDAccessStatus
Enumeration
noAccess(0)
remedialAccess(1)
restrictedAccess(2)
expectedAccess(3)
Ieee8021XPaeNIDCapabilites
Bits
eap(0)
eapMka(1)
eapMkaMacSec(2)
mka(3)
mkaMacSec(4)
higherLayer(5)
higherLayerFallback(6)
vendorSpecific(7)
Ieee8021XPaeNIDOrNull
OctetString range: 0..100
Ieee8021XPaeNIDUnauthenticatedStatus
Enumeration
noAccess(0)
fallbackAccess(1)
limitedAccess(2)
openAccess(3)
Conformance Groups (11)
ieee8021XPaeSystemGroup
ieee8021XPaeSysAccessControl ieee8021XPaeSysAnnouncements ieee8021XPaeSysEapolVersion ieee8021XPaeSysMkaVersion ieee8021XPaePortType ieee8021XPaeControlledPortNumber ieee8021XPaeUncontrolledPortNumber ieee8021XPaeCommonPortNumber ieee8021XPaePortInitialize ieee8021XPaePortCapabilities ieee8021XPaePortVirtualPortsEnable ieee8021XPaePortMaxVirtualPorts ieee8021XPaePortCurrentVirtualPorts ieee8021XPaePortVirtualPortStart ieee8021XPaePortVirtualPortPeerMAC ieee8021XPaePortLogonEnable ieee8021XPaePortAuthenticatorEnable ieee8021XPaePortSupplicantEnable ieee8021XPaePortKayMkaEnable ieee8021XPaePortAnnouncerEnable ieee8021XPaePortListenerEnable
A collection of objects providing system information for a PAE
system and a PAE port status and control information.
 .1.3.111.2.802.1.1.15.2.2.1
ieee8021XPacGroup
ieee8021XPacPortAdminPt2PtMAC ieee8021XPacPortOperPt2PtMAC
A collection of objects providing information of a PAC in the
system.
 .1.3.111.2.802.1.1.15.2.2.2
ieee8021XPaeLogonGroup
ieee8021XPaePortLogonConnectStatus ieee8021XPaePortPortValid ieee8021XPaePortSessionOctetsRx ieee8021XPaePortSessionOctetsTx ieee8021XPaePortSessionPktsRx ieee8021XPaePortSessionPktsTx ieee8021XPaePortSessionId ieee8021XPaePortSessionStartTime ieee8021XPaePortSessionIntervalTime ieee8021XPaePortSessionTerminate ieee8021XPaePortSessionUserName
A collection of objects providing information of a Logon
Process in the system.
 .1.3.111.2.802.1.1.15.2.2.3
ieee8021XPaeAuthConfigGroup
ieee8021XAuthPaeAuthenticate ieee8021XAuthPaeAuthenticated ieee8021XAuthPaeFailed ieee8021XAuthPaeReAuthEnabled ieee8021XAuthPaeQuietPeriod ieee8021XAuthPaeReauthPeriod ieee8021XAuthPaeRetryMax ieee8021XAuthPaeRetryCount
A collection of objects providing configuration information of
an Authenticator in the system.
 .1.3.111.2.802.1.1.15.2.2.4
ieee8021XPaeSuppConfigGroup
ieee8021XSuppPaeAuthenticate ieee8021XSuppPaeAuthenticated ieee8021XSuppPaeFailed ieee8021XSuppPaeHelloPeriod ieee8021XSuppPaeRetryMax ieee8021XSuppPaeRetryCount
A collection of objects providing configuration information of
a Supplicant in the system.
 .1.3.111.2.802.1.1.15.2.2.5
ieee8021XPaeEapolStatsGroup
ieee8021XEapolInvalidFramesRx ieee8021XEapolEapLengthErrorFramesRx ieee8021XEapolAnnouncementFramesRx ieee8021XEapolAnnouncementReqFramesRx ieee8021XEapolPortUnavailableFramesRx ieee8021XEapolStartFramesRx ieee8021XEapolEapFramesRx ieee8021XEapolLogoffFramesRx ieee8021XEapolMkNoCknFramesRx ieee8021XEapolMkInvalidFramesRx ieee8021XEapolLastRxFrameVersion ieee8021XEapolLastRxFrameSource ieee8021XEapolSuppEapFramesTx ieee8021XEapolLogoffFramesTx ieee8021XEapolAnnouncementFramesTx ieee8021XEapolAnnouncementReqFramesTx ieee8021XEapolStartFramesTx ieee8021XEapolAuthEapFramesTx ieee8021XEapolMkaFramesTx
A collection of objects providing counters and diagnostic
information for the EAPOL in the system.
 .1.3.111.2.802.1.1.15.2.2.6
ieee8021XPaeKaYMkaGroup
ieee8021XKayMkaActive ieee8021XKayMkaAuthenticated ieee8021XKayMkaSecured ieee8021XKayMkaFailed ieee8021XKayMkaActorSCI ieee8021XKayMkaActorsPriority ieee8021XKayMkaKeyServerPriority ieee8021XKayMkaKeyServerSCI ieee8021XKayAllowedJoinGroup ieee8021XKayAllowedFormGroup ieee8021XKayCreateNewGroup ieee8021XKayMacSecCapability ieee8021XKayMacSecDesired ieee8021XKayMacSecProtect ieee8021XKayMacSecReplayProtect ieee8021XKayMacSecValidate ieee8021XKayMacSecConfidentialityOffset ieee8021XKayMkaTxKN ieee8021XKayMkaTxAN ieee8021XKayMkaRxKN ieee8021XKayMkaRxAN ieee8021XKayMkaPartKMD ieee8021XKayMkaPartNID ieee8021XKayMkaPartCached ieee8021XKayMkaPartActive ieee8021XKayMkaPartRetain ieee8021XKayMkaPartActivateControl ieee8021XKayMkaPartPrincipal ieee8021XKayMkaPartDistCKN ieee8021XKayMkaPartRowStatus ieee8021XKayMkaPeerListMN ieee8021XKayMkaPeerListType ieee8021XKayMkaPeerListSCI
A collection of objects providing monitoring and controlling
information of a KaY MKA in the system.
 .1.3.111.2.802.1.1.15.2.2.7
ieee8021XPaeNetworkIdentifierGroup
ieee8021XLogonNIDConnectedNID ieee8021XLogonNIDRequestedNID ieee8021XLogonNIDSelectedNID ieee8021XNidUseEap ieee8021XNidUnauthAllowed ieee8021XNidUnsecuredAllowed ieee8021XNidUnauthenticatedAccess ieee8021XNidAccessCapabilities ieee8021XNidKMD ieee8021XNidRowStatus
A collection of objects providing monitoring and controlling
information of an NID in the system.
 .1.3.111.2.802.1.1.15.2.2.8
ieee8021XPaeAnnouncerGroup
ieee8021XAnnounceAccessStatus
A collection of objects providing status information for
an Announcer in the system.
 .1.3.111.2.802.1.1.15.2.2.9
ieee8021XPaeListenerGroup
ieee8021XAnnouncementKMD ieee8021XAnnouncementSpecific ieee8021XAnnouncementAccessStatus ieee8021XAnnouncementAccessRequested ieee8021XAnnouncementUnauthAccess ieee8021XAnnouncementCapabilities ieee8021XAnnouncementCipherCapability
A collection of objects providing status information for
a Listener in the system.
 .1.3.111.2.802.1.1.15.2.2.10
ieee8021XPaeKaYIsupgradeGroup
ieee8021XKayMkaSuspendFor ieee8021XKayMkaSuspendOnRequest ieee8021XKayMkaSuspendedWhile
A collection of objects providing monitoring and control
for MKA support of in-service upgrades.
 .1.3.111.2.802.1.1.15.2.2.11
Compliance Statements (2)

OID .1.3.111.2.802.1.1.15.2.1.1
The compliance statement for device support of
Port Access Control.
Required groups
mandatory ieee8021XPaeSystemGroup
mandatory ieee8021XPaeLogonGroup
mandatory ieee8021XPaeEapolStatsGroup
optional ieee8021XPacGroup This group is mandatory for systems that does not support
the MACsec functions of the PAE.
optional ieee8021XPaeAuthConfigGroup This group is mandatory for systems that support the
Authenticator functions of the PAE.
optional ieee8021XPaeSuppConfigGroup This group is mandatory for systems that support the
Supplicant functions of the PAE.
optional ieee8021XPaeKaYMkaGroup This group is mandatory for systems that support the KaY
MKA functions of the PAE.
optional ieee8021XPaeNetworkIdentifierGroup This group is mandatory for systems that support the
network announcement functions of the PAE.
optional ieee8021XPaeAnnouncerGroup This group is mandatory for systems that support the
network announcement and the Announcer functions of the
PAE.
optional ieee8021XPaeListenerGroup This group is mandatory for systems that support
the network announcement and the Listener functions of the
PAE.
Object refinements
ObjectAccessSyntaxDescription
ieee8021XKayMacSecConfidentialityOffset readonly
read-write access is not required. This may be read-only.
ieee8021XNidUseEap readonly
read-create access is not required. This may be
read-only.
ieee8021XNidUnauthAllowed readonly
read-create access is not required. This may be
read-only.
ieee8021XNidUnsecuredAllowed readonly
read-create access is not required. This may be
read-only.
ieee8021XNidUnauthenticatedAccess readonly
read-create access is not required. This may be
read-only.
ieee8021XNidAccessCapabilities readonly
read-create access is not required. This may be
read-only.
ieee8021XNidKMD readonly
read-create access is not required. This may be
read-only.
ieee8021XNidRowStatus readonly
read-create access is not required. This may be
read-only.

OID .1.3.111.2.802.1.1.15.2.1.2
The compliance statement for device support of
Port Access Control as specified in 802.1X-2010
amended by 802.1Xbx.
Required groups
mandatory ieee8021XPaeSystemGroup
mandatory ieee8021XPaeLogonGroup
mandatory ieee8021XPaeEapolStatsGroup
optional ieee8021XPacGroup This group is mandatory for systems that does not support
the MACsec functions of the PAE.
optional ieee8021XPaeAuthConfigGroup This group is mandatory for systems that support the
Authenticator functions of the PAE.
optional ieee8021XPaeSuppConfigGroup This group is mandatory for systems that support the
Supplicant functions of the PAE.
optional ieee8021XPaeKaYMkaGroup This group is mandatory for systems that support the KaY
MKA functions of the PAE.
optional ieee8021XPaeNetworkIdentifierGroup This group is mandatory for systems that support the
network announcement functions of the PAE.
optional ieee8021XPaeAnnouncerGroup This group is mandatory for systems that support the
network announcement and the Announcer functions of the
PAE.
optional ieee8021XPaeListenerGroup This group is mandatory for systems that support
the network announcement and the Listener functions of the
PAE.
optional ieee8021XPaeKaYIsupgradeGroup This group is mandatory for systems that support KaY MKA
in-service upgrades.
Object refinements
ObjectAccessSyntaxDescription
ieee8021XKayMacSecConfidentialityOffset readonly
read-write access is not required. This may be read-only.
ieee8021XNidUseEap readonly
read-create access is not required. This may be
read-only.
ieee8021XNidUnauthAllowed readonly
read-create access is not required. This may be
read-only.
ieee8021XNidUnsecuredAllowed readonly
read-create access is not required. This may be
read-only.
ieee8021XNidUnauthenticatedAccess readonly
read-create access is not required. This may be
read-only.
ieee8021XNidAccessCapabilities readonly
read-create access is not required. This may be
read-only.
ieee8021XNidKMD readonly
read-create access is not required. This may be
read-only.
ieee8021XNidRowStatus readonly
read-create access is not required. This may be
read-only.