JUNIPER-PAE-EXTENSION-MIB Table View

A table that contains the configuration objects for the
Authenticator PAE associated with each port.

jnxPaeAuthConfigEntry row .1.3.6.1.4.1.2636.3.40.1.3.1.1.2.1

An Entry appears in the table for each PAE Authenticator
Port.

Indexes

IEEE8021-PAE-MIBdot1xPaePortNumber

Column	Syntax	OID
jnxPaeAuthConfigMacAuthStatus This object specifies whether MAC Authentication is enabled on the specified PAE port.	SNMPv2-TCTruthValue Type Values: 1 true 2 false Description: Represents a boolean value.	.1.3.6.1.4.1.2636.3.40.1.3.1.1.2.1.1
jnxPaeAuthConfigGuestVlan This object specifies the Vlan to which the unauthenticated client moves to. The Vlan should exist on the switch and is user cofigurable per port.	OctetString Constraints: range: 0-255	.1.3.6.1.4.1.2636.3.40.1.3.1.1.2.1.2
jnxPaeAuthConfigNumberRetries This sets the number of failed authentications on an interface before invoking the quiet period, during which no one can be authenticated on that interface.	SNMPv2-SMIUnsigned32 Type Constraints: range: 0..4294967295	.1.3.6.1.4.1.2636.3.40.1.3.1.1.2.1.3
jnxPaeAuthConfigSupplicantMode This object specifies the supplicant mode of MAC Authentication enabled on the specified PAE port.	Enumeration Enumerated Values: 1 single 2 single-secure 3 multiple	.1.3.6.1.4.1.2636.3.40.1.3.1.1.2.1.4
jnxPaeAuthConfigMacRadius This object specifies the Mac-Radius mode of MAC Authentication enabled on the specified PAE port.	Enumeration Enumerated Values: 1 enable 2 disable	.1.3.6.1.4.1.2636.3.40.1.3.1.1.2.1.5
jnxPaeAuthConfigMacRadiusRestrict This object specifies the Mac-Radius mode of MAC Authentication enabled on the specified PAE port.	Enumeration Enumerated Values: 1 enable 2 disable	.1.3.6.1.4.1.2636.3.40.1.3.1.1.2.1.6
jnxPaeAuthConfigReAuthenticate This object specifies Re-Authentication is enabled or not on the specified PAE port.	SNMPv2-TCTruthValue Type Values: 1 true 2 false Description: Represents a boolean value.	.1.3.6.1.4.1.2636.3.40.1.3.1.1.2.1.7
jnxPaeAuthConfigQuietPeriod This object specifies Time to wait after an authentication failure on the specified PAE port.	secondsSNMPv2-SMIUnsigned32 Type Constraints: range: 0..4294967295	.1.3.6.1.4.1.2636.3.40.1.3.1.1.2.1.8
jnxPaeAuthConfigMaxRequests This object specifies Number of EAPOL RequestIDs to send before timing out on the specified PAE port.	SNMPv2-SMIUnsigned32 Type Constraints: range: 0..4294967295	.1.3.6.1.4.1.2636.3.40.1.3.1.1.2.1.9
jnxPaeAuthConfigClientsRejected This object specifies VLAN name or 802.1q tag for authentication rejected clients on the specified PAE port.	OctetString Constraints: range: 1-255	.1.3.6.1.4.1.2636.3.40.1.3.1.1.2.1.10
jnxPaeAuthConfigServerTimeout This object specifies Authentication server timeout interval on the specified PAE port.	secondsUnsigned32 Constraints: range: 1-60	.1.3.6.1.4.1.2636.3.40.1.3.1.1.2.1.11
jnxPaeAuthConfigSuppTimeout This object specifies Time to wait for a client response on the specified PAE port.	secondsUnsigned32 Constraints: range: 1-60	.1.3.6.1.4.1.2636.3.40.1.3.1.1.2.1.12
jnxPaeAuthConfigTransmitPeriod This object specifies Interval before retransmitting initial EAPOL PDUs on the specified PAE port.	SNMPv2-SMIUnsigned32 Type Constraints: range: 0..4294967295	.1.3.6.1.4.1.2636.3.40.1.3.1.1.2.1.13

The static MAC list provides an authentication bypass mechanism for 
clients connected to a port. The MAC address of the clients is first 
checked in a local database which is a user specified static list of
MAC addresses and if a match is found, the client is assumed to be 
successfully authenticated and the port is opened up for it. 
No further authentication is done for that client. 
          
The VLAN that the client should be moved to or the interfaces on which
the MAC address should be allowed from can also be optionally stored 
in this table. This will enable devices like printers, which do not 
support 802.1X, to be connected on 802.1X enabled ports. If a match is
not found in the static list, 802.1X or MAC authentication is initiated.
          
This table contains the static list of MAC addresses specified by the
user.

jnxStaticMacAuthBypassEntry row .1.3.6.1.4.1.2636.3.40.1.3.1.1.3.1

A table entry specifies the MacAddress of the client
and the Vlan the client is to be moved.

Indexes

jnxStaticMacAddress

Column	Syntax	OID
jnxStaticMacAddress This object specifies the MAC Address of the client connected to the particular PAE port.	SNMPv2-TCMacAddress Type Constraints: range: 6 Description: Represents an 802 MAC address represented in the `canonical' order defined by IEEE 802.1a, i.e., as if it were transmitted least significant bit first, even though 802.5 (in contrast to other 802.x protocols) requires M…	.1.3.6.1.4.1.2636.3.40.1.3.1.1.3.1.1
jnxStaticMacVlanName This object specifies the Vlan to which the client is assigned to.	OctetString Constraints: range: 0-255	.1.3.6.1.4.1.2636.3.40.1.3.1.1.3.1.2

This table provides the list of interfaces on which each MAC 
Address in the jnxStaticMacAuthBypassTable can be allowed from.
If it is detected on any other interface, the authentication 
is not bypassed.

jnxStaticMacAuthBypassIfEntry row .1.3.6.1.4.1.2636.3.40.1.3.1.1.4.1

For each MAC Address in the jnxStaticMacAuthBypassTable an entry is
present in this table.It specifies the list of interfaces from which
the specified MAC Address is allowed from.

Indexes

jnxStaticMacAddress jnxStaticMacIfIndex

Column	Syntax	OID
jnxStaticMacIfIndex This object specifies the list of interfaces from which the MAC Address is allowed from. If it is detected on any other interface, the authentication is bypassed.	IF-MIBInterfaceIndex Type Constraints: range: 1..2147483647 Description: A unique value, greater than zero, for each interface or interface sub-layer in the managed system. It is recommended that values are assigned contiguously starting from 1. The value for each interface sub-layer must …	.1.3.6.1.4.1.2636.3.40.1.3.1.1.4.1.1