RUCKUS-AUTH-MIB Table View

A table that allows configuration of WebAuth for a
specified VLAN. WebAuth is configured at the VLAN
level unlike MAC-Auth and Dot1x at the port level.
          
An entry exists in this table for each configured
VLAN with WebAuth.

ruckusWebAuthEntry row .1.3.6.1.4.1.1991.1.1.3.44.1.4.1.1

An entry of WebAuth configuration.

Indexes

ruckusWebAuthVlan

Column	Syntax	OID
ruckusWebAuthVlan Specifies the VLAN, this configuration entry applies to.	VlanId Type Constraints: range: 0..4094	.1.3.6.1.4.1.1991.1.1.3.44.1.4.1.1.1
ruckusWebAuthEnable Specifies if Web-Auth is enabled or disabled.	P-BRIDGE-MIBEnabledStatus Type Values: 1 enabled 2 disabled	.1.3.6.1.4.1.1991.1.1.3.44.1.4.1.1.2
ruckusWebAuthMode Specifies the authentication mode used for authenticating the users. none - no authentication is performed passcode - passcode based authentication, where the passcode can be statitically configured o…	Enumeration Enumerated Values: 1 none 2 passcode 3 password 4 captivePortal	.1.3.6.1.4.1.1991.1.1.3.44.1.4.1.1.3
ruckusWebAuthMethod When the AuthMode is configured as password, this specifies the order for performing authentication. radius - RADIUS server for authentication local - Local user DB for authentication radiusLocal - RAD…	Enumeration Enumerated Values: 1 radius 2 local 3 radiusLocal 4 localRadius 5 none	.1.3.6.1.4.1.1991.1.1.3.44.1.4.1.1.4
ruckusWebAuthMaxHosts Specifies the maximum number of hosts allowed to be authenticated. Value 0 means no limit.	Unsigned32 Constraints: range: 0-8192	.1.3.6.1.4.1.1991.1.1.3.44.1.4.1.1.5
ruckusWebAuthMaxAuthAttempts Specifies the maximum number of attempts allowed during the auth cycle, after which the user is blocked for configured amount of time, before next authentication. The value of 0 means no limit.	Unsigned32 Constraints: range: 0-64	.1.3.6.1.4.1.1991.1.1.3.44.1.4.1.1.6
ruckusWebAuthReauthTime Specifies the re-authentication time, so the authenticated users can be periodically reauthenticated after the timeout specified through this object. Value 0 means no limit	secondsUnsigned32 Constraints: range: 0-128000	.1.3.6.1.4.1.1991.1.1.3.44.1.4.1.1.7
ruckusWebAuthCycleTime Specifies the time of the authentication since the first attempted user authentication, after which the user is not allowed to authenticate and must reload the login-page to start authentication. Value of 0 means no lim…	secondsUnsigned32 Constraints: range: 0-3600	.1.3.6.1.4.1.1991.1.1.3.44.1.4.1.1.8
ruckusWebAuthBlockTime Specifies the time for blocking the user when successive attempts have failed resulting in blocking the user. Value of 0 means, the user is blocked permanently.	secondsUnsigned32 Constraints: range: 0-12800	.1.3.6.1.4.1.1991.1.1.3.44.1.4.1.1.9
ruckusWebAuthMacAgeTime Specifies the the time which together with mac-age-time of the switch is considered an inactive time of the authenticated host, after which the device is forced to reauthenticate. The value can be 0 mean…	Unsigned32 Constraints: range: 0-3600	.1.3.6.1.4.1.1991.1.1.3.44.1.4.1.1.10
ruckusWebAuthPasscode Specifies the statically configured passcode used to authenticate when passcode is used auth-method. The passcode is digits only. This can consist of upto 4 passcodes where each entry is seperated by spa…	SNMPv2-TCDisplayString Type Constraints: range: 0..255 Description: Represents textual information taken from the NVT ASCII character set, as defined in pages 4, 10-11 of RFC 854. To summarize RFC 854, the NVT ASCII repertoire specifies: - the use of c…	.1.3.6.1.4.1.1991.1.1.3.44.1.4.1.1.11
ruckusWebAuthLocalUserDb Specifies the locally configured User Database for use in authentication, when the auth-methos is password.	SNMPv2-TCDisplayString Type Constraints: range: 0..255 Description: Represents textual information taken from the NVT ASCII character set, as defined in pages 4, 10-11 of RFC 854. To summarize RFC 854, the NVT ASCII repertoire specifies: - the use of c…	.1.3.6.1.4.1.1991.1.1.3.44.1.4.1.1.12
ruckusWebAuthSecureLogin Specifies if HTTPS is used for authentication or not.	P-BRIDGE-MIBEnabledStatus Type Values: 1 enabled 2 disabled	.1.3.6.1.4.1.1991.1.1.3.44.1.4.1.1.13
ruckusWebAuthAccounting Specifies if accounting is enbled or disabled.	P-BRIDGE-MIBEnabledStatus Type Values: 1 enabled 2 disabled	.1.3.6.1.4.1.1991.1.1.3.44.1.4.1.1.14
ruckusWebAuthCaptiveProfile Specifies the name of the configured Captive Portal profile, which should be used for redirection, if the auth-method is configured as captivePortal.	SNMPv2-TCDisplayString Type Constraints: range: 0..255 Description: Represents textual information taken from the NVT ASCII character set, as defined in pages 4, 10-11 of RFC 854. To summarize RFC 854, the NVT ASCII repertoire specifies: - the use of c…	.1.3.6.1.4.1.1991.1.1.3.44.1.4.1.1.15
ruckusWebAuthRedirectName Specifies the name to be used for URL when internal authentication is used dusring authentication for prompting username/password from the users, otherwise switch IP address is used. This must be valid domain name for t…	SNMPv2-TCDisplayString Type Constraints: range: 0..255 Description: Represents textual information taken from the NVT ASCII character set, as defined in pages 4, 10-11 of RFC 854. To summarize RFC 854, the NVT ASCII repertoire specifies: - the use of c…	.1.3.6.1.4.1.1991.1.1.3.44.1.4.1.1.16
ruckusWebAuthWebpageRemoveUserId Specifies if user-id field in custom webauth login page is disabled or not, default value is disable, i.e., user-id field is displayed	P-BRIDGE-MIBEnabledStatusr/w Type Values: 1 enabled 2 disabled	.1.3.6.1.4.1.1991.1.1.3.44.1.4.1.1.17
ruckusWebAuthWebpageUsernameLabel Specifies the name to be used for user-id label in webauth login page	SNMPv2-TCDisplayStringr/w Type Constraints: range: 0..255 Description: Represents textual information taken from the NVT ASCII character set, as defined in pages 4, 10-11 of RFC 854. To summarize RFC 854, the NVT ASCII repertoire specifies: - the use of c…	.1.3.6.1.4.1.1991.1.1.3.44.1.4.1.1.18
ruckusWebAuthWebpagePasswordLabel Specifies the name to be used for password label in webauth login page	SNMPv2-TCDisplayStringr/w Type Constraints: range: 0..255 Description: Represents textual information taken from the NVT ASCII character set, as defined in pages 4, 10-11 of RFC 854. To summarize RFC 854, the NVT ASCII repertoire specifies: - the use of c…	.1.3.6.1.4.1.1991.1.1.3.44.1.4.1.1.19
ruckusWebAuthUpLinkPort Specifies the port to be used as uplink port in network segmentation deployment	IF-MIBInterfaceIndexOrZeror/w Type Constraints: range: 0..2147483647 Description: This textual convention is an extension of the InterfaceIndex convention. The latter defines a greater than zero value used to identify an interface or interface sub-layer in the managed system. This extension permits…	.1.3.6.1.4.1.1991.1.1.3.44.1.4.1.1.20
ruckusWebAuthWebpageTop Specifies the name to be used for Top of webauth login page	SNMPv2-TCDisplayStringr/w Type Constraints: range: 0..255 Description: Represents textual information taken from the NVT ASCII character set, as defined in pages 4, 10-11 of RFC 854. To summarize RFC 854, the NVT ASCII repertoire specifies: - the use of c…	.1.3.6.1.4.1.1991.1.1.3.44.1.4.1.1.21
ruckusWebAuthWebpageBottom Specifies the name to be used for Bottom of webauth login page	SNMPv2-TCDisplayStringr/w Type Constraints: range: 0..255 Description: Represents textual information taken from the NVT ASCII character set, as defined in pages 4, 10-11 of RFC 854. To summarize RFC 854, the NVT ASCII repertoire specifies: - the use of c…	.1.3.6.1.4.1.1991.1.1.3.44.1.4.1.1.22
ruckusWebAuthWebpageTitle Specifies the name to be used for Title in webauth login page	SNMPv2-TCDisplayStringr/w Type Constraints: range: 0..255 Description: Represents textual information taken from the NVT ASCII character set, as defined in pages 4, 10-11 of RFC 854. To summarize RFC 854, the NVT ASCII repertoire specifies: - the use of c…	.1.3.6.1.4.1.1991.1.1.3.44.1.4.1.1.23
ruckusWebAuthWebpageLoginButton Specifies the name to be used for Login-button in webauth login page	SNMPv2-TCDisplayStringr/w Type Constraints: range: 0..255 Description: Represents textual information taken from the NVT ASCII character set, as defined in pages 4, 10-11 of RFC 854. To summarize RFC 854, the NVT ASCII repertoire specifies: - the use of c…	.1.3.6.1.4.1.1991.1.1.3.44.1.4.1.1.24

A table that allows configuration of WebAuth Trust
ports which are skipped from authentication in the
given VLAN and are typically uplink ports.
          
An entry exists in this table for every Trust Port
defined on this VLAN.

ruckusWebAuthTrustPortEntry row .1.3.6.1.4.1.1991.1.1.3.44.1.4.2.1

An entry in WebAuth Trust Port table.

Indexes

ruckusWebAuthVlan ruckusWebAuthTrustPort

Column	Syntax	OID
ruckusWebAuthTrustPort Specifies the trusted port or the up-link port, which is considered secure, so authentication is not performed on that port. This port generally provides access to the corporate or Internet or other netw…	IF-MIBInterfaceIndex Type Constraints: range: 1..2147483647 Description: A unique value, greater than zero, for each interface or interface sub-layer in the managed system. It is recommended that values are assigned contiguously starting from 1. The value for each interface sub-layer must …	.1.3.6.1.4.1.1991.1.1.3.44.1.4.2.1.1

A table that allows configuration of WebAuth DNS
filters which are qualified DNS servers and should
be allowed access during authentication for DNS
queries by clients.
          
An entry exists in this table for every DNS filter
defined on this VLAN.

ruckusWebAuthDnsFilterEntry row .1.3.6.1.4.1.1991.1.1.3.44.1.4.3.1

An entry in WebAuth DNS-Filter table.

Indexes

ruckusWebAuthVlan ruckusWebAuthDnsFilterId

Column	Syntax	OID
ruckusWebAuthDnsFilterId An index into the DNS filter table.	SNMPv2-SMIInteger32 Type Constraints: range: -2147483648..2147483647	.1.3.6.1.4.1.1991.1.1.3.44.1.4.3.1.1
ruckusWebAuthDnsFilterType The address type of the this filter entry, a V4 or V6 address.	INET-ADDRESS-MIBInetAddressType Type Values: 0 unknown 1 ipv4 2 ipv6 3 ipv4z 4 ipv6z 16 dns 25 l2vpn	.1.3.6.1.4.1.1991.1.1.3.44.1.4.3.1.2
ruckusWebAuthDnsFilterAddr The DNS server address, which is a V4 or V6 address.	INET-ADDRESS-MIBInetAddress Type Constraints: range: 0..255	.1.3.6.1.4.1.1991.1.1.3.44.1.4.3.1.3
ruckusWebAuthDnsFilterPrefix The DNS server server prefix, which applies to V4/V6 addresses.	SNMPv2-SMIUnsigned32 Type Constraints: range: 0..4294967295	.1.3.6.1.4.1.1991.1.1.3.44.1.4.3.1.4

A table that allows configuration of WebAuth Whitelist
entries which are qualified external servers that should
be allowed access during authentication for various needs
by clients.
          
An entry exists in this table for every Whitelist server
defined on this VLAN.

ruckusWebAuthWhiteListEntry row .1.3.6.1.4.1.1991.1.1.3.44.1.4.4.1

An entry in WebAuth Whitelist table.

Indexes

ruckusWebAuthVlan ruckusWebAuthWhiteListId

Column	Syntax	OID
ruckusWebAuthWhiteListId An index into the White List Server table.	SNMPv2-SMIInteger32 Type Constraints: range: -2147483648..2147483647	.1.3.6.1.4.1.1991.1.1.3.44.1.4.4.1.1
ruckusWebAuthWhiteListType The address type of the this whitelist entry, a V4 or V6 or DNS name.	INET-ADDRESS-MIBInetAddressType Type Values: 0 unknown 1 ipv4 2 ipv6 3 ipv4z 4 ipv6z 16 dns 25 l2vpn	.1.3.6.1.4.1.1991.1.1.3.44.1.4.4.1.2
ruckusWebAuthWhiteListAddr The whitelist server address, which is a V4 or V6 address or DNS name.	INET-ADDRESS-MIBInetAddress Type Constraints: range: 0..255	.1.3.6.1.4.1.1991.1.1.3.44.1.4.4.1.3
ruckusWebAuthWhiteListPrefix The whitelist server prefix, which applies to V4/V6 addresses.	SNMPv2-SMIUnsigned32 Type Constraints: range: 0..4294967295	.1.3.6.1.4.1.1991.1.1.3.44.1.4.4.1.4

A table that allows configuration of WebAuth auth-
filters which are applied to statically authenticate 
the clients without the need for authentication.
          
This comes in for help to permit/deny pre-defined
clients and save time in authentication. An entry
exists in this table for every auth-filter defined 
on this VLAN.

ruckusWebAuthFilterEntry row .1.3.6.1.4.1.1991.1.1.3.44.1.4.5.1

An entry in WebAuth Auth-Filter table.

Indexes

ruckusWebAuthVlan ruckusWebAuthFilterMac

Column	Syntax	OID
ruckusWebAuthFilterMac Specifies the MAC Address of the filter for matching the authenticating clients through static authentication.	SNMPv2-TCMacAddress Type Constraints: range: 6 Description: Represents an 802 MAC address represented in the `canonical' order defined by IEEE 802.1a, i.e., as if it were transmitted least significant bit first, even though 802.5 (in contrast to other 802.x protocols) requires M…	.1.3.6.1.4.1.1991.1.1.3.44.1.4.5.1.1
ruckusWebAuthFilterPort Specifies the port in the VLAN, where this filter should be applied. If the port not valid, the entry applies to all ports in VLAN.	IF-MIBInterfaceIndexOrZero Type Constraints: range: 0..2147483647 Description: This textual convention is an extension of the InterfaceIndex convention. The latter defines a greater than zero value used to identify an interface or interface sub-layer in the managed system. This extension permits…	.1.3.6.1.4.1.1991.1.1.3.44.1.4.5.1.2
ruckusWebAuthFilterDuration Specifies the time for blocking or allowing the user when the filter results in authenticating the user (matches). Value of 0 means, the user is blocked permanently or allowed permanently.	secondsUnsigned32 Constraints: range: 0-12800	.1.3.6.1.4.1.1991.1.1.3.44.1.4.5.1.3
ruckusWebAuthFilterAction Specifies the action to be performed when this filter is applied on the authenticating client when matching occurs. permit(1) - allow the client in specified VLAN deny(2) - block the client	Enumeration Enumerated Values: 1 permit 2 deny	.1.3.6.1.4.1.1991.1.1.3.44.1.4.5.1.4

A table that allows configuration of WebAuth Captive
profiles for various external WebAuth servers. 
          
The rntry provides the server information such as
the DNS name or address, port and login page where
the authenticating client should be redirected to.

ruckusWebAuthCaptivePortalEntry row .1.3.6.1.4.1.1991.1.1.3.44.1.4.6.1

An entry in WebAuth Captive Poratl table.

Indexes

ruckusWebAuthCaptivePortalName

Column	Syntax	OID
ruckusWebAuthCaptivePortalName Specifies the name of the profile entry.	OctetString Constraints: range: 1-32	.1.3.6.1.4.1.1991.1.1.3.44.1.4.6.1.1
ruckusWebAuthCaptivePortalType Specifies the Captive server type - qualified name or IP address.	INET-ADDRESS-MIBInetAddressType Type Values: 0 unknown 1 ipv4 2 ipv6 3 ipv4z 4 ipv6z 16 dns 25 l2vpn	.1.3.6.1.4.1.1991.1.1.3.44.1.4.6.1.2
ruckusWebAuthCaptivePortalAddr Specifies the Captive server qualified name or IP address.	INET-ADDRESS-MIBInetAddress Type Constraints: range: 0..255	.1.3.6.1.4.1.1991.1.1.3.44.1.4.6.1.3
ruckusWebAuthCaptivePortalPort Specifies the Captive server port for HTTP/HTTPS access.	SNMPv2-SMIUnsigned32 Type Constraints: range: 0..4294967295	.1.3.6.1.4.1.1991.1.1.3.44.1.4.6.1.4
ruckusWebAuthCaptivePortalLoginPage Specifies the login page of the Captive server, where the client should be redirected to.	SNMPv2-TCDisplayString Type Constraints: range: 0..255 Description: Represents textual information taken from the NVT ASCII character set, as defined in pages 4, 10-11 of RFC 854. To summarize RFC 854, the NVT ASCII repertoire specifies: - the use of c…	.1.3.6.1.4.1.1991.1.1.3.44.1.4.6.1.5

A table that allows configuration of FlexAuth, 
including Dot1x and MAC-Auth for a specified port. 
Most objects at the port level oerride the similar 
configured objects at the global level.
          
An entry exists in this table for each configured
with FlexAuth.

ruckusAuthPortEntry row .1.3.6.1.4.1.1991.1.1.3.44.1.5.1.1

An entry of FlexAuth port configuration.

Indexes

IF-MIBifIndex

Column	Syntax	OID
ruckusAuthPortEnable Specifies authentication methods that are enabled on this port. Unless the method is enabled globally, the same can't be enabled at port level. A bit field of '1' indicates enabled, otherwise disabled.	Bits Enumerated Values: 0 dot1x 1 macAuth	.1.3.6.1.4.1.1991.1.1.3.44.1.5.1.1.1
ruckusAuthPortDot1xControl Specifies the Dot1x operating mode for this port, when Dot1x is enabled. force-unauthorized(1)- port's controlled port is placed unconditionally in the unauthorized state control-auto(2) - t…	Enumeration Enumerated Values: 1 forceUnauthorized 2 controlauto 3 forceAuthorized 4 other	.1.3.6.1.4.1.1991.1.1.3.44.1.5.1.1.2
ruckusAuthPortDefaultVlan This default VLAN is used to place this port, so this VLAN acts as a VLAN for the clients to belong to, when authentication server doesn't assign any VLANs. A value of zero for this object indicates no …	VlanId Type Constraints: range: 0..4094	.1.3.6.1.4.1.1991.1.1.3.44.1.5.1.1.3
ruckusAuthPortVoiceVlan This voice VLAN is used to advertise through LLDP/CDP on this port, when connected devices are detected as Phones and authentication server doesn't assign any Voice VLAN. A value of zero for this object i…	VlanId Type Constraints: range: 0..4094	.1.3.6.1.4.1.1991.1.1.3.44.1.5.1.1.4
ruckusAuthPortCriticalVlan This VLAN is used to place the clients of this port, when the authentication server times out and the port auth-timeout-action is configired as 'critical', so the clients have limited access. Refer to …	VlanId Type Constraints: range: 0..4094	.1.3.6.1.4.1.1991.1.1.3.44.1.5.1.1.5
ruckusAuthPortRestrictVlan This VLAN is used to place the clients of this port, when the clients fail the authentication and the auth-failure-action is configured as 'restrict', so the clients have limited access. Refer to ruckusAu…	VlanId Type Constraints: range: 0..4094	.1.3.6.1.4.1.1991.1.1.3.44.1.5.1.1.6
ruckusAuthPortMode Specifies the authentication mode for this port. This overrides the globally configured value.	RuckusAuthMode Type Values: 1 singleUntagged 2 multipleUntagged 3 singleHost 4 multipleHosts	.1.3.6.1.4.1.1991.1.1.3.44.1.5.1.1.7
ruckusAuthPortMethods Specifies authentication methods to be attempted in series of methods for this port. This overrides the globally configured value.	RuckusAuthOrder Type Values: 1 dot1xMauth 2 mauthDot1x	.1.3.6.1.4.1.1991.1.1.3.44.1.5.1.1.8
ruckusAuthPortMaxSessions Specifies the maximum number of authenticated clients allowed on this port. This doesn't include the clients allowed due to authentication failure and timeout policies.	Unsigned32 Constraints: range: 1-1024	.1.3.6.1.4.1.1991.1.1.3.44.1.5.1.1.9
ruckusAuthPortFailAction Specifies the action to be taken on this port. This overrides the globally set value.	RuckusAuthFailAction Type Values: 1 blockTraffic 2 restrictVlan	.1.3.6.1.4.1.1991.1.1.3.44.1.5.1.1.10
ruckusAuthPortTimeoutAction Specifies the action to be taken on this port, when the authentication server times out for various readons like server busy, network access, etc. This overrides the globally set value.	RuckusAuthTimeoutAction Type Values: 1 failure 2 success 3 criticalVlan 4 other	.1.3.6.1.4.1.1991.1.1.3.44.1.5.1.1.11
ruckusAuthPortReauthTimeout How often to re-authenticates clients of this port, when the clients were allowed due to authentication server timeout. Value of 0 disables the re-authentication.	secondsUnsigned32 Constraints: range: 1-4294967295	.1.3.6.1.4.1.1991.1.1.3.44.1.5.1.1.12
ruckusAuthPortAging Specifies, if denied and permitted sessions are enabled or disabled for aging on this port. This overrided the global value.	RuckusAuthAging Type Values: 0 deniedSessions 1 permittedSessions	.1.3.6.1.4.1.1991.1.1.3.44.1.5.1.1.13
ruckusAuthPortAllowTagged Specifies, if denied and permitted sessions are enabled or disabled for aging on this port. A bit field of '1' indicates enabled, otherwise disabled.	P-BRIDGE-MIBEnabledStatus Type Values: 1 enabled 2 disabled	.1.3.6.1.4.1.1991.1.1.3.44.1.5.1.1.14
ruckusAuthPortSourceGuard Source guard enabling ensures that the client IP address to be learned and allow the packets matching that IP address only. This is implied when user ACLs are applied on the port, so has impact only otherwise.	P-BRIDGE-MIBEnabledStatus Type Values: 1 enabled 2 disabled	.1.3.6.1.4.1.1991.1.1.3.44.1.5.1.1.15
ruckusAuthPortDosAttacks Specifies to prevent/allow Denial of Service attacks on this port. Constantly sending packets from different clients (MAC addresses) causes DOS, as the clients are not allowed without authentication, which may cause exh…	P-BRIDGE-MIBEnabledStatus Type Values: 1 enabled 2 disabled	.1.3.6.1.4.1.1991.1.1.3.44.1.5.1.1.16
ruckusAuthPortDosAttackLimit The maximum number of clients to be allowed at any time without authentication, and if authentication pending clients exceed the configured limit (as specified by this object), the port gets shutdown to prevent DOS atta…	Unsigned32 Constraints: range: 1-65535	.1.3.6.1.4.1.1991.1.1.3.44.1.5.1.1.17

A table that allows configuration of FlexAuth auth-
filters which are applied to statically authenticate 
the clients without the need for RADIUS server
authenticator.
          
This comes in for help to permit/deny pre-defined
clients and save time in authentication. An entry
exists in this table for every auth-filter bound 
on the port.

ruckusAuthFilterEntry row .1.3.6.1.4.1.1991.1.1.3.44.1.6.1.1

An entry of FlexAuth port Auth-Filter configuration.

Indexes

IF-MIBifIndex ruckusAuthFilterId

Column	Syntax	OID
ruckusAuthFilterId An index into the authe filter table.	SNMPv2-SMIInteger32 Type Constraints: range: -2147483648..2147483647	.1.3.6.1.4.1.1991.1.1.3.44.1.6.1.1.1
ruckusAuthFilterMac Specifies the MAC Address of the filter for matching the authenticating clients through static authentication.	SNMPv2-TCMacAddress Type Constraints: range: 6 Description: Represents an 802 MAC address represented in the `canonical' order defined by IEEE 802.1a, i.e., as if it were transmitted least significant bit first, even though 802.5 (in contrast to other 802.x protocols) requires M…	.1.3.6.1.4.1.1991.1.1.3.44.1.6.1.1.2
ruckusAuthFilterMask Specifies the Mask of the filter for matching the incoming clients through static authentication. The mask is applied on MAC in the filter and client MAC before the matching decision is made.	SNMPv2-TCMacAddress Type Constraints: range: 6 Description: Represents an 802 MAC address represented in the `canonical' order defined by IEEE 802.1a, i.e., as if it were transmitted least significant bit first, even though 802.5 (in contrast to other 802.x protocols) requires M…	.1.3.6.1.4.1.1991.1.1.3.44.1.6.1.1.3
ruckusAuthFilterVlan Specifies the VLAN which should be used to place the authenticating client after the matching is done. This VLAN applies only when the action is permit. Denied clients are always blocked.	VlanId Type Constraints: range: 0..4094	.1.3.6.1.4.1.1991.1.1.3.44.1.6.1.1.4
ruckusAuthFilterAction Specifies the action to be performed when this filter is applied on the authenticating client and matching occurs. permit(1) - allow the client in specified VLAN deny(2) - block the client	Enumeration Enumerated Values: 1 permit 2 deny	.1.3.6.1.4.1.1991.1.1.3.44.1.6.1.1.5

A table providing information about the FlexAuth
sessions for each client at port level in the
Ruckus device.
          
This table contains entries for all the clients
authenticated or failed on a given port.
          
Entries get created when clients are authenticated
amd cleared when they logoff or timeout.

ruckusAuthSessionEntry row .1.3.6.1.4.1.1991.1.1.3.44.1.7.1.1

An entry containing information about the FlexAuth
session of a specified client on a port

Indexes

IF-MIBifIndex ruckusAuthSessionMac

Column	Syntax	OID
ruckusAuthSessionMac Specifies the MAC Address of the client (device/host) represented by this session entry	SNMPv2-TCMacAddress Type Constraints: range: 6 Description: Represents an 802 MAC address represented in the `canonical' order defined by IEEE 802.1a, i.e., as if it were transmitted least significant bit first, even though 802.5 (in contrast to other 802.x protocols) requires M…	.1.3.6.1.4.1.1991.1.1.3.44.1.7.1.1.1
ruckusAuthSessionVlan Specifies the VLAN, the client (device/host) belongs to, represented by this session entry. In case of voice-phones, this VLAN is the voice-VLAN (tagged) and in all other cases, most likely an untagged VL…	VlanId Type Constraints: range: 0..4094	.1.3.6.1.4.1.1991.1.1.3.44.1.7.1.1.2
ruckusAuthSessionVlanType Decribes the type of the VLAN associated with the session. default(1) - Default VLANs as configured on Ruckus device restrict(2) - Restricted VLAN as authentication failed critical(3) - Critical VLAN as …	Enumeration Enumerated Values: 1 default 2 retrict 3 critical 4 guest 5 radius	.1.3.6.1.4.1.1991.1.1.3.44.1.7.1.1.3
ruckusAuthSessionTaggedVlan Tagged VLAN or Voice VLAN sent by the RADIUS server, so the port gets added to the VLAN, to prepare the device to send tagged packets in case of phones.	VlanId Type Constraints: range: 0..4094	.1.3.6.1.4.1.1991.1.1.3.44.1.7.1.1.4
ruckusAuthSessionUserName Indicates the User name associated with the client, represented by this session. In case of Dot1x sessions, it's the username used by the user to log into the network; whereas in case of MAC-Auth, it cou…	SNMPv2-TCDisplayString Type Constraints: range: 0..255 Description: Represents textual information taken from the NVT ASCII character set, as defined in pages 4, 10-11 of RFC 854. To summarize RFC 854, the NVT ASCII repertoire specifies: - the use of c…	.1.3.6.1.4.1.1991.1.1.3.44.1.7.1.1.5
ruckusAuthSessionDeviceType Decribes the type of the client connnected and authenticated on this port.	Enumeration Enumerated Values: 1 phone 2 wlanAP 3 router 4 bridge 8 other	.1.3.6.1.4.1.1991.1.1.3.44.1.7.1.1.6
ruckusAuthSessionMethod Specifies the authentication method that is used for authenticating the client on this port represented by this session. It's possible that both authentication methods are tried, both either succeeded or …	Enumeration Enumerated Values: 1 dot1x 2 macAuth	.1.3.6.1.4.1.1991.1.1.3.44.1.7.1.1.7
ruckusAuthSessionMode Indicates the authentication mode applied for this client on this port.	RuckusAuthMode Type Values: 1 singleUntagged 2 multipleUntagged 3 singleHost 4 multipleHosts	.1.3.6.1.4.1.1991.1.1.3.44.1.7.1.1.8
ruckusAuthSessionStatus The authentication state of the session which can take the following values. allowed - client authentication is successful, so the complete access is granted blocked - client failed authentication, so…	Enumeration Enumerated Values: 1 allowed 2 blocked 3 restrict 4 critical 5 guest 6 other	.1.3.6.1.4.1.1991.1.1.3.44.1.7.1.1.9
ruckusAuthSessionDot1xStatus Indicates the state of Dot1x authentication, if the client is using Dot1x for authentication.	Dot1xAuthState Type Values: 1 other 2 initialize 3 disconnected 4 connecting 5 authenticating 6 authenticated 7 aborting 8 held 9 forceAuth 10 forceUnauth	.1.3.6.1.4.1.1991.1.1.3.44.1.7.1.1.10
ruckusAuthSessionAgingType Indicates the aging status of the client session which can be of the following values. software(1): Client MAC entry is cleared as the entry timedout in hardware for configured inactivity period, so it…	Enumeration Enumerated Values: 1 software 2 hardware 3 enabled 4 disabled	.1.3.6.1.4.1.1991.1.1.3.44.1.7.1.1.11
ruckusAuthSessionAge When the aging type is either software or hardware, this object indicates the time, the session had been in that state. When the configured maximum time is reached, the aging state moves from hardware to software or s…	secondsSNMPv2-SMIUnsigned32 Type Constraints: range: 0..4294967295	.1.3.6.1.4.1.1991.1.1.3.44.1.7.1.1.12
ruckusAuthSessionTimeout Specifies the maximum amount of time, the session should exit before re-authenticating or terminating the sessions depending on another RADIUS attribute 'Termination-Action'.	secondsSNMPv2-SMIUnsigned32 Type Constraints: range: 0..4294967295	.1.3.6.1.4.1.1991.1.1.3.44.1.7.1.1.13
ruckusAuthSessionIdleTimeout Specifies the maximum amount of time after which the session is cleared when there is no traffic from the client. A value of 0 means, the sessions never gets terminated due to inactivity.	secondsSNMPv2-SMIUnsigned32 Type Constraints: range: 0..4294967295	.1.3.6.1.4.1.1991.1.1.3.44.1.7.1.1.14
ruckusAuthSessionTime Indcates the session UP time since the session had been up or created.	secondsSNMPv2-SMIUnsigned32 Type Constraints: range: 0..4294967295	.1.3.6.1.4.1.1991.1.1.3.44.1.7.1.1.15
ruckusAuthSessionV4IngressAcl Specifies the User Access List (ACL) applied in the Ingress direction for the IPv4 traffic for this client on this port.	SNMPv2-TCDisplayString Type Constraints: range: 0..255 Description: Represents textual information taken from the NVT ASCII character set, as defined in pages 4, 10-11 of RFC 854. To summarize RFC 854, the NVT ASCII repertoire specifies: - the use of c…	.1.3.6.1.4.1.1991.1.1.3.44.1.7.1.1.16
ruckusAuthSessionV4EgressAcl Specifies the User Access List (ACL) applied in the Egress direction for the IPv4 traffic for this client on this port.	SNMPv2-TCDisplayString Type Constraints: range: 0..255 Description: Represents textual information taken from the NVT ASCII character set, as defined in pages 4, 10-11 of RFC 854. To summarize RFC 854, the NVT ASCII repertoire specifies: - the use of c…	.1.3.6.1.4.1.1991.1.1.3.44.1.7.1.1.17
ruckusAuthSessionV6IngressAcl Specifies the User Access List (ACL) applied in the Ingress direction for the IPv6 traffic for this client on this port.	SNMPv2-TCDisplayString Type Constraints: range: 0..255 Description: Represents textual information taken from the NVT ASCII character set, as defined in pages 4, 10-11 of RFC 854. To summarize RFC 854, the NVT ASCII repertoire specifies: - the use of c…	.1.3.6.1.4.1.1991.1.1.3.44.1.7.1.1.18
ruckusAuthSessionV6EgressAcl Specifies the User Access List (ACL) applied in the Egress direction for the IPv6 traffic for this client on this port.	SNMPv2-TCDisplayString Type Constraints: range: 0..255 Description: Represents textual information taken from the NVT ASCII character set, as defined in pages 4, 10-11 of RFC 854. To summarize RFC 854, the NVT ASCII repertoire specifies: - the use of c…	.1.3.6.1.4.1.1991.1.1.3.44.1.7.1.1.19
ruckusAuthSessionTxOctets Specifies the number bytes sent for this session on the port.	SNMPv2-SMICounter64 Type Constraints: range: 0..18446744073709551615	.1.3.6.1.4.1.1991.1.1.3.44.1.7.1.1.20
ruckusAuthSessionRxOctets Specifies the number bytes received for this session on the port.	SNMPv2-SMICounter64 Type Constraints: range: 0..18446744073709551615	.1.3.6.1.4.1.1991.1.1.3.44.1.7.1.1.21
ruckusAuthSessionTxPkts Specifies the number bytes sent for this session on the port.	SNMPv2-SMICounter64 Type Constraints: range: 0..18446744073709551615	.1.3.6.1.4.1.1991.1.1.3.44.1.7.1.1.22
ruckusAuthSessionRxPkts Specifies the number bytes received for this session on the port.	SNMPv2-SMICounter64 Type Constraints: range: 0..18446744073709551615	.1.3.6.1.4.1.1991.1.1.3.44.1.7.1.1.23
ruckusAuthSessionFailureReason Specifies the internal failure reason for this client, such as memory allocation, RADIUS attribute parsing, RADIUS REJECT, etc.	SNMPv2-TCDisplayString Type Constraints: range: 0..255 Description: Represents textual information taken from the NVT ASCII character set, as defined in pages 4, 10-11 of RFC 854. To summarize RFC 854, the NVT ASCII repertoire specifies: - the use of c…	.1.3.6.1.4.1.1991.1.1.3.44.1.7.1.1.24
ruckusAuthSessionFlags Desacribes various other parameters of client session, by clubbing them together in one object for simplicity. staticAuthenticated(0): Client is authenticaticated using configured auth-fileters on the p…	Bits Enumerated Values: 0 staticAuthenticated 1 taggedSession 2 dot1xNonCapable 3 dot1xEnabled 4 masterMacAuth 5 v4AclApplied 6 v6AclApplied	.1.3.6.1.4.1.1991.1.1.3.44.1.7.1.1.25

An address table providing V4/V6 information about
the FlexAuth sessions for each client at port level
in the Ruckus device.

ruckusAuthSessionAddrEntry row .1.3.6.1.4.1.1991.1.1.3.44.1.7.2.1

An entry containing information about the FlexAuth
session address of a specified client on a port

Indexes

IF-MIBifIndex ruckusAuthSessionMac ruckusAuthSessionAddrId

Column	Syntax	OID
ruckusAuthSessionAddrId An index into the White List Server table.	SNMPv2-SMIInteger32 Type Constraints: range: -2147483648..2147483647	.1.3.6.1.4.1.1991.1.1.3.44.1.7.2.1.1
ruckusAuthSessionAddrType The address type of the this address entry, a V4 or V6.	INET-ADDRESS-MIBInetAddressType Type Values: 0 unknown 1 ipv4 2 ipv6 3 ipv4z 4 ipv6z 16 dns 25 l2vpn	.1.3.6.1.4.1.1991.1.1.3.44.1.7.2.1.2
ruckusAuthSessionAddr The address of this session entry, which is a V4 or V6 address.	INET-ADDRESS-MIBInetAddress Type Constraints: range: 0..255	.1.3.6.1.4.1.1991.1.1.3.44.1.7.2.1.3

A table that provides information about the summary
of MAC-Auth and Dot1x sessions at port level.
          
An entry exists in this table for every port enabled
for FlexAuth.

ruckusAuthStatsEntry row .1.3.6.1.4.1.1991.1.1.3.44.1.8.1.1

An entry of port level FlexAuth session summary
table.

Indexes

IF-MIBifIndex

Column	Syntax	OID
ruckusDot1xSessionsAttempted The number of Dot1x sessions attempted on this port, since the time the stats were cleared.	SNMPv2-SMICounter32 Type Constraints: range: 0..4294967295	.1.3.6.1.4.1.1991.1.1.3.44.1.8.1.1.1
ruckusDot1xSessionsAccepted The number of Dot1x sessions accepted or permited on this port, since the time the stats were cleared.	SNMPv2-SMICounter32 Type Constraints: range: 0..4294967295	.1.3.6.1.4.1.1991.1.1.3.44.1.8.1.1.2
ruckusDot1xSessionsRejected The number of Dot1x sessions failed or rejected on this port, since the time the stats were cleared.	SNMPv2-SMICounter32 Type Constraints: range: 0..4294967295	.1.3.6.1.4.1.1991.1.1.3.44.1.8.1.1.3
ruckusDot1xSessionsInProgress The number of Dot1x sessions which are in progress on this port waiting for authentication to be completed, since the time the stats were cleared.	SNMPv2-SMICounter32 Type Constraints: range: 0..4294967295	.1.3.6.1.4.1.1991.1.1.3.44.1.8.1.1.4
ruckusDot1xSessionsErrored The number of Dot1x sessions which are neither accepted or rejected due to conditions like timeout, resource failure, etc; on this port, since the time the stats were cleared.	SNMPv2-SMICounter32 Type Constraints: range: 0..4294967295	.1.3.6.1.4.1.1991.1.1.3.44.1.8.1.1.5
ruckusMacAuthSessionsAttempted The number of MAC-Auth sessions attempted on this port, since the time the stats were cleared.	SNMPv2-SMICounter32 Type Constraints: range: 0..4294967295	.1.3.6.1.4.1.1991.1.1.3.44.1.8.1.1.6
ruckusMacAuthSessionsAccepted The number of MAC-Auth sessions accepted or permited on this port, since the time the stats were cleared	SNMPv2-SMICounter32 Type Constraints: range: 0..4294967295	.1.3.6.1.4.1.1991.1.1.3.44.1.8.1.1.7
ruckusMacAuthSessionsRejected The number of MAC-Auth sessions failed or rejected on this port, since the time the stats were cleared	SNMPv2-SMICounter32 Type Constraints: range: 0..4294967295	.1.3.6.1.4.1.1991.1.1.3.44.1.8.1.1.8
ruckusMacAuthSessionsInProgress The number of MAC-Auth sessions which are in progress on this port waiting for authentication to be completed, since the time the stats were cleared	SNMPv2-SMICounter32 Type Constraints: range: 0..4294967295	.1.3.6.1.4.1.1991.1.1.3.44.1.8.1.1.9
ruckusMacAuthSessionsErrored The number of MAC-Auth sessions which are neither accepted or rejected due to conditions like timeout, resource failure, etc; on this port, since the time the stats were cleared.	SNMPv2-SMICounter32 Type Constraints: range: 0..4294967295	.1.3.6.1.4.1.1991.1.1.3.44.1.8.1.1.10

A table that provides information about the Dot1x
Statistics at port level.
          
An entry exists in this table for every port enabled
for Dot1x.

ruckusDot1xAuthStatsEntry row .1.3.6.1.4.1.1991.1.1.3.44.1.8.2.1

An entry of per port Dot1x statistics table.

Indexes

IF-MIBifIndex

Column	Syntax	OID
ruckusDot1xTxEAPFrames The total number of EAPOL frames transmitted on this port	SNMPv2-SMICounter32 Type Constraints: range: 0..4294967295	.1.3.6.1.4.1.1991.1.1.3.44.1.8.2.1.1
ruckusDot1xTxEAPReqIdFrames The number of EAP-Request/Identity frames transmitted on this port	SNMPv2-SMICounter32 Type Constraints: range: 0..4294967295	.1.3.6.1.4.1.1991.1.1.3.44.1.8.2.1.2
ruckusDot1xTxEAPReqFrames The number of transmitted EAP request frames that are not EAP-Request/identify on this port	SNMPv2-SMICounter32 Type Constraints: range: 0..4294967295	.1.3.6.1.4.1.1991.1.1.3.44.1.8.2.1.3
ruckusDot1xRxEAPFrames The total number of EAPOL frames received on this port	SNMPv2-SMICounter32 Type Constraints: range: 0..4294967295	.1.3.6.1.4.1.1991.1.1.3.44.1.8.2.1.4
ruckusDot1xRxEAPStartFrames The number of EAPOL-Start frames received on this port	SNMPv2-SMICounter32 Type Constraints: range: 0..4294967295	.1.3.6.1.4.1.1991.1.1.3.44.1.8.2.1.5
ruckusDot1xRxEAPLogOffFrames The number of EAPOL-Logoff frames received on this port	SNMPv2-SMICounter32 Type Constraints: range: 0..4294967295	.1.3.6.1.4.1.1991.1.1.3.44.1.8.2.1.6
ruckusDot1xRxEAPRespIdFrames The number of EAP-Response/Identify frames received on this port	SNMPv2-SMICounter32 Type Constraints: range: 0..4294967295	.1.3.6.1.4.1.1991.1.1.3.44.1.8.2.1.7
ruckusDot1xRxEAPRespFrames The number of received EAP-Response frames other than EAP-Response/Identity on this port	SNMPv2-SMICounter32 Type Constraints: range: 0..4294967295	.1.3.6.1.4.1.1991.1.1.3.44.1.8.2.1.8
ruckusDot1xRxEAPInvalidFrames The number of invalid EAPOL frames received on this port	SNMPv2-SMICounter32 Type Constraints: range: 0..4294967295	.1.3.6.1.4.1.1991.1.1.3.44.1.8.2.1.9
ruckusDot1xRxLengthErrorFrames The number of EAPOL frames received with incorrect length on this port	SNMPv2-SMIInteger32 Type Constraints: range: -2147483648..2147483647	.1.3.6.1.4.1.1991.1.1.3.44.1.8.2.1.10
ruckusDot1xRxEAPLastFrameVersion The version of last EAP frame received on this port	SNMPv2-SMIUnsigned32 Type Constraints: range: 0..4294967295	.1.3.6.1.4.1.1991.1.1.3.44.1.8.2.1.11
ruckusDot1xRxEAPLastFrameSource The MAC address of the source from where the last EAP frame received on this port	SNMPv2-TCMacAddress Type Constraints: range: 6 Description: Represents an 802 MAC address represented in the `canonical' order defined by IEEE 802.1a, i.e., as if it were transmitted least significant bit first, even though 802.5 (in contrast to other 802.x protocols) requires M…	.1.3.6.1.4.1.1991.1.1.3.44.1.8.2.1.12