CISCO-PAE-MIB Table View

Table-centric layout grouping table, row, and column objects.

Standard view Table view
Tables
13
Rows
13
Columns
69

cpaePortTable

table
.1.3.6.1.4.1.9.9.220.1.1 · 1 row entry · 10 columns
Open in standard view 
A table of system level information for each port
supported by the Port Access Entity.  An entry
appears in this table for each PAE port of this system.
This table contains additional objects for the
dot1xPaePortTable.
cpaePortEntry entry .1.3.6.1.4.1.9.9.220.1.1.1
An entry containing additional management information
applicable to a particular PAE port.
Indexes
No indexes recorded
Column Syntax OID
cpaeMultipleHost deprecated
Specifies whether the port allows multiple-host
connection or not.
SNMPv2-TCTruthValuer/w
Textual Convention: SNMPv2-TCTruthValue Enumeration
Type Values:
1true
2false
 .1.3.6.1.4.1.9.9.220.1.1.1.1
cpaePortMode
Specifies the current mode of dot1x operation on
the port.
singleHost(1): port allows one host to connect
and authenticate.
multiHost(2) : port allows multiple hosts to
conn…
Enumerationr/w
Enumerated Values:
1singleHost
2multiHost
3multiAuth
4other
 .1.3.6.1.4.1.9.9.220.1.1.1.2
cpaeGuestVlanNumber
Specifies the Guest Vlan of the interface.
An interface with cpaePortMode value of 'singleHost'
will be moved to its Guest Vlan if the supplicant on
the interface is not capable of IEEE-802.1x
authentication.
…
CISCO-VTP-MIBVlanIndexr/w
Textual Convention: CISCO-VTP-MIBVlanIndex Integer32
Type Constraints:
range: 0..4095
 .1.3.6.1.4.1.9.9.220.1.1.1.3
cpaeInGuestVlan deprecated
Indicates whether the interface is in its Guest Vlan
or not.

The object is deprecated in favor of newly added
object cpaePortOperVlanType.
SNMPv2-TCTruthValue
Textual Convention: SNMPv2-TCTruthValue Enumeration
Type Values:
1true
2false
 .1.3.6.1.4.1.9.9.220.1.1.1.4
cpaeShutdownTimeoutEnabled
Specifies whether shutdown timeout feature is enabled
on the interface.
SNMPv2-TCTruthValuer/w
Textual Convention: SNMPv2-TCTruthValue Enumeration
Type Values:
1true
2false
 .1.3.6.1.4.1.9.9.220.1.1.1.5
cpaePortAuthFailVlan
Specifies the Auth-Fail (Authentication Fail) Vlan of
the port. A port is moved to Auth-Fail Vlan if the
supplicant which support IEEE-802.1x authentication is
unsuccessfully authenticated.

A value of ze…
CISCO-VTP-MIBVlanIndexr/w
Textual Convention: CISCO-VTP-MIBVlanIndex Integer32
Type Constraints:
range: 0..4095
 .1.3.6.1.4.1.9.9.220.1.1.1.6
cpaePortOperVlan
The VlanIndex of the Vlan which is assigned to this
port via IEEE-802.1x and related methods of
authentication supported by the system.

A value of zero for this object indicates that no
Vlan is assigned t…
CISCO-VTP-MIBVlanIndex
Textual Convention: CISCO-VTP-MIBVlanIndex Integer32
Type Constraints:
range: 0..4095
 .1.3.6.1.4.1.9.9.220.1.1.1.7
cpaePortOperVlanType
The type of the Vlan which is assigned to this port
via IEEE-802.1x and related methods of authentication
supported by the system.

A value of 'other' for this object indicates type of
Vlan assigned to thi…
Enumeration
Enumerated Values:
1other
2none
3guest
4authFail
 .1.3.6.1.4.1.9.9.220.1.1.1.8
cpaeAuthFailVlanMaxAttempts
Specifies the maximum number of authentication attempts
should be made before the port is moved into the
Auth-Fail Vlan.
SNMPv2-SMIUnsigned32r/w
Textual Convention: SNMPv2-SMIUnsigned32 Unsigned32
Type Constraints:
range: 0..4294967295
 .1.3.6.1.4.1.9.9.220.1.1.1.9
cpaePortCapabilitiesEnabled
Specifies the type of PAE functionality of the port
which are enabled.

authenticator: PAE Authenticator functions are enabled.

supplicant : PAE Supplicant functions are enabled.
…
Bitsr/w
Enumerated Values:
0authenticator
1supplicant
 .1.3.6.1.4.1.9.9.220.1.1.1.10

cpaeUserGroupTable

table
.1.3.6.1.4.1.9.9.220.1.5 · 1 row entry · 7 columns
Open in standard view 
A table of Group Manager and authenticated users
information on the device.
cpaeUserGroupEntry entry .1.3.6.1.4.1.9.9.220.1.5.1
Information about an 802.1x authenticated user on the
devices.
Indexes
cpaeUserGroupName cpaeUserGroupUserIndex
Column Syntax OID
cpaeUserGroupName
Specifies the name of the group that the user
belongs to.
OctetString
Constraints:
range: 1-100
 .1.3.6.1.4.1.9.9.220.1.5.1.1
cpaeUserGroupUserIndex
The index of an user within a group.
SNMPv2-SMIUnsigned32
Textual Convention: SNMPv2-SMIUnsigned32 Unsigned32
Type Constraints:
range: 0..4294967295
 .1.3.6.1.4.1.9.9.220.1.5.1.2
cpaeUserGroupUserName
Specifies the name of the user authenticated on a
port of the device.
SNMP-FRAMEWORK-MIBSnmpAdminString
Textual Convention: SNMP-FRAMEWORK-MIBSnmpAdminString OctetString
Type Constraints:
range: 0..255
 .1.3.6.1.4.1.9.9.220.1.5.1.3
cpaeUserGroupUserAddrType
Specifies the type of address used to determine
the address of the user.
INET-ADDRESS-MIBInetAddressType
Textual Convention: INET-ADDRESS-MIBInetAddressType Enumeration
Type Values:
0unknown
1ipv4
2ipv6
3ipv4z
4ipv6z
16dns
25l2vpn
 .1.3.6.1.4.1.9.9.220.1.5.1.4
cpaeUserGroupUserAddr
Specifies the address of the host that the user
logging from.
INET-ADDRESS-MIBInetAddress
Textual Convention: INET-ADDRESS-MIBInetAddress OctetString
Type Constraints:
range: 0..255
 .1.3.6.1.4.1.9.9.220.1.5.1.5
cpaeUserGroupUserInterface
Specifies the interface index that the user is
authenticated on.
IF-MIBInterfaceIndex
Textual Convention: IF-MIBInterfaceIndex Integer32
Type Constraints:
range: 1..2147483647
 .1.3.6.1.4.1.9.9.220.1.5.1.6
cpaeUserGroupUserVlan
Specifies the vlan that the user belongs to.
CISCO-VTP-MIBVlanIndex
Textual Convention: CISCO-VTP-MIBVlanIndex Integer32
Type Constraints:
range: 0..4095
 .1.3.6.1.4.1.9.9.220.1.5.1.7

cpaeAuthFailUserTable

table
.1.3.6.1.4.1.9.9.220.1.6 · 1 row entry · 1 columns
Open in standard view 
A table to list user information for each port on
the system supported by the Port Access Entity and
assigned to Auth-Fail Vlan.
cpaeAuthFailUserEntry entry .1.3.6.1.4.1.9.9.220.1.6.1
An entry appears in this table for each PAE port on
the system which is assigned to Vlan of type
'authFail' via IEEE-802.1x authentication.
Indexes
IEEE8021-PAE-MIBdot1xPaePortNumber
Column Syntax OID
cpaeAuthFailUserName
Indicates the name of the user who failed IEEE-802.1x
authentication and hence now assigned to Auth-Fail
Vlan.

The Auth-Fail Vlan to which the user belongs is
determined by the value of object cpaePortAut…
SNMP-FRAMEWORK-MIBSnmpAdminString
Textual Convention: SNMP-FRAMEWORK-MIBSnmpAdminString OctetString
Type Constraints:
range: 0..255
 .1.3.6.1.4.1.9.9.220.1.6.1.1

cpaeMacAuthBypassPortTable

table
.1.3.6.1.4.1.9.9.220.1.8.6 · 1 row entry · 11 columns
Open in standard view 
A table of MAC Authentication Bypass (MAC
Auth-Bypass) configuration and information for
ports in the device.
cpaeMacAuthBypassPortEntry entry .1.3.6.1.4.1.9.9.220.1.8.6.1
An entry containing management information for
MAC Auth-Bypass feature on a port.
Indexes
IEEE8021-PAE-MIBdot1xPaePortNumber
Column Syntax OID
cpaeMacAuthBypassPortEnabled
Specifies whether MAC Auth-Bypass is enabled
on the port.
SNMPv2-TCTruthValuer/w
Textual Convention: SNMPv2-TCTruthValue Enumeration
Type Values:
1true
2false
 .1.3.6.1.4.1.9.9.220.1.8.6.1.1
cpaeMacAuthBypassPortInitialize
The initialization control for this port. Setting
this object to 'true' causes the MAC Auth-bypass
state machine to be initialized on the port. Setting
this object to 'false' has no effect.

This object a…
SNMPv2-TCTruthValuer/w
Textual Convention: SNMPv2-TCTruthValue Enumeration
Type Values:
1true
2false
 .1.3.6.1.4.1.9.9.220.1.8.6.1.2
cpaeMacAuthBypassPortReAuth
The reauthentication control for this port. Setting
this object to 'true' causes the MAC address of the
device connecting to the port to be reauthenticated.
Setting this object to 'false' has no effect.

T…
SNMPv2-TCTruthValuer/w
Textual Convention: SNMPv2-TCTruthValue Enumeration
Type Values:
1true
2false
 .1.3.6.1.4.1.9.9.220.1.8.6.1.3
cpaeMacAuthBypassPortMacAddress
Indicates the MAC address of the device connecting
to the port.
SNMPv2-TCMacAddress
Textual Convention: SNMPv2-TCMacAddress OctetString
Type Constraints:
range: 6
 .1.3.6.1.4.1.9.9.220.1.8.6.1.4
cpaeMacAuthBypassPortAuthState
Indicates the current state of the MAC Auth-Bypass
state machine.

other(1) : An unknown state.

waiting(2) : Waiting to receive the MAC address
that needs to…
Enumeration
Enumerated Values:
1other
2waiting
3authenticating
4authenticated
5fail
6finished
7aaaFail
8ipAwaiting
9policyConfig
 .1.3.6.1.4.1.9.9.220.1.8.6.1.5
cpaeMacAuthBypassPortTermAction
Indicates the termination action received from RADIUS
server that will be applied on the port when the
current session timeout expired.

other : none of the following.
init : current session will be termi…
Enumeration
Enumerated Values:
1other
2init
3reauth
 .1.3.6.1.4.1.9.9.220.1.8.6.1.6
cpaeMacAuthBypassSessionTimeLeft
Indicates the leftover time of the current MAC
Auth-Bypass session on this port.
secondsSNMPv2-SMIUnsigned32
Textual Convention: SNMPv2-SMIUnsigned32 Unsigned32
Type Constraints:
range: 0..4294967295
 .1.3.6.1.4.1.9.9.220.1.8.6.1.7
cpaeMacAuthBypassPortAuthMethod
Specifies the authentication method used by
MAC Authentication Bypass.

radius(1) : communication with authentication server
is performed via RADIUS messages.

eap(2) : communi…
Enumerationr/w
Enumerated Values:
1radius
2eap
 .1.3.6.1.4.1.9.9.220.1.8.6.1.8
cpaeMacAuthBypassPortSessionId
Indicates the session ID of the MAC Auth-Bypass
Audit session on the port. A zero length string will be
returned for this object if value of the corresponding instance
of cpaeMacAuthBypassPortEnabled is 'false'.
SNMP-FRAMEWORK-MIBSnmpAdminString
Textual Convention: SNMP-FRAMEWORK-MIBSnmpAdminString OctetString
Type Constraints:
range: 0..255
 .1.3.6.1.4.1.9.9.220.1.8.6.1.9
cpaeMacAuthBypassPortUrlRedirect
Indicates the URL of an Audit server, provided by AAA
server, to which a MAC auth-Bypass host will be
redirected to when an Audit session starts off. A
zero-length string indicates that the audit process will
be perform…
SNMP-FRAMEWORK-MIBSnmpAdminString
Textual Convention: SNMP-FRAMEWORK-MIBSnmpAdminString OctetString
Type Constraints:
range: 0..255
 .1.3.6.1.4.1.9.9.220.1.8.6.1.10
cpaeMacAuthBypassPortPostureTok
Indicates the Posture Token assigned to the MAC
Auth-Bypass host connected to this port. A zero length string
will be returned for this object if value of the corresponding
instance of cpaeMacAuthBypassPortEnabled is 'f…
OctetString
Constraints:
range: 0-255
 .1.3.6.1.4.1.9.9.220.1.8.6.1.11

cpaeMabPortIpDevTrackConfTable

table
.1.3.6.1.4.1.9.9.220.1.8.9 · 1 row entry · 1 columns
Open in standard view 
A table of IP Device Tracking configuration for MAC
Auth-Bypass interfaces in the system.
cpaeMabPortIpDevTrackConfEntry entry .1.3.6.1.4.1.9.9.220.1.8.9.1
An entry of MAC Auth-Bypass configuration for IP Device
Tracking on an MAC Auth-Bypass capable interface.
Indexes
IEEE8021-PAE-MIBdot1xPaePortNumber
Column Syntax OID
cpaeMabPortIpDevTrackEnabled
Specifies whether IP Device Tracking is enabled or not on this
port for the corresponding MAC Auth-bypass authenticated host.
SNMPv2-TCTruthValuer/w
Textual Convention: SNMPv2-TCTruthValue Enumeration
Type Values:
1true
2false
 .1.3.6.1.4.1.9.9.220.1.8.9.1.1

cpaeWebAuthPortTable

table
.1.3.6.1.4.1.9.9.220.1.9.7 · 1 row entry · 4 columns
Open in standard view 
A table of Web Proxy Authentication configuration and
information for the feature capable ports in the
device.
cpaeWebAuthPortEntry entry .1.3.6.1.4.1.9.9.220.1.9.7.1
An entry containing management information for Web
Proxy Authentication feature on a port.
Indexes
IEEE8021-PAE-MIBdot1xPaePortNumber
Column Syntax OID
cpaeWebAuthPortEnabled
Specifies whether Web Proxy Authentication is
enabled on the port.
SNMPv2-TCTruthValuer/w
Textual Convention: SNMPv2-TCTruthValue Enumeration
Type Values:
1true
2false
 .1.3.6.1.4.1.9.9.220.1.9.7.1.1
cpaeWebAuthPortInitialize
The initialization control for this port. Setting this
object to 'true' causes Web Proxy Authentication state
machine to be initialized for all the hosts connecting
to the port. Setting this object to 'false' has no
eff…
SNMPv2-TCTruthValuer/w
Textual Convention: SNMPv2-TCTruthValue Enumeration
Type Values:
1true
2false
 .1.3.6.1.4.1.9.9.220.1.9.7.1.2
cpaeWebAuthPortAaaFailPolicy
Specifies the policy name to be applied on the port
when the corresponding cpaeWebAuthHostState is
'aaaFail'. The specified policy name must either be
an existing entry in cpgPolicyTable defined in
CISCO-POLICY-GROUP-MI…
CISCO-POLICY-GROUP-MIBCpgPolicyNameOrEmptyr/w
Textual Convention: CISCO-POLICY-GROUP-MIBCpgPolicyNameOrEmpty OctetString
Type Constraints:
range: 0..128
 .1.3.6.1.4.1.9.9.220.1.9.7.1.3
cpaeWebAuthPortIpDevTrackEnabled
Specifies whether IP Device Tracking is enabled or not on this
port for the corresponding Web Proxy authenticated host.
SNMPv2-TCTruthValuer/w
Textual Convention: SNMPv2-TCTruthValue Enumeration
Type Values:
1true
2false
 .1.3.6.1.4.1.9.9.220.1.9.7.1.4

cpaeWebAuthHostTable

table
.1.3.6.1.4.1.9.9.220.1.9.8 · 1 row entry · 6 columns
Open in standard view 
A table of Web Proxy Authentication information for
hosts currently managed by the feature. An entry is
added to the table when a host is detected and Web
Proxy Authentication state machine is initiated for
the host.
cpaeWebAuthHostEntry entry .1.3.6.1.4.1.9.9.220.1.9.8.1
An entry containing management information for Web
Proxy Authentication feature on a host.
Indexes
IEEE8021-PAE-MIBdot1xPaePortNumber cpaeWebAuthHostAddrType cpaeWebAuthHostAddress
Column Syntax OID
cpaeWebAuthHostAddrType
Indicates the Internet address type for the host.
INET-ADDRESS-MIBInetAddressType
Textual Convention: INET-ADDRESS-MIBInetAddressType Enumeration
Type Values:
0unknown
1ipv4
2ipv6
3ipv4z
4ipv6z
16dns
25l2vpn
 .1.3.6.1.4.1.9.9.220.1.9.8.1.1
cpaeWebAuthHostAddress
Indicates the Internet address for the host. The type
of this address is determined by the value of
cpaeWebAuthHostAddrType.
OctetString
Constraints:
range: 0-64
 .1.3.6.1.4.1.9.9.220.1.9.8.1.2
cpaeWebAuthAaaSessionPeriod
Indicates the session period for a Web Proxy
Authenticated session on this host, supplied by the
AAA server. If value of this object is none zero,
it will take precedence over the period specified
by cpaeWebAuthPortSess…
secondsSNMPv2-SMIUnsigned32
Textual Convention: SNMPv2-SMIUnsigned32 Unsigned32
Type Constraints:
range: 0..4294967295
 .1.3.6.1.4.1.9.9.220.1.9.8.1.3
cpaeWebAuthHostSessionTimeLeft
Indicates the leftover time of the current Web Proxy
Authenticated session for this host.
secondsSNMPv2-SMIUnsigned32
Textual Convention: SNMPv2-SMIUnsigned32 Unsigned32
Type Constraints:
range: 0..4294967295
 .1.3.6.1.4.1.9.9.220.1.9.8.1.4
cpaeWebAuthHostState
Indicates the current state of the Web Proxy
Authentication state machine.

initialize : Initial state of the Web Proxy
Authentication state machine.

connecting : Login…
Enumeration
Enumerated Values:
1initialize
2connecting
3authenticating
4authenticated
5authFailed
6parseError
7sessionTimeout
8blackListed
9aaaFail
 .1.3.6.1.4.1.9.9.220.1.9.8.1.5
cpaeWebAuthHostInitialize
The initialization control for this host. Setting this
object to 'true' causes Web Proxy Authentication state
machine to be initialized for the host. Setting this
object to 'false' has no effect.

This obj…
SNMPv2-TCTruthValuer/w
Textual Convention: SNMPv2-TCTruthValue Enumeration
Type Values:
1true
2false
 .1.3.6.1.4.1.9.9.220.1.9.8.1.6

cpaeAuthConfigTable

table
.1.3.6.1.4.1.9.9.220.1.10 · 1 row entry · 8 columns
Open in standard view 
A table containing the configuration objects for the
Authenticator PAE associated with each port. An entry
appears in this table for each PAE port that may
authenticate access to itself. This table contain
additional objects for the dot1xAuthConfigTable.
cpaeAuthConfigEntry entry .1.3.6.1.4.1.9.9.220.1.10.1
An entry containing additional management information
applicable to a particular Authenticator PAE.
Indexes
No indexes recorded
Column Syntax OID
cpaeAuthReAuthPeriodSrcAdmin
Specifies the source of the reAuthPeriod constant to
be used by the Reauthentication Timer state machine.
ReAuthPeriodSourcer/w
Textual Convention: ReAuthPeriodSource Enumeration
Type Values:
1local
2server
3auto
 .1.3.6.1.4.1.9.9.220.1.10.1.1
cpaeAuthReAuthPeriodSrcOper
Indicates the source of the reAuthPeriod constant
currently in use by the Reauthentication Timer state
machine.
ReAuthPeriodSource
Textual Convention: ReAuthPeriodSource Enumeration
Type Values:
1local
2server
3auto
 .1.3.6.1.4.1.9.9.220.1.10.1.2
cpaeAuthReAuthPeriodOper
Indicates the operational reauthentication period
for this port.
secondsSNMPv2-SMIUnsigned32
Textual Convention: SNMPv2-SMIUnsigned32 Unsigned32
Type Constraints:
range: 0..4294967295
 .1.3.6.1.4.1.9.9.220.1.10.1.3
cpaeAuthTimeToNextReAuth
Indicates the leftover time of the current session
for this port.
secondsSNMPv2-SMIUnsigned32
Textual Convention: SNMPv2-SMIUnsigned32 Unsigned32
Type Constraints:
range: 0..4294967295
 .1.3.6.1.4.1.9.9.220.1.10.1.4
cpaeAuthReAuthAction
Indicates the reauthentication action for this port.

terminate: Session will be terminated, with the
corresponding Authenticator PAE state
machine transits to 'disconnected'.
…
Enumeration
Enumerated Values:
1terminate
2reAuth
3noReAuth
 .1.3.6.1.4.1.9.9.220.1.10.1.5
cpaeAuthReAuthMax
This object specifies the number of reauthentication
attempts that are permitted before the port becomes
unauthorized.

The value of this object is used as the reAuthMax
constant by the Authenticator PAE s…
SNMPv2-SMIUnsigned32r/w
Textual Convention: SNMPv2-SMIUnsigned32 Unsigned32
Type Constraints:
range: 0..4294967295
 .1.3.6.1.4.1.9.9.220.1.10.1.6
cpaeAuthIabEnabled
Specifies whether the PAE port is declared as
Inaccessible Authentication Bypass (IAB). IAB ports
will be granted network access via the administrative
configured VLAN if it failed to connect to the
Authentication serve…
SNMPv2-TCTruthValuer/w
Textual Convention: SNMPv2-TCTruthValue Enumeration
Type Values:
1true
2false
 .1.3.6.1.4.1.9.9.220.1.10.1.7
cpaeAuthPaeState
Indicates the current value of the Authenticator PAE
state machine on the port.
CpaeAuthState
Textual Convention: CpaeAuthState Enumeration
Type Values:
1other
2initialize
3disconnected
4connecting
5authenticating
6authenticated
7aborting
8held
9forceAuth
10forceUnauth
11guestVlan
12authFailVlan
13criticalAuth
14ipAwaiting
15policyConfig
16authFinished
17restart
18authFallback
19authCResult
20authZSuccess
 .1.3.6.1.4.1.9.9.220.1.10.1.8

cpaeHostInfoTable

table
.1.3.6.1.4.1.9.9.220.1.11 · 1 row entry · 11 columns
Open in standard view 
A table containing 802.1x authentication information
for hosts connecting to PAE ports in the system.
cpaeHostInfoEntry entry .1.3.6.1.4.1.9.9.220.1.11.1
An entry appears in the table for each 802.1x capable
host connecting to an PAE port, providing its
authentication information.
Indexes
IEEE8021-PAE-MIBdot1xPaePortNumber cpaeHostInfoHostIndex
Column Syntax OID
cpaeHostInfoHostIndex
An arbitrary index assigned by the agent to identify
the host.
SNMPv2-SMIUnsigned32
Textual Convention: SNMPv2-SMIUnsigned32 Unsigned32
Type Constraints:
range: 0..4294967295
 .1.3.6.1.4.1.9.9.220.1.11.1.1
cpaeHostInfoMacAddress
Indicates the Mac Address of the host.
SNMPv2-TCMacAddress
Textual Convention: SNMPv2-TCMacAddress OctetString
Type Constraints:
range: 6
 .1.3.6.1.4.1.9.9.220.1.11.1.2
cpaeHostInfoPostureToken obsolete
Indicates the posture token assigned to the host.
This object has been obsoleted and replaced by
cpaeHostPostureTokenStr.
CISCO-NAC-TC-MIBCnnEouPostureToken
Textual Convention: CISCO-NAC-TC-MIBCnnEouPostureToken Enumeration
Type Values:
1unknown
2healthy
3checkup
4quarantine
5infected
 .1.3.6.1.4.1.9.9.220.1.11.1.3
cpaeHostInfoUserName
Indicates the name of the authenticated user on
the host.
SNMP-FRAMEWORK-MIBSnmpAdminString
Textual Convention: SNMP-FRAMEWORK-MIBSnmpAdminString OctetString
Type Constraints:
range: 0..255
 .1.3.6.1.4.1.9.9.220.1.11.1.4
cpaeHostInfoAddrType
Indicates the type of Internet address of the host.
INET-ADDRESS-MIBInetAddressType
Textual Convention: INET-ADDRESS-MIBInetAddressType Enumeration
Type Values:
0unknown
1ipv4
2ipv6
3ipv4z
4ipv6z
16dns
25l2vpn
 .1.3.6.1.4.1.9.9.220.1.11.1.5
cpaeHostInfoAddr
Indicates the Internet address of the host. The type
of this address is determined by the value of
cpaeHostInfoAddrType object.
INET-ADDRESS-MIBInetAddress
Textual Convention: INET-ADDRESS-MIBInetAddress OctetString
Type Constraints:
range: 0..255
 .1.3.6.1.4.1.9.9.220.1.11.1.6
cpaeHostPostureTokenStr
Indicates the posture token assigned to the host.
CISCO-NAC-TC-MIBCnnEouPostureTokenString
Textual Convention: CISCO-NAC-TC-MIBCnnEouPostureTokenString OctetString
Type Constraints:
range: 0..255
 .1.3.6.1.4.1.9.9.220.1.11.1.7
cpaeHostUrlRedirection
Indicates the URL-redirection assigned for this host
by AAA server.
SNMP-FRAMEWORK-MIBSnmpAdminString
Textual Convention: SNMP-FRAMEWORK-MIBSnmpAdminString OctetString
Type Constraints:
range: 0..255
 .1.3.6.1.4.1.9.9.220.1.11.1.8
cpaeHostAuthPaeState
Indicates the current value of the Authenticator PAE
state machine for the host.
CpaeAuthState
Textual Convention: CpaeAuthState Enumeration
Type Values:
1other
2initialize
3disconnected
4connecting
5authenticating
6authenticated
7aborting
8held
9forceAuth
10forceUnauth
11guestVlan
12authFailVlan
13criticalAuth
14ipAwaiting
15policyConfig
16authFinished
17restart
18authFallback
19authCResult
20authZSuccess
 .1.3.6.1.4.1.9.9.220.1.11.1.9
cpaeHostBackendState
Indicates the current state of the Backend Authentication
state machine of the host.
Enumeration
Enumerated Values:
1request
2response
3success
4fail
5timeout
6idle
7initialize
8ignore
 .1.3.6.1.4.1.9.9.220.1.11.1.10
cpaeHostSessionId
A unique identifier of the 802.1x session.
OctetString
Constraints:
range: 1-64
 .1.3.6.1.4.1.9.9.220.1.11.1.11

cpaePortEapolTestTable

table
.1.3.6.1.4.1.9.9.220.1.13 · 1 row entry · 2 columns
Open in standard view 
A table for testing EAPOL (Extensible Authentication
Protocol Over LAN) capable information of hosts
connecting to PAE ports in the device.
cpaePortEapolTestEntry entry .1.3.6.1.4.1.9.9.220.1.13.1
An entry containing EAPOL capable information for
hosts connecting to a PAE port.
Indexes
IEEE8021-PAE-MIBdot1xPaePortNumber
Column Syntax OID
cpaePortEapolTestResult
Indicates the test result of whether there is
EAPOL supporting host connecting to the port.

inProgress: the test is in progress.
notCapable: there is no EAPOL supporting host
connecting to the…
Enumeration
Enumerated Values:
1inProgress
2notCapable
3capable
 .1.3.6.1.4.1.9.9.220.1.13.1.1
cpaePortEapolTestStatus
This object is used to manage the creation,
and deletion of rows in the table.

An entry can be created by setting the instance
value of this object to 'createAndGo', and deleted
by setting the instance va…
SNMPv2-TCRowStatusr/w
Textual Convention: SNMPv2-TCRowStatus Enumeration
Type Values:
1active
2notInService
3notReady
4createAndGo
5createAndWait
6destroy
 .1.3.6.1.4.1.9.9.220.1.13.1.2

cpaePortIpDevTrackConfigTable

table
.1.3.6.1.4.1.9.9.220.1.15 · 1 row entry · 1 columns
Open in standard view 
A table of IP Device Tracking configuration for PAE
ports in the system.
cpaePortIpDevTrackConfigEntry entry .1.3.6.1.4.1.9.9.220.1.15.1
An entry of IP Device Tracking configuration on a
PAE port.
Indexes
IEEE8021-PAE-MIBdot1xPaePortNumber
Column Syntax OID
cpaePortIpDevTrackEnabled
Specifies if IP Device Tracking is enabled on this port
for the corresponding 802.1x authenticated host.
SNMPv2-TCTruthValuer/w
Textual Convention: SNMPv2-TCTruthValue Enumeration
Type Values:
1true
2false
 .1.3.6.1.4.1.9.9.220.1.15.1.1

cpaeSuppPortTable

table
.1.3.6.1.4.1.9.9.220.1.19.1 · 1 row entry · 2 columns
Open in standard view 
A list of objects providing information and configuration
for the Supplicant PAE associated with each port.  This
table provides additional objects for the dot1xSuppConfigTable.
cpaeSuppPortEntry entry .1.3.6.1.4.1.9.9.220.1.19.1.1
An entry containing supplicant configuration information for a
particular PAE port.
Indexes
IEEE8021-PAE-MIBdot1xPaePortNumber
Column Syntax OID
cpaeSuppPortCredentialProfileName
Specifies the credentials profile of the Supplicant PAE.
A zero length string for this object indicates that the
Supplicant PAE does not have credential profile.
SNMP-FRAMEWORK-MIBSnmpAdminStringr/w
Textual Convention: SNMP-FRAMEWORK-MIBSnmpAdminString OctetString
Type Constraints:
range: 0..255
 .1.3.6.1.4.1.9.9.220.1.19.1.1.1
cpaeSuppPortEapProfileName
Specifies the EAP profile of the Supplicant PAE. A zero
length string for this object indicates that the
Supplicant PAE does not have EAP profile.
SNMP-FRAMEWORK-MIBSnmpAdminStringr/w
Textual Convention: SNMP-FRAMEWORK-MIBSnmpAdminString OctetString
Type Constraints:
range: 0..255
 .1.3.6.1.4.1.9.9.220.1.19.1.1.2

cpaeSuppHostInfoTable

table
.1.3.6.1.4.1.9.9.220.1.19.2 · 1 row entry · 5 columns
Open in standard view 
A list of dot1x supplicants in the system.
cpaeSuppHostInfoEntry entry .1.3.6.1.4.1.9.9.220.1.19.2.1
An entry containing dot1x supplicant information for a
supplicant on a particular PAE port in the system.
Indexes
IEEE8021-PAE-MIBdot1xPaePortNumber cpaeSuppHostInfoSuppIndex
Column Syntax OID
cpaeSuppHostInfoSuppIndex
An arbitrary index assigned by the agent to identify the
supplicant.
Unsigned32
Constraints:
range: 1-65535
 .1.3.6.1.4.1.9.9.220.1.19.2.1.1
cpaeSuppHostAuthMacAddress
Indicates the MAC address of the authenticator, which
authenticates the supplicant.
SNMPv2-TCMacAddress
Textual Convention: SNMPv2-TCMacAddress OctetString
Type Constraints:
range: 6
 .1.3.6.1.4.1.9.9.220.1.19.2.1.2
cpaeSuppHostPaeState
Indicates the current state of the Supplicant PAE State
machine.
Enumeration
Enumerated Values:
1disconnected
2logoff
3connecting
4authenticating
5authenticated
6acquired
7held
8restart
9sForceAuth
10sForceUnauth
 .1.3.6.1.4.1.9.9.220.1.19.2.1.3
cpaeSuppHostBackendState
Indicates the current state of the Supplicant Backend state
machine.
Enumeration
Enumerated Values:
1initialize
2idle
3request
4response
5receive
6fail
7success
8timeout
 .1.3.6.1.4.1.9.9.220.1.19.2.1.4
cpaeSuppHostStatus
Indicates the status of the supplicant.
IEEE8021-PAE-MIBPaeControlledPortStatus
Textual Convention: IEEE8021-PAE-MIBPaeControlledPortStatus Enumeration
Type Values:
1authorized
2unauthorized
 .1.3.6.1.4.1.9.9.220.1.19.2.1.5