RUCKUS-AUTH-MIB Table View

Table-centric layout grouping table, row, and column objects.

Tables
12
Rows
12
Columns
114
.1.3.6.1.4.1.1991.1.1.3.44.1.4.1 · 1 row entry · 24 columns
A table that allows configuration of WebAuth for a
specified VLAN. WebAuth is configured at the VLAN
level unlike MAC-Auth and Dot1x at the port level.
          
An entry exists in this table for each configured
VLAN with WebAuth.
ruckusWebAuthEntry entry .1.3.6.1.4.1.1991.1.1.3.44.1.4.1.1
An entry of WebAuth configuration.
Indexes
ruckusWebAuthVlan
Column Syntax OID
ruckusWebAuthVlan
Specifies the VLAN, this configuration entry applies to.
VlanId
Textual Convention: VlanId Integer32
Type Constraints:
range: 0..4094
.1.3.6.1.4.1.1991.1.1.3.44.1.4.1.1.1
ruckusWebAuthEnable
Specifies if Web-Auth is enabled or disabled.
P-BRIDGE-MIBEnabledStatus
Textual Convention: P-BRIDGE-MIBEnabledStatus Enumeration
Type Values:
1enabled
2disabled
.1.3.6.1.4.1.1991.1.1.3.44.1.4.1.1.2
ruckusWebAuthMode
Specifies the authentication mode used for authenticating
the users.

none - no authentication is performed
passcode - passcode based authentication, where the
passcode can be statitically configured o…
Enumeration
Enumerated Values:
1none
2passcode
3password
4captivePortal
.1.3.6.1.4.1.1991.1.1.3.44.1.4.1.1.3
ruckusWebAuthMethod
When the AuthMode is configured as password, this specifies
the order for performing authentication.

radius - RADIUS server for authentication
local - Local user DB for authentication
radiusLocal - RAD…
Enumeration
Enumerated Values:
1radius
2local
3radiusLocal
4localRadius
5none
.1.3.6.1.4.1.1991.1.1.3.44.1.4.1.1.4
ruckusWebAuthMaxHosts
Specifies the maximum number of hosts allowed to be
authenticated. Value 0 means no limit.
Unsigned32
Constraints:
range: 0-8192
.1.3.6.1.4.1.1991.1.1.3.44.1.4.1.1.5
ruckusWebAuthMaxAuthAttempts
Specifies the maximum number of attempts allowed during the
auth cycle, after which the user is blocked for configured
amount of time, before next authentication. The value of 0
means no limit.
Unsigned32
Constraints:
range: 0-64
.1.3.6.1.4.1.1991.1.1.3.44.1.4.1.1.6
ruckusWebAuthReauthTime
Specifies the re-authentication time, so the authenticated
users can be periodically reauthenticated after the timeout
specified through this object. Value 0 means no limit
secondsUnsigned32
Constraints:
range: 0-128000
.1.3.6.1.4.1.1991.1.1.3.44.1.4.1.1.7
ruckusWebAuthCycleTime
Specifies the time of the authentication since the first
attempted user authentication, after which the user is not
allowed to authenticate and must reload the login-page to
start authentication. Value of 0 means no lim…
secondsUnsigned32
Constraints:
range: 0-3600
.1.3.6.1.4.1.1991.1.1.3.44.1.4.1.1.8
ruckusWebAuthBlockTime
Specifies the time for blocking the user when successive
attempts have failed resulting in blocking the user. Value of
0 means, the user is blocked permanently.
secondsUnsigned32
Constraints:
range: 0-12800
.1.3.6.1.4.1.1991.1.1.3.44.1.4.1.1.9
ruckusWebAuthMacAgeTime
Specifies the the time which together with mac-age-time of the
switch is considered an inactive time of the authenticated
host, after which the device is forced to reauthenticate.

The value can be 0 mean…
Unsigned32
Constraints:
range: 0-3600
.1.3.6.1.4.1.1991.1.1.3.44.1.4.1.1.10
ruckusWebAuthPasscode
Specifies the statically configured passcode used to
authenticate when passcode is used auth-method. The passcode
is digits only.

This can consist of upto 4 passcodes where each entry is seperated
by spa…
SNMPv2-TCDisplayString
Textual Convention: SNMPv2-TCDisplayString OctetString
Type Constraints:
range: 0..255
.1.3.6.1.4.1.1991.1.1.3.44.1.4.1.1.11
ruckusWebAuthLocalUserDb
Specifies the locally configured User Database for use
in authentication, when the auth-methos is password.
SNMPv2-TCDisplayString
Textual Convention: SNMPv2-TCDisplayString OctetString
Type Constraints:
range: 0..255
.1.3.6.1.4.1.1991.1.1.3.44.1.4.1.1.12
ruckusWebAuthSecureLogin
Specifies if HTTPS is used for authentication or not.
P-BRIDGE-MIBEnabledStatus
Textual Convention: P-BRIDGE-MIBEnabledStatus Enumeration
Type Values:
1enabled
2disabled
.1.3.6.1.4.1.1991.1.1.3.44.1.4.1.1.13
ruckusWebAuthAccounting
Specifies if accounting is enbled or disabled.
P-BRIDGE-MIBEnabledStatus
Textual Convention: P-BRIDGE-MIBEnabledStatus Enumeration
Type Values:
1enabled
2disabled
.1.3.6.1.4.1.1991.1.1.3.44.1.4.1.1.14
ruckusWebAuthCaptiveProfile
Specifies the name of the configured Captive Portal profile,
which should be used for redirection, if the auth-method is
configured as captivePortal.
SNMPv2-TCDisplayString
Textual Convention: SNMPv2-TCDisplayString OctetString
Type Constraints:
range: 0..255
.1.3.6.1.4.1.1991.1.1.3.44.1.4.1.1.15
ruckusWebAuthRedirectName
Specifies the name to be used for URL when internal authentication
is used dusring authentication for prompting username/password
from the users, otherwise switch IP address is used. This must be
valid domain name for t…
SNMPv2-TCDisplayString
Textual Convention: SNMPv2-TCDisplayString OctetString
Type Constraints:
range: 0..255
.1.3.6.1.4.1.1991.1.1.3.44.1.4.1.1.16
ruckusWebAuthWebpageRemoveUserId
Specifies if user-id field in custom webauth login page is disabled or not,
default value is disable, i.e., user-id field is displayed
P-BRIDGE-MIBEnabledStatusr/w
Textual Convention: P-BRIDGE-MIBEnabledStatus Enumeration
Type Values:
1enabled
2disabled
.1.3.6.1.4.1.1991.1.1.3.44.1.4.1.1.17
ruckusWebAuthWebpageUsernameLabel
Specifies the name to be used for user-id label in webauth login page
SNMPv2-TCDisplayStringr/w
Textual Convention: SNMPv2-TCDisplayString OctetString
Type Constraints:
range: 0..255
.1.3.6.1.4.1.1991.1.1.3.44.1.4.1.1.18
ruckusWebAuthWebpagePasswordLabel
Specifies the name to be used for password label in webauth login page
SNMPv2-TCDisplayStringr/w
Textual Convention: SNMPv2-TCDisplayString OctetString
Type Constraints:
range: 0..255
.1.3.6.1.4.1.1991.1.1.3.44.1.4.1.1.19
ruckusWebAuthUpLinkPort
Specifies the port to be used as uplink port in network segmentation deployment
IF-MIBInterfaceIndexOrZeror/w
Textual Convention: IF-MIBInterfaceIndexOrZero Integer32
Type Constraints:
range: 0..2147483647
.1.3.6.1.4.1.1991.1.1.3.44.1.4.1.1.20
ruckusWebAuthWebpageTop
Specifies the name to be used for Top of webauth login page
SNMPv2-TCDisplayStringr/w
Textual Convention: SNMPv2-TCDisplayString OctetString
Type Constraints:
range: 0..255
.1.3.6.1.4.1.1991.1.1.3.44.1.4.1.1.21
ruckusWebAuthWebpageBottom
Specifies the name to be used for Bottom of webauth login page
SNMPv2-TCDisplayStringr/w
Textual Convention: SNMPv2-TCDisplayString OctetString
Type Constraints:
range: 0..255
.1.3.6.1.4.1.1991.1.1.3.44.1.4.1.1.22
ruckusWebAuthWebpageTitle
Specifies the name to be used for Title in webauth login page
SNMPv2-TCDisplayStringr/w
Textual Convention: SNMPv2-TCDisplayString OctetString
Type Constraints:
range: 0..255
.1.3.6.1.4.1.1991.1.1.3.44.1.4.1.1.23
ruckusWebAuthWebpageLoginButton
Specifies the name to be used for Login-button in webauth login page
SNMPv2-TCDisplayStringr/w
Textual Convention: SNMPv2-TCDisplayString OctetString
Type Constraints:
range: 0..255
.1.3.6.1.4.1.1991.1.1.3.44.1.4.1.1.24
.1.3.6.1.4.1.1991.1.1.3.44.1.4.2 · 1 row entry · 1 columns
A table that allows configuration of WebAuth Trust
ports which are skipped from authentication in the
given VLAN and are typically uplink ports.
          
An entry exists in this table for every Trust Port
defined on this VLAN.
ruckusWebAuthTrustPortEntry entry .1.3.6.1.4.1.1991.1.1.3.44.1.4.2.1
An entry in WebAuth Trust Port table.
Indexes
ruckusWebAuthVlan ruckusWebAuthTrustPort
Column Syntax OID
ruckusWebAuthTrustPort
Specifies the trusted port or the up-link port, which is
considered secure, so authentication is not performed
on that port.

This port generally provides access to the corporate or
Internet or other netw…
IF-MIBInterfaceIndex
Textual Convention: IF-MIBInterfaceIndex Integer32
Type Constraints:
range: 1..2147483647
.1.3.6.1.4.1.1991.1.1.3.44.1.4.2.1.1
.1.3.6.1.4.1.1991.1.1.3.44.1.4.3 · 1 row entry · 4 columns
A table that allows configuration of WebAuth DNS
filters which are qualified DNS servers and should
be allowed access during authentication for DNS
queries by clients.
          
An entry exists in this table for every DNS filter
defined on this VLAN.
ruckusWebAuthDnsFilterEntry entry .1.3.6.1.4.1.1991.1.1.3.44.1.4.3.1
An entry in WebAuth DNS-Filter table.
Indexes
ruckusWebAuthVlan ruckusWebAuthDnsFilterId
Column Syntax OID
ruckusWebAuthDnsFilterId
An index into the DNS filter table.
SNMPv2-SMIInteger32
Textual Convention: SNMPv2-SMIInteger32 Integer32
Type Constraints:
range: -2147483648..2147483647
.1.3.6.1.4.1.1991.1.1.3.44.1.4.3.1.1
ruckusWebAuthDnsFilterType
The address type of the this filter entry, a V4 or V6 address.
INET-ADDRESS-MIBInetAddressType
Textual Convention: INET-ADDRESS-MIBInetAddressType Enumeration
Type Values:
0unknown
1ipv4
2ipv6
3ipv4z
4ipv6z
16dns
25l2vpn
.1.3.6.1.4.1.1991.1.1.3.44.1.4.3.1.2
ruckusWebAuthDnsFilterAddr
The DNS server address, which is a V4 or V6 address.
INET-ADDRESS-MIBInetAddress
Textual Convention: INET-ADDRESS-MIBInetAddress OctetString
Type Constraints:
range: 0..255
.1.3.6.1.4.1.1991.1.1.3.44.1.4.3.1.3
ruckusWebAuthDnsFilterPrefix
The DNS server server prefix, which applies to V4/V6 addresses.
SNMPv2-SMIUnsigned32
Textual Convention: SNMPv2-SMIUnsigned32 Unsigned32
Type Constraints:
range: 0..4294967295
.1.3.6.1.4.1.1991.1.1.3.44.1.4.3.1.4
.1.3.6.1.4.1.1991.1.1.3.44.1.4.4 · 1 row entry · 4 columns
A table that allows configuration of WebAuth Whitelist
entries which are qualified external servers that should
be allowed access during authentication for various needs
by clients.
          
An entry exists in this table for every Whitelist server
defined on this VLAN.
ruckusWebAuthWhiteListEntry entry .1.3.6.1.4.1.1991.1.1.3.44.1.4.4.1
An entry in WebAuth Whitelist table.
Indexes
ruckusWebAuthVlan ruckusWebAuthWhiteListId
Column Syntax OID
ruckusWebAuthWhiteListId
An index into the White List Server table.
SNMPv2-SMIInteger32
Textual Convention: SNMPv2-SMIInteger32 Integer32
Type Constraints:
range: -2147483648..2147483647
.1.3.6.1.4.1.1991.1.1.3.44.1.4.4.1.1
ruckusWebAuthWhiteListType
The address type of the this whitelist entry, a V4 or V6 or DNS name.
INET-ADDRESS-MIBInetAddressType
Textual Convention: INET-ADDRESS-MIBInetAddressType Enumeration
Type Values:
0unknown
1ipv4
2ipv6
3ipv4z
4ipv6z
16dns
25l2vpn
.1.3.6.1.4.1.1991.1.1.3.44.1.4.4.1.2
ruckusWebAuthWhiteListAddr
The whitelist server address, which is a V4 or V6 address or DNS name.
INET-ADDRESS-MIBInetAddress
Textual Convention: INET-ADDRESS-MIBInetAddress OctetString
Type Constraints:
range: 0..255
.1.3.6.1.4.1.1991.1.1.3.44.1.4.4.1.3
ruckusWebAuthWhiteListPrefix
The whitelist server prefix, which applies to V4/V6 addresses.
SNMPv2-SMIUnsigned32
Textual Convention: SNMPv2-SMIUnsigned32 Unsigned32
Type Constraints:
range: 0..4294967295
.1.3.6.1.4.1.1991.1.1.3.44.1.4.4.1.4
.1.3.6.1.4.1.1991.1.1.3.44.1.4.5 · 1 row entry · 4 columns
A table that allows configuration of WebAuth auth-
filters which are applied to statically authenticate 
the clients without the need for authentication.
          
This comes in for help to permit/deny pre-defined
clients and save time in authentication. An entry
exists in this table for every auth-filter defined 
on this VLAN.
ruckusWebAuthFilterEntry entry .1.3.6.1.4.1.1991.1.1.3.44.1.4.5.1
An entry in WebAuth Auth-Filter table.
Indexes
ruckusWebAuthVlan ruckusWebAuthFilterMac
Column Syntax OID
ruckusWebAuthFilterMac
Specifies the MAC Address of the filter for matching
the authenticating clients through static authentication.
SNMPv2-TCMacAddress
Textual Convention: SNMPv2-TCMacAddress OctetString
Type Constraints:
range: 6
.1.3.6.1.4.1.1991.1.1.3.44.1.4.5.1.1
ruckusWebAuthFilterPort
Specifies the port in the VLAN, where this filter should
be applied. If the port not valid, the entry applies to
all ports in VLAN.
IF-MIBInterfaceIndexOrZero
Textual Convention: IF-MIBInterfaceIndexOrZero Integer32
Type Constraints:
range: 0..2147483647
.1.3.6.1.4.1.1991.1.1.3.44.1.4.5.1.2
ruckusWebAuthFilterDuration
Specifies the time for blocking or allowing the user when
the filter results in authenticating the user (matches).
Value of 0 means, the user is blocked permanently or
allowed permanently.
secondsUnsigned32
Constraints:
range: 0-12800
.1.3.6.1.4.1.1991.1.1.3.44.1.4.5.1.3
ruckusWebAuthFilterAction
Specifies the action to be performed when this filter
is applied on the authenticating client when matching
occurs.

permit(1) - allow the client in specified VLAN
deny(2) - block the client
Enumeration
Enumerated Values:
1permit
2deny
.1.3.6.1.4.1.1991.1.1.3.44.1.4.5.1.4
.1.3.6.1.4.1.1991.1.1.3.44.1.4.6 · 1 row entry · 5 columns
A table that allows configuration of WebAuth Captive
profiles for various external WebAuth servers. 
          
The rntry provides the server information such as
the DNS name or address, port and login page where
the authenticating client should be redirected to.
ruckusWebAuthCaptivePortalEntry entry .1.3.6.1.4.1.1991.1.1.3.44.1.4.6.1
An entry in WebAuth Captive Poratl table.
Indexes
ruckusWebAuthCaptivePortalName
Column Syntax OID
ruckusWebAuthCaptivePortalName
Specifies the name of the profile entry.
OctetString
Constraints:
range: 1-32
.1.3.6.1.4.1.1991.1.1.3.44.1.4.6.1.1
ruckusWebAuthCaptivePortalType
Specifies the Captive server type - qualified name or IP address.
INET-ADDRESS-MIBInetAddressType
Textual Convention: INET-ADDRESS-MIBInetAddressType Enumeration
Type Values:
0unknown
1ipv4
2ipv6
3ipv4z
4ipv6z
16dns
25l2vpn
.1.3.6.1.4.1.1991.1.1.3.44.1.4.6.1.2
ruckusWebAuthCaptivePortalAddr
Specifies the Captive server qualified name or IP address.
INET-ADDRESS-MIBInetAddress
Textual Convention: INET-ADDRESS-MIBInetAddress OctetString
Type Constraints:
range: 0..255
.1.3.6.1.4.1.1991.1.1.3.44.1.4.6.1.3
ruckusWebAuthCaptivePortalPort
Specifies the Captive server port for HTTP/HTTPS access.
SNMPv2-SMIUnsigned32
Textual Convention: SNMPv2-SMIUnsigned32 Unsigned32
Type Constraints:
range: 0..4294967295
.1.3.6.1.4.1.1991.1.1.3.44.1.4.6.1.4
ruckusWebAuthCaptivePortalLoginPage
Specifies the login page of the Captive server, where the client
should be redirected to.
SNMPv2-TCDisplayString
Textual Convention: SNMPv2-TCDisplayString OctetString
Type Constraints:
range: 0..255
.1.3.6.1.4.1.1991.1.1.3.44.1.4.6.1.5
.1.3.6.1.4.1.1991.1.1.3.44.1.5.1 · 1 row entry · 17 columns
A table that allows configuration of FlexAuth, 
including Dot1x and MAC-Auth for a specified port. 
Most objects at the port level oerride the similar 
configured objects at the global level.
          
An entry exists in this table for each configured
with FlexAuth.
ruckusAuthPortEntry entry .1.3.6.1.4.1.1991.1.1.3.44.1.5.1.1
An entry of FlexAuth port configuration.
Indexes
IF-MIBifIndex
Column Syntax OID
ruckusAuthPortEnable
Specifies authentication methods that are enabled on
this port. Unless the method is enabled globally,
the same can't be enabled at port level. A bit field
of '1' indicates enabled, otherwise disabled.
Bits
Enumerated Values:
0dot1x
1macAuth
.1.3.6.1.4.1.1991.1.1.3.44.1.5.1.1.1
ruckusAuthPortDot1xControl
Specifies the Dot1x operating mode for this port,
when Dot1x is enabled.

force-unauthorized(1)- port's controlled port is
placed unconditionally in
the unauthorized state
control-auto(2) - t…
Enumeration
Enumerated Values:
1forceUnauthorized
2controlauto
3forceAuthorized
4other
.1.3.6.1.4.1.1991.1.1.3.44.1.5.1.1.2
ruckusAuthPortDefaultVlan
This default VLAN is used to place this port, so
this VLAN acts as a VLAN for the clients to belong
to, when authentication server doesn't assign any
VLANs.

A value of zero for this object indicates no …
VlanId
Textual Convention: VlanId Integer32
Type Constraints:
range: 0..4094
.1.3.6.1.4.1.1991.1.1.3.44.1.5.1.1.3
ruckusAuthPortVoiceVlan
This voice VLAN is used to advertise through
LLDP/CDP on this port, when connected devices are
detected as Phones and authentication server doesn't
assign any Voice VLAN.

A value of zero for this object i…
VlanId
Textual Convention: VlanId Integer32
Type Constraints:
range: 0..4094
.1.3.6.1.4.1.1991.1.1.3.44.1.5.1.1.4
ruckusAuthPortCriticalVlan
This VLAN is used to place the clients of this port,
when the authentication server times out and the
port auth-timeout-action is configired as
'critical', so the clients have limited access.

Refer to …
VlanId
Textual Convention: VlanId Integer32
Type Constraints:
range: 0..4094
.1.3.6.1.4.1.1991.1.1.3.44.1.5.1.1.5
ruckusAuthPortRestrictVlan
This VLAN is used to place the clients of this port,
when the clients fail the authentication and the
auth-failure-action is configured as 'restrict', so
the clients have limited access.

Refer to ruckusAu…
VlanId
Textual Convention: VlanId Integer32
Type Constraints:
range: 0..4094
.1.3.6.1.4.1.1991.1.1.3.44.1.5.1.1.6
ruckusAuthPortMode
Specifies the authentication mode for this port.
This overrides the globally configured value.
RuckusAuthMode
Textual Convention: RuckusAuthMode Enumeration
Type Values:
1singleUntagged
2multipleUntagged
3singleHost
4multipleHosts
.1.3.6.1.4.1.1991.1.1.3.44.1.5.1.1.7
ruckusAuthPortMethods
Specifies authentication methods to be attempted in
series of methods for this port. This overrides the
globally configured value.
RuckusAuthOrder
Textual Convention: RuckusAuthOrder Enumeration
Type Values:
1dot1xMauth
2mauthDot1x
.1.3.6.1.4.1.1991.1.1.3.44.1.5.1.1.8
ruckusAuthPortMaxSessions
Specifies the maximum number of authenticated
clients allowed on this port. This doesn't include
the clients allowed due to authentication failure
and timeout policies.
Unsigned32
Constraints:
range: 1-1024
.1.3.6.1.4.1.1991.1.1.3.44.1.5.1.1.9
ruckusAuthPortFailAction
Specifies the action to be taken on this port. This
overrides the globally set value.
RuckusAuthFailAction
Textual Convention: RuckusAuthFailAction Enumeration
Type Values:
1blockTraffic
2restrictVlan
.1.3.6.1.4.1.1991.1.1.3.44.1.5.1.1.10
ruckusAuthPortTimeoutAction
Specifies the action to be taken on this port, when
the authentication server times out for various
readons like server busy, network access, etc. This
overrides the globally set value.
RuckusAuthTimeoutAction
Textual Convention: RuckusAuthTimeoutAction Enumeration
Type Values:
1failure
2success
3criticalVlan
4other
.1.3.6.1.4.1.1991.1.1.3.44.1.5.1.1.11
ruckusAuthPortReauthTimeout
How often to re-authenticates clients of this port,
when the clients were allowed due to authentication
server timeout. Value of 0 disables the
re-authentication.
secondsUnsigned32
Constraints:
range: 1-4294967295
.1.3.6.1.4.1.1991.1.1.3.44.1.5.1.1.12
ruckusAuthPortAging
Specifies, if denied and permitted sessions are
enabled or disabled for aging on this port. This
overrided the global value.
RuckusAuthAging
Textual Convention: RuckusAuthAging Bits
Type Values:
0deniedSessions
1permittedSessions
.1.3.6.1.4.1.1991.1.1.3.44.1.5.1.1.13
ruckusAuthPortAllowTagged
Specifies, if denied and permitted sessions are
enabled or disabled for aging on this port. A bit
field of '1' indicates enabled, otherwise disabled.
P-BRIDGE-MIBEnabledStatus
Textual Convention: P-BRIDGE-MIBEnabledStatus Enumeration
Type Values:
1enabled
2disabled
.1.3.6.1.4.1.1991.1.1.3.44.1.5.1.1.14
ruckusAuthPortSourceGuard
Source guard enabling ensures that the client IP
address to be learned and allow the packets matching
that IP address only. This is implied when user ACLs
are applied on the port, so has impact only
otherwise.
P-BRIDGE-MIBEnabledStatus
Textual Convention: P-BRIDGE-MIBEnabledStatus Enumeration
Type Values:
1enabled
2disabled
.1.3.6.1.4.1.1991.1.1.3.44.1.5.1.1.15
ruckusAuthPortDosAttacks
Specifies to prevent/allow Denial of Service attacks
on this port. Constantly sending packets from
different clients (MAC addresses) causes DOS, as the
clients are not allowed without authentication,
which may cause exh…
P-BRIDGE-MIBEnabledStatus
Textual Convention: P-BRIDGE-MIBEnabledStatus Enumeration
Type Values:
1enabled
2disabled
.1.3.6.1.4.1.1991.1.1.3.44.1.5.1.1.16
ruckusAuthPortDosAttackLimit
The maximum number of clients to be allowed at any
time without authentication, and if authentication
pending clients exceed the configured limit (as
specified by this object), the port gets shutdown to
prevent DOS atta…
Unsigned32
Constraints:
range: 1-65535
.1.3.6.1.4.1.1991.1.1.3.44.1.5.1.1.17
.1.3.6.1.4.1.1991.1.1.3.44.1.6.1 · 1 row entry · 5 columns
A table that allows configuration of FlexAuth auth-
filters which are applied to statically authenticate 
the clients without the need for RADIUS server
authenticator.
          
This comes in for help to permit/deny pre-defined
clients and save time in authentication. An entry
exists in this table for every auth-filter bound 
on the port.
ruckusAuthFilterEntry entry .1.3.6.1.4.1.1991.1.1.3.44.1.6.1.1
An entry of FlexAuth port Auth-Filter configuration.
Indexes
IF-MIBifIndex ruckusAuthFilterId
Column Syntax OID
ruckusAuthFilterId
An index into the authe filter table.
SNMPv2-SMIInteger32
Textual Convention: SNMPv2-SMIInteger32 Integer32
Type Constraints:
range: -2147483648..2147483647
.1.3.6.1.4.1.1991.1.1.3.44.1.6.1.1.1
ruckusAuthFilterMac
Specifies the MAC Address of the filter for matching
the authenticating clients through static authentication.
SNMPv2-TCMacAddress
Textual Convention: SNMPv2-TCMacAddress OctetString
Type Constraints:
range: 6
.1.3.6.1.4.1.1991.1.1.3.44.1.6.1.1.2
ruckusAuthFilterMask
Specifies the Mask of the filter for matching the
incoming clients through static authentication. The mask
is applied on MAC in the filter and client MAC before the
matching decision is made.
SNMPv2-TCMacAddress
Textual Convention: SNMPv2-TCMacAddress OctetString
Type Constraints:
range: 6
.1.3.6.1.4.1.1991.1.1.3.44.1.6.1.1.3
ruckusAuthFilterVlan
Specifies the VLAN which should be used to place the
authenticating client after the matching is done. This
VLAN applies only when the action is permit. Denied
clients are always blocked.
VlanId
Textual Convention: VlanId Integer32
Type Constraints:
range: 0..4094
.1.3.6.1.4.1.1991.1.1.3.44.1.6.1.1.4
ruckusAuthFilterAction
Specifies the action to be performed when this filter
is applied on the authenticating client and matching
occurs.

permit(1) - allow the client in specified VLAN
deny(2) - block the client
Enumeration
Enumerated Values:
1permit
2deny
.1.3.6.1.4.1.1991.1.1.3.44.1.6.1.1.5
.1.3.6.1.4.1.1991.1.1.3.44.1.7.1 · 1 row entry · 25 columns
A table providing information about the FlexAuth
sessions for each client at port level in the
Ruckus device.
          
This table contains entries for all the clients
authenticated or failed on a given port.
          
Entries get created when clients are authenticated
amd cleared when they logoff or timeout.
ruckusAuthSessionEntry entry .1.3.6.1.4.1.1991.1.1.3.44.1.7.1.1
An entry containing information about the FlexAuth
session of a specified client on a port
Indexes
IF-MIBifIndex ruckusAuthSessionMac
Column Syntax OID
ruckusAuthSessionMac
Specifies the MAC Address of the client
(device/host) represented by this session entry
SNMPv2-TCMacAddress
Textual Convention: SNMPv2-TCMacAddress OctetString
Type Constraints:
range: 6
.1.3.6.1.4.1.1991.1.1.3.44.1.7.1.1.1
ruckusAuthSessionVlan
Specifies the VLAN, the client (device/host) belongs
to, represented by this session entry.

In case of voice-phones, this VLAN is the voice-VLAN
(tagged) and in all other cases, most likely an
untagged VL…
VlanId
Textual Convention: VlanId Integer32
Type Constraints:
range: 0..4094
.1.3.6.1.4.1.1991.1.1.3.44.1.7.1.1.2
ruckusAuthSessionVlanType
Decribes the type of the VLAN associated with the session.

default(1) - Default VLANs as configured on Ruckus device
restrict(2) - Restricted VLAN as authentication failed
critical(3) - Critical VLAN as …
Enumeration
Enumerated Values:
1default
2retrict
3critical
4guest
5radius
.1.3.6.1.4.1.1991.1.1.3.44.1.7.1.1.3
ruckusAuthSessionTaggedVlan
Tagged VLAN or Voice VLAN sent by the RADIUS server, so
the port gets added to the VLAN, to prepare the device
to send tagged packets in case of phones.
VlanId
Textual Convention: VlanId Integer32
Type Constraints:
range: 0..4094
.1.3.6.1.4.1.1991.1.1.3.44.1.7.1.1.4
ruckusAuthSessionUserName
Indicates the User name associated with the client,
represented by this session.

In case of Dot1x sessions, it's the username used by
the user to log into the network; whereas in case of
MAC-Auth, it cou…
SNMPv2-TCDisplayString
Textual Convention: SNMPv2-TCDisplayString OctetString
Type Constraints:
range: 0..255
.1.3.6.1.4.1.1991.1.1.3.44.1.7.1.1.5
ruckusAuthSessionDeviceType
Decribes the type of the client connnected and
authenticated on this port.
Enumeration
Enumerated Values:
1phone
2wlanAP
3router
4bridge
8other
.1.3.6.1.4.1.1991.1.1.3.44.1.7.1.1.6
ruckusAuthSessionMethod
Specifies the authentication method that is used for
authenticating the client on this port represented
by this session.

It's possible that both authentication methods are
tried, both either succeeded or …
Enumeration
Enumerated Values:
1dot1x
2macAuth
.1.3.6.1.4.1.1991.1.1.3.44.1.7.1.1.7
ruckusAuthSessionMode
Indicates the authentication mode applied for this
client on this port.
RuckusAuthMode
Textual Convention: RuckusAuthMode Enumeration
Type Values:
1singleUntagged
2multipleUntagged
3singleHost
4multipleHosts
.1.3.6.1.4.1.1991.1.1.3.44.1.7.1.1.8
ruckusAuthSessionStatus
The authentication state of the session which can
take the following values.

allowed - client authentication is successful, so
the complete access is granted
blocked - client failed authentication, so…
Enumeration
Enumerated Values:
1allowed
2blocked
3restrict
4critical
5guest
6other
.1.3.6.1.4.1.1991.1.1.3.44.1.7.1.1.9
ruckusAuthSessionDot1xStatus
Indicates the state of Dot1x authentication, if the
client is using Dot1x for authentication.
Dot1xAuthState
Textual Convention: Dot1xAuthState Enumeration
Type Values:
1other
2initialize
3disconnected
4connecting
5authenticating
6authenticated
7aborting
8held
9forceAuth
10forceUnauth
.1.3.6.1.4.1.1991.1.1.3.44.1.7.1.1.10
ruckusAuthSessionAgingType
Indicates the aging status of the client session
which can be of the following values.

software(1):
Client MAC entry is cleared as the entry
timedout in hardware for configured inactivity
period, so it…
Enumeration
Enumerated Values:
1software
2hardware
3enabled
4disabled
.1.3.6.1.4.1.1991.1.1.3.44.1.7.1.1.11
ruckusAuthSessionAge
When the aging type is either software or hardware,
this object indicates the time, the session had been
in that state. When the configured maximum time is
reached, the aging state moves from hardware to
software or s…
secondsSNMPv2-SMIUnsigned32
Textual Convention: SNMPv2-SMIUnsigned32 Unsigned32
Type Constraints:
range: 0..4294967295
.1.3.6.1.4.1.1991.1.1.3.44.1.7.1.1.12
ruckusAuthSessionTimeout
Specifies the maximum amount of time, the session
should exit before re-authenticating or terminating
the sessions depending on another RADIUS attribute
'Termination-Action'.
secondsSNMPv2-SMIUnsigned32
Textual Convention: SNMPv2-SMIUnsigned32 Unsigned32
Type Constraints:
range: 0..4294967295
.1.3.6.1.4.1.1991.1.1.3.44.1.7.1.1.13
ruckusAuthSessionIdleTimeout
Specifies the maximum amount of time after which the
session is cleared when there is no traffic from the
client. A value of 0 means, the sessions never gets
terminated due to inactivity.
secondsSNMPv2-SMIUnsigned32
Textual Convention: SNMPv2-SMIUnsigned32 Unsigned32
Type Constraints:
range: 0..4294967295
.1.3.6.1.4.1.1991.1.1.3.44.1.7.1.1.14
ruckusAuthSessionTime
Indcates the session UP time since the session had
been up or created.
secondsSNMPv2-SMIUnsigned32
Textual Convention: SNMPv2-SMIUnsigned32 Unsigned32
Type Constraints:
range: 0..4294967295
.1.3.6.1.4.1.1991.1.1.3.44.1.7.1.1.15
ruckusAuthSessionV4IngressAcl
Specifies the User Access List (ACL) applied in the
Ingress direction for the IPv4 traffic for this
client on this port.
SNMPv2-TCDisplayString
Textual Convention: SNMPv2-TCDisplayString OctetString
Type Constraints:
range: 0..255
.1.3.6.1.4.1.1991.1.1.3.44.1.7.1.1.16
ruckusAuthSessionV4EgressAcl
Specifies the User Access List (ACL) applied in the
Egress direction for the IPv4 traffic for this
client on this port.
SNMPv2-TCDisplayString
Textual Convention: SNMPv2-TCDisplayString OctetString
Type Constraints:
range: 0..255
.1.3.6.1.4.1.1991.1.1.3.44.1.7.1.1.17
ruckusAuthSessionV6IngressAcl
Specifies the User Access List (ACL) applied in the
Ingress direction for the IPv6 traffic for this
client on this port.
SNMPv2-TCDisplayString
Textual Convention: SNMPv2-TCDisplayString OctetString
Type Constraints:
range: 0..255
.1.3.6.1.4.1.1991.1.1.3.44.1.7.1.1.18
ruckusAuthSessionV6EgressAcl
Specifies the User Access List (ACL) applied in the
Egress direction for the IPv6 traffic for this
client on this port.
SNMPv2-TCDisplayString
Textual Convention: SNMPv2-TCDisplayString OctetString
Type Constraints:
range: 0..255
.1.3.6.1.4.1.1991.1.1.3.44.1.7.1.1.19
ruckusAuthSessionTxOctets
Specifies the number bytes sent for this session on the port.
SNMPv2-SMICounter64
Textual Convention: SNMPv2-SMICounter64 Unsigned64
Type Constraints:
range: 0..18446744073709551615
.1.3.6.1.4.1.1991.1.1.3.44.1.7.1.1.20
ruckusAuthSessionRxOctets
Specifies the number bytes received for this session on the port.
SNMPv2-SMICounter64
Textual Convention: SNMPv2-SMICounter64 Unsigned64
Type Constraints:
range: 0..18446744073709551615
.1.3.6.1.4.1.1991.1.1.3.44.1.7.1.1.21
ruckusAuthSessionTxPkts
Specifies the number bytes sent for this session on the port.
SNMPv2-SMICounter64
Textual Convention: SNMPv2-SMICounter64 Unsigned64
Type Constraints:
range: 0..18446744073709551615
.1.3.6.1.4.1.1991.1.1.3.44.1.7.1.1.22
ruckusAuthSessionRxPkts
Specifies the number bytes received for this session on the port.
SNMPv2-SMICounter64
Textual Convention: SNMPv2-SMICounter64 Unsigned64
Type Constraints:
range: 0..18446744073709551615
.1.3.6.1.4.1.1991.1.1.3.44.1.7.1.1.23
ruckusAuthSessionFailureReason
Specifies the internal failure reason for this
client, such as memory allocation, RADIUS attribute
parsing, RADIUS REJECT, etc.
SNMPv2-TCDisplayString
Textual Convention: SNMPv2-TCDisplayString OctetString
Type Constraints:
range: 0..255
.1.3.6.1.4.1.1991.1.1.3.44.1.7.1.1.24
ruckusAuthSessionFlags
Desacribes various other parameters of client
session, by clubbing them together in one object for
simplicity.

staticAuthenticated(0):
Client is authenticaticated using configured
auth-fileters on the p…
Bits
Enumerated Values:
0staticAuthenticated
1taggedSession
2dot1xNonCapable
3dot1xEnabled
4masterMacAuth
5v4AclApplied
6v6AclApplied
.1.3.6.1.4.1.1991.1.1.3.44.1.7.1.1.25
.1.3.6.1.4.1.1991.1.1.3.44.1.7.2 · 1 row entry · 3 columns
An address table providing V4/V6 information about
the FlexAuth sessions for each client at port level
in the Ruckus device.
ruckusAuthSessionAddrEntry entry .1.3.6.1.4.1.1991.1.1.3.44.1.7.2.1
An entry containing information about the FlexAuth
session address of a specified client on a port
Indexes
IF-MIBifIndex ruckusAuthSessionMac ruckusAuthSessionAddrId
Column Syntax OID
ruckusAuthSessionAddrId
An index into the White List Server table.
SNMPv2-SMIInteger32
Textual Convention: SNMPv2-SMIInteger32 Integer32
Type Constraints:
range: -2147483648..2147483647
.1.3.6.1.4.1.1991.1.1.3.44.1.7.2.1.1
ruckusAuthSessionAddrType
The address type of the this address entry, a V4 or V6.
INET-ADDRESS-MIBInetAddressType
Textual Convention: INET-ADDRESS-MIBInetAddressType Enumeration
Type Values:
0unknown
1ipv4
2ipv6
3ipv4z
4ipv6z
16dns
25l2vpn
.1.3.6.1.4.1.1991.1.1.3.44.1.7.2.1.2
ruckusAuthSessionAddr
The address of this session entry, which is a V4 or V6 address.
INET-ADDRESS-MIBInetAddress
Textual Convention: INET-ADDRESS-MIBInetAddress OctetString
Type Constraints:
range: 0..255
.1.3.6.1.4.1.1991.1.1.3.44.1.7.2.1.3
.1.3.6.1.4.1.1991.1.1.3.44.1.8.1 · 1 row entry · 10 columns
A table that provides information about the summary
of MAC-Auth and Dot1x sessions at port level.
          
An entry exists in this table for every port enabled
for FlexAuth.
ruckusAuthStatsEntry entry .1.3.6.1.4.1.1991.1.1.3.44.1.8.1.1
An entry of port level FlexAuth session summary
table.
Indexes
IF-MIBifIndex
Column Syntax OID
ruckusDot1xSessionsAttempted
The number of Dot1x sessions attempted on this port,
since the time the stats were cleared.
SNMPv2-SMICounter32
Textual Convention: SNMPv2-SMICounter32 Unsigned32
Type Constraints:
range: 0..4294967295
.1.3.6.1.4.1.1991.1.1.3.44.1.8.1.1.1
ruckusDot1xSessionsAccepted
The number of Dot1x sessions accepted or permited on
this port, since the time the stats were cleared.
SNMPv2-SMICounter32
Textual Convention: SNMPv2-SMICounter32 Unsigned32
Type Constraints:
range: 0..4294967295
.1.3.6.1.4.1.1991.1.1.3.44.1.8.1.1.2
ruckusDot1xSessionsRejected
The number of Dot1x sessions failed or rejected on
this port, since the time the stats were cleared.
SNMPv2-SMICounter32
Textual Convention: SNMPv2-SMICounter32 Unsigned32
Type Constraints:
range: 0..4294967295
.1.3.6.1.4.1.1991.1.1.3.44.1.8.1.1.3
ruckusDot1xSessionsInProgress
The number of Dot1x sessions which are in progress
on this port waiting for authentication to be
completed, since the time the stats were cleared.
SNMPv2-SMICounter32
Textual Convention: SNMPv2-SMICounter32 Unsigned32
Type Constraints:
range: 0..4294967295
.1.3.6.1.4.1.1991.1.1.3.44.1.8.1.1.4
ruckusDot1xSessionsErrored
The number of Dot1x sessions which are neither
accepted or rejected due to conditions like timeout,
resource failure, etc; on this port, since the time
the stats were cleared.
SNMPv2-SMICounter32
Textual Convention: SNMPv2-SMICounter32 Unsigned32
Type Constraints:
range: 0..4294967295
.1.3.6.1.4.1.1991.1.1.3.44.1.8.1.1.5
ruckusMacAuthSessionsAttempted
The number of MAC-Auth sessions attempted on this
port, since the time the stats were cleared.
SNMPv2-SMICounter32
Textual Convention: SNMPv2-SMICounter32 Unsigned32
Type Constraints:
range: 0..4294967295
.1.3.6.1.4.1.1991.1.1.3.44.1.8.1.1.6
ruckusMacAuthSessionsAccepted
The number of MAC-Auth sessions accepted or permited
on this port, since the time the stats were cleared
SNMPv2-SMICounter32
Textual Convention: SNMPv2-SMICounter32 Unsigned32
Type Constraints:
range: 0..4294967295
.1.3.6.1.4.1.1991.1.1.3.44.1.8.1.1.7
ruckusMacAuthSessionsRejected
The number of MAC-Auth sessions failed or rejected
on this port, since the time the stats were cleared
SNMPv2-SMICounter32
Textual Convention: SNMPv2-SMICounter32 Unsigned32
Type Constraints:
range: 0..4294967295
.1.3.6.1.4.1.1991.1.1.3.44.1.8.1.1.8
ruckusMacAuthSessionsInProgress
The number of MAC-Auth sessions which are in
progress on this port waiting for authentication to
be completed, since the time the stats were cleared
SNMPv2-SMICounter32
Textual Convention: SNMPv2-SMICounter32 Unsigned32
Type Constraints:
range: 0..4294967295
.1.3.6.1.4.1.1991.1.1.3.44.1.8.1.1.9
ruckusMacAuthSessionsErrored
The number of MAC-Auth sessions which are neither
accepted or rejected due to conditions like timeout,
resource failure, etc; on this port, since the time
the stats were cleared.
SNMPv2-SMICounter32
Textual Convention: SNMPv2-SMICounter32 Unsigned32
Type Constraints:
range: 0..4294967295
.1.3.6.1.4.1.1991.1.1.3.44.1.8.1.1.10
.1.3.6.1.4.1.1991.1.1.3.44.1.8.2 · 1 row entry · 12 columns
A table that provides information about the Dot1x
Statistics at port level.
          
An entry exists in this table for every port enabled
for Dot1x.
ruckusDot1xAuthStatsEntry entry .1.3.6.1.4.1.1991.1.1.3.44.1.8.2.1
An entry of per port Dot1x statistics table.
Indexes
IF-MIBifIndex
Column Syntax OID
ruckusDot1xTxEAPFrames
The total number of EAPOL frames transmitted on this
port
SNMPv2-SMICounter32
Textual Convention: SNMPv2-SMICounter32 Unsigned32
Type Constraints:
range: 0..4294967295
.1.3.6.1.4.1.1991.1.1.3.44.1.8.2.1.1
ruckusDot1xTxEAPReqIdFrames
The number of EAP-Request/Identity frames
transmitted on this port
SNMPv2-SMICounter32
Textual Convention: SNMPv2-SMICounter32 Unsigned32
Type Constraints:
range: 0..4294967295
.1.3.6.1.4.1.1991.1.1.3.44.1.8.2.1.2
ruckusDot1xTxEAPReqFrames
The number of transmitted EAP request frames that
are not EAP-Request/identify on this port
SNMPv2-SMICounter32
Textual Convention: SNMPv2-SMICounter32 Unsigned32
Type Constraints:
range: 0..4294967295
.1.3.6.1.4.1.1991.1.1.3.44.1.8.2.1.3
ruckusDot1xRxEAPFrames
The total number of EAPOL frames received on this
port
SNMPv2-SMICounter32
Textual Convention: SNMPv2-SMICounter32 Unsigned32
Type Constraints:
range: 0..4294967295
.1.3.6.1.4.1.1991.1.1.3.44.1.8.2.1.4
ruckusDot1xRxEAPStartFrames
The number of EAPOL-Start frames received on this
port
SNMPv2-SMICounter32
Textual Convention: SNMPv2-SMICounter32 Unsigned32
Type Constraints:
range: 0..4294967295
.1.3.6.1.4.1.1991.1.1.3.44.1.8.2.1.5
ruckusDot1xRxEAPLogOffFrames
The number of EAPOL-Logoff frames received on this
port
SNMPv2-SMICounter32
Textual Convention: SNMPv2-SMICounter32 Unsigned32
Type Constraints:
range: 0..4294967295
.1.3.6.1.4.1.1991.1.1.3.44.1.8.2.1.6
ruckusDot1xRxEAPRespIdFrames
The number of EAP-Response/Identify frames received
on this port
SNMPv2-SMICounter32
Textual Convention: SNMPv2-SMICounter32 Unsigned32
Type Constraints:
range: 0..4294967295
.1.3.6.1.4.1.1991.1.1.3.44.1.8.2.1.7
ruckusDot1xRxEAPRespFrames
The number of received EAP-Response frames other
than EAP-Response/Identity on this port
SNMPv2-SMICounter32
Textual Convention: SNMPv2-SMICounter32 Unsigned32
Type Constraints:
range: 0..4294967295
.1.3.6.1.4.1.1991.1.1.3.44.1.8.2.1.8
ruckusDot1xRxEAPInvalidFrames
The number of invalid EAPOL frames received on this
port
SNMPv2-SMICounter32
Textual Convention: SNMPv2-SMICounter32 Unsigned32
Type Constraints:
range: 0..4294967295
.1.3.6.1.4.1.1991.1.1.3.44.1.8.2.1.9
ruckusDot1xRxLengthErrorFrames
The number of EAPOL frames received with incorrect
length on this port
SNMPv2-SMIInteger32
Textual Convention: SNMPv2-SMIInteger32 Integer32
Type Constraints:
range: -2147483648..2147483647
.1.3.6.1.4.1.1991.1.1.3.44.1.8.2.1.10
ruckusDot1xRxEAPLastFrameVersion
The version of last EAP frame received on this port
SNMPv2-SMIUnsigned32
Textual Convention: SNMPv2-SMIUnsigned32 Unsigned32
Type Constraints:
range: 0..4294967295
.1.3.6.1.4.1.1991.1.1.3.44.1.8.2.1.11
ruckusDot1xRxEAPLastFrameSource
The MAC address of the source from where the last
EAP frame received on this port
SNMPv2-TCMacAddress
Textual Convention: SNMPv2-TCMacAddress OctetString
Type Constraints:
range: 6
.1.3.6.1.4.1.1991.1.1.3.44.1.8.2.1.12