h3cSecureRalmAuthMode
H3C-PORT-SECURITY-MIB ·
.1.3.6.1.4.1.2011.10.2.26.1.1.4.4
Object
scalar
r/w
Enumeration
This controls how MAC addresses are authenticated.
papUsernameAsMacAddress(1)
Authentication uses the RADIUS server by
sending a PAP request with Username and
Password both equal to the MAC address being
authenticated. This is the default.
papUsernameFixed(2)
Authentication uses the RADIUS server by
sending a PAP request with Username and
Password coming from the h3cSecureRalmAuthUsername and
h3cSecureRalmAuthPassword MIB objects. In this mode
the RADIUS server would normally take into account
the request's calling-station-id attribute, which is
the MAC address of the host being authenticated.
Context
- MIB
- H3C-PORT-SECURITY-MIB
- OID
.1.3.6.1.4.1.2011.10.2.26.1.1.4.4- Type
- scalar
- Access
- readwrite
- Status
- current
- Parent
- h3cSecureRalmObjects
- Siblings
- 9
Syntax
Enumeration
Values & Constraints
Enumerated Values
1 | papUsernameAsMacAddress |
2 | papUsernameFixed |
Related Objects
Sibling Objects
| Object | Type | Syntax | OID |
|---|---|---|---|
| h3cSecureRalmDefaultSessionTime Specifies the default session lifetime in seconds before
a forwarding MAC address is re-authenticated.
The default time is 1800 seconds. | scalar | Integer32 | .1.3.6.1.4.1.2011.10.2.26.1.1.4.1 |
| h3cSecureMacControl This attribute controls the system wide operation of
mac-authentication. The system-wide mac-authentication options
become non-operational when this attribute is set to disabled.… | scalar | Enumeration | .1.3.6.1.4.1.2011.10.2.26.1.1.4.10 |
| h3cSecureRalmHoldoffTime Specifies the time in seconds before
a blocked (denied) MAC address can be re-authenticated.
The default time is 60 seconds. | scalar | Integer32 | .1.3.6.1.4.1.2011.10.2.26.1.1.4.2 |
| h3cSecureRalmReauthenticate Writing a MAC address to this object causes an
immediate RALM re-authentication of this address (can be on
any port). If the MAC address not currently known to RALM,
it silently … | scalar | SNMPv2-TCMacAddress | .1.3.6.1.4.1.2011.10.2.26.1.1.4.3 |
| h3cSecureRalmAuthUsername This is the username used for authentication requests
where h3cSecureRalmAuthMode is papUsernameFixed.
Default shall be 'mac'. | scalar | OctetString | .1.3.6.1.4.1.2011.10.2.26.1.1.4.5 |
| h3cSecureRalmAuthPassword This is the password used for authentication requests
where h3cSecureRalmAuthMode is papUsernameFixed.
Default shall be a null string. | scalar | OctetString | .1.3.6.1.4.1.2011.10.2.26.1.1.4.6 |
| h3cSecureRalmAuthDomain MAC-authentication users may be configured in a specific domain,
which excludes 802.1x and other authentication users. This
specifies the domain of all MAC-authentication users. | scalar | OctetString | .1.3.6.1.4.1.2011.10.2.26.1.1.4.7 |
| h3cSecureRalmAuthOfflineTime Switch isn't informed when online user is offline,
so switch should be able to detect offline and inform radius
server to stop accounting when there is no traffic of the user.
Thi… | scalar | Integer32 | .1.3.6.1.4.1.2011.10.2.26.1.1.4.8 |
| h3cSecureRalmAuthServerTimeoutTime When switch sends request packets (include connecting
request and offline request, etc) to radius server and
there is no response, switch will terminate the authentication
process… | scalar | Integer32 | .1.3.6.1.4.1.2011.10.2.26.1.1.4.9 |