graham/towerops
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions
towerops/priv/mibs/transition/TN-NAS-MIB
Graham McIntire b4f8b40b7f
Include MIB files in Docker image instead of using PVC 
- Remove PVC volume mount from k8s/deployment.yaml
- Delete k8s/mib-pvc.yaml (no longer needed)
- Update .gitignore to commit MIB files to git
- Add mix import_mibs task to copy MIBs from LibreNMS
- Add all MIB files from priv/mibs/ to git

This fixes the multi-attach volume error in Kubernetes where new pods
couldn't start because the RWO (ReadWriteOnce) PVC was attached to the
old pod. MIBs are now part of the Docker image and can be used by all
pods simultaneously.
2026-01-19 14:01:03 -06:00

867 lines
35 KiB
Text
Raw Blame History

-- *****************************************************************
-- TN-NAS-MIB.mib : TN Network Access Service MIB
--
-- Copyright (c) 2013 by Transition Networks, Inc.
-- All rights reserved.
--
-- *************************************************************************************************
--
TN-NAS-MIB DEFINITIONS ::= BEGIN
IMPORTS
MODULE-IDENTITY,
NOTIFICATION-TYPE,
OBJECT-TYPE,
Unsigned32,
Gauge32,
TimeTicks
FROM SNMPv2-SMI
MODULE-COMPLIANCE,
OBJECT-GROUP,
NOTIFICATION-GROUP
FROM SNMPv2-CONF
RowStatus,TruthValue,
MacAddress,
DisplayString
FROM SNMPv2-TC -- [RFC2579]
VlanId
FROM Q-BRIDGE-MIB
tnProducts
FROM TRANSITION-SMI;
TnNASAdminStateType ::= TEXTUAL-CONVENTION
STATUS current
DESCRIPTION
"Indicates the type of network access server admin state type.
"
SYNTAX INTEGER {
forceAuthorized (1),
portBased802dot1x (2),
forceUnauthorized (3),
macBasedAuth (4),
single802dot1x (5),
multi802dot1x (6)
}
--
-- main body
--
tnNASMIB MODULE-IDENTITY
LAST-UPDATED "201204051930Z"
ORGANIZATION "Transition Networks, Inc."
CONTACT-INFO
"Transition Networks
Technical Support
10900 Red Circle Drive
Minnetonka, MN 55343 USA
Tel: +1-800-526-9267
E-mail: techsupport@transition.com
"
DESCRIPTION
"TBD"
REVISION "201204200000Z"
DESCRIPTION
"Initial version of this MIB module."
::= { tnProducts 125 }
tnNASMIBNotifications OBJECT IDENTIFIER ::= { tnNASMIB 0 }
tnNASMIBObjects OBJECT IDENTIFIER ::= { tnNASMIB 1 }
tnNASMIBConformance OBJECT IDENTIFIER ::= { tnNASMIB 2 }
--
-- sub Objects list
--
tnNASSysMgmt OBJECT IDENTIFIER ::= { tnNASMIBObjects 1 }
tnNASPortMgmt OBJECT IDENTIFIER ::= { tnNASMIBObjects 2 }
tnNASAuthCountMgmt OBJECT IDENTIFIER ::= { tnNASMIBObjects 3 }
tnNASPortStatus OBJECT IDENTIFIER ::= { tnNASMIBObjects 4 }
tnNASClientStatus OBJECT IDENTIFIER ::= { tnNASMIBObjects 5 }
tnNASSelectedBackendServerCounter OBJECT IDENTIFIER ::= { tnNASMIBObjects 6 }
tnNASSelectedEapolCounter OBJECT IDENTIFIER ::= { tnNASMIBObjects 7 }
tnNASAttachedClientStatus OBJECT IDENTIFIER ::= { tnNASMIBObjects 8 }
tnNASClearCounter OBJECT IDENTIFIER ::= { tnNASMIBObjects 9 }
-- ******************************************************************
-- system configuration
-- ******************************************************************
tnNASSysReAuthEnabled OBJECT-TYPE
SYNTAX INTEGER{
enable (1),
disable (2)
}
MAX-ACCESS read-write
STATUS current
DESCRIPTION
"If checked, successfully authenticated supplicants/clients are reauthenticated after the interval specified by
the Reauthentication Period.Reauthentication for 802.1X-enabled ports can be used to detect if a new device is plugged into
a switch port or if a supplicant is no longer attached.
For MAC-based ports, reauthentication is only useful if the RADIUS server configuration has changed.
It does not involve communication between the switch and the client, and therefore doesn't imply that a client is still present on a port.
"
::= { tnNASSysMgmt 1 }
tnNASSysReAuthPeriod OBJECT-TYPE
SYNTAX INTEGER(1..3600)
MAX-ACCESS read-write
STATUS current
DESCRIPTION
"Determines the period, in seconds, after which a connected client must be reauthenticated.
This is only active if the Reauthentication Enabled checkbox is checked. Valid values are in the range 1 to 3600 seconds.
"
::= { tnNASSysMgmt 2 }
tnNASSysEAPOLTimeout OBJECT-TYPE
SYNTAX INTEGER(1..65535)
MAX-ACCESS read-write
STATUS current
DESCRIPTION
"Determines the time for retransmission of Request Identity EAPOL frames.
Valid values are in the range 1 to 65535 seconds. This has no effect for MAC-based ports..
"
::= { tnNASSysMgmt 3 }
tnNASSysAgingPeriod OBJECT-TYPE
SYNTAX Unsigned32(10..1000000)
MAX-ACCESS read-write
STATUS current
DESCRIPTION
"This setting applies to the following modes, i.e. modes using the Port Security functionality to secure MAC addresses:
Single 802.1X, Multi 802.1X, MAC-Based Auth.
When the NAS module uses the Port Security module to secure MAC addresses, the Port Security module needs to
check for activity on the MAC address in question at regular intervals and free resources if no activity is seen within
a given period of time. This parameter controls exactly this period and can be set to a number between 10 and 1000000 seconds.
If reauthentication is enabled and the port is in an 802.1X-based mode, this is not so critical, since supplicants that are
no longer attached to the port will get removed upon the next reauthentication, which will fail. But if reauthentication is not enabled,
the only way to free resources is by aging the entries.
For ports in MAC-based Auth. mode, reauthentication doesn't cause direct communication between the switch and the client,
so this will not detect whether the client is still attached or not, and the only way to free any resources is to age the entry..
"
::= { tnNASSysMgmt 4 }
tnNASSysHoldTime OBJECT-TYPE
SYNTAX Unsigned32(10..1000000)
MAX-ACCESS read-write
STATUS current
DESCRIPTION
"This setting applies to the following modes, i.e. modes using the Port Security functionality to secure MAC addresses:
Single 802.1X, Multi 802.1X, MAC-Based Auth.
If a client is denied access - either because the RADIUS server denies the client access or because the RADIUS server request times out,
the client is put on hold in the Unauthorized state. The hold timer does not count during an on-going authentication.
In MAC-based Auth. mode, the switch will ignore new frames coming from the client during the hold time.
The Hold Time can be set to a number between 10 and 1000000 seconds..
"
::= { tnNASSysMgmt 5 }
tnNASSysRadiusAssignedQosEnable OBJECT-TYPE
SYNTAX INTEGER{
enable (1),
disable (2)
}
MAX-ACCESS read-write
STATUS current
DESCRIPTION
"RADIUS-assigned QoS provides a means to centrally control the traffic class to which traffic coming from
a successfully authenticated supplicant is assigned on the switch. The RADIUS server must be configured to
transmit special RADIUS attributes to take advantage of this feature.
When checked, the individual ports' ditto setting determine whether RADIUS-assigned QoS Class is enabled on that port.
When unchecked, RADIUS-server assigned QoS Class is disabled on all ports..
"
::= { tnNASSysMgmt 6 }
tnNASSysRadiusAssignedVlanEnable OBJECT-TYPE
SYNTAX INTEGER{
enable (1),
disable (2)
}
MAX-ACCESS read-write
STATUS current
DESCRIPTION
"RADIUS-assigned VLAN provides a means to centrally control the VLAN on which a successfully authenticated supplicant
is placed on the switch. Incoming traffic will be classified to and switched on the RADIUS-assigned VLAN.
The RADIUS server must be configured to transmit special RADIUS attributes to take advantage of this feature.
When checked, the individual ports' ditto setting determine whether RADIUS-assigned VLAN is enabled on that port.
When unchecked, RADIUS-server assigned VLAN is disabled on all ports..
"
::= { tnNASSysMgmt 7 }
tnNASSysGuestVlanEnable OBJECT-TYPE
SYNTAX INTEGER{
enable (1),
disable (2)
}
MAX-ACCESS read-write
STATUS current
DESCRIPTION
"A Guest VLAN is a special VLAN - typically with limited network access - on which 802.1X-unaware clients are placed after
a network administrator-defined timeout. The switch follows a set of rules for entering and leaving the Guest VLAN as listed below.
When checked, the individual ports' ditto setting determines whether the port can be moved into Guest VLAN.
When unchecked, the ability to move to the Guest VLAN is disabled on all ports..
"
::= { tnNASSysMgmt 8 }
tnNASSysGuestVlanId OBJECT-TYPE
SYNTAX VlanId
MAX-ACCESS read-write
STATUS current
DESCRIPTION
"This is the value that a port's Port VLAN ID is set to if a port is moved into the Guest VLAN.
It is only changeable if the Guest VLAN option is globally enabled.
Valid values are in the range [1; 4094].
"
::= { tnNASSysMgmt 9 }
tnNASSysMaxReAuthCount OBJECT-TYPE
SYNTAX INTEGER(1..255)
MAX-ACCESS read-write
STATUS current
DESCRIPTION
"The number of times the switch transmits an EAPOL Request Identity frame without response before considering entering
the Guest VLAN is adjusted with this setting. The value can only be changed if the Guest VLAN option is globally enabled.
Valid values are in the range [1; 255]..
"
::= { tnNASSysMgmt 10 }
tnNASSysAllowGuestVlanIFEAPOLSeen OBJECT-TYPE
SYNTAX INTEGER{
enable (1),
disable (2)
}
MAX-ACCESS read-write
STATUS current
DESCRIPTION
"The switch remembers if an EAPOL frame has been received on the port for the life-time of the port.
Once the switch considers whether to enter the Guest VLAN, it will first check if this option is enabled or disabled.
If disabled (unchecked; default), the switch will only enter the Guest VLAN if an EAPOL frame has not been received
on the port for the life-time of the port.
If enabled (checked), the switch will consider entering the Guest VLAN even if an EAPOL frame has been received
on the port for the life-time of the port.
The value can only be changed if the Guest VLAN option is globally enabled..
"
::= { tnNASSysMgmt 11 }
-- ******************************************************************
-- NAS port configuration table
-- ******************************************************************
tnNASPortCfgTable OBJECT-TYPE
SYNTAX SEQUENCE OF TnNASPortCfgEntry
MAX-ACCESS not-accessible
STATUS current
DESCRIPTION
"This table displays and sets port configuratio.
"
::= { tnNASPortMgmt 1 }
tnNASPortCfgEntry OBJECT-TYPE
SYNTAX TnNASPortCfgEntry
MAX-ACCESS not-accessible
STATUS current
DESCRIPTION
"This entry represents a port configuration."
INDEX { tnNASPortNum }
::= { tnNASPortCfgTable 1 }
TnNASPortCfgEntry ::= SEQUENCE {
tnNASPortNum Unsigned32,
tnNASAdminState INTEGER,
tnNASRadiusAssignedQosEnabled INTEGER,
tnNASRadiusAssignedVlanEnabled INTEGER,
tnNASGuestVlanEnabled INTEGER,
tnNASPortCfgState INTEGER
}
tnNASPortNum OBJECT-TYPE
SYNTAX Unsigned32
MAX-ACCESS not-accessible
STATUS current
DESCRIPTION
"The port number for which the configuration below applies.
"
::= { tnNASPortCfgEntry 1 }
tnNASAdminState OBJECT-TYPE
SYNTAX TnNASAdminStateType
MAX-ACCESS read-write
STATUS current
DESCRIPTION
"If NAS is globally enabled, this selection controls the port's authentication mode.
"
::= { tnNASPortCfgEntry 2 }
tnNASRadiusAssignedQosEnabled OBJECT-TYPE
SYNTAX INTEGER{
enable (1),
disable (2)
}
MAX-ACCESS read-write
STATUS current
DESCRIPTION
"When RADIUS-Assigned QoS is both globally enabled and enabled (checked) on a given port, the switch reacts to QoS Class information
carried in the RADIUS Access-Accept packet transmitted by the RADIUS server when a supplicant is successfully authenticated.
If present and valid, traffic received on the supplicant's port will be classified to the given QoS Class. If (re-)authentication fails
or the RADIUS Access-Accept packet no longer carries a QoS Class or it's invalid, or the supplicant is otherwise no longer present on
the port, the port's QoS Class is immediately reverted to the original QoS Class (which may be changed by the administrator
in the meanwhile without affecting the RADIUS-assigned).
This option is only available for single-client modes, i.e Port-based 802.1X, Single 802.1X
"
::= { tnNASPortCfgEntry 3 }
tnNASRadiusAssignedVlanEnabled OBJECT-TYPE
SYNTAX INTEGER{
enable (1),
disable (2)
}
MAX-ACCESS read-write
STATUS current
DESCRIPTION
"When RADIUS-Assigned VLAN is both globally enabled and enabled (checked) for a given port, the switch reacts to VLAN ID information
carried in the RADIUS Access-Accept packet transmitted by the RADIUS server when a supplicant is successfully authenticated.
If present and valid, the port's Port VLAN ID will be changed to this VLAN ID, the port will be set to be a member of that VLAN ID,
and the port will be forced into VLAN unaware mode. Once assigned, all traffic arriving on the port will be classified and switched
on the RADIUS-assigned VLAN ID.
If (re-)authentication fails or the RADIUS Access-Accept packet no longer carries a VLAN ID or it's invalid, or the supplicant
is otherwise no longer present on the port, the port's VLAN ID is immediately reverted to the original VLAN ID
(which may be changed by the administrator in the meanwhile without affecting the RADIUS-assigned).
This option is only available for single-client modes, i.e. Port-based 802.1X, Single 802.1X.
"
::= { tnNASPortCfgEntry 4 }
tnNASGuestVlanEnabled OBJECT-TYPE
SYNTAX INTEGER{
enable (1),
disable (2)
}
MAX-ACCESS read-write
STATUS current
DESCRIPTION
"TWhen Guest VLAN is both globally enabled and enabled (checked) for a given port, the switch considers moving the port into
the Guest VLAN according to the rules outlined below.
This option is only available for EAPOL-based modes, i.e.: Port-based 802.1X, Single 802.1X, Multi 802.1X
"
::= { tnNASPortCfgEntry 5 }
tnNASPortCfgState OBJECT-TYPE
SYNTAX INTEGER {
linkDown (0),
authorized(1),
unauthorized (2),
globallyDisabled (3),
authOrUnauth(4)
}
MAX-ACCESS read-only
STATUS current
DESCRIPTION
"The current state of the port.
"
::= { tnNASPortCfgEntry 6 }
-- ******************************************************************
-- NAS authorized count table
-- ******************************************************************
tnNASAuthCountTable OBJECT-TYPE
SYNTAX SEQUENCE OF TnNASAuthCountEntry
MAX-ACCESS not-accessible
STATUS current
DESCRIPTION
"This table contains the configuration of auth counter."
::= { tnNASAuthCountMgmt 1 }
tnNASAuthCountEntry OBJECT-TYPE
SYNTAX TnNASAuthCountEntry
MAX-ACCESS not-accessible
STATUS current
DESCRIPTION
"This entry represents an auth counter.
"
INDEX { tnNASPortNum }
::= { tnNASAuthCountTable 1 }
TnNASAuthCountEntry ::= SEQUENCE {
tnNASAuthCount INTEGER,
tnNASUnauthCount INTEGER
}
tnNASAuthCount OBJECT-TYPE
SYNTAX INTEGER
MAX-ACCESS read-only
STATUS current
DESCRIPTION
"NAS auththenticate count"
::= { tnNASAuthCountEntry 1 }
tnNASUnauthCount OBJECT-TYPE
SYNTAX INTEGER
MAX-ACCESS read-only
STATUS current
DESCRIPTION
"NAS unauththenticate count"
::= { tnNASAuthCountEntry 2 }
-- ******************************************************************
-- NAS port status table
-- ******************************************************************
tnNASPortStatusTable OBJECT-TYPE
SYNTAX SEQUENCE OF TnNASPortStatusEntry
MAX-ACCESS not-accessible
STATUS current
DESCRIPTION
"This table contains the configuration of port status."
::= { tnNASPortStatus 1 }
tnNASPortStatusEntry OBJECT-TYPE
SYNTAX TnNASPortStatusEntry
MAX-ACCESS not-accessible
STATUS current
DESCRIPTION
"This entry represents a port status.
"
INDEX { tnNASPortNum }
::= { tnNASPortStatusTable 1 }
TnNASPortStatusEntry ::= SEQUENCE {
tnNASPortAdminState INTEGER,
tnNASPortState INTEGER,
tnNASQosClass OCTET STRING,
tnNASPortVlanId VlanId
}
tnNASPortAdminState OBJECT-TYPE
SYNTAX TnNASAdminStateType
MAX-ACCESS read-only
STATUS current
DESCRIPTION
"The port's current administrative state.
"
::= { tnNASPortStatusEntry 1 }
tnNASPortState OBJECT-TYPE
SYNTAX INTEGER{
linkDown (0),
authorized(1),
unauthorized (2),
globallyDisabled (3),
authOrUnauth(4)
}
MAX-ACCESS read-only
STATUS current
DESCRIPTION
"The current state of the port.
"
::= { tnNASPortStatusEntry 2 }
tnNASQosClass OBJECT-TYPE
SYNTAX OCTET STRING
MAX-ACCESS read-only
STATUS current
DESCRIPTION
"The QoS class assigned by the RADIUS server. The field is blank if no QoS class is assigned.
"
::= { tnNASPortStatusEntry 3 }
tnNASPortVlanId OBJECT-TYPE
SYNTAX VlanId
MAX-ACCESS read-only
STATUS current
DESCRIPTION
"The VLAN ID that NAS has put the port in. The field is blank, if the Port VLAN ID is not overridden by NAS.
"
::= { tnNASPortStatusEntry 4 }
-- ******************************************************************
-- NAS client and supplication status table
-- ******************************************************************
tnNASClientStatusTable OBJECT-TYPE
SYNTAX SEQUENCE OF TnNASClientStatusEntry
MAX-ACCESS not-accessible
STATUS current
DESCRIPTION
"This table contains the configuration of client status."
::= { tnNASClientStatus 1 }
tnNASClientStatusEntry OBJECT-TYPE
SYNTAX TnNASClientStatusEntry
MAX-ACCESS not-accessible
STATUS current
DESCRIPTION
"This entry represents a client status.
"
INDEX { tnNASPortNum, tnNASClientNum }
::= { tnNASClientStatusTable 1 }
TnNASClientStatusEntry ::= SEQUENCE {
tnNASClientNum Unsigned32,
tnNASMacAddr MacAddress,
tnNASVlanId VlanId,
tnNASVersion INTEGER,
tnNASIdentify OCTET STRING
}
tnNASClientNum OBJECT-TYPE
SYNTAX Unsigned32(1..2)
MAX-ACCESS not-accessible
STATUS current
DESCRIPTION
"1 for last client/supplication; 2 for selected client/supplication."
::= { tnNASClientStatusEntry 1 }
tnNASMacAddr OBJECT-TYPE
SYNTAX MacAddress
MAX-ACCESS read-only
STATUS current
DESCRIPTION "The MAC address of the last supplicant/client.
"
::= { tnNASClientStatusEntry 2 }
tnNASVlanId OBJECT-TYPE
SYNTAX VlanId
MAX-ACCESS read-only
STATUS current
DESCRIPTION "The VLAN ID on which the last frame from the last supplicant/client was received.
"
::= { tnNASClientStatusEntry 3 }
tnNASIdentify OBJECT-TYPE
SYNTAX OCTET STRING
MAX-ACCESS read-only
STATUS current
DESCRIPTION "802.1X-based: The user name (supplicant identity) carried in the most recently received Response Identity EAPOL frame.
MAC-based: Not applicable.
"
::= { tnNASClientStatusEntry 4 }
-- ******************************************************************
-- NAS selected client backend server counter table
-- ******************************************************************
tnNASSelectedBackendServerCounterTable OBJECT-TYPE
SYNTAX SEQUENCE OF TnNASSelectedBackendServerCounterEntry
MAX-ACCESS not-accessible
STATUS current
DESCRIPTION
"This table contains the configuration of Selected backend server counter."
::= { tnNASSelectedBackendServerCounter 1 }
tnNASSelectedBackendServerCounterEntry OBJECT-TYPE
SYNTAX TnNASSelectedBackendServerCounterEntry
MAX-ACCESS not-accessible
STATUS current
DESCRIPTION
"This entry represents an Selected backend server counter.
"
INDEX { tnNASPortNum }
::= { tnNASSelectedBackendServerCounterTable 1 }
TnNASSelectedBackendServerCounterEntry ::= SEQUENCE {
tnNASRxAccessChallenges Gauge32,
tnNASRxOtherRequests Gauge32,
tnNASRxAuthSuccesses Gauge32,
tnNASRxAuthFailures Gauge32,
tnNASTxResponses Gauge32
}
tnNASRxAccessChallenges OBJECT-TYPE
SYNTAX Gauge32
MAX-ACCESS read-only
STATUS current
DESCRIPTION "802.1X-based: Counts the number of times that the switch receives the first request from the backend server
following the first response from the supplicant. Indicates that the backend server has communication with the switch.
MAC-based: Counts all Access Challenges received from the backend server for this port (left-most table) or client (right-most table).
"
::= { tnNASSelectedBackendServerCounterEntry 1 }
tnNASRxOtherRequests OBJECT-TYPE
SYNTAX Gauge32
MAX-ACCESS read-only
STATUS current
DESCRIPTION "802.1X-based: Counts the number of times that the switch sends an EAP Request packet following the first to the supplicant.
Indicates that the backend server chose an EAP-method.
MAC-based: Not applicable.
"
::= { tnNASSelectedBackendServerCounterEntry 2 }
tnNASRxAuthSuccesses OBJECT-TYPE
SYNTAX Gauge32
MAX-ACCESS read-only
STATUS current
DESCRIPTION "802.1X- and MAC-based: Counts the number of times that the switch receives a success indication.
Indicates that the supplicant/client has successfully authenticated to the backend server.
"
::= { tnNASSelectedBackendServerCounterEntry 3 }
tnNASRxAuthFailures OBJECT-TYPE
SYNTAX Gauge32
MAX-ACCESS read-only
STATUS current
DESCRIPTION "802.1X- and MAC-based: Counts the number of times that the switch receives a failure message.
This indicates that the supplicant/client has not authenticated to the backend server.
"
::= { tnNASSelectedBackendServerCounterEntry 4 }
tnNASTxResponses OBJECT-TYPE
SYNTAX Gauge32
MAX-ACCESS read-only
STATUS current
DESCRIPTION " 802.1X-based: Counts the number of times that the switch attempts to send a supplicant's first response packet to
the backend server. Indicates the switch attempted communication with the backend server. Possible retransmissions are
not counted.
MAC-based: Counts all the backend server packets sent from the switch towards the backend server for a given port
or client (right-most table). Possible retransmissions are not counted.
"
::= { tnNASSelectedBackendServerCounterEntry 5 }
-- ******************************************************************
-- NAS selected client EAPOL counter table
-- ******************************************************************
tnNASSelectedEapolCounterTable OBJECT-TYPE
SYNTAX SEQUENCE OF TnNASSelectedEapolCounterEntry
MAX-ACCESS not-accessible
STATUS current
DESCRIPTION
"This table contains the configuration of selected EAPOL counter."
::= { tnNASSelectedEapolCounter 1 }
tnNASSelectedEapolCounterEntry OBJECT-TYPE
SYNTAX TnNASSelectedEapolCounterEntry
MAX-ACCESS not-accessible
STATUS current
DESCRIPTION
"This entry represents a selected EAPOL counter.
"
INDEX { tnNASPortNum }
::= { tnNASSelectedEapolCounterTable 1 }
TnNASSelectedEapolCounterEntry ::= SEQUENCE {
tnNASRxTotal Gauge32,
tnNASRxResponseId Gauge32,
tnNASRxResponses Gauge32,
tnNASRxStart Gauge32,
tnNASRxLogoff Gauge32,
tnNASRxInvalidType Gauge32,
tnNASRxInvalidLength Gauge32,
tnNASTxTotal Gauge32,
tnNASTxRequestId Gauge32,
tnNASTxRequests Gauge32
}
tnNASRxTotal OBJECT-TYPE
SYNTAX Gauge32
MAX-ACCESS read-only
STATUS current
DESCRIPTION "The number of valid EAPOL frames of any type that have been received by the switch.
"
::= { tnNASSelectedEapolCounterEntry 1 }
tnNASRxResponseId OBJECT-TYPE
SYNTAX Gauge32
MAX-ACCESS read-only
STATUS current
DESCRIPTION "The number of valid EAPOL Response Identity frames that have been received by the switch.
"
::= { tnNASSelectedEapolCounterEntry 2 }
tnNASRxResponses OBJECT-TYPE
SYNTAX Gauge32
MAX-ACCESS read-only
STATUS current
DESCRIPTION "The number of valid EAPOL response frames (other than Response Identity frames) that have been received by the switch.
"
::= { tnNASSelectedEapolCounterEntry 3 }
tnNASRxStart OBJECT-TYPE
SYNTAX Gauge32
MAX-ACCESS read-only
STATUS current
DESCRIPTION "The number of EAPOL Start frames that have been received by the switch.
"
::= { tnNASSelectedEapolCounterEntry 4 }
tnNASRxLogoff OBJECT-TYPE
SYNTAX Gauge32
MAX-ACCESS read-only
STATUS current
DESCRIPTION "The number of valid EAPOL Logoff frames that have been received by the switch.
"
::= { tnNASSelectedEapolCounterEntry 5 }
tnNASRxInvalidType OBJECT-TYPE
SYNTAX Gauge32
MAX-ACCESS read-only
STATUS current
DESCRIPTION "The number of EAPOL frames that have been received by the switch in which the frame type is not recognized.
"
::= { tnNASSelectedEapolCounterEntry 6 }
tnNASRxInvalidLength OBJECT-TYPE
SYNTAX Gauge32
MAX-ACCESS read-only
STATUS current
DESCRIPTION "The number of EAPOL frames that have been received by the switch in which the Packet Body Length field is invalid.
"
::= { tnNASSelectedEapolCounterEntry 7 }
tnNASTxTotal OBJECT-TYPE
SYNTAX Gauge32
MAX-ACCESS read-only
STATUS current
DESCRIPTION "The number of EAPOL frames of any type that have been transmitted by the switch.
"
::= { tnNASSelectedEapolCounterEntry 8 }
tnNASTxRequestId OBJECT-TYPE
SYNTAX Gauge32
MAX-ACCESS read-only
STATUS current
DESCRIPTION "The number of EAPOL Request Identity frames that have been transmitted by the switch.
"
::= { tnNASSelectedEapolCounterEntry 9 }
tnNASTxRequests OBJECT-TYPE
SYNTAX Gauge32
MAX-ACCESS read-only
STATUS current
DESCRIPTION "The number of valid EAPOL Request frames (other than Request Identity frames) that have been transmitted by the switch.
"
::= { tnNASSelectedEapolCounterEntry 10 }
-- ******************************************************************
-- NAS attached client/supplication status table
-- ******************************************************************
tnNASAttachedClientStatusTable OBJECT-TYPE
SYNTAX SEQUENCE OF TnNASAttachedClientStatusEntry
MAX-ACCESS not-accessible
STATUS current
DESCRIPTION
"This table contains the configuration of attached client status."
::= { tnNASAttachedClientStatus 1 }
tnNASAttachedClientStatusEntry OBJECT-TYPE
SYNTAX TnNASAttachedClientStatusEntry
MAX-ACCESS not-accessible
STATUS current
DESCRIPTION
"This entry represents an attached client status.
"
INDEX { tnNASPortNum, tnNASAttachedNum }
::= { tnNASAttachedClientStatusTable 1 }
TnNASAttachedClientStatusEntry ::= SEQUENCE {
tnNASAttachedNum Unsigned32,
tnNASAttachedIdentify OCTET STRING,
tnNASMacAddress MacAddress,
tnNASAttachedVlanId VlanId,
tnNASState INTEGER,
tnNASLastAuthentication OCTET STRING,
tnNASSelected INTEGER
}
tnNASAttachedNum OBJECT-TYPE
SYNTAX Unsigned32
MAX-ACCESS not-accessible
STATUS current
DESCRIPTION "The number of attached clients/supplications.
"
::= { tnNASAttachedClientStatusEntry 1 }
tnNASAttachedIdentify OBJECT-TYPE
SYNTAX OCTET STRING
MAX-ACCESS read-only
STATUS current
DESCRIPTION "Shows the identity of the supplicant, as received in the Response Identity EAPOL frame.
If no supplicants are attached, it shows No supplicants attached.
This is not available for MAC-based Auth..
"
::= { tnNASAttachedClientStatusEntry 2 }
tnNASMacAddress OBJECT-TYPE
SYNTAX MacAddress
MAX-ACCESS read-only
STATUS current
DESCRIPTION "For Multi 802.1X, this column holds the MAC address of the attached supplicant.
For MAC-based Auth., this column holds the MAC address of the attached client.
If no clients are attached, it shows No clients attached.
"
::= { tnNASAttachedClientStatusEntry 3 }
tnNASAttachedVlanId OBJECT-TYPE
SYNTAX VlanId
MAX-ACCESS read-only
STATUS current
DESCRIPTION "This column holds the VLAN ID that the corresponding client is currently secured through the Port Security module.
"
::= { tnNASAttachedClientStatusEntry 4 }
tnNASState OBJECT-TYPE
SYNTAX INTEGER {
linkDown (0),
authorized(1),
unauthorized (2),
globallyDisabled (3)
}
MAX-ACCESS read-only
STATUS current
DESCRIPTION "The client can either be authenticated or unauthenticated. In the authenticated state, it is allowed to forward frames
on the port, and in the unauthenticated state, it is blocked. As long as the backend server hasn't successfully
authenticated the client, it is unauthenticated. If an authentication fails for one or the other reason,
the client will remain in the unauthenticated state for Hold Time seconds.
"
::= { tnNASAttachedClientStatusEntry 5 }
tnNASLastAuthentication OBJECT-TYPE
SYNTAX OCTET STRING
MAX-ACCESS read-only
STATUS current
DESCRIPTION "Shows the date and time of the last authentication of the client (successful as well as unsuccessful).
"
::= { tnNASAttachedClientStatusEntry 6 }
tnNASSelected OBJECT-TYPE
SYNTAX INTEGER {
unselected(0),
selected(1)
}
MAX-ACCESS read-write
STATUS current
DESCRIPTION "select specific attached client.
"
::= { tnNASAttachedClientStatusEntry 7 }
-- ******************************************************************
-- NAS clear counter table
-- ******************************************************************
tnNASClearCounterTable OBJECT-TYPE
SYNTAX SEQUENCE OF TnNASClearCounterEntry
MAX-ACCESS not-accessible
STATUS current
DESCRIPTION
"This table contains the configuration of clearing counter."
::= { tnNASClearCounter 1 }
tnNASClearCounterEntry OBJECT-TYPE
SYNTAX TnNASClearCounterEntry
MAX-ACCESS not-accessible
STATUS current
DESCRIPTION
"This entry represents a clear counter.
"
INDEX { tnNASPortNum }
::= { tnNASClearCounterTable 1 }
TnNASClearCounterEntry ::= SEQUENCE {
tnNASClear INTEGER
}
tnNASClear OBJECT-TYPE
SYNTAX INTEGER {
unclear(0),
clear(1)
}
MAX-ACCESS read-write
STATUS current
DESCRIPTION "The action of clearing counter.
"
::= { tnNASClearCounterEntry 1 }
END
Reference in a new issue View git blame Copy permalink