IEEE8021X-PAE-MIB
198 objects
The MIB module for managing the Port Access Entity (PAE) functions of IEEE 802.1X (Revision of 802.1X-2004). The PAE functions managed are summarized in Figure 12-3 of IEEE 802.1X and include EAPOL PACP support for authentication (EAP Supplicant and/or Authenticator), MACsec Key Agreement (MKA), EAPOL, and transmission and reception of network announcements. The following acronyms and definitions are used in this MIB. AN : Association Number, a number that is concatenated with a MACsec Secure Channel Identifier to identify a Secure Association (SA). Announcer : EAPOL-Announcement transmission functionality. Authenticator : An entity that facilitates authentication of other entities attached to the same LAN. CA : secure Connectivity Association: A security relationship, established and maintained by key agreement protocols, that comprises a fully connected subset of the service access points in stations attached to a single LAN that are to be supported by MACsec. CAK : secure Connectivity Association Key, a secret key possessed by members of a given CA. CKN : secure Connectivity Association Key Name (CKN), a text that identifies a CAK. Common Port : An instance of the MAC Internal Sublayer Service used by the SecY or PAC to provide transmission and reception of frames for both the Controlled and Uncontrolled Ports. Controlled Port : The access point used to provide the secure MAC Service to a client of a PAC or SecY. CP state machine : Controlled Port state machine is capable of controlling a SecY or a PAC. The CP supports interoperability with unauthenticated systems that are not port-based network access control capable, or that lack MKA. When the access controlled port is supported by a SecY, the CP is capable of controlling the SecY so as to provide unsecured connectivity to systems that implement a PAC. EAP : Extensible Authentication Protocol, RFC3748. EAPOL : EAP over LANs. KaY : Key Agreement Entity, a PAE entity responsible for MKA. Key Server : Elected by MKA, to transport a succession of SAKs, for use by MACsec, to the other member(s) of a CA. KMD : Key Management Domain, a string identifying systems that share cached CAKs. Listener : The role is to receive the network announcement parameters in the authentication process. Logon Process : The Logon Process is responsible for the managing the use of authentication credentials, for initiating use of the PAE's Supplicant and or Authenticator functionality, for deriving CAK, CKN tuples from PAE results, for maintaining PSKs (Pre-Sharing Keys), and for managing MKA instances. In the absence of successful authentication, key agreement, or support for MAC Security, the Logon Process determines whether the CP state machine should provide unauthenticated connectivity or authenticated but unsecured connectivity. MKA : MACsec Key Agreement protocol allows PAEs, each associated with a port that is an authenticated member of a secure connectivity association (CA) or a potential CA, to discover other PAEs attached to the same LAN, to confirm mutual possession of a CAK and hence to prove a past mutual authentication, to agree the secret keys (SAKs) used by MACsec for symmetric shared key cryptography, and to ensure that the data protected by MACsec has not been delayed. MKPDU : MACsec Key Agreement Protocol Data Unit. MPDU : MAC Protocol Data Unit. NID : Network Identity, a UTF-8 string identifying an network or network service. PAE : Port Access Entity, the protocol entity associated with a Port. It can support the protocol functionality associated with the Authenticator, the Supplicant, or both. PAC : Port Access Controller, a protocol-less shim that provides control over frame transmission and reception by clients attached to its Controlled Port, and uses the MAC Service provided by a Common Port. The access control decision is made by the PAE, typically taking into account the success or failure of mutual authentication and authorization of the PAE's peer(s), and is communicated by the PAE using the LMI to set the PAC's Controlled Port enabled/disable. Two different interfaces 'Controlled Port' and 'Uncontrolled Port', are associated with a PAC, and that for each instance of a PAC, two ifTable rows (one for each interface) run on top of an ifTable row representing the 'Common Port' interface, such as a row with ifType = 'ethernetCsmacd(6)'. For example : | | | | Controlled Port | Uncontrolled Port | | Interface | Interface | | (ifEntry = j) | (ifEntry = k) | | (ifType = | (ifType = | | macSecControlledIF(231)) | macSecUncontrolledIF(232))| | | | | | | | Physical Interface | | (ifEntry = i) | | (ifType = ethernetCsmacd(6)) | |_________________________________________________________| i, j, k are ifIndex to indicate an interface stack in the ifTable. Figure : PAC Interface Stack The 'Controlled Port' is the service point to provide one instance of the secure MAC service in a PAC. The 'Uncontrolled Port' is the service point to provide one instance of the insecure MAC service in a PAC. PACP : Port Access Controller Protocol. Port Identifier : A 16-bit number that is unique within the scope of the address of the port. Real Port : Indicates the PAE is for a real port. A port that is not created on demand by the mechanisms specified in this standard, but that can transmit and receive frames for one or more virtual ports. SC : Secure Channel, a security relationship used to provide security guarantees for frames transmitted from one member of a CA to the others. An SC is supported by a sequence of SAs thus allowing the periodic use of fresh keys without terminating the relationship. SA : Secure Association, a security relationship that provides security guarantees for frames transmitted from one member of a CA to the others. Each SA is supported by a single secret key, or a single set of keys where the cryptographic operations used to protect one frame require more than one key. SAK : Secure Association key, the secret key used by an SA. SCI : Secure Channel Identifier, a globally unique identifier for a secure channel, comprising a globally unique MAC Address and a Port Identifier, unique within the system allocated that address. secured connectivity : Data transfer between two or 'Controlled Ports' that is protected by MACsec. SecY : MAC Security Entity, the entity that operates the MAC Security protocol within a system. Supplicant : An entity at one end of a point-to-point LAN segment that seeks to be authenticated by an Authenticator attached to the other end of that link. Suspension: Temporary suspension of MKA operation to facilitate in-service control plane software upgrades without disrupting existing secure connectivity. Uncontrolled Port : The access point used to provide the insecure MAC Service to a client of a SecY or PAC. Virtual Port : Indicates the PAE is for a virtual port. A MAC Service or Internal Sublayer service access point that is created on demand. Virtual ports can be used to provide separate secure connectivity associations over the same LAN.
Imported Objects
| IEEE8021-SECY-MIB | SecySCI |
| IF-MIB | InterfaceIndex |
| SNMP-FRAMEWORK-MIB | SnmpAdminString |
| SNMPv2-CONF | MODULE-COMPLIANCE OBJECT-GROUP |
| SNMPv2-SMI | Counter32 Counter64 Gauge32 Integer32 MODULE-IDENTITY OBJECT-TYPE Unsigned32 |
| SNMPv2-TC | MacAddress RowPointer RowStatus TEXTUAL-CONVENTION TimeInterval TimeStamp TruthValue |
| OID | Name | Access | Status | Description |
|---|---|---|---|---|
| 1.3.111.2.802.1.1.15 | Identityieee8021XPaeMIB | The MIB module for managing the Port Access Entity (PAE) functions of IEEE 802.1X (Revision of 802.1X-2004). The PAE functions managed are summarized in Figure… | ||
| 1.3.111.2.802.1.1.15.0 | Nodeieee8021XPaeMIBNotifications | |||
| 1.3.111.2.802.1.1.15.1 | Nodeieee8021XPaeMIBObjects | |||
| 1.3.111.2.802.1.1.15.1.1 | Nodeieee8021XPaeSystem | |||
| 1.3.111.2.802.1.1.15.1.1.1 | Scalarieee8021XPaeSysAccessControl | read-write | current | This object enables or disables port-based network access control for all the system's ports. Setting this control object to 'false' causes the following actio… |
| 1.3.111.2.802.1.1.15.1.1.2 | Scalarieee8021XPaeSysAnnouncements | read-write | current | Setting this control object to 'false' causes each PAE in this system to behave as if the PAE's Announcement functionality is disabled. The independent control… |
| 1.3.111.2.802.1.1.15.1.1.3 | Scalarieee8021XPaeSysEapolVersion | read-only | current | The EAPOL protocol version for this system. |
| 1.3.111.2.802.1.1.15.1.1.4 | Scalarieee8021XPaeSysMkaVersion | read-only | current | The MKA protocol version for this system. |
| 1.3.111.2.802.1.1.15.1.1.5 | Tableieee8021XPaePortTable | not-accessible | current | A table of system level information for each port supported by the Port Access Entity. An entry appears in this table for each port of this system. For the wri… |
| 1.3.111.2.802.1.1.15.1.1.5.1 | Rowieee8021XPaePortEntry | not-accessible | current | The Port number, protocol version, and initialization control for a Port. If the PAE has been dynamically instantiated to support an existing or potential virt… |
| 1.3.111.2.802.1.1.15.1.1.5.1.1 | Columnieee8021XPaePortNumber | not-accessible | current | An interface index indicates the port number associated with this port. Each PAE is uniquely identified by a port number. The port number used is unique amongs… |
| 1.3.111.2.802.1.1.15.1.1.5.1.2 | Columnieee8021XPaePortType | read-only | current | The port type of the PAE. realPort(1) : indicates the PAE is for a real port. virtualPort(2) : indicates the PAE is for a virtual port. |
| 1.3.111.2.802.1.1.15.1.1.5.1.3 | Columnieee8021XPaeControlledPortNumber | read-only | current | An interface index indicates the port number associated with PAC or SecY's Controlled Port. |
| 1.3.111.2.802.1.1.15.1.1.5.1.4 | Columnieee8021XPaeUncontrolledPortNumber | read-only | current | An interface index indicates the port number associated with PAC or SecY's Uncontrolled Port. If the PAE supports a real port, this port number can be the same… |
| 1.3.111.2.802.1.1.15.1.1.5.1.5 | Columnieee8021XPaeCommonPortNumber | read-only | current | An interface index indicates the port number associated with PAC or SecY's 'Common Port'. All the virtual ports created for a given real port share the same 'C… |
| 1.3.111.2.802.1.1.15.1.1.5.1.6 | Columnieee8021XPaePortInitialize | read-write | current | The initialization control for this Port. Setting this object 'true' causes the Port to be reinitialized, terminating (and potentially restarting) authenticati… |
| 1.3.111.2.802.1.1.15.1.1.5.1.7 | Columnieee8021XPaePortCapabilities | read-only | current | The capabilities of this PAE port. 'suppImplemented' : A PACP EAP supplicant functions are implemented in this PAE if this bit is on. 'authImplemented' : A PAC… |
| 1.3.111.2.802.1.1.15.1.1.5.1.8 | Columnieee8021XPaePortVirtualPortsEnable | read-write | current | Enable or disable to Virtual Ports function for this Real Port PAE, the object ieee8021XPaePortType in the same row has the value 'realPort'. If this PAE is no… |
| 1.3.111.2.802.1.1.15.1.1.5.1.9 | Columnieee8021XPaePortMaxVirtualPorts | read-only | current | The maximum number of virtual ports can be supported in this port. |
| 1.3.111.2.802.1.1.15.1.1.5.1.10 | Columnieee8021XPaePortCurrentVirtualPorts | read-only | current | The current number of virtual ports is running in this port. |
| 1.3.111.2.802.1.1.15.1.1.5.1.11 | Columnieee8021XPaePortVirtualPortStart | read-only | current | This object will be 'true' if the virtual port is created by receipt of an EAPOL-Start packet. |
| 1.3.111.2.802.1.1.15.1.1.5.1.12 | Columnieee8021XPaePortVirtualPortPeerMAC | read-only | current | The source MAC address of the received EAPOL-Start if ieee8021XPaePortVirtualPortStart is set 'true'. If ieee8021XPaePortVirtualPortStart is not 'true' in the … |
| 1.3.111.2.802.1.1.15.1.1.5.1.13 | Columnieee8021XPaePortLogonEnable | read-write | current | Enable or disable to transmit network announcement information. |
| 1.3.111.2.802.1.1.15.1.1.5.1.14 | Columnieee8021XPaePortAuthenticatorEnable | read-only | current | Enable or disable to the Authenticator function in this PAE. This object will be read only and returns 'false' if the value of the object ieee8021XPaePortCapab… |
| 1.3.111.2.802.1.1.15.1.1.5.1.15 | Columnieee8021XPaePortSupplicantEnable | read-only | current | Enable or disable to the Supplicant function in this PAE. This object will be read only and returns 'false' if the value of the object ieee8021XPaePortCapabili… |
| 1.3.111.2.802.1.1.15.1.1.5.1.16 | Columnieee8021XPaePortKayMkaEnable | read-write | current | Enable or disable the MKA protocol function in this PAE. This object will be read only and returns 'false' if the value of the object ieee8021XPaePortCapabilit… |
| 1.3.111.2.802.1.1.15.1.1.5.1.17 | Columnieee8021XPaePortAnnouncerEnable | read-write | current | Enable or disable the network Announcer function in this PAE. This object will be read only and returns 'false' if the value of the object ieee8021XPaePortCapa… |
| 1.3.111.2.802.1.1.15.1.1.5.1.18 | Columnieee8021XPaePortListenerEnable | read-write | current | Enable or disable the network Listener function in this PAE. This object will be read only and returns 'false' if the value of the object ieee8021XPaePortCapab… |
| 1.3.111.2.802.1.1.15.1.1.6 | Tableieee8021XPacPortTable | not-accessible | current | A table of system level information for each interface supported by PAC. This table will be instantiated if the value of the object ieee8021XPaePortCapabilitie… |
| 1.3.111.2.802.1.1.15.1.1.6.1 | Rowieee8021XPacPortEntry | not-accessible | current | An entry containing PAC management information applicable to a particular interface. |
| 1.3.111.2.802.1.1.15.1.1.6.1.1 | Columnieee8021XPacPortControlledPortNumber | not-accessible | current | The index to identify the 'Controlled Port' interface for a PAC. |
| 1.3.111.2.802.1.1.15.1.1.6.1.2 | Columnieee8021XPacPortAdminPt2PtMAC | read-write | current | An object to control the service connectivity to at most one other system. The ieee8021XPacPortOperPt2PtMAC indicates operational status of the service connect… |
| 1.3.111.2.802.1.1.15.1.1.6.1.3 | Columnieee8021XPacPortOperPt2PtMAC | read-only | current | An object to reflect the current service connectivity status. 'true' : means the service connectivity of this PAC Controlled Port provides at most one other sy… |
| 1.3.111.2.802.1.1.15.1.2 | Nodeieee8021XPaeLogon | |||
| 1.3.111.2.802.1.1.15.1.2.1 | Tableieee8021XPaePortLogonTable | not-accessible | current | A table of system level information for each port to support the Logon Process(es) status information. This table will be instantiated if the object ieee8021XP… |
| 1.3.111.2.802.1.1.15.1.2.1.1 | Rowieee8021XPaePortLogonEntry | not-accessible | current | An entry contains Logon Process status information for the PAE. |
| 1.3.111.2.802.1.1.15.1.2.1.1.1 | Columnieee8021XPaePortLogonConnectStatus | read-only | current | The Logon Process sets this variable to one of the following values, to indicate to the CP state machine if, and how, connectivity is to be provided through th… |
| 1.3.111.2.802.1.1.15.1.2.1.1.2 | Columnieee8021XPaePortPortValid | read-only | current | This object will be set 'true' if Controlled Port communication is secured as specified by the MACsec. |
| 1.3.111.2.802.1.1.15.1.2.2 | Tableieee8021XPaePortSessionTable | not-accessible | current | A table of system level information for each port to support Logon Process(es) session information. This table maintains session statistics for its associated … |
| 1.3.111.2.802.1.1.15.1.2.2.1 | Rowieee8021XPaePortSessionEntry | not-accessible | current | An entry contains Logon Process session information for the PAE. A session, an entry, begins when the operation of Controlled Port becomes 'true' and ends when… |
| 1.3.111.2.802.1.1.15.1.2.2.1.1 | Columnieee8021XPaeSessionControlledPortNumber | not-accessible | current | The index to identify the 'Controlled Port' interface's session information for a PAE. |
| 1.3.111.2.802.1.1.15.1.2.2.1.2 | Columnieee8021XPaePortSessionOctetsRx | read-only | current | The number of octets received in this session of this PAE. Discontinuities in the value of this counter can occur at re-initialization of the management system… |
| 1.3.111.2.802.1.1.15.1.2.2.1.3 | Columnieee8021XPaePortSessionOctetsTx | read-only | current | The number of octets transmitted in this session of this PAE. Discontinuities in the value of this counter can occur at re-initialization of the management sys… |
| 1.3.111.2.802.1.1.15.1.2.2.1.4 | Columnieee8021XPaePortSessionPktsRx | read-only | current | The number of packets received in this session of this PAE. Discontinuities in the value of this counter can occur at re-initialization of the management syste… |
| 1.3.111.2.802.1.1.15.1.2.2.1.5 | Columnieee8021XPaePortSessionPktsTx | read-only | current | The number of packets transmitted in this session of this PAE. Discontinuities in the value of this counter can occur at re-initialization of the management sy… |
| 1.3.111.2.802.1.1.15.1.2.2.1.6 | Columnieee8021XPaePortSessionId | read-only | current | The session identifier for this session of the PAE. A UTF-8 string, uniquely identifying the session within the context of the PAE's system. |
| 1.3.111.2.802.1.1.15.1.2.2.1.7 | Columnieee8021XPaePortSessionStartTime | read-only | current | The starting time of this session. |
| 1.3.111.2.802.1.1.15.1.2.2.1.8 | Columnieee8021XPaePortSessionIntervalTime | read-only | current | The duration time of the session has been last. |
| 1.3.111.2.802.1.1.15.1.2.2.1.9 | Columnieee8021XPaePortSessionTerminate | read-only | current | The reason for the session termination, one of the following : 'macOperFailed' : 'Common Port' for this PAE is not operational. 'sysAccessDisableOrPortInit' : … |
| 1.3.111.2.802.1.1.15.1.2.2.1.10 | Columnieee8021XPaePortSessionUserName | read-only | current | The session user name for this session in the PAE. A UTF-8 string, representing the identity of the peer Supplicant. If no such information, zero length string… |
| 1.3.111.2.802.1.1.15.1.2.3 | Tableieee8021XLogonNIDTable | not-accessible | current | The Logon Process may use Network Identities (NIDs) to manage its use of authentication credentials, cached CAKs, and announcements. This table provides the NI… |
| 1.3.111.2.802.1.1.15.1.2.3.1 | Rowieee8021XLogonNIDEntry | not-accessible | current | An entry provides the NID information for a Logon Process. |
| 1.3.111.2.802.1.1.15.1.2.3.1.1 | Columnieee8021XLogonNIDConnectedNID | read-only | current | The NID associated with the current connectivity (possibly unauthenticated) provided by the operation of the CP state machine. This object can differ from both… |
| 1.3.111.2.802.1.1.15.1.2.3.1.2 | Columnieee8021XLogonNIDRequestedNID | read-only | current | The NID marked as access requested in announcements, as determined from EAPOL-Start frames. The default of this object is as the configured value of object iee… |
| 1.3.111.2.802.1.1.15.1.2.3.1.3 | Columnieee8021XLogonNIDSelectedNID | read-write | current | The NID currently configured for use by an access 'Controlled Port' when transmitting EAPOL-Start frames. The default of this object is empty string. This obje… |
| 1.3.111.2.802.1.1.15.1.3 | Nodeieee8021XPaeAuthenticator | |||
| 1.3.111.2.802.1.1.15.1.3.1 | Tableieee8021XAuthenticatorTable | not-accessible | current | A table that contains the configuration objects for the Authenticator PAE associated with each port. This table will be instantiated if the object ieee8021XPae… |
| 1.3.111.2.802.1.1.15.1.3.1.1 | Rowieee8021XAuthenticatorEntry | not-accessible | current | An entry that contains the Authenticator configuration objects for the PAE. |
| 1.3.111.2.802.1.1.15.1.3.1.1.1 | Columnieee8021XAuthPaeAuthenticate | read-only | current | This object will be set 'true' by the PAE authenticator to request authentication, and if this object is 'true', reauthentication is allowed. This object will … |
| 1.3.111.2.802.1.1.15.1.3.1.1.2 | Columnieee8021XAuthPaeAuthenticated | read-only | current | This object will be set 'true' by PACP if the PAE authenticator currently authenticated, and 'false' if the authentication fails or is revoked. |
| 1.3.111.2.802.1.1.15.1.3.1.1.3 | Columnieee8021XAuthPaeFailed | read-only | current | This object will be set 'true' by PACP if the authentication has failed or has been terminated. The cause could be a failure returned by EAP, either immediatel… |
| 1.3.111.2.802.1.1.15.1.3.1.1.4 | Columnieee8021XAuthPaeReAuthEnabled | read-write | current | This object is set 'true' if PACP should initiate reauthentication periodically, 'false' otherwise . Reading this object always returns 'false'. |
| 1.3.111.2.802.1.1.15.1.3.1.1.5 | Columnieee8021XAuthPaeQuietPeriod | read-write | current | This object indicates a waiting period after a failed authentication attempt, before another attempt is permitted. |
| 1.3.111.2.802.1.1.15.1.3.1.1.6 | Columnieee8021XAuthPaeReauthPeriod | read-write | current | This object indicates the time period of the reauthentication to the supplicant. |
| 1.3.111.2.802.1.1.15.1.3.1.1.7 | Columnieee8021XAuthPaeRetryMax | read-write | current | The maximum number of authentication attempts before failure is reported to the Logon Process, and the authPaeQuietPeriod timer imposed before further attempts… |
| 1.3.111.2.802.1.1.15.1.3.1.1.8 | Columnieee8021XAuthPaeRetryCount | read-only | current | The count of the number of authentication attempts. |
| 1.3.111.2.802.1.1.15.1.4 | Nodeieee8021XPaeSupplicant | |||
| 1.3.111.2.802.1.1.15.1.4.1 | Tableieee8021XSupplicantTable | not-accessible | current | A table that contains the configuration objects for the Supplicant PAE associated with each port. For the writeable objects in this table, the configured value… |
| 1.3.111.2.802.1.1.15.1.4.1.1 | Rowieee8021XSupplicantEntry | not-accessible | current | The configuration information for an Supplicant PAE. |
| 1.3.111.2.802.1.1.15.1.4.1.1.1 | Columnieee8021XSuppPaeAuthenticate | read-only | current | This object will be set 'true' by the PAE supplicant to request authentication, and if this object is 'true', reauthentication is allowed. This object will be … |
| 1.3.111.2.802.1.1.15.1.4.1.1.2 | Columnieee8021XSuppPaeAuthenticated | read-only | current | This object will be set 'true' by PACP if the PAE supplicant currently authenticated, and 'false' if the authentication fails or is revoked. |
| 1.3.111.2.802.1.1.15.1.4.1.1.3 | Columnieee8021XSuppPaeFailed | read-only | current | This object will be set 'true' by PACP if the authentication has failed or has been terminated. The cause could be a failure returned by EAP, either immediatel… |
| 1.3.111.2.802.1.1.15.1.4.1.1.4 | Columnieee8021XSuppPaeHelloPeriod | read-write | current | This object indicated a waiting time period after a failed authentication attempt, before another attempt is permitted. |
| 1.3.111.2.802.1.1.15.1.4.1.1.5 | Columnieee8021XSuppPaeRetryMax | read-write | current | The maximum number of authentication attempts before failure is reported to the Logon Process, and the ieee8021XSuppPaeHelloPeriod timer imposed before further… |
| 1.3.111.2.802.1.1.15.1.4.1.1.6 | Columnieee8021XSuppPaeRetryCount | read-only | current | The count of the number of authentication attempts. |
| 1.3.111.2.802.1.1.15.1.5 | Nodeieee8021XPaeEapol | |||
| 1.3.111.2.802.1.1.15.1.5.1 | Tableieee8021XEapolStatsTable | not-accessible | current | A table in system level contains the EAPOL statistics and diagnostics information supported by PAE. |
| 1.3.111.2.802.1.1.15.1.5.1.1 | Rowieee8021XEapolStatsEntry | not-accessible | current | An entry contains the EAPOL statistics and diagnostics information for a PAE. |
| 1.3.111.2.802.1.1.15.1.5.1.1.1 | Columnieee8021XEapolInvalidFramesRx | read-only | current | The number of invalid EAPOL frames of any type that have been received by this PAE. |
| 1.3.111.2.802.1.1.15.1.5.1.1.2 | Columnieee8021XEapolEapLengthErrorFramesRx | read-only | current | The number of EAPOL frames that the Packet Body Length does not match a Packet Body that is contained within the octets of the received EAPOL MPDU in this PAE. |
| 1.3.111.2.802.1.1.15.1.5.1.1.3 | Columnieee8021XEapolAnnouncementFramesRx | read-only | current | The number of EAPOL-Announcement frames that have been received by this PAE. |
| 1.3.111.2.802.1.1.15.1.5.1.1.4 | Columnieee8021XEapolAnnouncementReqFramesRx | read-only | current | The number of EAPOL-Announcement-Req frames that have been received by this PAE. |
| 1.3.111.2.802.1.1.15.1.5.1.1.5 | Columnieee8021XEapolPortUnavailableFramesRx | read-only | current | The number of EAPOL frames that are discarded because their processing would require the creation of a virtual port, for which there are inadequate or constrai… |
| 1.3.111.2.802.1.1.15.1.5.1.1.6 | Columnieee8021XEapolStartFramesRx | read-only | current | The number of EAPOL-Start frames that have been received by this PAE. |
| 1.3.111.2.802.1.1.15.1.5.1.1.7 | Columnieee8021XEapolEapFramesRx | read-only | current | The number of EAPOL-EAP frames that have been received by this PAE. |
| 1.3.111.2.802.1.1.15.1.5.1.1.8 | Columnieee8021XEapolLogoffFramesRx | read-only | current | The number of EAPOL-Logoff frames that have been received by this PAE. |
| 1.3.111.2.802.1.1.15.1.5.1.1.9 | Columnieee8021XEapolMkNoCknFramesRx | read-only | current | The number of MKPDUs received with MKA not enabled or CKN not recognized in this PAE. |
| 1.3.111.2.802.1.1.15.1.5.1.1.10 | Columnieee8021XEapolMkInvalidFramesRx | read-only | current | The number of MKPDUs failing in message authentication on receipt process in this PAE. |
| 1.3.111.2.802.1.1.15.1.5.1.1.11 | Columnieee8021XEapolLastRxFrameVersion | read-only | current | The version of last received EAPOL frame by this PAE. |
| 1.3.111.2.802.1.1.15.1.5.1.1.12 | Columnieee8021XEapolLastRxFrameSource | read-only | current | The source MAC address of last received EAPOL frame by this PAE. |
| 1.3.111.2.802.1.1.15.1.5.1.1.13 | Columnieee8021XEapolSuppEapFramesTx | read-only | current | The number of EAPOL-EAP frames that have been transmitted by the supplicant of this PAE. |
| 1.3.111.2.802.1.1.15.1.5.1.1.14 | Columnieee8021XEapolLogoffFramesTx | read-only | current | The number of EAPOL-Logoff frames that have been transmitted by this PAE. |
| 1.3.111.2.802.1.1.15.1.5.1.1.15 | Columnieee8021XEapolAnnouncementFramesTx | read-only | current | The number of EAPOL-Announcement frames that have been transmitted by this PAE. |
| 1.3.111.2.802.1.1.15.1.5.1.1.16 | Columnieee8021XEapolAnnouncementReqFramesTx | read-only | current | The number of EAPOL-Announcement-Req frames that have been transmitted by this PAE. |
| 1.3.111.2.802.1.1.15.1.5.1.1.17 | Columnieee8021XEapolStartFramesTx | read-only | current | The number of EAPOL-Start frames that have been received by this PAE. |
| 1.3.111.2.802.1.1.15.1.5.1.1.18 | Columnieee8021XEapolAuthEapFramesTx | read-only | current | The number of EAPOL-EAP frames that have been transmitted by the authenticator of this PAE. |
| 1.3.111.2.802.1.1.15.1.5.1.1.19 | Columnieee8021XEapolMkaFramesTx | read-only | current | The number of EAPOL-MKA frames with no CKN information that have been transmitted by this PAE. |
| 1.3.111.2.802.1.1.15.1.6 | Nodeieee8021XPaeKaY | |||
| 1.3.111.2.802.1.1.15.1.6.1 | Tableieee8021XKayMkaTable | not-accessible | current | A table of system level information for each interface supported by the KaY (Key Agreement Entity). This table will be instantiated if the object ieee8021XPaeP… |
| 1.3.111.2.802.1.1.15.1.6.1.1 | Rowieee8021XKayMkaEntry | not-accessible | current | An entry containing KaY MKA management information applicable to a particular interface. |
| 1.3.111.2.802.1.1.15.1.6.1.1.1 | Columnieee8021XKayMkaActive | read-only | current | This object will be 'true' if there is at least one MKA active actor, transmitting MKPDUs |
| 1.3.111.2.802.1.1.15.1.6.1.1.2 | Columnieee8021XKayMkaAuthenticated | read-only | current | This object will be 'true' if the principal actor, i.e. the actor controlling the PAC or SecY associated with the KaY, has determined that Controlled Port comm… |
| 1.3.111.2.802.1.1.15.1.6.1.1.3 | Columnieee8021XKayMkaSecured | read-only | current | This object will be 'true' if the principal actor has determined that communication should use MACsec. |
| 1.3.111.2.802.1.1.15.1.6.1.1.4 | Columnieee8021XKayMkaFailed | read-only | current | This object will be 'true' if the object ieee8021XKayMkaSecured in the same row is 'false' and MKA Life Time has elapsed since an MKA participant was last crea… |
| 1.3.111.2.802.1.1.15.1.6.1.1.5 | Columnieee8021XKayMkaActorSCI | read-only | current | The SCI assigned by the system to the port, applies to all the port's MKA actors. |
| 1.3.111.2.802.1.1.15.1.6.1.1.6 | Columnieee8021XKayMkaActorsPriority | read-write | current | The Key Server priority for all the port's MKA actors. Each participant encodes a key server priority, an 8-bit integer, in each MKPDU. |
| 1.3.111.2.802.1.1.15.1.6.1.1.7 | Columnieee8021XKayMkaKeyServerPriority | read-only | current | The priority of the elected Key Server through MKA in the CA. |
| 1.3.111.2.802.1.1.15.1.6.1.1.8 | Columnieee8021XKayMkaKeyServerSCI | read-only | current | The SCI for key server for the MKA principal actor. The length of this object is 0 if there is no principal actor, or that actor has no live peers. This object… |
| 1.3.111.2.802.1.1.15.1.6.1.1.9 | Columnieee8021XKayAllowedJoinGroup | read-only | current | This object will be 'true' if the KaY will accept Group CAKs distributed by MKA protocol. |
| 1.3.111.2.802.1.1.15.1.6.1.1.10 | Columnieee8021XKayAllowedFormGroup | read-only | current | This object will be 'true' if the KaY will attempt to use point-to-point CAKs to distribute a group CAK, if it is the Key Server for the MKA instances for all … |
| 1.3.111.2.802.1.1.15.1.6.1.1.11 | Columnieee8021XKayCreateNewGroup | read-write | current | This object is set 'true' if a new Group CAK is to be distributed if the KaY is the Key Server for the MKA instances for all the point-to-point CAKs. This obje… |
| 1.3.111.2.802.1.1.15.1.6.1.1.12 | Columnieee8021XKayMacSecCapability | read-only | current | This object indicates whether MACsec is implemented, and if so whether the implementation provides integrity protection only, integrity and integrity with conf… |
| 1.3.111.2.802.1.1.15.1.6.1.1.13 | Columnieee8021XKayMacSecDesired | read-write | current | This object will be set 'true' if the MKA participants desire the use of MACsec to protect frames with this KaY. |
| 1.3.111.2.802.1.1.15.1.6.1.1.14 | Columnieee8021XKayMacSecProtect | read-only | current | The status of the MACsec protection function for this KaY. 'true' : then the status of the MACsec protection function will be as object secyIfProtectFramesEnab… |
| 1.3.111.2.802.1.1.15.1.6.1.1.15 | Columnieee8021XKayMacSecReplayProtect | read-only | current | The status of the MACsec replay protection function for this KaY. 'true' : then the status of the MACsec replay protection function will be as secyIfReplayProt… |
| 1.3.111.2.802.1.1.15.1.6.1.1.16 | Columnieee8021XKayMacSecValidate | read-only | current | The status of the MACsec validation function for this KaY. 'true' : then the status of the MACsec validation function will be as secyIfValidateFrames object co… |
| 1.3.111.2.802.1.1.15.1.6.1.1.17 | Columnieee8021XKayMacSecConfidentialityOffset | read-write | current | The confidentiality protection offset options for the selected cipher suite in the MACsec. If the cipher suite does not have this capability, the configured va… |
| 1.3.111.2.802.1.1.15.1.6.1.1.18 | Columnieee8021XKayMkaTxKN | read-only | current | The key number assigned by the key server to the SAK currently being used for transmission. This object will be 0 if MACsec is not being used or the key number… |
| 1.3.111.2.802.1.1.15.1.6.1.1.19 | Columnieee8021XKayMkaTxAN | read-only | current | The AN assigned by the key server for use with the key number for transmission. This row pointer will point to an entry in the secyTxSATable which the secyTxSC… |
| 1.3.111.2.802.1.1.15.1.6.1.1.20 | Columnieee8021XKayMkaRxKN | read-only | current | The key number assigned by the key server to the oldest SAK currently being used for reception. It is the same as the key number for transmission if a single S… |
| 1.3.111.2.802.1.1.15.1.6.1.1.21 | Columnieee8021XKayMkaRxAN | read-only | current | The AN assigned by the key server for use with the key number for reception. It is the same as AN for transmission if a single SAK is currently in use. This ro… |
| 1.3.111.2.802.1.1.15.1.6.1.1.22 | Columnieee8021XKayMkaSuspendFor | read-write | current | Set by management to a non-zero number of seconds between 1 and MKA Suspension Limit to initiate a suspension (9.18) of that duration (if the KaY's principal a… |
| 1.3.111.2.802.1.1.15.1.6.1.1.23 | Columnieee8021XKayMkaSuspendOnRequest | read-write | current | The status of the suspendOnRequest function for this KaY. 'true' : then the KaY's principal actor will initiate a suspension if it is the Key Server and anothe… |
| 1.3.111.2.802.1.1.15.1.6.1.1.24 | Columnieee8021XKayMkaSuspendedWhile | read-write | current | Read by management to determine if a suspension is in progress and to discover the remaining duration of that suspension. May be set directly to coordinate in-… |
| 1.3.111.2.802.1.1.15.1.6.2 | Tableieee8021XKayMkaParticipantTable | not-accessible | current | A table for each MKA participant supported by the KaY MKA entity. For the writeable objects in this table, the configured value shall be stored in persistent m… |
| 1.3.111.2.802.1.1.15.1.6.2.1 | Rowieee8021XKayMkaParticipantEntry | not-accessible | current | An entry containing KaY MKA management information applicable to a MKA participant. |
| 1.3.111.2.802.1.1.15.1.6.2.1.1 | Columnieee8021XKayMkaPartCKN | not-accessible | current | The CKN information for this MKA participant. |
| 1.3.111.2.802.1.1.15.1.6.2.1.2 | Columnieee8021XKayMkaPartKMD | read-create | current | The KMD information for this MKA participant. |
| 1.3.111.2.802.1.1.15.1.6.2.1.3 | Columnieee8021XKayMkaPartNID | read-create | current | The NID information for this MKA participant. |
| 1.3.111.2.802.1.1.15.1.6.2.1.4 | Columnieee8021XKayMkaPartCached | read-create | current | This object is set 'true' by the KaY if the participant's parameters are cached. If this object is 'true', this object can be set 'false' cleared by management… |
| 1.3.111.2.802.1.1.15.1.6.2.1.5 | Columnieee8021XKayMkaPartActive | read-only | current | This object is set 'true' if the participant is active, i.e. is currently transmitting periodic MKPDUs. |
| 1.3.111.2.802.1.1.15.1.6.2.1.6 | Columnieee8021XKayMkaPartRetain | read-create | current | This object is set 'true' to retain the participant in the cache, even if the KaY would normally remove it (due to lack of use for example) |
| 1.3.111.2.802.1.1.15.1.6.2.1.7 | Columnieee8021XKayMkaPartActivateControl | read-create | current | This object is for controlling the participant's behavior when the participant is activated. 'default' : the participant is from cached entries created by the … |
| 1.3.111.2.802.1.1.15.1.6.2.1.8 | Columnieee8021XKayMkaPartPrincipal | read-only | current | This object is set 'true' if the participant is currently the principal actor. |
| 1.3.111.2.802.1.1.15.1.6.2.1.9 | Columnieee8021XKayMkaPartDistCKN | read-only | current | The CKN for the last CAK distributed either by the actor or one of its partners. Empty string for this object will be provided if this participant has not been… |
| 1.3.111.2.802.1.1.15.1.6.2.1.10 | Columnieee8021XKayMkaPartRowStatus | read-create | current | The object to create the parameters for the supported participant information in the system. If the participant information is from downloaded policies, this o… |
| 1.3.111.2.802.1.1.15.1.6.3 | Tableieee8021XKayMkaPeerListTable | not-accessible | current | A table containing the lists of Live Peers and Potential Peers, for all MKA instances for which the KaY is active. |
| 1.3.111.2.802.1.1.15.1.6.3.1 | Rowieee8021XKayMkaPeerListEntry | not-accessible | current | A table entry for one of the peers for one of the MKA instances for which this KaY is an active participant. |
| 1.3.111.2.802.1.1.15.1.6.3.1.1 | Columnieee8021XKayMkaPeerListMI | not-accessible | current | The peer entry's MI information in the peer list of this active participant in MKA protocol. |
| 1.3.111.2.802.1.1.15.1.6.3.1.2 | Columnieee8021XKayMkaPeerListMN | read-only | current | The peer entry's latest MN information in the peer list of this active participant in MKA protocol. |
| 1.3.111.2.802.1.1.15.1.6.3.1.3 | Columnieee8021XKayMkaPeerListType | read-only | current | The peer entry's type in the peer list of this active participant in MKA protocol. 'livePeerList' : the peer entry is in the Live Peer List. 'potentialPeerList… |
| 1.3.111.2.802.1.1.15.1.6.3.1.4 | Columnieee8021XKayMkaPeerListSCI | read-only | current | The SCI information of the peer entry in the peer list of this active participant in MKA protocol. |
| 1.3.111.2.802.1.1.15.1.7 | Nodeieee8021XPaeNetworkIdentifier | |||
| 1.3.111.2.802.1.1.15.1.7.1 | Tableieee8021XNidConfigTable | not-accessible | current | A table that contains the configuration objects for the network announcement information for the Logon Process. The detail operation of the Logon Process can v… |
| 1.3.111.2.802.1.1.15.1.7.1.1 | Rowieee8021XNidConfigEntry | not-accessible | current | An entry contains network announcement parameters for a NID. |
| 1.3.111.2.802.1.1.15.1.7.1.1.1 | Columnieee8021XNidNID | not-accessible | current | The network identifier to identify NID configuration in the PAE. |
| 1.3.111.2.802.1.1.15.1.7.1.1.2 | Columnieee8021XNidUseEap | read-create | current | Determines when the Logon Process will initiate EAP, if the Supplicant and or Authenticator are enabled, and takes one of the following values: 'never' : Never… |
| 1.3.111.2.802.1.1.15.1.7.1.1.3 | Columnieee8021XNidUnauthAllowed | read-create | current | Determines when the Logon Process will tell the CP state machine to provide unauthenticated connectivity, and takes one of the following values: 'never' : Neve… |
| 1.3.111.2.802.1.1.15.1.7.1.1.4 | Columnieee8021XNidUnsecuredAllowed | read-create | current | Determines when the Logon Process will tell the CP state machine to provide authenticated but unsecured connectivity, takes one of the following values: 'never… |
| 1.3.111.2.802.1.1.15.1.7.1.1.5 | Columnieee8021XNidUnauthenticatedAccess | read-create | current | The configured access capability of the port's clients without authentication in this NID. |
| 1.3.111.2.802.1.1.15.1.7.1.1.6 | Columnieee8021XNidAccessCapabilities | read-create | current | The authentication and protection capabilities supported for the NID. |
| 1.3.111.2.802.1.1.15.1.7.1.1.7 | Columnieee8021XNidKMD | read-create | current | The configured KMD information for this NID. |
| 1.3.111.2.802.1.1.15.1.7.1.1.8 | Columnieee8021XNidRowStatus | read-create | current | The object to create the parameters for the supported Network Announcement information in the system. If the Network Announcement information of the entry is f… |
| 1.3.111.2.802.1.1.15.1.7.2 | Tableieee8021XAnnounceTable | not-accessible | current | A table contains the status information that the Announcers announce in the network announcement of the PAE system. This table will be instantiated if the obje… |
| 1.3.111.2.802.1.1.15.1.7.2.1 | Rowieee8021XAnnounceEntry | not-accessible | current | An entry contains an Announcer's status information. |
| 1.3.111.2.802.1.1.15.1.7.2.1.1 | Columnieee8021XAnnounceNID | not-accessible | current | The NID information to identify a transmitting network announcement for the PAE. |
| 1.3.111.2.802.1.1.15.1.7.2.1.2 | Columnieee8021XAnnounceAccessStatus | read-only | current | The object information reflects connectivity as a result of authentication attempts of this NID for this Announcer. |
| 1.3.111.2.802.1.1.15.1.7.3 | Tableieee8021XAnnouncementTable | not-accessible | current | A table contains the status information that the Listeners receive in the network announcement of the PAE system. This table will be instantiated if the object… |
| 1.3.111.2.802.1.1.15.1.7.3.1 | Rowieee8021XAnnouncementEntry | not-accessible | current | An entry contains a Listener's status information. |
| 1.3.111.2.802.1.1.15.1.7.3.1.1 | Columnieee8021XAnnouncementNID | not-accessible | current | The NID information to identify a received network announcement for the PAE. |
| 1.3.111.2.802.1.1.15.1.7.3.1.2 | Columnieee8021XAnnouncementKMD | read-only | current | The KMD information for this received network announcement of the PAE. |
| 1.3.111.2.802.1.1.15.1.7.3.1.3 | Columnieee8021XAnnouncementSpecific | read-only | current | This object indicates the received announcement information was specific to the receiving PAE, not generic for all systems attached to the LAN. |
| 1.3.111.2.802.1.1.15.1.7.3.1.4 | Columnieee8021XAnnouncementAccessStatus | read-only | current | The object information reflects connectivity as a result of authentication attempts for this received network announcement of the PAE. |
| 1.3.111.2.802.1.1.15.1.7.3.1.5 | Columnieee8021XAnnouncementAccessRequested | read-only | current | The authenticated access has been requested for this particular NID or not. |
| 1.3.111.2.802.1.1.15.1.7.3.1.6 | Columnieee8021XAnnouncementUnauthAccess | read-only | current | The access capability of the port's clients without authentication in this received network announcement of the PAE. 'openAccess', 'limitedAccess' should not b… |
| 1.3.111.2.802.1.1.15.1.7.3.1.7 | Columnieee8021XAnnouncementCapabilities | read-only | current | The announcement capabilities of this received network announcement for this PAE. |
| 1.3.111.2.802.1.1.15.1.7.4 | Tableieee8021XAnnouncementCipherSuitesTable | not-accessible | current | A table contains the Cipher Suites information that the Listeners receive in the network announcement of the PAE system. This table will be instantiated if the… |
| 1.3.111.2.802.1.1.15.1.7.4.1 | Rowieee8021XAnnouncementCipherSuitesEntry | not-accessible | current | An entry contains the Cipher Suite information which a Listener has reveived from network announcement. |
| 1.3.111.2.802.1.1.15.1.7.4.1.1 | Columnieee8021XAnnouncementCipherSuite | not-accessible | current | The identifier for the announced cipher suite. This is a global unique 64-bit (EUI-64) identifier to identify a cipher suite. |
| 1.3.111.2.802.1.1.15.1.7.4.1.2 | Columnieee8021XAnnouncementCipherCapability | read-only | current | The capability of a Cipher Suite received from the network announcement by the Listener. A 2 octets Cipher Suite dependent implementation capability field prec… |
| 1.3.111.2.802.1.1.15.2 | Nodeieee8021XPaeMIBConformance | |||
| 1.3.111.2.802.1.1.15.2.1 | Nodeieee8021XPaeCompliances | |||
| 1.3.111.2.802.1.1.15.2.1.1 | Complianceieee8021XPaeCompliance | read-only | current | The compliance statement for device support of Port Access Control. |
| 1.3.111.2.802.1.1.15.2.1.2 | Complianceieee8021XPaeV2Compliance | read-only | current | The compliance statement for device support of Port Access Control as specified in 802.1X-2010 amended by 802.1Xbx. |
| 1.3.111.2.802.1.1.15.2.2 | Nodeieee8021XPaeGroups | |||
| 1.3.111.2.802.1.1.15.2.2.1 | Groupieee8021XPaeSystemGroup | current | A collection of objects providing system information for a PAE system and a PAE port status and control information. | |
| 1.3.111.2.802.1.1.15.2.2.2 | Groupieee8021XPacGroup | current | A collection of objects providing information of a PAC in the system. | |
| 1.3.111.2.802.1.1.15.2.2.3 | Groupieee8021XPaeLogonGroup | current | A collection of objects providing information of a Logon Process in the system. | |
| 1.3.111.2.802.1.1.15.2.2.4 | Groupieee8021XPaeAuthConfigGroup | current | A collection of objects providing configuration information of an Authenticator in the system. | |
| 1.3.111.2.802.1.1.15.2.2.5 | Groupieee8021XPaeSuppConfigGroup | current | A collection of objects providing configuration information of a Supplicant in the system. | |
| 1.3.111.2.802.1.1.15.2.2.6 | Groupieee8021XPaeEapolStatsGroup | current | A collection of objects providing counters and diagnostic information for the EAPOL in the system. | |
| 1.3.111.2.802.1.1.15.2.2.7 | Groupieee8021XPaeKaYMkaGroup | current | A collection of objects providing monitoring and controlling information of a KaY MKA in the system. | |
| 1.3.111.2.802.1.1.15.2.2.8 | Groupieee8021XPaeNetworkIdentifierGroup | current | A collection of objects providing monitoring and controlling information of an NID in the system. | |
| 1.3.111.2.802.1.1.15.2.2.9 | Groupieee8021XPaeAnnouncerGroup | current | A collection of objects providing status information for an Announcer in the system. | |
| 1.3.111.2.802.1.1.15.2.2.10 | Groupieee8021XPaeListenerGroup | current | A collection of objects providing status information for a Listener in the system. | |
| 1.3.111.2.802.1.1.15.2.2.11 | Groupieee8021XPaeKaYIsupgradeGroup | current | A collection of objects providing monitoring and control for MKA support of in-service upgrades. |
Type Definitions
| Name | Syntax | Status | Description |
|---|---|---|---|
| Ieee8021XMkaKeyServerPriority | OCTET STRING (SIZE (1)) | current | This textual convention indicates a Key Server priority information. Each MKA participant encodes a Key Server Priority, an 8-bit integer, in each MKPDU. Each participant selects the live participant advertising the hig… |
| Ieee8021XMkaKN | Unsigned32 (1..2147483648) | current | This textual convention indicates a Key Number (KN) used in MKA. The MN is a 32-bit integer assigned by that Key Server (sequentially, beginning with 1). |
| Ieee8021XMkaMI | OCTET STRING (SIZE (12)) | current | This textual convention indicates a Member Identifier (MI). The MI is a 96-bit random value chosen when the MKA Instance begins, used with a 32-bit MN to protect against replay attacks and to record liveliness in the Li… |
| Ieee8021XMkaMN | Unsigned32 (1..2147483648) | current | This textual convention indicates a Member Number (MN). The MN is a 32-bit value which begins at 1 and increases for each MKPDU transmitted. It is used with the MI to protect against replay attacks and to record livelin… |
| Ieee8021XPaeCKN | OCTET STRING (SIZE (1..16)) | current | This textual convention indicates the CAK name to identify the Connectivity Association Key (CAK) which is the root key in the MACsec Key Agreement key hierarchy. All potential members of the CA use the same CKN. |
| Ieee8021XPaeCKNOrNull | OCTET STRING (SIZE (0..16)) | current | This textual convention indicates the CAK name to identify the Connectivity Association Key (CAK) which is the root key in the MACsec Key Agreement key hierarchy. All potential members of the CA use the same CKN. If thi… |
| Ieee8021XPaeKMD | OCTET STRING (SIZE (0..253)) | current | This textual convention indicates a Key Management Domain (KMD). KMD is a string of UTF-8 characters that names the transmitting authenticator's key management domain. |
| Ieee8021XPaeNID | OCTET STRING (SIZE (1..100)) | current | This textual convention indicates a Network Identifier (NID). Each network is identified by a NID, a UTF-8 string used by network attached systems to select a network profile. |
| Ieee8021XPaeNIDAccessStatus | INTEGER { noAccess(0), remedialAccess(1), restrictedAccess(2), expectedAccess(3) } | current | This textual convention indicates the transmitter's Controlled Port operational status and current level of access resulting from authentication and the consequent authorization controls applied by that port's clients. … |
| Ieee8021XPaeNIDCapabilites | BITS { eap(0), eapMka(1), eapMkaMacSec(2), mka(3), mkaMacSec(4), higherLayer(5), higherLayerFallback(6), vendorSpecific(7) } | current | This textual convention indicates the combinations of authentication and protection capabilities supported for a NID. Any set of these combinations can be supported. |
| Ieee8021XPaeNIDOrNull | OCTET STRING (SIZE (0..100)) | current | This textual convention indicates a Network Identifier (NID). Each network is identified by a NID, a UTF-8 string used by network attached systems to select a network profile. If this is a zero length value, then the NU… |
| Ieee8021XPaeNIDUnauthenticatedStatus | INTEGER { noAccess(0), fallbackAccess(1), limitedAccess(2), openAccess(3) } | current | This textual convention indicates the access capabilities of the port's clients without authentication. 'noAccess' : Other than to authentication services (see Ieee8021XPaeNIDCapabilites information. 'fallbackAccess' : … |