Hi,
after going through the mib file for several hours i think i found the right OIDs to do what we need. I have not tested it through. Maybe someone can tell me if i am on the right way 🙂 I have just imported the mib file (for our envirement it was for exos Version 31.5.1.6) into a mib file explorer and going through every OID.
With this table you are able to read out if mac based authentication is enabled on which port. You are also able to make changes regarding mac-based authentication on a specific port.
etsysMACAuthenticationPortConfigTable
1.3.6.1.4.1.5624.1.2.25.1.2.1
Example:
Port 1 MAC based auth Off/on
etsysMACAuthenticationPortEnable
1.3.6.1.4.1.5624.1.2.25.1.2.1.1.4.1001 = 2(disabled) 1 (enabled)
Reauthenticate Devices on Port 1 -> A Read allways return 2(false)
etsysMACAuthenticationPortInitialize
1.3.6.1.4.1.5624.1.2.25.1.2.1.1.2.1001 = 1(true) 2(false)
This OID reads out the current mac-based authenticated devices and lists them with the index number of the port:
etsysMACAuthenticationMACConfigTable
1.3.6.1.4.1.5624.1.2.25.1.3.1
To read out the Authentication State of a specific Port you can use this table
etsysMultiAuthSessionPortTable
1.3.6.1.4.1.5624.1.2.46.1.4.2
In this table you can find a list of index numbers (ports) and if a device is authenticated or not on this port. Also you can see which authentication methode works or not. For Exampel dot1x fails but mac-based authentication was successful.
The possible Authentication States are:
authSuccess(1), authFailed(2), authInProgress(3), authServerTimeout(4), authTerminated(5)
The status of authentication for this session. A value of authSuccess(1) means authentication was attempted and succeeded. A value of authFailed(2) means authentication was attempted and failed for a reason other than communication timing out with the authorization server. A value of authInProgress(3) means that the authorization process has been started but has not completed yet. A value of authServerTimeout(4) means that the request to the authorization server for this session timed out without a reply from the server. A value of authTerminated(5) indicates that the session was active or in progress and was subsequently terminated. A session may be terminated for several reasons, including but not limited to, session timeout, idle timeout, the ifOperStatus of the interface on which the session was authenticated transitioning out of the up(1) state, or explicit administrative management action.
Best regards
Stefan
