CISCO-NAC-NAD-MIB Download

cnnEouVersion

The version of EOU in use on the local system. Value zero indicates the version can not be determined.

cnnEouEnabled

Indicates whether the posture validation via EOU is globally enabled or disabled in the device.

cnnEouAllowClientless

Indicates whether to allow authentication of clientless hosts (system that does not run Cisco Trust Agent).

cnnEouAllowIpStationId

It indicates whether to send the host IP address in the calling station ID field of Radius request.

cnnEouLoggingEnabled

To enable or disable EOU system logging events. Set to 'true' to enable syslog message at an informational level (syslog level 6).

cnnEouMaxRetry

The number of maximum retry attempts for EOU.

cnnEouPort

The UDP port for EOU. The port cannot conflict with other UDP application.

cnnEouRateLimit

The number of clients that can be simultaneously validated. Set the rate limit to 0 (zero), rate limiting will be turned off. If the rate limit is set to 100 and there are 101 clients, validation will not occur until one drop off.

cnnEouTimeoutAAA

Timeout period used by NAD with AAA (Authentication, Authorization and Accounting.

cnnEouTimeoutHoldPeriod

Length of time that can elapse before the client sessions are purged from the system due to client inactivity.

cnnEouTimeoutRetransmit

The timeout period for the EOU message retransmitted.

cnnEouTimeoutRevalidation

The timeout period for the revalidation. Setting this object to 0 will globally disable periodic revalidation on this device.

cnnEouTimeoutStatusQuery

The timeout period for the status query after revalidation.

cnnEouCriticalRecoveryDelay

This object specifies the EOU critical recovery delay time for the device. A value of zero indicates that critical recovery delay feature is disabled.

cnnIpDeviceTrackingEnabled

Specifies whether the IP device tracking feature is globally enabled or disabled on this device.

cnnIpDeviceTrackingProbeCount

Specifies the number of times that this device sends the ARP probe to an IP device before removing the IP device from the IP device tracking table.

cnnIpDeviceTrackingProbeInterval

Specifies the number of the seconds that this device waits before resending the ARP probe.

cnnEouIfIpDevTrackConfigTable

A table of IP Device Tracking configuration for EOU interfaces in the system.

cnnEouIfIpDevTrackConfigEntry

A set of EOU IP Device Tracking configuration information on an EOU interface.

cnnEouIfIpDevTrackEnabled

Specifies if IP Device Tracking feature is enabled on this interface.

cnnEouAuthIpTable

A list of statically authorized IP devices in the system.

cnnEouAuthIpEntry

An entry containing the associated policy information of the statically authorized IP device. An entry can be created, or deleted by using cnnEouAuthIpRowStatus. Each statically authorized IP device is associated with a policy. By creating, deleting or ...

cnnEouAuthIpAddrType

The type of Internet address by which the statically authorized IP device is reachable.

cnnEouAuthIpAddr

The Internet address for the statically authorized IP device. The type of this address is determined by the value of the cnnEouAuthIpAddrType object.

cnnEouAuthIpAddrMask

Using 'inverse mask' to support IP wildcards. The mask used with the source IP address will specify what traffic is exempted from EAP validation. e.g. cnnEouAuthIpAddr: 10.0.0.0 cnnEouAuthIpAddrMask: 0.255.255.255 This exempts any IP in the subnet at 10. ...

cnnEouAuthIpPolicy

The policy associate with the statically authorized IP device. The policy needs to be present in the policy-database before an statically authorized IP device can be associated to it.

cnnEouAuthIpStorageType

The storage type for this conceptual row.

cnnEouAuthIpRowStatus

The status of this conceptual row. To create an entry, users set the value of this object to 'createAndGo'. The transition from 'active' to 'notInService' may not be supported. A row may be deleted by setting the RowStatus to 'destroy'. Once a row becomes ...

cnnEouAuthMacTable

A list of static authorized devices identified by MAC address.

cnnEouAuthMacEntry

An entry containing the associated policy information of the statically authorized device identified by MAC address. The entry is created, and deleted by using cnnEouAuthMacRowStatus.

cnnEouAuthMacAddr

The MAC address of the static authorized device.

cnnEouAuthMacAddrMask

Using 'inverse mask' support MAC wildcards. The mask used with the source MAC address will specify what traffic is exempted from EAP validation. e.g. cnnEouAuthMacAddr: 00:0d:bc:ef:eb:bd cnnEouAuthMacAddrMask: 00:00:ff:ff:ff:ff This exempts any MAC in th ...

cnnEouAuthMacPolicy

The policy associate with the statically authorized device identified by MAC address. The policy needs to be present in the policy-database before an device can be associated to it.

cnnEouAuthMacStorageType

The storage type for this conceptual row.

cnnEouAuthMacRowStatus

The status of this conceptual row. To create an entry, users set the value of this object to 'createAndGo'. The transition from 'active' to 'notInService' may not be supported. A row may be deleted by setting the RowStatus to 'destroy'. Once a row becomes ...

cnnEouAuthDeviceTypeTable

A list of static authorized devices indexed by device type.

cnnEouAuthDeviceTypeEntry

An entry containing the information of the static authorized device indexed by device type.

cnnEouAuthDeviceType

The static authorize device type.

cnnEouAuthDeviceTypeStorageType

The storage type for this conceptual row.

cnnEouAuthDeviceTypeRowStatus

This object is used to create or delete an entry in the cnnEouAuthDeviceTypeTable. A row may be created using the 'CreateAndGo' option. A row may be deleted by setting the RowStatus to 'destroy'. Once a row becomes active, values within the row cannot be ...

cnnEouIfConfigTable

A list of EOU configurations for the EOU capable interfaces.

cnnEouIfConfigEntry

An entry containing the EOU configuration information for a particular EOU capable interface.

cnnEouIfAdminStatus

Setting this object to 'auto' means the Posture Validation via EOU ability at this interface would be enabled if a end point device is found. If the value of this object is 'disabled' then the interface will act as it would if it had no posture validation ...

cnnEouIfMaxRetry

The maximum number of retry by EOU for this interface.

cnnEouIfValidateAction

An EOU validate action to the devices associated with the interface. This object always has the value 'none' when read. none(1) no operation is performed. initialize(2) Manually initiates reauthentication of all the endpoint devices associated ...

cnnEouIfTimeoutGlobalConfig

This object indicates whether the timeout configurations on this interface are based on the corresponding global timeout configurations or not. aaa(0) If this bit is set, the value of cnnEouIfTimeoutAAA is based on the value of cnnEouTimeoutAAA. ...

cnnEouIfTimeoutAAA

The timeout period used by EOU for the AAA server connection on this interface.

cnnEouIfTimeoutHoldPeriod

The hold period of this interface. The hold period is the length of the time that can elapse before the client session entries are purged from the system due to client inactivity.

cnnEouIfTimeoutRetransmit

The timeout period for the EOU message retransmitted at this interface.

cnnEouIfTimeoutRevalidation

The timeout period for the revalidation at this interface. Setting this object to 0 will disable periodic revalidation on this device.

cnnEouIfTimeoutStatusQuery

The timeout period for the status query after revalidation at this interface.

cnnEouIfAaaFailPolicy

Specified the name of the policy template to be applied when cnnEouHostResultState is 'aaaFail'. The specified policy name must exist in cpgPolicyTable if it is not empty string.

cnnEouHostValidateAction

An EOU validate action to the devices. Initialize: When a device is initialized, all previous state information about that host is deleted and the admission control process for that host will start with no state. Revalidate: When a host is revalidated, st ...

cnnEouHostValidateIpAddrType

The type of Internet address for a detected host.

cnnEouHostValidateIpAddr

The Internet address for a detected host. The type of this address is determined by the value of the cnnEouHostValidateIpAddrType.

cnnEouHostValidateMacAddr

The Mac address for a detected host.

cnnEouHostValidatePostureToken

Type of posture token for a detected host. This object is deprecated and replaced by cnnEouHostValidatePostureTokenStr.

cnnEouHostMaxQueries

Maximum number of query entries allowed to be outstanding at any time, in the cnnEouHostQueryTable.

cnnEouHostQueryTable

A control table used to query the client host by specifying retrieval criteria for the EOU information. Each row instance in the table represents a query with its parameters. The resulting data for each instance of a query in this table is returned in th ...

cnnEouHostQueryEntry

A conceptual row of the cnnEouHostQueryTable used to setup retrieval criteria to search for the EOU hosts on the system. The actual search is started by setting the value of cnnEouHostQueryStatus to 'active'. Once a row becomes active, values within the r ...

cnnEouHostQueryIndex

An arbitrary integer in the range of 1 to cnnEouHostMaxQueries to identify this control query.

cnnEouHostQueryMask

Setting each value causes the appropriate action: authenClientless(1) - causes the creation of row(s) in the cnnHostQueryResultTable corresponding to the current EOU information for the clientless host(s) on the system. authenEap(2) - causes the creation ...

cnnEouHostQueryInterface

An index value that uniquely identifies an interface where the end point device is connected. The interface identified by a particular value of this index is the same interface as identified by the same value of ifIndex.

cnnEouHostQueryIpAddrType

The internet address type for the queried host.

cnnEouHostQueryIpAddr

The Internet address for the queried host. The type of this address is determined by the value of the cnnEouHostQueryIpAddrType. If the 'ip' option of cnnEouHostQueryMask is selected, an appropriate IP address type is assigned to cnnEouHostQueryIpAddrTyp ...

cnnEouHostQueryMacAddr

The Mac address for the queried host. If the 'mac' option of cnnEouHostQueryMask is selected, an appropriate MAC address is assigned to this object then only the host with the specified MAC address will be containing in the result table.

cnnEouHostQueryPostureToken

The assigned posture token for the queried host. If the 'postureToken' option of cnnEouHostQueryMask is selected, an appropriate posture token is assigned to this object then only the host with the specified posture token will be containing in the result ...

cnnEouHostQuerySkipNHosts

The number of searched detected hosts to be skipped before storing any host in cnnEouHostResultTable. This object can be used along with cnnEouHostQueryTotalHosts object to skip previously found hosts by setting the variable equal to the number of the ass ...

cnnEouHostQueryMaxResultRows

This is the maximum number of rows in the cnnEouHostResultTable, resulting from this query. A value of zero (0) indicates no limit rows in cnnEouHostResultTable, resulting from this query.

cnnEouHostQueryTotalHosts

Indicating the total number of the hosts matching the query criterion. -1 - Either the query has not been started or the agent is still processing this query instance. It is the default value when the row is instantiated. 0..2147483647 - The search has e ...

cnnEouHostQueryRows

Indicating the status of the query by following values: -1 - Either the query has not been started or the agent is still processing this query instance. It is the default value when the row is instantiated. 0..2147483647 - The search has ended and this i ...

cnnEouHostQueryCreateTime

Time when this query was last set to active.

cnnEouHostQueryStatus

The status object used to manage rows in this table. When set to 'createAndGo', the query is initiated. The completion of the query is indicated by the value of cnnEouHostQueryRows as soon as it becomes greater than or equal to 0. Once a row becomes activ ...

cnnEouHostQueryPostureTokenStr

The assigned posture token string for the queried host. If the 'postureTokenString' option of cnnEouHostQueryMask is selected, an appropriate posture token string is assigned to this object then only the host with the specified posture token string will ...

cnnEouHostResultTable

A table containing current detected host information corresponding to all the completed queries set up in the cnnEouHostQueryTable, that were detected in the device. The query result will not become available until the current search completes.

cnnEouHostResultEntry

A conceptual row of cnnEouHostResultTable, containing posture validation information of an detected host that matches the search criteria set in the corresponding row of cnnEouHostQueryTable.

cnnEouHostResultIndex

A number which uniquely identifies a result entry matching a particular query.

cnnEouHostResultAssocIf

An index value that uniquely identifies an interface where the end point device is currently connected. The interface identified by a particular value of this index is the same interface as identified by the same value of ifIndex.

cnnEouHostResultIpAddrType

The type of Internet address by which the detected host is reachable.

cnnEouHostResultIpAddr

The internet address for the detected host. The type of this address is determined by the value of the cnnEouHostResultIpAddrType object.

cnnEouHostResultMacAddr

Indicates The MAC address of the detected host.

cnnEouHostResultAuthType

This object indicates the authentication type used in the posture validation process for this detected host.

cnnEouHostResultPostureToken

Indicates the posture token of the detected host. During the posture validation process, the host will be placed into a particular category and have a token assigned to it. This assignment will depend on the state of the software that is resident on the ...

cnnEouHostResultAge

Indicates the length of time, in minutes, that host has been connected.

cnnEouHostResultUrlRedir

This object specifies the URL(Web page) where the latest Anti-Virus file can be downloaded or upgraded, if the detected host fails the credential validation then it may require remediation.

cnnEouHostResultAclName

The mapped ACL to this detected host. A character string for an ACL (Access Control List) name. Valid characters are a-z, A-Z, 0-9, ,'#', '-', '_' and '.'. Some devices may require that an ACL name contains at least one non-numeric character. ACL name ...

cnnEouHostResultStatusQryPeriod

The timeout period, in seconds, for the status query after revalidation at this interface.

cnnEouHostResultRevalidatePeriod

The timeout period, in second, for the revalidation at this interface.

cnnEouHostResultState

Indicates the current EOU state of this detected host.

cnnEouHostResultPostureTokenStr

Indicates the posture token string of the detected host. During the posture validation process, the host will be placed into a particular category and have a token assigned to it. This assignment will depend on the state of the software that is resident ...

cnnEouHostValidatePostureTokenStr

Posture token string for a detected host.

ciscoNacNadEouGlobalGroup

A collection of objects providing the global configuration on the NAD.

ciscoNacNadEouAuthIpGroup

A collection of objects providing the configuration for the static authorization IP device with policy associated.

ciscoNacNadEouAuthMacGroup

A collection of objects providing the configuration for the static authorization MAC device with policy associated.

ciscoNacNadEouAuthDeviceTypeGrp

A collection of objects providing the configuration for the static authorization device identified by device type.

ciscoNacNadEouIfConfigGroup

A collection of objects providing the interface configuration on the NAD.

ciscoNacNadEouHostGroup

A collection of objects providing the host configuration on the NAD.

ciscoNacNadEouIfTimeoutGroup

A collection of objects providing the timeout configuration on the interface.

ciscoNacNadEouIfMaxRetryGroup

A collection of objects providing the max-retry configuration on the interface.

ciscoNacNadEouRateLimitGroup

A collection of objects providing the rate limit configuration.

ciscoNacNadEouIfAdminGroup

A collection of objects providing the administrative configuration on the interfaces.

ciscoNacNadEouHostAgeGroup

A collection of objects providing the age information on the interface.

ciscoNacNadEouHostUrlRedir

A collection of objects providing the redirect URL information on the interface.

ciscoNacNadEouHostAclGroup

A collection of objects providing the ACL(Access Control List) information on the interface.

ciscoNacNadEouIfAaaFailPolicyGrp

A collection of objects providing the AAA failed policy for the interface.

ciscoNacNadEouHostGrp

A collection of objects providing the host configuration on the NAD.

cnnIpDeviceTrackingConfigGrp

A collection of objects providing IP device tracking for the device.

cnnEouCriticalRecoveryDelayGrp

A collection of objects providing critical recovery delay for the device.

cnnEouIfIpDevTrackConfigGrp

A collection of objects providing EOU IP device tracking per interface in the device.