enterasys-pwa-mib Download
This MIB module provides the ability to configure the
Port Web Authentication (PWA) component in a switch.
PWA provides a way of authenticating a user on a
switch port before allowing the user general access
to the network. Only the essential protocols and
services required by the authentication process
are allowed on the segment between the end-station
and the switch port. All other traffic will be
discarded. When a user is in the unauthenticated
state, any traffic generated by the end-station
will not go beyond the switch port that they are
connected to.
The PWA/login process from the user standpoint is
simple. The user makes a request via their favorite
web browser for the 'secureharbour' web page. Depending
upon the authenticated state of the port, a login page
is provided so that the user can enter their username
and password, or a logout page is presented to the user.
When they submit their login page, the switch will then
authenticate them via a preconfigured radius server.
If the login is successful, then the port that the
end-station is connected to will be turned on and
full network access will be granted according to the
users port configuration on the switch.
This MIB module also provides status about the PWA
component and statistics about all current users who
are logged into the switch.
With the IPHost SNMP tool, you can monitor any SNMP objects of the
enterasys-pwa-mib
. You can select a variable to monitor using the built-in IPHost MIB browser that provides you with all variables,
their current values and descriptions taken from the
enterasys-pwa-mib
.
OID list for enterasys-pwa-mib
- etsysPwaSystemAuthControl
- The administrative enable/disable state for Port Web Authentication Control in a System. Enabling this object turns on the PWA system.
- etsysPwaSystemAuthHostName
- This is the hostname part the Uniform Resource Locator (URL). This object is a DNS/WINS name and is considered to be bound to the etsysPwaSystemAuthIPAddress. This object must not contain the protocol portion of the URL nor any directory or filenames. Cha ...
- etsysPwaSystemAuthBanner
- The banner that will be displayed on the web login page of the Port Web Authentication Control in a System. This banner is a courtesy introduction to the network, which the user sees on the login page.
- etsysPwaSystemPwaNameServicesEnable
- The enable state of the name services application. Enabling this object turns on the Domain Name Service (DNS) and the Windows Internet Naming Services (WINS) clients. These clients will resolve only requests for the etsysPwaSystemAuthHostName. Disabling ...
- etsysPwaSystemAuthIPAddressType
- This object has been deprecated. Refer to etsysPwaSystemAuthIPAddress for the reason. The textual convention for InetAddressType states that this object must be registered immediately before the InetAddress that it defines. etsysPwaSystemAuthInetAddressT ...
- etsysPwaSystemAuthIPAddress
- This object has been deprecated due to an incorrect initial implementation of this MIB. This object was originally an InetAddress but some versions of the E7 firmware implemented it as an IpAddress. The syntax of this object was changed to allow managem ...
- etsysPwaSystemAuthProtocol
- The authentication protocol used for this switch module. When set to a chap(1), the authentication scheme used will be the 'PPP Challenge Handshake Authentication Protocol (CHAP)', when set to a pap(2), the scheme will be 'Password Authentication Protocol ...
- etsysPwaSystemAuthDomain
- The domain name for which this module resides in.
- etsysPwaSystemAuthInetAddressType
- A value that represents a type of etsysPwaSystemAuthInetAddress. unknown(0) An unknown address type. This value MUST be used if the value of the corresponding InetAddress object is a zero-length string. It may also be used to indicate an IP address which ...
- etsysPwaSystemAuthInetAddress
- The IP address bound to the etsysPwaSystemAuthHostName. The format of this object is defined in the etsysPwaSystemAuthInetAddressType object. This address MUST be supplied for authentication to work. This is a globally unique address and must be the same ...
- etsysPwaSystemAuthEnhancedMode
- The enable state of the PWA enhanced mode. When this feature is enabled users on unauthenticated ports will be presented the login page on their initial web access. The etsysPwaControlledPortControl object MUST be set to auto(2) for this feature to functi ...
- etsysPwaLogoDisplayStatus
- When this object is set to enabled, the secureharbour logo will be displayed on the PWA login web pages. When it is set to disabled, the logo will not be displayed.
- etsysPwaSystemGuestUsername
- The username that the Guest Networking feature will use to authenticate users that do not override this value in the login page.
- etsysPwaSystemGuestPassword
- The password that the Guest Networking feature will use to authenticate users that do not override the guest username. On a read this object will always return an empty string.
- etsysPwaSystemGuestPasswordValid
- true(1) - indicates that etsysPwaGuestPassword was last set with some value other than the empty string. false(2) - indicates that etsysPwaGuestPassword has never been set, or was last set to the empty string.
- etsysPwaSystemGuestNetworkingStatus
- Guest Networking is a feature that allows a user to get default policy access to the network without having to know a username or password. When this feature is not disabled(1), the username on the login page will be populated with the value from the obje ...
- etsysPwaSystemEnhancedModeRefreshTime
- This is the value that is displayed on the PWA login success page as the redirect time. If a user, using PWA enhanced mode, enters a URL of 'http://enterasys.com' prior to being presented with the PWA login page and then successfully authenticates into th ...
- etsysPwaPortConfigurationTable
- A table of configuration objects for each port that are supported by the Port Web Authentication Entity. An entry appears in this table for each port in this system. All objects/instances in this table are stored persistent memory.
- etsysPwaPortConfigurationEntry
- The ifIndex number, maximum number of requests, quiet period between failed attempts, and initialization control for a Port. This table holds the objects for configuring the PWA system.
- etsysPwaPortNumber
- The ifIndex number associated with this port.
- etsysPwaInitializePort
- The initialization control for this ifIndex. This object can be used to unauthenticate a user on a port or to return the port to its initial default state due to some unknown condition. Setting this attribute to true(1) causes the Port to be initialized. ...
- etsysPwaAuthQuietPeriod
- The value, in seconds, of the quietPeriod constant currently in use by the Port Web Authenticator state machine. After the user attempts unsuccessfully to login a number of times equal to the etsysPwaAuthMaxReq constant, then the ifIndex is locked for a t ...
- etsysPwaAuthMaxReq
- The value of the maxReq constant currently in use by the Port Web Authenticator state machine. This represents the maximum number of failed retry attempts before preventing any further attempts for a time period equal to the value of etsysPwaAuthQuietPeri ...
- etsysPwaControlledPortControl
- The authentication method of the ifIndex. A value of forceUnauthorized(1) indicates that the port is always unauthenticated. When set to this value the ifindex is essentially disabled. A value of auto(2) indicates that the ifindex will authenticate users ...
- etsysPwaAuthStatusTable
- A table that contains the status objects for the Port Web Authenticator associated with each ifIndex. An entry appears in this table for each ifIndex that may authenticate access to itself. All objects/instances in this table are stored in persistent memo ...
- etsysPwaAuthStatusEntry
- The status information for an Authenticator PWA.
- etsysPwaAuthPwaState
- The current value of the Port Web Authenticator state machine. When set to disconnected(1) no user is logged in. When set to authenticating(2), it indicates that a login is in process and has not yet completed. A value of authenticated(3) indicates a user ...
- etsysPwaMaxFailedAttempts
- The total number of failed logon attempts on this ifIndex.
- etsysPwaFailedAttemptsSinceLogon
- The total number of failed logon attempts since the last successful logon on this ifIndex.
- etsysPwaLastLogonResult
- This ASCII string provides an unstructured way for the web based auth agent to communicate detailed error and status indications to a network administrator.
- etsysPwaAuthSessionStatsTable
- A table that contains the session statistics objects for the Authenticator PWA associated with each ifIndex. An entry appears in this table for each ifIndex that may authenticate access to itself. Session entries are collected for each ifIndex. All objec ...
- etsysPwaAuthSessionStatsEntry
- The session statistics information for an Authenticator PWA. This shows the current values being collected for each session that is still in progress, or the final values for the last valid session on each ifIndex where there is no session currently activ ...
- etsysPwaAuthSessionID
- A unique ID that identifies the session on this ifindex.
- etsysPwaAuthSessionOctetsRx
- The number of octets received in user data frames on this ifIndex during the session.
- etsysPwaAuthSessionOctetsRxOverflow
- The number of times the associated etsysPwaAuthSessionOctetsRx counter has overflowed.
- etsysPwaAuthSessionOctetsTx
- The number of octets transmitted in user data frames on this ifIndex during the session.
- etsysPwaAuthSessionOctetsTxOverflow
- The number of times the associated etsysPwaAuthSessionOctetsTx counter has overflowed.
- etsysPwaAuthSessionFramesRx
- The number of user data frames received on this ifIndex during the session.
- etsysPwaAuthSessionFramesTx
- The number of user data frames transmitted on this ifIndex during the session.
- etsysPwaAuthSessionStartTime
- The start time of the session in hundredths of seconds since reset.
- etsysPwaAuthSessionDuration
- The duration of the session in hundredths of seconds.
- etsysPwaAuthSessionTerminateCause
- The reason for the session termination. When set to linkDown(1), the ifindex has no link. When set to logoff(2), a user has successfully logged off the network on this ifindex. When set to authControlForceUnauth(3) an administrator has terminated the user ...
- etsysPwaAuthSessionMacAddress
- The mac address of the remote user of this session entry stored for this ifIndex.
- etsysPwaAuthSessionIPAddressType
- A value that represents a type of etsysPwaAuthSessionIPAddress. unknown(0) An unknown address type. This value MUST be used if the value of the corresponding InetAddress object is a zero-length string. It may also be used to indicate an IP address which ...
- etsysPwaAuthSessionIPAddress
- The ip address of the remote user of this session entry stored for this ifIndex. The format of this object is defined in the etsysPwaAuthSessionIPAddressType object.
- etsysPwaAuthSessionUserName
- The username that logged on to this ifIndex.
- etsysPwaAuthSessionStatsHCTable
- A table that contains the session statistics objects for the Authenticator PWA associated with each ifIndex. An entry appears in this table for each ifIndex that may authenticate access to itself. Session entries are collected for each ifIndex up to the ...
- etsysPwaAuthSessionStatsHCEntry
- The session statistics information for an Authenticator PWA. This shows the current values being collected for each session that is still in progress, or the final values for the last valid session on each ifIndex where there is no session currently activ ...
- etsysPwaAuthSessionHCID
- A unique ID that identifies the session on this ifindex.
- etsysPwaAuthSessionOctetsRxHc
- The number of octets received in user data frames on this ifIndex during the session.
- etsysPwaAuthSessionOctetsTxHc
- The number of octets transmitted in user data frames on this ifIndex during the session.
- etsysPwaSystemGroup
- This section has been deprecated. See etsysPwaSystemGroupI.
- etsysPwaPortConfigurationGroup
- This section is for ifIndex based configuration of the PWA system.
- etsysPwaPortStatusGroup
- The status of all login information on a per ifIndex basis can be obtained here.
- etsysPwaSessionGroup
- This section contains statistics associated with each ifIndex/login.
- etsysPwaSessionHCGroup
- This section contains statistics associated with each ifIndex/login.
- etsysPwaSystemGroupI
- This section is for the basic configuration parameters used by the PWA system.
- etsysPwaSystemAuthEnhancedGroup
- This section is for the configuration of the PWA enhanced mode of operation.