Cisco Support Community
cancel
Showing results for 
Search instead for 
Did you mean: 
Announcements

Welcome to Cisco Support Community. We would love to have your feedback.

For an introduction to the new site, click here. If you'd prefer to explore, try our test area to get started. And see here for current known issues.

New Member

SNMPGET - how to retrieve dot1x information from cat-3560 ?

Hi all,

I have the following question:

how do I get the output of "sh dot1x all summary" cli command via SNMP?

#sh dot1x all summ

Interface       PAE     Client          Status

--------------------------------------------------------

Gi0/34          AUTH    0113.d313.68d6  AUTHORIZED

Gi0/48          AUTH    0124.12f9.4f55  AUTHORIZED

Everyone's tags (2)
1 ACCEPTED SOLUTION

Accepted Solutions
Cisco Employee

SNMPGET - how to retrieve dot1x information from cat-3560 ?

Hi Leo,

Try the below OID , i am not sure if it is Implemented yet or not  ::

Object     cpaePortOperVlanType

OID     1.3.6.1.4.1.9.9.220.1.1.1.8

Values     1 : other

2 : none

3 : guest

4 : authFail

MIB     CISCO-PAE-MIB ;   -   View Supporting Images this link will generate a new window

Description     "The type of the Vlan which is assigned to this port via IEEE-802.1x and related methods of authentication supported by the system.

A value of 'other' for this object indicates type of Vlan assigned to this port; via IEEE-802.1x authentication; is other than the ones specified by listed enumerations for this object.

A value of 'none' for this object indicates that there is no Vlan assigned to this port via IEEE-802.1x authentication. For such a case, corresponding value of cpaePortOperVlan object will be zero.

A value of 'guest' for this object indicates that Vlan assigned to this port; via IEEE-802.1x authentication;

is of type Guest Vlan and specified by the object cpaeGuestVlanNumber for this entry.

A value of 'authFail' for this object indicates that Vlan assigned to this port; via IEEE-802.1x authentication; is of type Auth-Fail Vlan and specified by the object cpaePortAuthFailVlan for this entry."

few other OID's which you might be interested in :

dot1xPaeSystemAuthControl
dot1xPaePortProtocolVersion
dot1xPaePortCapabilities
dot1xPaePortInitialize
dot1xPaePortReauthenticate
dot1xAuthPaeState
dot1xAuthBackendAuthState
dot1xAuthAdminControlledDirections
dot1xAuthOperControlledDirections
dot1xAuthAuthControlledPortStatus
dot1xAuthAuthControlledPortControl
dot1xAuthQuietPeriod
dot1xAuthTxPeriod
dot1xAuthSuppTimeout
dot1xAuthServerTimeout
dot1xAuthMaxReq
dot1xAuthReAuthPeriod
dot1xAuthReAuthEnabled
dot1xAuthKeyTxEnabled
dot1xAuthEapolFramesRx
dot1xAuthEapolFramesTx
dot1xAuthEapolStartFramesRx
dot1xAuthEapolLogoffFramesRx
dot1xAuthEapolRespIdFramesRx
dot1xAuthEapolRespFramesRx
dot1xAuthEapolReqIdFramesTx
dot1xAuthEapolReqFramesTx
dot1xAuthInvalidEapolFramesRx
dot1xAuthEapLengthErrorFramesRx
dot1xAuthLastEapolFrameVersion
dot1xAuthLastEapolFrameSource

Thnaks-

Afroz

Thanks- Afroz [Do rate the useful post] ****Ratings Encourages Contributors ****
2 REPLIES
Cisco Employee

SNMPGET - how to retrieve dot1x information from cat-3560 ?

Hi Leo,

Try the below OID , i am not sure if it is Implemented yet or not  ::

Object     cpaePortOperVlanType

OID     1.3.6.1.4.1.9.9.220.1.1.1.8

Values     1 : other

2 : none

3 : guest

4 : authFail

MIB     CISCO-PAE-MIB ;   -   View Supporting Images this link will generate a new window

Description     "The type of the Vlan which is assigned to this port via IEEE-802.1x and related methods of authentication supported by the system.

A value of 'other' for this object indicates type of Vlan assigned to this port; via IEEE-802.1x authentication; is other than the ones specified by listed enumerations for this object.

A value of 'none' for this object indicates that there is no Vlan assigned to this port via IEEE-802.1x authentication. For such a case, corresponding value of cpaePortOperVlan object will be zero.

A value of 'guest' for this object indicates that Vlan assigned to this port; via IEEE-802.1x authentication;

is of type Guest Vlan and specified by the object cpaeGuestVlanNumber for this entry.

A value of 'authFail' for this object indicates that Vlan assigned to this port; via IEEE-802.1x authentication; is of type Auth-Fail Vlan and specified by the object cpaePortAuthFailVlan for this entry."

few other OID's which you might be interested in :

dot1xPaeSystemAuthControl
dot1xPaePortProtocolVersion
dot1xPaePortCapabilities
dot1xPaePortInitialize
dot1xPaePortReauthenticate
dot1xAuthPaeState
dot1xAuthBackendAuthState
dot1xAuthAdminControlledDirections
dot1xAuthOperControlledDirections
dot1xAuthAuthControlledPortStatus
dot1xAuthAuthControlledPortControl
dot1xAuthQuietPeriod
dot1xAuthTxPeriod
dot1xAuthSuppTimeout
dot1xAuthServerTimeout
dot1xAuthMaxReq
dot1xAuthReAuthPeriod
dot1xAuthReAuthEnabled
dot1xAuthKeyTxEnabled
dot1xAuthEapolFramesRx
dot1xAuthEapolFramesTx
dot1xAuthEapolStartFramesRx
dot1xAuthEapolLogoffFramesRx
dot1xAuthEapolRespIdFramesRx
dot1xAuthEapolRespFramesRx
dot1xAuthEapolReqIdFramesTx
dot1xAuthEapolReqFramesTx
dot1xAuthInvalidEapolFramesRx
dot1xAuthEapLengthErrorFramesRx
dot1xAuthLastEapolFrameVersion
dot1xAuthLastEapolFrameSource

Thnaks-

Afroz

Thanks- Afroz [Do rate the useful post] ****Ratings Encourages Contributors ****
New Member

SNMPGET - how to retrieve dot1x information from cat-3560 ?

Thanks

220
Views
5
Helpful
2
Replies