topic HP5130 switch SNMP and local MAC AUTHENTICATION in Switches, Hubs, and Modems

HP5130 switch SNMP and local MAC AUTHENTICATION

Sandy1612 — Mon, 11 Oct 2021 14:03:03 GMT

HP5130 switch SNMP and local MAC AUTHENTICATION

Hi,
I need help because I have not found the informations in the forum or documentation.
My company uses HP 5130 L2 switches for users access to the network and each interface linked to a terminal device is configured with local mac-authentication like this :

port access vlan yy
mac-authentication
mac-authentication max-user 1
mac-address static xxxx-xxxx-xxxx vlan yy

Which MIB corresponds to local mac-authentication ?
Which OIDs corresponds to these mac-authentication commands ?

I tried this :

OID value for local MAC address mapping:
.1.3.6.1.4.1.11.2.14.11.15.2.62.1.8.4.1.2

and for mac-authentication:
.1.3.6.1.4.1.11.2.14.11.15.2.26.1.1.4.10

But it seems it doesn't apply to HP5130 switches. These oids return no value.

Thank you by advance.

Re: HP5130 switch SNMP and local MAC AUTHENTICATION

Ivan_B — Mon, 11 Oct 2021 09:07:55 GMT

Hi @Sandy1612 !

You need to check HH3C-PORT-SECURITY-MIB for options. Be sure your switch is running at least 5130EI-CMW710-R3111P01, because the support for this MIB was added at that time.

According the Release Notes supported OIDs from that MIB are:

hh3cSecureAddressLearned
hh3cSecureViolation
hh3cSecureLoginFailure
hh3cSecureLogon
hh3cSecureLogoff
hh3cSecureRalmLoginFailure
hh3cSecureRalmLogon
hh3cSecureRalmLogoff

But these are traps.

For the MAC learned try this OID:

.1.3.6.1.4.1.25506.2.26.1.2.2
hh3cSecureAddressTable OBJECT-TYPE
-- FROM HH3C-PORT-SECURITY-MIB
MAX-ACCESS not-accessible
STATUS current
DESCRIPTION "This table stores the MAC addresses assigned to each
port. This table can be written to by the agent as well as the
management station."
::= { iso(1) org(3) dod(6) internet(1) private(4) enterprises(1) hh3c(25506) hh3cCommon(2) hh3cPortSecurity(26) hh3cPortSecurityMIB(1) hh3cPortSecurityTables(2) 2 }

Re: HP5130 switch SNMP and local MAC AUTHENTICATION

Sandy1612 — Fri, 15 Oct 2021 14:50:23 GMT

Hello,

unfortunatly, I think HH3C-PORT-SECURITY-MIB doesn't have the information I need that corresponds to the "mac_authentication" command.

It works well for the port-security command, but all switches are configured with mac-authentication and not port-security.

Thank you.