ACSServer-MIB

All MIBs › ACSServer-MIB

Category: RADIUS and AAA

Description: Manages Cisco Secure ACS (Access Control Server) for RADIUS and TACACS+ authentication, authorization, and accounting services.

Start monitoring vendor-neutral, standards-based MIB, any SNMPv3-capable network device (SNMP engine identity/boot/clock status) with a free 30-day trial of IPNetwork Monitor. Import MIBs, browse SNMP OIDs, create custom SNMP monitors, configure alerts, and monitor any SNMP-enabled network device from a single console.

What Is ACSServer-MIB?

ACSServer-MIB is a Cisco module for the Cisco Secure Access Control Server (ACS), the centralized AAA (authentication, authorization, and accounting) server that services RADIUS and TACACS+ requests for network access control. Its general data categories, based on its stated purpose, would be AAA service status and authentication/authorization/accounting activity statistics for the ACS process. This makes it directly relevant to monitoring the software service status of a security-critical server: whether the ACS AAA service is running, and whether authentication requests are succeeding or failing at an abnormal rate, which would signal a service outage or a credential/configuration problem affecting network access. It functions alongside the standard RADIUS and TACACS+ protocols it services, and typically alongside Host Resources MIB data for OS-level metrics of the underlying ACS server host. It is deployed on Cisco Secure ACS appliances or server software acting as the centralized AAA server for enterprise network access control.

IPNetwork Monitor allows you to monitor SNMP objects defined in ACSServer-MIB. Use the built-in SNMP Monitoring Browser to explore available variables, view their current values and descriptions, and select the objects you want to monitor. You can then create SNMP monitors, configure thresholds, and receive alerts when monitored values change.

Supported Devices

Cisco Secure ACS (Access Control Server) appliances/servers

Monitoring Examples

No sample objects were provided for this module, so specific object names cannot be cited with confidence. Based on its stated purpose, it would plausibly expose objects for ACS service/process status and RADIUS/TACACS+ request statistics, which an administrator would poll to detect the ACS service going down or a spike in failed authentication attempts affecting network login, and can download the ACSServer-MIB file to confirm the exact object names before polling.

What Can Be Monitored

AAA service/process status
RADIUS authentication statistics
TACACS+ authentication statistics
authorization decision activity
accounting record activity

Imported Objects

From MSFT-MIB

microsoft	OBJECT-IDENTITY
software	OBJECT-IDENTITY

From RFC1155-SMI

Counter
IpAddress
OBJECT-TYPE
enterprises

OIDs

OID symbolic	OID numeric	Type	Access	Description
INT acsIfStatsActiveFlows	1.3.6.1.4.1.311.1.15.2.1.1.29	INTEGER	read-only	This is the total number flows currently active in this ACS Server currently
CTR acsIfStatsAdmissionControlFailures	1.3.6.1.4.1.311.1.15.2.1.1.19	Counter	read-only	This is the total number of Admission Control errors generated by this ACS Server
INT acsIfStatsAllocatedBandwidthBits	1.3.6.1.4.1.311.1.15.2.1.1.30	INTEGER	read-only	This is the total bandwidth allocated currently by this ACS Server
acsIfStatsEntry	1.3.6.1.4.1.311.1.15.2.1.1		not-accessible	An interface entry containing objects at the subnetwork layer and below for a particular interface.
CTR acsIfStatsInBlockadeStateResvs	1.3.6.1.4.1.311.1.15.2.1.1.22	Counter	read-only	This is the total number of Resv State Blocks in blockade state in this ACS Server
INT acsIfStatsIndex	1.3.6.1.4.1.311.1.15.2.1.1.1	INTEGER	read-only	A unique value for each interface. Its value ranges between 1 and the value of ifNumber. The value for each interface must remain constant at least from one re-initialization of the entity's network management system to the next re- initialization.
IP acsIfStatsIpAddr	1.3.6.1.4.1.311.1.15.2.1.1.2	IpAddress	read-only	The IP address of the interface to which these statistics pertains.
INT acsIfStatsMaxAllocatedBandwidthBits	1.3.6.1.4.1.311.1.15.2.1.1.31	INTEGER	read-only	This is the maximum bandwidth ever allocated by this ACS Server
CTR acsIfStatsOtherFailures	1.3.6.1.4.1.311.1.15.2.1.1.21	Counter	read-only	This is the total number of other types errors generated by this ACS Server
CTR acsIfStatsPathTimeOuts	1.3.6.1.4.1.311.1.15.2.1.1.24	Counter	read-only	This is the total number of Path states which have timed out in this ACS Server
CTR acsIfStatsPolicyControlFailures	1.3.6.1.4.1.311.1.15.2.1.1.20	Counter	read-only	This is the total number of Policy Control errors generated by this ACS Server
CTR acsIfStatsRawIpReceivedBytes	1.3.6.1.4.1.311.1.15.2.1.1.4	Counter	read-only	This is the total number of RAW IP BYTEs received by ACS Server
CTR acsIfStatsRawIpSentBytes	1.3.6.1.4.1.311.1.15.2.1.1.3	Counter	read-only	This is the total number of RAW IP BYTEs sent by ACS Server
CTR acsIfStatsReceivedRsvpConfirmMsgs	1.3.6.1.4.1.311.1.15.2.1.1.11	Counter	read-only	This is the total number of RSVP Confirm messages received by this ACS Server
CTR acsIfStatsReceivedRsvpPathErrMsgs	1.3.6.1.4.1.311.1.15.2.1.1.7	Counter	read-only	This is the total number of RSVP PathErr messages received by this ACS Server
CTR acsIfStatsReceivedRsvpPathMsgs	1.3.6.1.4.1.311.1.15.2.1.1.5	Counter	read-only	This is the total number of RSVP Path messages received by this ACS Server
CTR acsIfStatsReceivedRsvpPathTearMsgs	1.3.6.1.4.1.311.1.15.2.1.1.9	Counter	read-only	This is the total number of RSVP PathTear messages received by this ACS Server
CTR acsIfStatsReceivedRsvpResvErrMsgs	1.3.6.1.4.1.311.1.15.2.1.1.8	Counter	read-only	This is the total number of RSVP ResvErr messages received by this ACS Server
CTR acsIfStatsReceivedRsvpResvMsgs	1.3.6.1.4.1.311.1.15.2.1.1.6	Counter	read-only	This is the total number of RSVP Resv messages received by this ACS Server
CTR acsIfStatsReceivedRsvpResvTearMsgs	1.3.6.1.4.1.311.1.15.2.1.1.10	Counter	read-only	This is the total number of RSVP ResvTear messages received by this ACS Server
CTR acsIfStatsReceiveFailsBigMsg	1.3.6.1.4.1.311.1.15.2.1.1.25	Counter	read-only	This is the total number of RSVP messages which could not be received by this ACS Server because they are too big to fit in the message buffer
CTR acsIfStatsReceiveFailsNoMemory	1.3.6.1.4.1.311.1.15.2.1.1.27	Counter	read-only	This is the total number of RSVP messages which could not be sent by this ACS Server because there was no free message buffer
CTR acsIfStatsResvTimeOuts	1.3.6.1.4.1.311.1.15.2.1.1.23	Counter	read-only	This is the total number of Reservations which have timed out in this ACS Server
CTR acsIfStatsSendFailsBigMsg	1.3.6.1.4.1.311.1.15.2.1.1.26	Counter	read-only	This is the total number of RSVP messages which could not be sent by this ACS Server because they are too big to fit in the message buffer
CTR acsIfStatsSendFailsNoMemory	1.3.6.1.4.1.311.1.15.2.1.1.28	Counter	read-only	This is the total number of RSVP messages which could not be sent by this ACS Server because there was no free message buffer
CTR acsIfStatsSentRsvpConfirmMsgs	1.3.6.1.4.1.311.1.15.2.1.1.18	Counter	read-only	This is the total number of RSVP Confirm messages sent by this ACS Server
CTR acsIfStatsSentRsvpPathErrMsgs	1.3.6.1.4.1.311.1.15.2.1.1.14	Counter	read-only	This is the total number of RSVP PathErr messages sent by this ACS Server
CTR acsIfStatsSentRsvpPathMsgs	1.3.6.1.4.1.311.1.15.2.1.1.12	Counter	read-only	This is the total number of RSVP Path messages sent by this ACS Server
CTR acsIfStatsSentRsvpPathTearMsgs	1.3.6.1.4.1.311.1.15.2.1.1.16	Counter	read-only	This is the total number of RSVP PathTear messages sent by this ACS Server
CTR acsIfStatsSentRsvpResvErrMsgs	1.3.6.1.4.1.311.1.15.2.1.1.15	Counter	read-only	This is the total number of RSVP ResvErr messages sent by this ACS Server
CTR acsIfStatsSentRsvpResvMsgs	1.3.6.1.4.1.311.1.15.2.1.1.13	Counter	read-only	This is the total number of RSVP Resv messages sent by this ACS Server
CTR acsIfStatsSentRsvpResvTearMsgs	1.3.6.1.4.1.311.1.15.2.1.1.17	Counter	read-only	This is the total number of RSVP ResvTear messages sent by this ACS Server
acsIfStatsTable	1.3.6.1.4.1.311.1.15.2.1		not-accessible	A list of interface entries. The number of entries is given by the value of ifNumber.
acsInterfaces	1.3.6.1.4.1.311.1.15.2
CTR acsMsidlpmBadIdentityPes	1.3.6.1.4.1.311.1.15.3.1.1.23	Counter	read-only	This is the total number of Identity Policy elements which could not be cracked by the MSIDLPM
INT acsMsidlpmDsCacheSize	1.3.6.1.4.1.311.1.15.3.1.1.24	INTEGER	read-only	This is the total number of entries in the policy cache maintained by the MSIDLPM
CTR acsMsidlpmReceiverChgAccepted	1.3.6.1.4.1.311.1.15.3.1.1.14	Counter	read-only	This is the total number of receivers whose RESV message changes were accepted
CTR acsMsidlpmReceiversAccepted	1.3.6.1.4.1.311.1.15.3.1.1.13	Counter	read-only	This is the total number of receivers whose RESV messages were accepted
CTR acsMsidlpmRejRecvCount	1.3.6.1.4.1.311.1.15.3.1.1.21	Counter	read-only	This is the total number of receivers whose RESV message were rejected because of flow count policy
CTR acsMsidlpmRejRecvDuration	1.3.6.1.4.1.311.1.15.3.1.1.20	Counter	read-only	This is the total number of receivers whose RESV message were rejected because of flow duration policy
CTR acsMsidlpmRejRecvFlowRate	1.3.6.1.4.1.311.1.15.3.1.1.15	Counter	read-only	This is the total number of receivers whose RESV message were rejected because of data flow rate policy
CTR acsMsidlpmRejRecvIdChange	1.3.6.1.4.1.311.1.15.3.1.1.19	Counter	read-only	This is the total number of senders whose RESV message were rejected because of identity change
CTR acsMsidlpmRejRecvOthersPolicies	1.3.6.1.4.1.311.1.15.3.1.1.22	Counter	read-only	This is the total number of receivers whose RESV message were rejected because of policies other than flow rate, peak rate, flow duration and flow count
CTR acsMsidlpmRejRecvPeakRate	1.3.6.1.4.1.311.1.15.3.1.1.16	Counter	read-only	This is the total number of receivers whose RESV message were rejected because of peak data rate policy
CTR acsMsidlpmRejRecvSumFlowRate	1.3.6.1.4.1.311.1.15.3.1.1.17	Counter	read-only	This is the total number of receivers whose RESV message were rejected because of aggregate data flow rate policy
CTR acsMsidlpmRejRecvSumPeakRate	1.3.6.1.4.1.311.1.15.3.1.1.18	Counter	read-only	This is the total number of receivers whose RESV message were rejected because of aggregate peak data rate policy
CTR acsMsidlpmRejSndCount	1.3.6.1.4.1.311.1.15.3.1.1.11	Counter	read-only	This is the total number of senders whose PATH message were rejected because of flow count policy
CTR acsMsidlpmRejSndDuration	1.3.6.1.4.1.311.1.15.3.1.1.10	Counter	read-only	This is the total number of senders whose PATH message were rejected because of flow duration policy
CTR acsMsidlpmRejSndFlowRate	1.3.6.1.4.1.311.1.15.3.1.1.5	Counter	read-only	This is the total number of senders whose PATH message were rejected because of data flow rate policy
CTR acsMsidlpmRejSndIdChange	1.3.6.1.4.1.311.1.15.3.1.1.9	Counter	read-only	This is the total number of senders whose PATH message were rejected because of identity change
CTR acsMsidlpmRejSndOthersPolicies	1.3.6.1.4.1.311.1.15.3.1.1.12	Counter	read-only	This is the total number of senders whose PATH message were rejected because of policies other than flow rate, peak rate, flow duration and flow count
CTR acsMsidlpmRejSndPeakRate	1.3.6.1.4.1.311.1.15.3.1.1.6	Counter	read-only	This is the total number of senders whose PATH message were rejected because of peak data rate policy
CTR acsMsidlpmRejSndSumFlowRate	1.3.6.1.4.1.311.1.15.3.1.1.7	Counter	read-only	This is the total number of senders whose PATH message were rejected because of aggregate data flow rate policy
CTR acsMsidlpmRejSndSumPeakRate	1.3.6.1.4.1.311.1.15.3.1.1.8	Counter	read-only	This is the total number of senders whose PATH message were rejected because of aggregate peak data rate policy
CTR acsMsidlpmSenderChgAccepted	1.3.6.1.4.1.311.1.15.3.1.1.4	Counter	read-only	This is the total number of senders whose PATH message changes were accepted
CTR acsMsidlpmSendersAccepted	1.3.6.1.4.1.311.1.15.3.1.1.3	Counter	read-only	This is the total number of senders whose PATH messages were accepted
acsMsidlpmStats	1.3.6.1.4.1.311.1.15.3
acsMsidlpmStatsEntry	1.3.6.1.4.1.311.1.15.3.1.1		not-accessible	An interface entry containing objects at the subnetwork layer and below for a particular interface.
INT acsMsidlpmStatsIndex	1.3.6.1.4.1.311.1.15.3.1.1.1	INTEGER	read-only	A unique value for each subnet. Its value ranges between 1 and the value of ifNumber. The value for each subnet must remain constant at least from one re-initialization of the entity's network management system to the next re- initialization.
IP acsMsidlpmStatsSubnetAddr	1.3.6.1.4.1.311.1.15.3.1.1.2	IpAddress	read-only	The IP address of the subnet to which these statistics pertains.
acsMsidlpmStatsTable	1.3.6.1.4.1.311.1.15.3.1		not-accessible	A list of interface entries. The number of entries is given by the value of ifNumber.
acsService	1.3.6.1.4.1.311.1.15
acsSvcStats	1.3.6.1.4.1.311.1.15.1
INT acsSvcStatsActiveApiSessions	1.3.6.1.4.1.311.1.15.1.2	INTEGER	read-only	This is the total number of API sessions active on this ACS Server
INT acsSvcStatsActiveApiSockets	1.3.6.1.4.1.311.1.15.1.3	INTEGER	read-only	This is the total number of API sockets active on this ACS Server
CTR acsSvcStatsApiNotificationBytes	1.3.6.1.4.1.311.1.15.1.9	Counter	read-only	This is the total number of bytes in notifications sent by this ACS Server to QoS aware applications
CTR acsSvcStatsApiNotifications	1.3.6.1.4.1.311.1.15.1.8	Counter	read-only	This is the total number of notifications sent by this ACS Server to QoS aware applications
CTR acsSvcStatsFailedApiRequests	1.3.6.1.4.1.311.1.15.1.6	Counter	read-only	This is the total number of requests received from QoS aware applications by this ACS Server which failed
CTR acsSvcStatsFailedApiSends	1.3.6.1.4.1.311.1.15.1.7	Counter	read-only	This is the total number of requests which could not be sent to QoS aware applications by this ACS Server
INT acsSvcStatsIfNumber	1.3.6.1.4.1.311.1.15.1.1	INTEGER	read-only	The number of network interfaces on this system detected by ACS server.
INT acsSvcStatsNetSockets	1.3.6.1.4.1.311.1.15.1.10	INTEGER	read-only	This is the total number of network sockets opened by this ACS Server currently
CTR acsSvcStatsReceivedApiPathRequests	1.3.6.1.4.1.311.1.15.1.4	Counter	read-only	This is the total number of Path requests received from QoS aware applications by this ACS Server
CTR acsSvcStatsReceivedApiResvRequests	1.3.6.1.4.1.311.1.15.1.5	Counter	read-only	This is the total number of Resv requests received from QoS aware applications by this ACS Server
INT acsSvcStatsTimers	1.3.6.1.4.1.311.1.15.1.11	INTEGER	read-only	This is the total number of timer events active in this ACS Server currently

RFC description

Microsoft Access Control Service (ACS) Server MIB. Provides SNMP objects for monitoring ACS server operations including interface statistics, policy control failures, and QoS service metrics on Microsoft RSVP-aware systems.

Start monitoring Cisco Secure ACS appliances (legacy) with a free 30-day trial of IPNetwork Monitor. Import MIBs, browse SNMP OIDs, create custom SNMP monitors, configure alerts, and monitor any SNMP-enabled network device from a single console.

Download ACSServer-MIB

What Is ACSServer-MIB?

Supported Devices

Monitoring Examples

What Can Be Monitored

This MIB depends on

Related MIBs

RFC description