ADMIN-AUTH-STATS-MIB

All MIBs › ADMIN-AUTH-STATS-MIB

Organization: Cisco Systems, Inc.

Last Updated: 2002-09-05

Description: Cisco Altiga (VPN 3000) MIB tracking administrator authentication counters including TACACS success and failure statistics for VPN concentrators

Start monitoring vendor-neutral, standards-based MIB, any SNMPv3-capable network device (SNMP engine identity/boot/clock status) with a free 30-day trial of IPNetwork Monitor. Import MIBs, browse SNMP OIDs, create custom SNMP monitors, configure alerts, and monitor any SNMP-enabled network device from a single console.

What Is ADMIN-AUTH-STATS-MIB?

ADMIN-AUTH-STATS-MIB is a Cisco Systems (Altiga Networks heritage, VPN concentrator product line) proprietary MIB modeling administrator-authentication statistics against RADIUS/TACACS+ servers. Its table, keyed by server index, records server address and client port number, round-trip time, access request/retransmission/accept/reject/challenge counts, malformed-response and bad-authenticator counts, pending-request and timeout counts, unknown-packet-type count, and server-group identification. As a performance/security-status MIB it lets an administrator confirm an admin-authentication server's response time and watch for rejected or malformed authentication attempts. It is deployed on Cisco (Altiga) VPN concentrator platforms. Engineers can download the ADMIN-AUTH-STATS-MIB file directly to load it into their MIB browser.

IPNetwork Monitor allows you to monitor SNMP objects defined in ADMIN-AUTH-STATS-MIB. Use the built-in SNMP Monitoring Browser to explore available variables, view their current values and descriptions, and select the objects you want to monitor. You can then create SNMP monitors, configure thresholds, and receive alerts when monitored values change.

Supported Devices

Cisco (Altiga) VPN concentrator platforms

Monitoring Examples

An administrator checks alAdminAuthClientRoundTripTime and alAdminAuthClientAccessRejects to diagnose slow or failing administrator logins against a RADIUS server on a Cisco (Altiga) VPN concentrator.

What Can Be Monitored

administrator-authentication server response time and failure counts

Imported Objects

From ALTIGA-GLOBAL-REG

alAdminAuthMibModule

OBJECT-IDENTITY

From ALTIGA-MIB

alAdminAuthGroup	OBJECT-IDENTITY
alAdminAuthStats	OBJECT-IDENTITY

From SNMPv2-CONF

MODULE-COMPLIANCE
OBJECT-GROUP

From SNMPv2-SMI

Counter32
Gauge32
Integer32
IpAddress
MODULE-IDENTITY
OBJECT-TYPE
TimeTicks

How to Use in IPNetwork Monitor

Example using alAdminAuthClientAccessRequests OID:

Select a Cisco (Altiga) VPN concentrator as the target host to create a monitor — the SNMP service should be up and running on it. Click New Monitor, then check SNMP Custom on the Favorites tab, click Next, and confirm the host. On the next page, click Select... to open the built-in SNMP MIB Browser and type alAdminAuthClientAccessRequests into the Find box to locate it in the OID tree, selecting the specific row/instance you want to monitor since this is a table column, then select it and click OK. The total number of ADMIN Access-Request packets sent to this server since client start-up. On the monitor's Main parameters page you can set the target's SNMP port (default 161), credentials, polling interval, and other settings — see the SNMP Monitor help for details. On the State conditions and Alerting tabs, configure when the monitor should change state and trigger an alert; since this is a Counter32-type OID, Value bounds is the most useful condition here — trigger an alert if the counter increases sharply between polls relative to its normal baseline, since an unexpected spike often reflects a real change in traffic or activity. Click Finish to create the monitor; you can adjust any parameter later.

OIDs

OID symbolic	OID numeric	Type	Access	Description
altigaAdminAuthStatsMibModule	1.3.6.1.4.1.3076.1.1.44.2			The Altiga Administrator Authentication Statistics MIB models counters and objects that are of management interest for administration authentication. Acronyms The following acronyms are used in this document: IP: Internet Protocol MIB: Management Information Base TACACS: Terminal Access Controller Access Control System UDP: User Datagram Protocol
altigaAdminAuthStatsMibConformance	1.3.6.1.4.1.3076.1.1.44.2.1
altigaAdminAuthStatsMibCompliances	1.3.6.1.4.1.3076.1.1.44.2.1.1
altigaAdminAuthStatsMibCompliance	1.3.6.1.4.1.3076.1.1.44.2.1.1.1			The compliance statement for agents which implement the Altiga Administrator Authentication Statistics MIB.
alAdminAuthClientMIBGroup	1.3.6.1.4.1.3076.2.1.1.1.39.2			The basic collection of objects providing management of ADMIN Authentication Clients.
alAminAuthStatsGlobal	1.3.6.1.4.1.3076.2.1.2.39.1
alAdminAuthServStatsTable	1.3.6.1.4.1.3076.2.1.2.39.2		not-accessible	The (conceptual) table listing the TACACS authentication servers with which the client shares a secret.
alAdminAuthServStatsEntry	1.3.6.1.4.1.3076.2.1.2.39.2.1		not-accessible	An entry (conceptual row) representing a TACACS authentication server with which the client shares a secret.
I32 alAdminAuthServIndex	1.3.6.1.4.1.3076.2.1.2.39.2.1.1	Integer32	not-accessible	A number uniquely identifying each ADMIN Authentication server with which this client communicates.
IP alAdminAuthServAddress	1.3.6.1.4.1.3076.2.1.2.39.2.1.2	IpAddress	read-only	The IP address of the ADMIN authentication server referred to in this table entry.
I32 alAdminAuthClientServerPortNumber	1.3.6.1.4.1.3076.2.1.2.39.2.1.3	Integer32	read-only	The UDP port the client is using to send requests to this server.
TIK alAdminAuthClientRoundTripTime	1.3.6.1.4.1.3076.2.1.2.39.2.1.4	TimeTicks	read-only	The time interval between the most recent Access-Reply/Access-Challenge and the Access-Request that matched it from this ADMIN authentication server.
C32 alAdminAuthClientAccessRequestsEx	1.3.6.1.4.1.3076.2.1.2.39.2.1.5	Counter32	read-only	The total number of ADMIN Access-Request packets sent to this server since client start-up. This does not include retransmissions.
C32 alAdminAuthClientAccessRetransmissions	1.3.6.1.4.1.3076.2.1.2.39.2.1.6	Counter32	read-only	The total number of ADMIN Access-Request packets retransmitted to this ADMIN authentication server since client start-up.
C32 alAdminAuthClientAccessAccepts	1.3.6.1.4.1.3076.2.1.2.39.2.1.7	Counter32	read-only	The total number of ADMIN Access-Accept packets received from this server since client start-up.
C32 alAdminAuthClientAccessRejects	1.3.6.1.4.1.3076.2.1.2.39.2.1.8	Counter32	read-only	The total number of ADMIN Access-Reject packets received from this server since client start-up.
C32 alAdminAuthClientAccessChallenges	1.3.6.1.4.1.3076.2.1.2.39.2.1.9	Counter32	read-only	The total number of ADMIN Access-Challenge packets received from this server since client start-up.
C32 alAdminAuthClientMalformedAccessResponses	1.3.6.1.4.1.3076.2.1.2.39.2.1.10	Counter32	read-only	The total number of malformed ADMIN Access-Response packets received from this server since client start-up. Malformed packets include packets with an invalid length. Bad authenticators or Signature attributes are not included as malformed access responses.
C32 alAdminAuthClientBadAuthenticators	1.3.6.1.4.1.3076.2.1.2.39.2.1.11	Counter32	read-only	The total number of ADMIN Access-Response packets containing invalid authenticators or Signature attributes received from this server since client start-up.
G32 alAdminAuthClientPendingRequests	1.3.6.1.4.1.3076.2.1.2.39.2.1.12	Gauge32	read-only	The total number of ADMIN Access-Request packets destined for this server that have not yet timed out or received a response. This variable is incremented when an Access-Request is sent and decremented due to receipt of an Access-Reply or Access-Challenge, a timeout or retransmission.
C32 alAdminAuthClientTimeouts	1.3.6.1.4.1.3076.2.1.2.39.2.1.13	Counter32	read-only	The total number of authentication timeouts to this server since client startup. After a timeout the client may retry to the same server, send to a different server, or give up. A retry to the same server is counted as a retransmit as well as a timeout. A send to a different server is counted as a Request as well as a timeout.
C32 alAdminAuthClientUnknownType	1.3.6.1.4.1.3076.2.1.2.39.2.1.14	Counter32	read-only	The total number of ADMIN packets of unknown type which were received from this server on the authentication port since client start-up.
G32 alAdminAuthServerGroupIdentification	1.3.6.1.4.1.3076.2.1.2.39.2.1.15	Gauge32	read-only	Id of group accociated with this server.

RFC description

Cisco Altiga VPN appliance MIB for administrator authentication statistics; tracks authentication attempts and TACACS+ operations.

Start monitoring Cisco (Altiga) VPN concentrators with a free 30-day trial of IPNetwork Monitor. Import MIBs, browse SNMP OIDs, create custom SNMP monitors, configure alerts, and monitor any SNMP-enabled network device from a single console.

Download ADMIN-AUTH-STATS-MIB