BIANCA-BRICK-TACACSP-MIB

All MIBs › BIANCA-BRICK-TACACSP-MIB

Category: RADIUS and AAA, Vendor: bintec

Description: Manages TACACS+ authentication and authorization client settings on bintec elmeg BIANCA/BRICK routers.

Start monitoring vendor-neutral, standards-based MIB, any SNMPv3-capable network device (SNMP engine identity/boot/clock status) with a free 30-day trial of IPNetwork Monitor. Import MIBs, browse SNMP OIDs, create custom SNMP monitors, configure alerts, and monitor any SNMP-enabled network device from a single console.

What Is BIANCA-BRICK-TACACSP-MIB?

BIANCA-BRICK-TACACSP-MIB is a legacy BinTec/BiAnca (enterprise OID 272, Brick router family) proprietary MIB configuring TACACS+ servers. Its server table, keyed by priority, records address, TCP port, shared secret, timeout, admin/operational status, policy, encryption mode, multi-session flag, PPP/login authentication flags, accounting flag, block timeout, and authentication-no-response/negative-response/privilege-level-on-login settings. As a configuration/status MIB it lets an administrator confirm TACACS+ server reachability and authentication policy on a legacy BiAnca (BinTec) Brick router. It is deployed on legacy BiAnca (BinTec) Brick router equipment (TACACS+). Engineers can download the BIANCA-BRICK-TACACSP-MIB file directly to load it into their MIB browser.

IPNetwork Monitor allows you to monitor SNMP objects defined in BIANCA-BRICK-TACACSP-MIB. Use the built-in SNMP Monitoring Browser to explore available variables, view their current values and descriptions, and select the objects you want to monitor. You can then create SNMP monitors, configure thresholds, and receive alerts when monitored values change.

Supported Devices

Legacy BiAnca (BinTec) Brick router equipment (TACACS+)

Monitoring Examples

An administrator checks tacacspSrvOperStatus and tacacspSrvPolicy to confirm TACACS+ server reachability and authentication policy on a legacy BiAnca (BinTec) Brick router.

What Can Be Monitored

TACACS+ server reachability and authentication policy

Imported Objects

From RFC-1212

OBJECT-TYPE

From RFC1155-SMI

Counter
IpAddress
enterprises

From RFC1158-MIB

DisplayString

OIDs

OID symbolic	OID numeric	Type	Access	Description
bintec	1.3.6.1.4.1.272
bintecsec	1.3.6.1.4.1.272.254
tacacsp	1.3.6.1.4.1.272.254.13
tacacspServerTable	1.3.6.1.4.1.272.254.13.1		not-accessible
tacacspServerEntry	1.3.6.1.4.1.272.254.13.1.1		not-accessible
INT tacacspSrvPriority	1.3.6.1.4.1.272.254.13.1.1.1	INTEGER	read-write	The TACACS+ server with the lowest priority is the first used for an TACACS+ AAA request. If there is no response or the access was denied (in the non-authoritave case only, see also tacacspSrvPolicy) the TACACS+ server with the next lowest priority will be used. The default value is 0.
IP tacacspSrvAddress	1.3.6.1.4.1.272.254.13.1.1.2	IpAddress	read-write	The TACACS+ server IP address.
INT tacacspSrvTcpPort	1.3.6.1.4.1.272.254.13.1.1.3	INTEGER	read-only	The Login Host Protocol (TACACS) TCP port assigned by the IANA.
STR tacacspSrvSecret	1.3.6.1.4.1.272.254.13.1.1.4	DisplayString	read-write	The shared secret between the TACACS+ server and the NAS (encryption key in the TACACS+ server's configuration file).
INT tacacspSrvTimeout	1.3.6.1.4.1.272.254.13.1.1.5	INTEGER	read-write	The amount of seconds waiting for an outstanding TACACS+ response. Default is three seconds.
INT tacacspSrvAdminStatus	1.3.6.1.4.1.272.254.13.1.1.7	INTEGER	read-write	The administrative status of this TACACS+ server entry, if set to up(1) the associated server will be used for authentication, authorization and accounting according the priority (see tacacspSrvPriority) and the current operational status (see tacacspSrvOperStatus). Otherwise this entry will not be considered for TACACS+ AAA requests.
INT tacacspSrvOperStatus	1.3.6.1.4.1.272.254.13.1.1.8	INTEGER	read-only	The operational status of this TACACS+ server entry, the status blocked will be set after a failed TACACS+ request. If set to blocked(2) or down(3) this entry will not be considered for TACACS+ AAA requests.
INT tacacspSrvPolicy	1.3.6.1.4.1.272.254.13.1.1.9	INTEGER	read-write	If set to authoritative(1), a negative answer to a request will be accepted. This is not necessarily true when set to non-authoritative(2), where the next TACACS+ server will be asked until there is finally an authoritative(1) server configured.
INT tacacspSrvEncrMode	1.3.6.1.4.1.272.254.13.1.1.10	INTEGER	read-write	If set to encrypt(1) the TACACS+ packet will be MD5 encrypted. Otherwise - if set to cleartext(2) - the packet and therefore all related information will be send unencrypted. This mode is intended for testing but not recommended for normal use.
INT tacacspSrvMultiSession	1.3.6.1.4.1.272.254.13.1.1.11	INTEGER	read-write	If enabled(1) multiple TACACS+ sessions (subsequent TACACS+ requests) may be supported simultaneously over a single TCP connection. If multiple sessions are not being multiplexed over a single TCP connection, a new connection will be opened for each TACACS+ session and closed at the end of that session.
INT tacacspSrvPppAuth	1.3.6.1.4.1.272.254.13.1.1.13	INTEGER	read-write	Enables the PPP authentication for the associated TACACS+ server.
INT tacacspSrvLoginAuth	1.3.6.1.4.1.272.254.13.1.1.14	INTEGER	read-write	Enables the login authentication (shell) for the associated TACACS+ server.
INT tacacspSrvAccounting	1.3.6.1.4.1.272.254.13.1.1.15	INTEGER	read-write	Enables the TACACS+ accounting for the associated TACACS+ server.
INT tacacspSrvBlockTimeout	1.3.6.1.4.1.272.254.13.1.1.16	INTEGER	read-write	Timeout in seconds for the blocked status (see also tacacspSrvOperStatus), if expired, the operational status is set to up(1) or down(3) according the the current tacacspSrvAdminStatus. When set to zero, the operational status is never set to blocked.
INT tacacspSrvAuthentNoResp	1.3.6.1.4.1.272.254.13.1.1.17	INTEGER	read-write	Possible actions for the client when no response from servers : - allowing the connection to the router by local login pwd (2) - or stop the negociation (3).
INT tacacspSrvAuthentNegResp	1.3.6.1.4.1.272.254.13.1.1.18	INTEGER	read-write	Possible actions for the client when negative response : from servers. - allowing the connection to the router by local login pwd (2) - or stop the negociation (3).
INT tacacspSrvPrivLvlOnLogin	1.3.6.1.4.1.272.254.13.1.1.19	INTEGER	read-write	Configurable TACACS+ privilege level assigned after successful authentication procedure. This user-specific privilege level is needed for the subsequent command authorization request(s). Note that the user is free to change that initial privilege level via the 'enab' command, provided that it's enabled on the TACACS+ server. If set to -1, this parameter will be ignored.

RFC description

Bianca Brick (Siemens) vendor-specific MIB defining TACACS+ protocol objects for authentication and authorization on Bianca Brick communication systems.

Start monitoring bintec BIANCA/BRICK ISDN/VPN routers (legacy) with a free 30-day trial of IPNetwork Monitor. Import MIBs, browse SNMP OIDs, create custom SNMP monitors, configure alerts, and monitor any SNMP-enabled network device from a single console.

Download BIANCA-BRICK-TACACSP-MIB

What Is BIANCA-BRICK-TACACSP-MIB?

Supported Devices

Monitoring Examples

What Can Be Monitored

This MIB depends on

Related MIBs

RFC description