All MIBs › CIENA-CES-RADIUS-CLIENT-MIB
Organization: Ciena Corp.
Last Updated: 2016-02-17
Category: RADIUS and AAA, Vendor: Ciena
Description: Configures and monitors RADIUS authentication client on Ciena CES Carrier Ethernet switches.
Start monitoring vendor-neutral, standards-based MIB, any SNMPv3-capable network device (SNMP engine identity/boot/clock status) with a free 30-day trial of IPNetwork Monitor. Import MIBs, browse SNMP OIDs, create custom SNMP monitors, configure alerts, and monitor any SNMP-enabled network device from a single console.
What Is CIENA-CES-RADIUS-CLIENT-MIB?
CIENA-CES-RADIUS-CLIENT-MIB configures and monitors the RADIUS authentication client used for administrative access control on Ciena CES Carrier Ethernet switches. Its data covers configuration (server addresses, shared secrets, retry/timeout parameters) and status/statistics (authentication attempt and response counts). Its monitoring value is chiefly in confirming that remote RADIUS servers are reachable and responding, and in tracking authentication failure/timeout counts that can indicate an outage of the centralized AAA infrastructure or a misconfigured shared secret, a software/service-availability health check. It implements client-side support for the standard RADIUS protocol (RFC 2865) as a Ciena-specific management MIB. It is used in carrier networks that rely on centralized AAA servers for administrative login control on Ciena CES switches, and the CIENA-CES-RADIUS-CLIENT-MIB MIB defines the client-side objects engineers poll to confirm those servers remain reachable.
IPNetwork Monitor allows you to monitor SNMP objects defined in CIENA-CES-RADIUS-CLIENT-MIB. Use the built-in SNMP Monitoring Browser to explore available variables, view their current values and descriptions, and select the objects you want to monitor. You can then create SNMP monitors, configure thresholds, and receive alerts when monitored values change.
Supported Devices
- Ciena CES Carrier Ethernet switch
Monitoring Examples
No sample object names were supplied for this module, so specific OIDs cannot be honestly cited; based on its stated purpose, however, an operator would typically poll per-server statistics such as authentication requests sent, responses received, and timeouts. A rising count of timeouts against a configured RADIUS server, with no corresponding rise in successful responses, would indicate that server or the network path to it has become unreachable.
What Can Be Monitored
- configured RADIUS server addresses
- authentication request/response counts
- authentication timeout/failure counts
- RADIUS client retry and timeout settings
This MIB depends on
Related MIBs
Imported Objects
From CIENA-SMI
| cienaCesStatistics | OBJECT-IDENTITY |
From CIENA-TC
| CienaGlobalState |
From INET-ADDRESS-MIB
| InetAddress | |
| InetAddressType |
From SNMPv2-SMI
| Counter32 | |
| Gauge32 | |
| Integer32 | |
| IpAddress | |
| MODULE-IDENTITY | |
| OBJECT-TYPE | |
| TimeTicks | |
| Unsigned32 |
From SNMPv2-TC
| DisplayString | |
| RowStatus | |
| TEXTUAL-CONVENTION | |
| TruthValue |
OIDs
| OID symbolic | OID numeric | Type | Access | Description |
|---|---|---|---|---|
| CIE cienaCesRadiusAdminState | 1.3.6.1.4.1.1271.2.3.3.1.1.1.1 | CienaGlobalState | read-write | Setting this object administratively enables or disables the RADIUS client. |
| cienaCesRadiusClient | 1.3.6.1.4.1.1271.2.3.3.1.1 | |||
| STR cienaCesRadiusClientAuthKey | 1.3.6.1.4.1.1271.2.3.3.1.1.1.5 | RadiusString | read-write | The authenticaion key to be used for RADIUS servers. Retrieving the value of this object via SNMP returns an empty string for security reasons. |
| T/F cienaCesRadiusClientAuthKeyUnset | 1.3.6.1.4.1.1271.2.3.3.1.1.1.6 | TruthValue | read-write | Setting this object to true clears the value of cienaCesRadiusClientAuthKey. Reading this object always returns a value of false. |
| cienaCesRadiusClientGlobal | 1.3.6.1.4.1.1271.2.3.3.1.1.1 | |||
| cienaCesRadiusClientMIB | 1.3.6.1.4.1.1271.2.3.3 | This module defines the objects used by the RADIUS client. | ||
| cienaCesRadiusClientMIBCompliances | 1.3.6.1.4.1.1271.2.3.3.3.1 | |||
| cienaCesRadiusClientMIBConformance | 1.3.6.1.4.1.1271.2.3.3.3 | |||
| cienaCesRadiusClientMIBGroups | 1.3.6.1.4.1.1271.2.3.3.3.2 | |||
| cienaCesRadiusClientMIBNotificationPrefix | 1.3.6.1.4.1.1271.2.3.3.2 | |||
| cienaCesRadiusClientMIBNotifications | 1.3.6.1.4.1.1271.2.3.3.2.0 | |||
| cienaCesRadiusClientMIBObjects | 1.3.6.1.4.1.1271.2.3.3.1 | |||
| I32 cienaCesRadiusClientRetries | 1.3.6.1.4.1.1271.2.3.3.1.1.1.4 | Integer32 | read-write | Indicates the number of times the RADIUS server should be tried before giving up on the server. |
| INT cienaCesRadiusClientSearchType | 1.3.6.1.4.1.1271.2.3.3.1.1.1.7 | INTEGER | read-write | This object sets the search type of the RADIUS client. |
| cienaCesRadiusClientServer | 1.3.6.1.4.1.1271.2.3.3.1.1.2 | |||
| C32 cienaCesRadiusClientServerAccessAccepts | 1.3.6.1.4.1.1271.2.3.3.1.1.2.1.1.9 | Counter32 | read-only | The number of RADIUS Access-Accept packets (valid or invalid) received from this server. |
| C32 cienaCesRadiusClientServerAccessChallenges | 1.3.6.1.4.1.1271.2.3.3.1.1.2.1.1.11 | Counter32 | read-only | The number of RADIUS Access-Challenge packets (valid or invalid) received from this server. |
| C32 cienaCesRadiusClientServerAccessRejects | 1.3.6.1.4.1.1271.2.3.3.1.1.2.1.1.10 | Counter32 | read-only | The number of RADIUS Access-Reject packets (valid or invalid) received from this server. |
| C32 cienaCesRadiusClientServerAccessRequests | 1.3.6.1.4.1.1271.2.3.3.1.1.2.1.1.7 | Counter32 | read-only | The number of RADIUS Access-Request packets sent to this server. This does not include retransmissions. |
| C32 cienaCesRadiusClientServerAccessRetransmissions | 1.3.6.1.4.1.1271.2.3.3.1.1.2.1.1.8 | Counter32 | read-only | The number of RADIUS Access-Request packets retransmitted to this RADIUS authentication server. |
| STR cienaCesRadiusClientServerAddr | 1.3.6.1.4.1.1271.2.3.3.1.1.2.1.1.2 | DisplayString | read-create | Host name or IP address of the RADIUS server. |
| INT cienaCesRadiusClientServerApplication | 1.3.6.1.4.1.1271.2.3.3.1.1.2.1.1.18 | INTEGER | read-create | This object specifies how the RADIUS server should be used for authentication. |
| I32 cienaCesRadiusClientServerAuthPort | 1.3.6.1.4.1.1271.2.3.3.1.1.2.1.1.5 | Integer32 | read-create | The destination UDP port number to which RADIUS messages should be sent. The RADIUS server is not used for authentication if this port number is 0. |
| C32 cienaCesRadiusClientServerBadAuthenticators | 1.3.6.1.4.1.1271.2.3.3.1.1.2.1.1.13 | Counter32 | read-only | The number of RADIUS Access-Response packets containing invalid authenticators or signature attributes received from this server. |
| cienaCesRadiusClientServerEntry | 1.3.6.1.4.1.1271.2.3.3.1.1.2.1.1 | not-accessible | RADIUS server entry. | |
| I32 cienaCesRadiusClientServerIndex | 1.3.6.1.4.1.1271.2.3.3.1.1.2.1.1.1 | Integer32 | not-accessible | Specifies the index of this table. |
| C32 cienaCesRadiusClientServerMalformedAccessResponses | 1.3.6.1.4.1.1271.2.3.3.1.1.2.1.1.12 | Counter32 | read-only | The number of malformed RADIUS Access-Response packets received from this server. Malformed packets include packets with an invalid length. Bad authenticators or signature attributes or unknown types are not included as malformed access responses. |
| C32 cienaCesRadiusClientServerPacketsDropped | 1.3.6.1.4.1.1271.2.3.3.1.1.2.1.1.17 | Counter32 | read-only | The number of RADIUS packets which were received from this server on the authentication port and dropped for some other reason. |
| G32 cienaCesRadiusClientServerPendingRequests | 1.3.6.1.4.1.1271.2.3.3.1.1.2.1.1.14 | Gauge32 | read-only | The number of RADIUS Access-Request packets destined for this server that have not yet timed out or received a response. This variable is incremented when an Access-Request is sent and decremented due to receipt of an Access-Accept, Access-Reject, Access-Challenge, a timeout, or retransmission. |
| I32 cienaCesRadiusClientServerPriority | 1.3.6.1.4.1.1271.2.3.3.1.1.2.1.1.4 | Integer32 | read-create | Specifies the priority of RADIUS servers configured on the device. |
| IP cienaCesRadiusClientServerResolvedAddr | 1.3.6.1.4.1.1271.2.3.3.1.1.2.1.1.3 | IpAddress | read-only | Specifies the resolved IP address if cienaCesRadiusClientServerAddr is set to host name. If cienaCesRadiusClientServerAddr is set to IP address, then cienaCesRadiusClientServerResolvedAddr contains the same information as cienaCesRadiusClientServerAddr. |
| TIK cienaCesRadiusClientServerRoundTripTime | 1.3.6.1.4.1.1271.2.3.3.1.1.2.1.1.6 | TimeTicks | read-only | The time interval (in hundredths of a second) between the most recent Access-Reply/Access-Challenge and the Access-Request that matched it from this RADIUS authentication server. |
| ROW cienaCesRadiusClientServerStatus | 1.3.6.1.4.1.1271.2.3.3.1.1.2.1.1.19 | RowStatus | read-create | To create a row in this table, a manager must set this object to createAndGo(4). To create an entry, cienaCesRadiusClientServerStatus and cienaCesRadiusClientServerAddr must be specified. The SNMP multiple set operation must be used to create the entry. To disable a RADIUS server, set the cienaCesRadiusClientServerStatus object to 'notInService' state. |
| cienaCesRadiusClientServerTable | 1.3.6.1.4.1.1271.2.3.3.1.1.2.1 | not-accessible | Lists the possible RADIUS servers. While creating an entry, cienaCesRadiusRadiusClientServerStatus and cienaCesRadiusClientServerAddr must be specified. The SNMP multiple set operation must be used to create an entry. | |
| C32 cienaCesRadiusClientServerTimeouts | 1.3.6.1.4.1.1271.2.3.3.1.1.2.1.1.15 | Counter32 | read-only | The number of authentication timeouts to this server. After a timeout the client may retry sending to the same server, send to a different server, or give up. A retry to the same server is counted as a retransmit as well as a timeout. A send to a different server is counted as a request as well as a timeout. |
| C32 cienaCesRadiusClientServerUnknownTypes | 1.3.6.1.4.1.1271.2.3.3.1.1.2.1.1.16 | Counter32 | read-only | The number of RADIUS packets of unknown type which were received from this server on the authentication port. |
| I32 cienaCesRadiusClientTimeout | 1.3.6.1.4.1.1271.2.3.3.1.1.1.3 | Integer32 | read-write | This is the time in seconds between re-transmissions to the RADIUS server. |
| cienaCesRadiusDot1xAcct | 1.3.6.1.4.1.1271.2.3.3.1.1.5 | |||
| C32 cienaCesRadiusDot1xAcctAccessAccepts | 1.3.6.1.4.1.1271.2.3.3.1.1.5.2.1.12 | Counter32 | read-only | The number of RADIUS Access-Accept packets (valid or invalid) received from this server. |
| C32 cienaCesRadiusDot1xAcctAccessChallenges | 1.3.6.1.4.1.1271.2.3.3.1.1.5.2.1.14 | Counter32 | read-only | The number of RADIUS Access-Challenge packets (valid or invalid) received from this server. |
| C32 cienaCesRadiusDot1xAcctAccessRejects | 1.3.6.1.4.1.1271.2.3.3.1.1.5.2.1.13 | Counter32 | read-only | The number of RADIUS Access-Reject packets (valid or invalid) received from this server. |
| C32 cienaCesRadiusDot1xAcctAccountingResponses | 1.3.6.1.4.1.1271.2.3.3.1.1.5.2.1.15 | Counter32 | read-only | The number of RADIUS Accounting-Response packets (valid or invalid) received from this server. |
| STR cienaCesRadiusDot1xAcctAddr | 1.3.6.1.4.1.1271.2.3.3.1.1.5.2.1.4 | DisplayString | read-create | Host name or IP address of the RADIUS server. |
| INT cienaCesRadiusDot1xAcctAdminState | 1.3.6.1.4.1.1271.2.3.3.1.1.5.1.1 | INTEGER | read-write | Setting this object administratively enables/disables the RADIUS Dot1x accounting client on the device. |
| STR cienaCesRadiusDot1xAcctAuthKey | 1.3.6.1.4.1.1271.2.3.3.1.1.5.1.4 | RadiusString | read-write | The authenticaion key to be used for RADIUS servers. Retrieving the value of this object via SNMP returns an empty string for security reasons. |
| I32 cienaCesRadiusDot1xAcctAuthPort | 1.3.6.1.4.1.1271.2.3.3.1.1.5.2.1.6 | Integer32 | read-create | The destination UDP port number to which RADIUS messages should be sent. The RADIUS server is not used for authentication if this port number is 0. |
| OCT cienaCesRadiusDot1xAcctAuthSecret | 1.3.6.1.4.1.1271.2.3.3.1.1.5.1.7 | OCTET STRING | read-write | Used to set the pre-encrypted secret for dot1x auth acct. When read, this object returns the encrypted secret. |
| C32 cienaCesRadiusDot1xAcctBadAuthenticators | 1.3.6.1.4.1.1271.2.3.3.1.1.5.2.1.17 | Counter32 | read-only | The number of RADIUS Access-Response packets containing invalid authenticators or signature attributes received from this server. |
| T/F cienaCesRadiusDot1xAcctClearStatistics | 1.3.6.1.4.1.1271.2.3.3.1.1.5.2.1.7 | TruthValue | read-write | This object clears the statistics for a server. |
| cienaCesRadiusDot1xAcctEntry | 1.3.6.1.4.1.1271.2.3.3.1.1.5.2.1 | not-accessible | RADIUS user login entry. | |
| cienaCesRadiusDot1xAcctGlobal | 1.3.6.1.4.1.1271.2.3.3.1.1.5.1 | |||
| U32 cienaCesRadiusDot1xAcctGreylistTimeout | 1.3.6.1.4.1.1271.2.3.3.1.1.5.1.6 | Unsigned32 | read-write | The max greylist timeout for a RADIUS Dot1x Acct server between 1 minute and 4 hours. |
| U32 cienaCesRadiusDot1xAcctGreylistTimeRemaining | 1.3.6.1.4.1.1271.2.3.3.1.1.5.2.1.8 | Unsigned32 | read-only | Reflects the remaining time before the server removed from the greylist. A value of '0' (zero) indicates the current server is not greylisted |
| I32 cienaCesRadiusDot1xAcctIndex | 1.3.6.1.4.1.1271.2.3.3.1.1.5.2.1.1 | Integer32 | not-accessible | Specifies the index of this table. |
| C32 cienaCesRadiusDot1xAcctMalformedResponses | 1.3.6.1.4.1.1271.2.3.3.1.1.5.2.1.16 | Counter32 | read-only | The number of malformed RADIUS Access-Response packets received from this server. Malformed packets include packets with an invalid length. Bad authenticators or signature attributes or unknown types are not included as malformed access responses. |
| C32 cienaCesRadiusDot1xAcctPacketsDropped | 1.3.6.1.4.1.1271.2.3.3.1.1.5.2.1.20 | Counter32 | read-only | The number of RADIUS packets which were received from this server on the authentication port and dropped for some other reason. |
| I32 cienaCesRadiusDot1xAcctPriority | 1.3.6.1.4.1.1271.2.3.3.1.1.5.2.1.5 | Integer32 | read-create | Specifies the priority of RADIUS servers configured on the device. |
| C32 cienaCesRadiusDot1xAcctRequests | 1.3.6.1.4.1.1271.2.3.3.1.1.5.2.1.10 | Counter32 | read-only | The number of RADIUS Access-Request packets sent to this server. This does not include retransmissions. |
| IP cienaCesRadiusDot1xAcctResolvedInetAddress | 1.3.6.1.4.1.1271.2.3.3.1.1.5.2.1.3 | InetAddress | read-only | Specifies the resolved IP address if cienaCesRadiusDot1xAcctAddr is set to host name. If cienaCesRadiusDot1xAcctAddr is set to ip address then cienaCesRadiusDot1xAcctResolvedInetAddress will contain same information as cienaCesRadiusDot1xAcctAddr. This OID should be used in conjuction with cienaCesRadiusDot1xAcctResolvedInetAddrType. |
| IPt cienaCesRadiusDot1xAcctResolvedInetAddrType | 1.3.6.1.4.1.1271.2.3.3.1.1.5.2.1.2 | InetAddressType | read-only | Specifies the resolved IP address type. This OID is used in conjunction with cienaCesRadiusDot1xAcctInetAddrress. When set to : ipv4 : cienaCesRadiusDot1xAcctResolvedInetAddress should be compliant with InetAddressIPv4 ipv6 : cienaCesRadiusDot1xAcctResolvedInetAddress should be compliant with InetAddressIPv6 |
| C32 cienaCesRadiusDot1xAcctRetransmissions | 1.3.6.1.4.1.1271.2.3.3.1.1.5.2.1.11 | Counter32 | read-only | The number of RADIUS Access-Request packets retransmitted to this RADIUS authentication server. |
| I32 cienaCesRadiusDot1xAcctRetries | 1.3.6.1.4.1.1271.2.3.3.1.1.5.1.3 | Integer32 | read-write | Indicates the number of times the RADIUS server should be tried before giving up on the server. |
| TIK cienaCesRadiusDot1xAcctRoundTripTime | 1.3.6.1.4.1.1271.2.3.3.1.1.5.2.1.9 | TimeTicks | read-only | The time interval (in hundredths of a second) between the most recent Access-Reply/Access-Challenge and the Access-Request that matched it from this RADIUS authentication server. |
| INT cienaCesRadiusDot1xAcctSearchType | 1.3.6.1.4.1.1271.2.3.3.1.1.5.1.5 | INTEGER | read-write | This object sets the search type of the RADIUS client. |
| ROW cienaCesRadiusDot1xAcctStatus | 1.3.6.1.4.1.1271.2.3.3.1.1.5.2.1.21 | RowStatus | read-create | To create a row in this table, a manager must specify cienaCesRadiusDot1xAcctAddr and set this object to createAndGo(4). The RADIUS server will initially be administratively disabled. To administratively enable the RADIUS server, set this object to active(1). To administratively disable the RADIUS server set this object to notInService(2). |
| cienaCesRadiusDot1xAcctTable | 1.3.6.1.4.1.1271.2.3.3.1.1.5.2 | not-accessible | Lists the possible RADIUS Dot1x Acct servers. While creating an entry, cienaCesRadiusDot1xAcctStatus and cienaCesRadiusDot1xAcctAddr must be specified. The SNMP multiple set operation must be used to create an entry. | |
| I32 cienaCesRadiusDot1xAcctTimeout | 1.3.6.1.4.1.1271.2.3.3.1.1.5.1.2 | Integer32 | read-write | This is the time in seconds between re-transmissions to the RADIUS server. |
| C32 cienaCesRadiusDot1xAcctTimeouts | 1.3.6.1.4.1.1271.2.3.3.1.1.5.2.1.18 | Counter32 | read-only | The number of authentication timeouts to this server. After a timeout the client may retry sending to the same server, send to a different server, or give up. A retry to the same server is counted as a retransmit as well as a timeout. A send to a different server is counted as a request as well as a timeout. |
| C32 cienaCesRadiusDot1xAcctUnknownTypes | 1.3.6.1.4.1.1271.2.3.3.1.1.5.2.1.19 | Counter32 | read-only | The number of RADIUS packets of unknown type which were received from this server on the authentication port. |
| cienaCesRadiusDot1xAuth | 1.3.6.1.4.1.1271.2.3.3.1.1.4 | |||
| C32 cienaCesRadiusDot1xAuthAccessAccepts | 1.3.6.1.4.1.1271.2.3.3.1.1.4.2.1.12 | Counter32 | read-only | The number of RADIUS Access-Accept packets (valid or invalid) received from this server. |
| C32 cienaCesRadiusDot1xAuthAccessChallenges | 1.3.6.1.4.1.1271.2.3.3.1.1.4.2.1.14 | Counter32 | read-only | The number of RADIUS Access-Challenge packets (valid or invalid) received from this server. |
| C32 cienaCesRadiusDot1xAuthAccessRejects | 1.3.6.1.4.1.1271.2.3.3.1.1.4.2.1.13 | Counter32 | read-only | The number of RADIUS Access-Reject packets (valid or invalid) received from this server. |
| C32 cienaCesRadiusDot1xAuthAccountingResponses | 1.3.6.1.4.1.1271.2.3.3.1.1.4.2.1.15 | Counter32 | read-only | The number of RADIUS Accounting-Response packets (valid or invalid) received from this server. |
| STR cienaCesRadiusDot1xAuthAddr | 1.3.6.1.4.1.1271.2.3.3.1.1.4.2.1.4 | DisplayString | read-create | Host name or IP address of the RADIUS server. |
| STR cienaCesRadiusDot1xAuthAuthKey | 1.3.6.1.4.1.1271.2.3.3.1.1.4.1.3 | RadiusString | read-write | The authenticaion key to be used for RADIUS servers. Retrieving the value of this object via SNMP returns an empty string for security reasons. |
| I32 cienaCesRadiusDot1xAuthAuthPort | 1.3.6.1.4.1.1271.2.3.3.1.1.4.2.1.6 | Integer32 | read-create | The destination UDP port number to which RADIUS messages should be sent. The RADIUS server is not used for authentication if this port number is 0. |
| OCT cienaCesRadiusDot1xAuthAuthSecret | 1.3.6.1.4.1.1271.2.3.3.1.1.4.1.6 | OCTET STRING | read-write | Used to set the pre-encrypted secret for dot1x auth. When read, this object returns the encrypted secret. |
| C32 cienaCesRadiusDot1xAuthBadAuthenticators | 1.3.6.1.4.1.1271.2.3.3.1.1.4.2.1.17 | Counter32 | read-only | The number of RADIUS Access-Response packets containing invalid authenticators or signature attributes received from this server. |
| T/F cienaCesRadiusDot1xAuthClearStatistics | 1.3.6.1.4.1.1271.2.3.3.1.1.4.2.1.7 | TruthValue | read-write | This object clears the statistics for a server. |
| cienaCesRadiusDot1xAuthEntry | 1.3.6.1.4.1.1271.2.3.3.1.1.4.2.1 | not-accessible | RADIUS user login entry. | |
| cienaCesRadiusDot1xAuthGlobal | 1.3.6.1.4.1.1271.2.3.3.1.1.4.1 | |||
| U32 cienaCesRadiusDot1xAuthGreylistTimeout | 1.3.6.1.4.1.1271.2.3.3.1.1.4.1.5 | Unsigned32 | read-write | The max greylist timeout for a RADIUS Dot1x Auth server between 1 minute and 4 hours. |
| U32 cienaCesRadiusDot1xAuthGreylistTimeRemaining | 1.3.6.1.4.1.1271.2.3.3.1.1.4.2.1.8 | Unsigned32 | read-only | Reflects the remaining time before the server removed from the greylist. A value of '0' (zero) indicates the current server is not greylisted |
| I32 cienaCesRadiusDot1xAuthIndex | 1.3.6.1.4.1.1271.2.3.3.1.1.4.2.1.1 | Integer32 | not-accessible | Specifies the index of this table. |
| C32 cienaCesRadiusDot1xAuthMalformedResponses | 1.3.6.1.4.1.1271.2.3.3.1.1.4.2.1.16 | Counter32 | read-only | The number of malformed RADIUS Access-Response packets received from this server. Malformed packets include packets with an invalid length. Bad authenticators or signature attributes or unknown types are not included as malformed access responses. |
| C32 cienaCesRadiusDot1xAuthPacketsDropped | 1.3.6.1.4.1.1271.2.3.3.1.1.4.2.1.20 | Counter32 | read-only | The number of RADIUS packets which were received from this server on the authentication port and dropped for some other reason. |
| I32 cienaCesRadiusDot1xAuthPriority | 1.3.6.1.4.1.1271.2.3.3.1.1.4.2.1.5 | Integer32 | read-create | Specifies the priority of RADIUS servers configured on the device. |
| C32 cienaCesRadiusDot1xAuthRequests | 1.3.6.1.4.1.1271.2.3.3.1.1.4.2.1.10 | Counter32 | read-only | The number of RADIUS Access-Request packets sent to this server. This does not include retransmissions. |
| IP cienaCesRadiusDot1xAuthResolvedInetAddress | 1.3.6.1.4.1.1271.2.3.3.1.1.4.2.1.3 | InetAddress | read-only | Specifies the resolved IP address if cienaCesRadiusDot1xAuthAddr is set to host name. If cienaCesRadiusDot1xAuthAddr is set to ip address then cienaCesRadiusDot1xAuthResolvedInetAddress will contain same information as cienaCesRadiusDot1xAuthAddr. This OID should be used in conjuction with cienaCesRadiusDot1xAuthResolvedInetAddrType. |
| IPt cienaCesRadiusDot1xAuthResolvedInetAddrType | 1.3.6.1.4.1.1271.2.3.3.1.1.4.2.1.2 | InetAddressType | read-only | Specifies the resolved IP address type. This OID is used in conjunction with cienaCesRadiusDot1xAuthInetAddrress. When set to : ipv4 : cienaCesRadiusDot1xAuthResolvedInetAddress should be compliant with InetAddressIPv4 ipv6 : cienaCesRadiusDot1xAuthResolvedInetAddress should be compliant with InetAddressIPv6 |
| C32 cienaCesRadiusDot1xAuthRetransmissions | 1.3.6.1.4.1.1271.2.3.3.1.1.4.2.1.11 | Counter32 | read-only | The number of RADIUS Access-Request packets retransmitted to this RADIUS authentication server. |
| I32 cienaCesRadiusDot1xAuthRetries | 1.3.6.1.4.1.1271.2.3.3.1.1.4.1.2 | Integer32 | read-write | Indicates the number of times the RADIUS server should be tried before giving up on the server. |
| TIK cienaCesRadiusDot1xAuthRoundTripTime | 1.3.6.1.4.1.1271.2.3.3.1.1.4.2.1.9 | TimeTicks | read-only | The time interval (in hundredths of a second) between the most recent Access-Reply/Access-Challenge and the Access-Request that matched it from this RADIUS authentication server. |
| INT cienaCesRadiusDot1xAuthSearchType | 1.3.6.1.4.1.1271.2.3.3.1.1.4.1.4 | INTEGER | read-write | This object sets the search type of the RADIUS client. |
| ROW cienaCesRadiusDot1xAuthStatus | 1.3.6.1.4.1.1271.2.3.3.1.1.4.2.1.21 | RowStatus | read-create | To create a row in this table, a manager must specify cienaCesRadiusDot1xAuthAddr and set this object to createAndGo(4). The RADIUS server will initially be administratively disabled. To administratively enable the RADIUS server, set this object to active(1). To administratively disable the RADIUS server set this object to notInService(2). |
| cienaCesRadiusDot1xAuthTable | 1.3.6.1.4.1.1271.2.3.3.1.1.4.2 | not-accessible | Lists the possible RADIUS Dot1x auth servers. While creating an entry, cienaCesRadiusDot1xAuthStatus and cienaCesRadiusDot1xAuthAddr must be specified. The SNMP multiple set operation must be used to create an entry. | |
| I32 cienaCesRadiusDot1xAuthTimeout | 1.3.6.1.4.1.1271.2.3.3.1.1.4.1.1 | Integer32 | read-write | This is the time in seconds between re-transmissions to the RADIUS server. |
| C32 cienaCesRadiusDot1xAuthTimeouts | 1.3.6.1.4.1.1271.2.3.3.1.1.4.2.1.18 | Counter32 | read-only | The number of authentication timeouts to this server. After a timeout the client may retry sending to the same server, send to a different server, or give up. A retry to the same server is counted as a retransmit as well as a timeout. A send to a different server is counted as a request as well as a timeout. |
| C32 cienaCesRadiusDot1xAuthUnknownTypes | 1.3.6.1.4.1.1271.2.3.3.1.1.4.2.1.19 | Counter32 | read-only | The number of RADIUS packets of unknown type which were received from this server on the authentication port. |
| CIE cienaCesRadiusOperState | 1.3.6.1.4.1.1271.2.3.3.1.1.1.2 | CienaGlobalState | read-only | This object returns the operational state of the RADIUS client. |
| cienaCesRadiusUserLogin | 1.3.6.1.4.1.1271.2.3.3.1.1.3 | |||
| C32 cienaCesRadiusUserLoginAccessAccepts | 1.3.6.1.4.1.1271.2.3.3.1.1.3.2.1.11 | Counter32 | read-only | The number of RADIUS Access-Accept packets (valid or invalid) received from this server. |
| C32 cienaCesRadiusUserLoginAccessChallenges | 1.3.6.1.4.1.1271.2.3.3.1.1.3.2.1.13 | Counter32 | read-only | The number of RADIUS Access-Challenge packets (valid or invalid) received from this server. |
| C32 cienaCesRadiusUserLoginAccessRejects | 1.3.6.1.4.1.1271.2.3.3.1.1.3.2.1.12 | Counter32 | read-only | The number of RADIUS Access-Reject packets (valid or invalid) received from this server. |
| C32 cienaCesRadiusUserLoginAccountingResponses | 1.3.6.1.4.1.1271.2.3.3.1.1.3.2.1.14 | Counter32 | read-only | The number of RADIUS Accounting-Response packets (valid or invalid) received from this server. |
| cienaCesRadiusUserLoginAcct | 1.3.6.1.4.1.1271.2.3.3.1.1.6 | |||
| C32 cienaCesRadiusUserLoginAcctAccessAccepts | 1.3.6.1.4.1.1271.2.3.3.1.1.6.2.1.11 | Counter32 | read-only | The number of RADIUS Access-Accept packets (valid or invalid) received from this server. |
| C32 cienaCesRadiusUserLoginAcctAccessChallenges | 1.3.6.1.4.1.1271.2.3.3.1.1.6.2.1.13 | Counter32 | read-only | The number of RADIUS Access-Challenge packets (valid or invalid) received from this server. |
| C32 cienaCesRadiusUserLoginAcctAccessRejects | 1.3.6.1.4.1.1271.2.3.3.1.1.6.2.1.12 | Counter32 | read-only | The number of RADIUS Access-Reject packets (valid or invalid) received from this server. |
| C32 cienaCesRadiusUserLoginAcctAccountingResponses | 1.3.6.1.4.1.1271.2.3.3.1.1.6.2.1.14 | Counter32 | read-only | The number of RADIUS Accounting-Response packets (valid or invalid) received from this server. |
| STR cienaCesRadiusUserLoginAcctAddr | 1.3.6.1.4.1.1271.2.3.3.1.1.6.2.1.4 | DisplayString | read-create | Host name or IP address of the RADIUS server. |
| INT cienaCesRadiusUserLoginAcctAdminState | 1.3.6.1.4.1.1271.2.3.3.1.1.6.1.1 | INTEGER | read-write | Setting this object administratively enables/disables the RADIUS user login accounting client on the device. |
| STR cienaCesRadiusUserLoginAcctAuthKey | 1.3.6.1.4.1.1271.2.3.3.1.1.6.1.4 | RadiusString | read-write | The authenticaion key to be used for RADIUS servers. Retrieving the value of this object via SNMP returns an empty string for security reasons. |
| I32 cienaCesRadiusUserLoginAcctAuthPort | 1.3.6.1.4.1.1271.2.3.3.1.1.6.2.1.6 | Integer32 | read-create | The destination UDP port number to which RADIUS messages should be sent. The RADIUS server is not used for authentication if this port number is 0. |
| OCT cienaCesRadiusUserLoginAcctAuthSecret | 1.3.6.1.4.1.1271.2.3.3.1.1.6.1.6 | OCTET STRING | read-write | Used to set the pre-encrypted secret for user-login accounting auth. When read, this object returns the encrypted secret. |
| C32 cienaCesRadiusUserLoginAcctBadAuthenticators | 1.3.6.1.4.1.1271.2.3.3.1.1.6.2.1.16 | Counter32 | read-only | The number of RADIUS Access-Response packets containing invalid authenticators or signature attributes received from this server. |
| T/F cienaCesRadiusUserLoginAcctClearStatistics | 1.3.6.1.4.1.1271.2.3.3.1.1.6.2.1.7 | TruthValue | read-write | This object clears the statistics for a server. |
| cienaCesRadiusUserLoginAcctEntry | 1.3.6.1.4.1.1271.2.3.3.1.1.6.2.1 | not-accessible | RADIUS user login entry. | |
| cienaCesRadiusUserLoginAcctGlobal | 1.3.6.1.4.1.1271.2.3.3.1.1.6.1 | |||
| I32 cienaCesRadiusUserLoginAcctIndex | 1.3.6.1.4.1.1271.2.3.3.1.1.6.2.1.1 | Integer32 | not-accessible | Specifies the index of this table. |
| C32 cienaCesRadiusUserLoginAcctMalformedResponses | 1.3.6.1.4.1.1271.2.3.3.1.1.6.2.1.15 | Counter32 | read-only | The number of malformed RADIUS Access-Response packets received from this server. Malformed packets include packets with an invalid length. Bad authenticators or signature attributes or unknown types are not included as malformed access responses. |
| C32 cienaCesRadiusUserLoginAcctPacketsDropped | 1.3.6.1.4.1.1271.2.3.3.1.1.6.2.1.19 | Counter32 | read-only | The number of RADIUS packets which were received from this server on the authentication port and dropped for some other reason. |
| I32 cienaCesRadiusUserLoginAcctPriority | 1.3.6.1.4.1.1271.2.3.3.1.1.6.2.1.5 | Integer32 | read-create | Specifies the priority of RADIUS servers configured on the device. |
| C32 cienaCesRadiusUserLoginAcctRequests | 1.3.6.1.4.1.1271.2.3.3.1.1.6.2.1.9 | Counter32 | read-only | The number of RADIUS Access-Request packets sent to this server. This does not include retransmissions. |
| IP cienaCesRadiusUserLoginAcctResolvedInetAddress | 1.3.6.1.4.1.1271.2.3.3.1.1.6.2.1.3 | InetAddress | read-only | Specifies the resolved IP address if cienaCesRadiusUserLoginAcctAddr is set to host name. If cienaCesRadiusUserLoginAcctAddr is set to ip address then cienaCesRadiusUserLoginAcctResolvedInetAddress will contain same information as cienaCesRadiusUserLoginAcctAddr. This OID should be used in conjuction with cienaCesRadiusUserLoginAcctResolvedInetAddrType. |
| IPt cienaCesRadiusUserLoginAcctResolvedInetAddrType | 1.3.6.1.4.1.1271.2.3.3.1.1.6.2.1.2 | InetAddressType | read-only | Specifies the resolved IP address type. This OID is used in conjunction with cienaCesRadiusUserLoginAcctInetAddrress. When set to : ipv4 : cienaCesRadiusUserLoginAcctResolvedInetAddress should be compliant with InetAddressIPv4 ipv6 : cienaCesRadiusUserLoginAcctResolvedInetAddress should be compliant with InetAddressIPv6 |
| C32 cienaCesRadiusUserLoginAcctRetransmissions | 1.3.6.1.4.1.1271.2.3.3.1.1.6.2.1.10 | Counter32 | read-only | The number of RADIUS Access-Request packets retransmitted to this RADIUS authentication server. |
| I32 cienaCesRadiusUserLoginAcctRetries | 1.3.6.1.4.1.1271.2.3.3.1.1.6.1.3 | Integer32 | read-write | Indicates the number of times the RADIUS server should be tried before giving up on the server. |
| TIK cienaCesRadiusUserLoginAcctRoundTripTime | 1.3.6.1.4.1.1271.2.3.3.1.1.6.2.1.8 | TimeTicks | read-only | The time interval (in hundredths of a second) between the most recent Access-Reply/Access-Challenge and the Access-Request that matched it from this RADIUS authentication server. |
| INT cienaCesRadiusUserLoginAcctSearchType | 1.3.6.1.4.1.1271.2.3.3.1.1.6.1.5 | INTEGER | read-write | This object sets the search type of the RADIUS client. |
| ROW cienaCesRadiusUserLoginAcctStatus | 1.3.6.1.4.1.1271.2.3.3.1.1.6.2.1.20 | RowStatus | read-create | To create a row in this table, a manager must specify cienaCesRadiusUserLoginAcctAddr and set this object to createAndGo(4). The RADIUS server will initially be administratively disabled. To administratively enable the RADIUS server, set this object to active(1). To administratively disable the RADIUS server set this object to notInService(2). |
| cienaCesRadiusUserLoginAcctTable | 1.3.6.1.4.1.1271.2.3.3.1.1.6.2 | not-accessible | Lists the possible RADIUS user login servers. While creating an entry, cienaCesRadiusUserLoginAcctStatus and cienaCesRadiusUserLoginAcctAddr must be specified. The SNMP multiple set operation must be used to create an entry. | |
| I32 cienaCesRadiusUserLoginAcctTimeout | 1.3.6.1.4.1.1271.2.3.3.1.1.6.1.2 | Integer32 | read-write | This is the time in seconds between re-transmissions to the RADIUS server. |
| C32 cienaCesRadiusUserLoginAcctTimeouts | 1.3.6.1.4.1.1271.2.3.3.1.1.6.2.1.17 | Counter32 | read-only | The number of authentication timeouts to this server. After a timeout the client may retry sending to the same server, send to a different server, or give up. A retry to the same server is counted as a retransmit as well as a timeout. A send to a different server is counted as a request as well as a timeout. |
| C32 cienaCesRadiusUserLoginAcctUnknownTypes | 1.3.6.1.4.1.1271.2.3.3.1.1.6.2.1.18 | Counter32 | read-only | The number of RADIUS packets of unknown type which were received from this server on the authentication port. |
| STR cienaCesRadiusUserLoginAddr | 1.3.6.1.4.1.1271.2.3.3.1.1.3.2.1.4 | DisplayString | read-create | Host name or IP address of the RADIUS server. |
| STR cienaCesRadiusUserLoginAuthKey | 1.3.6.1.4.1.1271.2.3.3.1.1.3.1.3 | RadiusString | read-write | The authenticaion key to be used for RADIUS servers. Retrieving the value of this object via SNMP returns an empty string for security reasons. |
| I32 cienaCesRadiusUserLoginAuthPort | 1.3.6.1.4.1.1271.2.3.3.1.1.3.2.1.6 | Integer32 | read-create | The destination UDP port number to which RADIUS messages should be sent. The RADIUS server is not used for authentication if this port number is 0. |
| OCT cienaCesRadiusUserLoginAuthSecret | 1.3.6.1.4.1.1271.2.3.3.1.1.3.1.5 | OCTET STRING | read-write | Used to set the pre-encrypted secret for user-login auth. When read, this object returns the encrypted secret. |
| C32 cienaCesRadiusUserLoginBadAuthenticators | 1.3.6.1.4.1.1271.2.3.3.1.1.3.2.1.16 | Counter32 | read-only | The number of RADIUS Access-Response packets containing invalid authenticators or signature attributes received from this server. |
| T/F cienaCesRadiusUserLoginClearStatistics | 1.3.6.1.4.1.1271.2.3.3.1.1.3.2.1.7 | TruthValue | read-write | This object clears the statistics for a server. |
| cienaCesRadiusUserLoginEntry | 1.3.6.1.4.1.1271.2.3.3.1.1.3.2.1 | not-accessible | RADIUS user login entry. | |
| cienaCesRadiusUserLoginGlobal | 1.3.6.1.4.1.1271.2.3.3.1.1.3.1 | |||
| I32 cienaCesRadiusUserLoginIndex | 1.3.6.1.4.1.1271.2.3.3.1.1.3.2.1.1 | Integer32 | not-accessible | Specifies the index of this table. |
| C32 cienaCesRadiusUserLoginMalformedResponses | 1.3.6.1.4.1.1271.2.3.3.1.1.3.2.1.15 | Counter32 | read-only | The number of malformed RADIUS Access-Response packets received from this server. Malformed packets include packets with an invalid length. Bad authenticators or signature attributes or unknown types are not included as malformed access responses. |
| C32 cienaCesRadiusUserLoginPacketsDropped | 1.3.6.1.4.1.1271.2.3.3.1.1.3.2.1.19 | Counter32 | read-only | The number of RADIUS packets which were received from this server on the authentication port and dropped for some other reason. |
| I32 cienaCesRadiusUserLoginPriority | 1.3.6.1.4.1.1271.2.3.3.1.1.3.2.1.5 | Integer32 | read-create | Specifies the priority of RADIUS servers configured on the device. |
| C32 cienaCesRadiusUserLoginRequests | 1.3.6.1.4.1.1271.2.3.3.1.1.3.2.1.9 | Counter32 | read-only | The number of RADIUS Access-Request packets sent to this server. This does not include retransmissions. |
| IP cienaCesRadiusUserLoginResolvedInetAddress | 1.3.6.1.4.1.1271.2.3.3.1.1.3.2.1.3 | InetAddress | read-only | Specifies the resolved IP address if cienaCesRadiusUserLoginAddr is set to host name. If cienaCesRadiusUserLoginAddr is set to ip address then cienaCesRadiusUserLoginResolvedInetAddress will contain same information as cienaCesRadiusUserLoginAddr. This OID should be used in conjuction with cienaCesRadiusUserLoginResolvedInetAddrType. |
| IPt cienaCesRadiusUserLoginResolvedInetAddrType | 1.3.6.1.4.1.1271.2.3.3.1.1.3.2.1.2 | InetAddressType | read-only | Specifies the resolved IP address type. This OID is used in conjunction with cienaCesRadiusUserLoginInetAddrress. When set to : ipv4 : cienaCesRadiusUserLoginResolvedInetAddress should be compliant with InetAddressIPv4 ipv6 : cienaCesRadiusUserLoginResolvedInetAddress should be compliant with InetAddressIPv6 |
| C32 cienaCesRadiusUserLoginRetransmissions | 1.3.6.1.4.1.1271.2.3.3.1.1.3.2.1.10 | Counter32 | read-only | The number of RADIUS Access-Request packets retransmitted to this RADIUS authentication server. |
| I32 cienaCesRadiusUserLoginRetries | 1.3.6.1.4.1.1271.2.3.3.1.1.3.1.2 | Integer32 | read-write | Indicates the number of times the RADIUS server should be tried before giving up on the server. |
| TIK cienaCesRadiusUserLoginRoundTripTime | 1.3.6.1.4.1.1271.2.3.3.1.1.3.2.1.8 | TimeTicks | read-only | The time interval (in hundredths of a second) between the most recent Access-Reply/Access-Challenge and the Access-Request that matched it from this RADIUS authentication server. |
| INT cienaCesRadiusUserLoginSearchType | 1.3.6.1.4.1.1271.2.3.3.1.1.3.1.4 | INTEGER | read-write | This object sets the search type of the RADIUS client. |
| ROW cienaCesRadiusUserLoginStatus | 1.3.6.1.4.1.1271.2.3.3.1.1.3.2.1.20 | RowStatus | read-create | To create a row in this table, a manager must specify cienaCesRadiusUserLoginAddr and set this object to createAndGo(4). The RADIUS server will initially be administratively disabled. To administratively enable the RADIUS server, set this object to active(1). To administratively disable the RADIUS server set this object to notInService(2). |
| cienaCesRadiusUserLoginTable | 1.3.6.1.4.1.1271.2.3.3.1.1.3.2 | not-accessible | Lists the possible RADIUS user login servers. While creating an entry, cienaCesRadiusUserLoginStatus and cienaCesRadiusUserLoginAddr must be specified. The SNMP multiple set operation must be used to create an entry. | |
| I32 cienaCesRadiusUserLoginTimeout | 1.3.6.1.4.1.1271.2.3.3.1.1.3.1.1 | Integer32 | read-write | This is the time in seconds between re-transmissions to the RADIUS server. |
| C32 cienaCesRadiusUserLoginTimeouts | 1.3.6.1.4.1.1271.2.3.3.1.1.3.2.1.17 | Counter32 | read-only | The number of authentication timeouts to this server. After a timeout the client may retry sending to the same server, send to a different server, or give up. A retry to the same server is counted as a retransmit as well as a timeout. A send to a different server is counted as a request as well as a timeout. |
| C32 cienaCesRadiusUserLoginUnknownTypes | 1.3.6.1.4.1.1271.2.3.3.1.1.3.2.1.18 | Counter32 | read-only | The number of RADIUS packets of unknown type which were received from this server on the authentication port. |
RFC description
Ciena packet networking MIB for RADIUS client configuration and statistics; manages AAA authentication on Ciena transport equipment.
Start monitoring Ciena CES (Carrier Ethernet Switch) platforms with a free 30-day trial of IPNetwork Monitor. Import MIBs, browse SNMP OIDs, create custom SNMP monitors, configure alerts, and monitor any SNMP-enabled network device from a single console.