All MIBs › CIENA-CES-TACACS-CLIENT-MIB
Organization: Ciena Corp.
Last Updated: 2017-06-07
Category: RADIUS and AAA, Vendor: Ciena
Description: Configures and monitors TACACS+ authentication client on Ciena CES Carrier Ethernet switches.
Start monitoring vendor-neutral, standards-based MIB, any SNMPv3-capable network device (SNMP engine identity/boot/clock status) with a free 30-day trial of IPNetwork Monitor. Import MIBs, browse SNMP OIDs, create custom SNMP monitors, configure alerts, and monitor any SNMP-enabled network device from a single console.
What Is CIENA-CES-TACACS-CLIENT-MIB?
CIENA-CES-TACACS-CLIENT-MIB is a Ciena enterprise MIB that configures and monitors the TACACS+ authentication client on Ciena CES Carrier Ethernet switches, used for centralized AAA (authentication, authorization, accounting) of administrative access. It exposes objects for TACACS+ server configuration (addresses, shared keys, timeouts) and client-side operational status. Its monitoring value is in confirming that the switch can successfully reach and authenticate against configured TACACS+ servers, which is a software/service-availability concern rather than hardware health, and helps detect authentication outages that could lock administrators out of device management. It functions as a vendor-specific complement to the general TACACS+ protocol rather than an IETF standard MIB. It is deployed wherever centralized AAA policy enforcement is required for administrative access to Ciena CES switches. Engineers can download the CIENA-CES-TACACS-CLIENT-MIB file directly to load it into their MIB browser.
IPNetwork Monitor allows you to monitor SNMP objects defined in CIENA-CES-TACACS-CLIENT-MIB. Use the built-in SNMP Monitoring Browser to explore available variables, view their current values and descriptions, and select the objects you want to monitor. You can then create SNMP monitors, configure thresholds, and receive alerts when monitored values change.
Supported Devices
- Ciena Carrier Ethernet Switch (CES)
Monitoring Examples
No object names were supplied in the source data, but a typical use would be polling TACACS+ server reachability/response status and authentication success/failure counters to confirm the configured AAA servers are responsive, alerting operators if the client falls back to a local or secondary authentication method due to server unavailability.
What Can Be Monitored
- TACACS+ server reachability
- authentication success/failure status
- configured server addresses and timeouts
This MIB depends on
Related MIBs
Imported Objects
From CIENA-GLOBAL-MIB
| cienaGlobalMacAddress | OBJECT-TYPE |
| cienaGlobalSeverity | OBJECT-TYPE |
From CIENA-SMI
| cienaCesStatistics | OBJECT-IDENTITY |
| cienaCommon | OBJECT-IDENTITY |
From CIENA-TC
| CienaGlobalState | |
| CienaStatsClear |
From INET-ADDRESS-MIB
| InetAddress | |
| InetAddressType |
From SNMPv2-SMI
| Integer32 | |
| IpAddress | |
| MODULE-IDENTITY | |
| OBJECT-TYPE |
From SNMPv2-TC
| DisplayString | |
| RowStatus | |
| TruthValue |
OIDs
| OID symbolic | OID numeric | Type | Access | Description |
|---|---|---|---|---|
| cienaCesTacacsClient | 1.3.6.1.4.1.1271.2.3.2.1.1 | |||
| cienaCesTacacsClientAccounting | 1.3.6.1.4.1.1271.2.3.2.1.1.6 | |||
| CIE cienaCesTacacsClientAccountingAdminState | 1.3.6.1.4.1.1271.2.3.2.1.1.1.11 | CienaGlobalState | read-write | Setting this object administratively enables or disables TACACS accounting on the device. |
| INT cienaCesTacacsClientAccountingCommand | 1.3.6.1.4.1.1271.2.3.2.1.1.1.14 | INTEGER | read-write | Setting this object enables or disables command start and stop logging. |
| C32 cienaCesTacacsClientAccountingServerAccessAccepts | 1.3.6.1.4.1.1271.2.3.2.1.1.6.1.1.8 | Counter32 | read-only | The number of TACACS Access-Accept packets (valid or invalid) received from this server. |
| C32 cienaCesTacacsClientAccountingServerAccessRejects | 1.3.6.1.4.1.1271.2.3.2.1.1.6.1.1.9 | Counter32 | read-only | The number of TACACS Access-Reject packets (valid or invalid) received from this server. |
| C32 cienaCesTacacsClientAccountingServerAccessRequests | 1.3.6.1.4.1.1271.2.3.2.1.1.6.1.1.6 | Counter32 | read-only | The number of TACACS Access-Request packets sent to this server. This does not include retransmissions. |
| C32 cienaCesTacacsClientAccountingServerAccessRetransmissions | 1.3.6.1.4.1.1271.2.3.2.1.1.6.1.1.7 | Counter32 | read-only | The number of TACACS Access-Request packets retransmitted to this TACACS authentication server. |
| STR cienaCesTacacsClientAccountingServerAddr | 1.3.6.1.4.1.1271.2.3.2.1.1.6.1.1.2 | DisplayString | read-write | Host name or IP address of the TACACS server. |
| INT cienaCesTacacsClientAccountingServerApplication | 1.3.6.1.4.1.1271.2.3.2.1.1.6.1.1.16 | INTEGER | read-create | This object specifies how the TACACS server is used for authentication. Whether this TACACS server is used for userLogin authentication or dot1x authentication or both, is decided by the value of this MIB object. Dot1x is not supported on all platforms. |
| I32 cienaCesTacacsClientAccountingServerAuthPort | 1.3.6.1.4.1.1271.2.3.2.1.1.6.1.1.5 | Integer32 | read-write | The destination TCP port number to which TACACS messages are sent. The TACACS server is not used for authentication if this port number is 0. |
| C32 cienaCesTacacsClientAccountingServerBadAuthenticators | 1.3.6.1.4.1.1271.2.3.2.1.1.6.1.1.11 | Counter32 | read-only | The number of TACACS Access-Response packets containing invalid authenticators or signature attributes received from this server. |
| C32 cienaCesTacacsClientAccountingServerBadHeaderSequence | 1.3.6.1.4.1.1271.2.3.2.1.1.6.1.1.14 | Counter32 | read-only | The number of TACACS packets of which were received from this server on the authentication port and dropped for some other reason. |
| CIE cienaCesTacacsClientAccountingServerClearStatistics | 1.3.6.1.4.1.1271.2.3.2.1.1.6.1.1.17 | CienaStatsClear | read-write | This object clears the statistics for a server. |
| cienaCesTacacsClientAccountingServerEntry | 1.3.6.1.4.1.1271.2.3.2.1.1.6.1.1 | not-accessible | TACACS accounting server entry. | |
| I32 cienaCesTacacsClientAccountingServerIndex | 1.3.6.1.4.1.1271.2.3.2.1.1.6.1.1.1 | Integer32 | read-only | Specifies the index of this table. |
| C32 cienaCesTacacsClientAccountingServerMalformedAccessResponses | 1.3.6.1.4.1.1271.2.3.2.1.1.6.1.1.10 | Counter32 | read-only | The number of malformed TACACS Access-Response packets received from this server. Malformed packets include packets with an invalid length. Bad authenticators or signature attributes or unknown types are not included as malformed access responses. |
| I32 cienaCesTacacsClientAccountingServerPriority | 1.3.6.1.4.1.1271.2.3.2.1.1.6.1.1.4 | Integer32 | read-write | Specifies the priority of TACACS servers configured on the device. This is the order in which the servers are accessed. |
| IP cienaCesTacacsClientAccountingServerResolvedAddr | 1.3.6.1.4.1.1271.2.3.2.1.1.6.1.1.3 | IpAddress | read-only | Specifies the resolved IP address if cienaCesTacacsClientAccountingServerAddr is set to host name. If cienaCesTacacsClientAccountingServerAddr is set to IP address then cienaCesTacacsClientAccountingServerResolvedAddr contains the same information as cienaCesTacacsClientAccountingServerAddr. |
| ROW cienaCesTacacsClientAccountingServerStatus | 1.3.6.1.4.1.1271.2.3.2.1.1.6.1.1.15 | RowStatus | read-create | To create a row in this table, a manager must set this object to either createAndGo(4). To create an entry, specify both cienaCesTacacsClientAccountingServerStatus, and cienaCesTacacsClientAccountingServerAddr with the SNMP multiple set operation. To disable a TACACS server, the operator can set cienaCesTacacsClientAccountingServerStatus object to the 'notInService' state. |
| cienaCesTacacsClientAccountingServerTable | 1.3.6.1.4.1.1271.2.3.2.1.1.6.1 | not-accessible | Lists the possible TACACS servers. To create an entry, specify both cienaCesTacacsClientAccountingServerStatus and cienaCesTacacsClientAccountingServerAddr with the SNMP multiple set operation. | |
| C32 cienaCesTacacsClientAccountingServerTimeouts | 1.3.6.1.4.1.1271.2.3.2.1.1.6.1.1.12 | Counter32 | read-only | The number of authentication timeouts to this server. After a timeout the client may retry sending to the same server, send to a different server, or give up. A retry to the same server is counted as a retransmit as well as a timeout. A send to a different server is counted as a Request as well as a timeout. |
| C32 cienaCesTacacsClientAccountingServerUnknownTypes | 1.3.6.1.4.1.1271.2.3.2.1.1.6.1.1.13 | Counter32 | read-only | The number of TACACS packets of unknown type which were received from this server on the authentication port. |
| INT cienaCesTacacsClientAccountingSession | 1.3.6.1.4.1.1271.2.3.2.1.1.1.13 | INTEGER | read-write | Setting this object enables or disables session logon and logoff logging with TACACS. |
| CIE cienaCesTacacsClientAdminState | 1.3.6.1.4.1.1271.2.3.2.1.1.1.1 | CienaGlobalState | read-write | Setting this object administratively enables or disables the TACACS client on the device. |
| cienaCesTacacsClientAuthentication | 1.3.6.1.4.1.1271.2.3.2.1.1.4 | |||
| CIE cienaCesTacacsClientAuthenticationAdminState | 1.3.6.1.4.1.1271.2.3.2.1.1.1.9 | CienaGlobalState | read-write | Setting this object administratively enables or disables TACACS authentication on the device. |
| C32 cienaCesTacacsClientAuthenticationServerAccessAccepts | 1.3.6.1.4.1.1271.2.3.2.1.1.4.1.1.8 | Counter32 | read-only | The number of TACACS Access-Accept packets (valid or invalid) received from this server. |
| C32 cienaCesTacacsClientAuthenticationServerAccessRejects | 1.3.6.1.4.1.1271.2.3.2.1.1.4.1.1.9 | Counter32 | read-only | The number of TACACS Access-Reject packets (valid or invalid) received from this server. |
| C32 cienaCesTacacsClientAuthenticationServerAccessRequests | 1.3.6.1.4.1.1271.2.3.2.1.1.4.1.1.6 | Counter32 | read-only | The number of TACACS Access-Request packets sent to this server. This does not include retransmissions. |
| C32 cienaCesTacacsClientAuthenticationServerAccessRetransmissions | 1.3.6.1.4.1.1271.2.3.2.1.1.4.1.1.7 | Counter32 | read-only | The number of TACACS Access-Request packets retransmitted to this TACACS authentication server. |
| STR cienaCesTacacsClientAuthenticationServerAddr | 1.3.6.1.4.1.1271.2.3.2.1.1.4.1.1.2 | DisplayString | read-write | Host name or IP address of the TACACS server. |
| INT cienaCesTacacsClientAuthenticationServerApplication | 1.3.6.1.4.1.1271.2.3.2.1.1.4.1.1.17 | INTEGER | read-create | This object specifies how the TACACS server is used for authentication. Whether this TACACS server is used for userLogin authentication or dot1x authentication or both, is decided by the value of this MIB object. Dot1x is not supported on all platforms. |
| I32 cienaCesTacacsClientAuthenticationServerAuthPort | 1.3.6.1.4.1.1271.2.3.2.1.1.4.1.1.5 | Integer32 | read-write | The destination TCP port number to which TACACS messages are sent. The TACACS server is not used for authentication if this port number is 0. |
| C32 cienaCesTacacsClientAuthenticationServerBadAuthenticators | 1.3.6.1.4.1.1271.2.3.2.1.1.4.1.1.11 | Counter32 | read-only | The number of TACACS Access-Response packets containing invalid authenticators or signature attributes received from this server. |
| C32 cienaCesTacacsClientAuthenticationServerBadHeaderSequence | 1.3.6.1.4.1.1271.2.3.2.1.1.4.1.1.15 | Counter32 | read-only | The number of TACACS packets which were received from this server on the authentication port and dropped for some other reason. |
| CIE cienaCesTacacsClientAuthenticationServerClearStatistics | 1.3.6.1.4.1.1271.2.3.2.1.1.4.1.1.18 | CienaStatsClear | read-write | This object clears the statistics for a server. |
| cienaCesTacacsClientAuthenticationServerEntry | 1.3.6.1.4.1.1271.2.3.2.1.1.4.1.1 | not-accessible | TACACS authentication server entry. | |
| I32 cienaCesTacacsClientAuthenticationServerIndex | 1.3.6.1.4.1.1271.2.3.2.1.1.4.1.1.1 | Integer32 | read-only | Specifies the index of this table. |
| C32 cienaCesTacacsClientAuthenticationServerMalformedAccessResponses | 1.3.6.1.4.1.1271.2.3.2.1.1.4.1.1.10 | Counter32 | read-only | The number of malformed TACACS Access-Response packets received from this server. Malformed packets include packets with an invalid length. Bad authenticators or signature attributes or unknown types are not included as malformed access responses. |
| I32 cienaCesTacacsClientAuthenticationServerPriority | 1.3.6.1.4.1.1271.2.3.2.1.1.4.1.1.4 | Integer32 | read-write | Specifies the priority of TACACS servers configured on the device. This is the order in which the servers are accessed. |
| IP cienaCesTacacsClientAuthenticationServerResolvedAddr | 1.3.6.1.4.1.1271.2.3.2.1.1.4.1.1.3 | IpAddress | read-only | Specifies the resolved IP address if cienaCesTacacsClientAuthenticationServerAddr is set to host name. If cienaCesTacacsClientAuthenticationServerAddr is set to IP address, then cienaCesTacacsClientAuthenticationServerResolvedAddr contains same information as cienaCesTacacsClientAuthenticationServerAddr. |
| ROW cienaCesTacacsClientAuthenticationServerStatus | 1.3.6.1.4.1.1271.2.3.2.1.1.4.1.1.16 | RowStatus | read-create | To create a row in this table, a manager must set this object to either createAndGo(4). To create an entry, specify both cienaCesTacacsClientAuthenticationServerStatus and cienaCesTacacsClientAuthenticationServerAddr with the SNMP multiple set operation. To disable a TACACS server, the operator can set cienaCesTacacsClientAuthenticationServerStatus object to 'notInService' state. |
| cienaCesTacacsClientAuthenticationServerTable | 1.3.6.1.4.1.1271.2.3.2.1.1.4.1 | not-accessible | Lists the possible TACACS servers. To create an entry, specify both cienaCesTacacsClientAuthenticationServerStatus and cienaCesTacacsClientAuthenticationServerAddr with the SNMP multiple set operation. | |
| C32 cienaCesTacacsClientAuthenticationServerTimeouts | 1.3.6.1.4.1.1271.2.3.2.1.1.4.1.1.13 | Counter32 | read-only | The number of authentication timeouts to this server. After a timeout the client may retry sending to the same server, send to a different server, or give up. A retry to the same server is counted as a retransmit as well as a timeout. A send to a different server is counted as a request as well as a timeout. |
| C32 cienaCesTacacsClientAuthenticationServerUnknownTypes | 1.3.6.1.4.1.1271.2.3.2.1.1.4.1.1.14 | Counter32 | read-only | The number of TACACS packets of unknown type which were received from this server on the authentication port. |
| STR cienaCesTacacsClientAuthKey | 1.3.6.1.4.1.1271.2.3.2.1.1.1.8 | TacacsString | read-write | The authentication key to be used for TACACS Servers. Retrieving the value of this object via SNMP returns an empty string for security reasons. |
| T/F cienaCesTacacsClientAuthKeyUnset | 1.3.6.1.4.1.1271.2.3.2.1.1.1.17 | TruthValue | read-write | Setting this object to true clears the value of cienaCesTacacsClientAuthKey. Reading this object always returns a value of false. |
| cienaCesTacacsClientAuthorization | 1.3.6.1.4.1.1271.2.3.2.1.1.5 | |||
| CIE cienaCesTacacsClientAuthorizationAdminState | 1.3.6.1.4.1.1271.2.3.2.1.1.1.10 | CienaGlobalState | read-write | Setting this object administratively enables or disables TACACS authorization on the device. |
| C32 cienaCesTacacsClientAuthorizationServerAccessAccepts | 1.3.6.1.4.1.1271.2.3.2.1.1.5.1.1.8 | Counter32 | read-only | The number of TACACS Access-Accept packets (valid or invalid) received from this server. |
| C32 cienaCesTacacsClientAuthorizationServerAccessRejects | 1.3.6.1.4.1.1271.2.3.2.1.1.5.1.1.9 | Counter32 | read-only | The number of TACACS Access-Reject packets (valid or invalid) received from this server. |
| C32 cienaCesTacacsClientAuthorizationServerAccessRequests | 1.3.6.1.4.1.1271.2.3.2.1.1.5.1.1.6 | Counter32 | read-only | The number of TACACS Access-Request packets sent to this server. This does not include retransmissions. |
| C32 cienaCesTacacsClientAuthorizationServerAccessRetransmissions | 1.3.6.1.4.1.1271.2.3.2.1.1.5.1.1.7 | Counter32 | read-only | The number of TACACS Access-Request packets retransmitted to this TACACS authentication server. |
| STR cienaCesTacacsClientAuthorizationServerAddr | 1.3.6.1.4.1.1271.2.3.2.1.1.5.1.1.2 | DisplayString | read-write | Host name or IP address of the TACACS server. |
| INT cienaCesTacacsClientAuthorizationServerApplication | 1.3.6.1.4.1.1271.2.3.2.1.1.5.1.1.16 | INTEGER | read-create | This object specifies how the TACACS server is used for authentication. Whether this TACACS server is used for userLogin authentication or dot1x authentication or both, is decided by the value of this MIB object. Dot1x is not supported on all platforms. |
| I32 cienaCesTacacsClientAuthorizationServerAuthPort | 1.3.6.1.4.1.1271.2.3.2.1.1.5.1.1.5 | Integer32 | read-write | The destination TCP port number to which TACACS messages are sent. The TACACS server is not used for authentication if this port number is 0. |
| C32 cienaCesTacacsClientAuthorizationServerBadAuthenticators | 1.3.6.1.4.1.1271.2.3.2.1.1.5.1.1.11 | Counter32 | read-only | The number of TACACS Access-Response packets containing invalid authenticators or signature attributes received from this server. |
| C32 cienaCesTacacsClientAuthorizationServerBadHeaderSequence | 1.3.6.1.4.1.1271.2.3.2.1.1.5.1.1.14 | Counter32 | read-only | The number of TACACS packets which were received from this server on the authentication port and dropped for some other reason. |
| CIE cienaCesTacacsClientAuthorizationServerClearStatistics | 1.3.6.1.4.1.1271.2.3.2.1.1.5.1.1.17 | CienaStatsClear | read-write | This object clears the statistics for a server. |
| cienaCesTacacsClientAuthorizationServerEntry | 1.3.6.1.4.1.1271.2.3.2.1.1.5.1.1 | not-accessible | TACACS authorization server entry. | |
| I32 cienaCesTacacsClientAuthorizationServerIndex | 1.3.6.1.4.1.1271.2.3.2.1.1.5.1.1.1 | Integer32 | read-only | Specifies the index of this table. |
| C32 cienaCesTacacsClientAuthorizationServerMalformedAccessResponses | 1.3.6.1.4.1.1271.2.3.2.1.1.5.1.1.10 | Counter32 | read-only | The number of malformed TACACS Access-Response packets received from this server. Malformed packets include packets with an invalid length. Bad authenticators or signature attributes or unknown types are not included as malformed access responses. |
| I32 cienaCesTacacsClientAuthorizationServerPriority | 1.3.6.1.4.1.1271.2.3.2.1.1.5.1.1.4 | Integer32 | read-write | Specifies the priority of TACACS servers configured on the device. This is the order in which the servers are accessed. |
| IP cienaCesTacacsClientAuthorizationServerResolvedAddr | 1.3.6.1.4.1.1271.2.3.2.1.1.5.1.1.3 | IpAddress | read-only | Specifies the resolved IP address if cienaCesTacacsClientAuthorizationServerAddr is set to host name. If cienaCesTacacsClientAuthorizationServerAddr is set to IP address, then cienaCesTacacsClientAuthorizationServerResolvedAddr contains the same information as cienaCesTacacsClientAuthorizationServerAddr. |
| ROW cienaCesTacacsClientAuthorizationServerStatus | 1.3.6.1.4.1.1271.2.3.2.1.1.5.1.1.15 | RowStatus | read-create | To create a row in this table, a manager must set this object to either createAndGo(4). To create an entry, specify both cienaCesTacacsClientAuthorizationServerStatus and cienaCesTacacsClientAuthorizationServerAddr with the SNMP multiple set operation. To disable a TACACS server, the operator can set the cienaCesTacacsClientAuthorizationServerStatus object to 'notInService' state. |
| cienaCesTacacsClientAuthorizationServerTable | 1.3.6.1.4.1.1271.2.3.2.1.1.5.1 | not-accessible | Lists the possible TACACS servers. To create an entry, specify both cienaCesTacacsClientAuthorizationServerStatus and cienaCesTacacsClientAuthorizationServerAddr with the SNMP multiple set operation. | |
| C32 cienaCesTacacsClientAuthorizationServerTimeouts | 1.3.6.1.4.1.1271.2.3.2.1.1.5.1.1.12 | Counter32 | read-only | The number of authentication timeouts to this server. After a timeout the client may retry sending to the same server, send to a different server, or give up. A retry to the same server is counted as a retransmit as well as a timeout. A send to a different server is counted as a Request as well as a timeout. |
| C32 cienaCesTacacsClientAuthorizationServerUnknownTypes | 1.3.6.1.4.1.1271.2.3.2.1.1.5.1.1.13 | Counter32 | read-only | The number of TACACS packets of unknown type which were received from this server on the authentication port. |
| NTF cienaCesTacacsClientConnectionFailed | 1.3.6.1.4.1.1271.2.3.2.2.0.1 | A cienaCesTacacsClientConnectionFailed notification is sent if the TACACS client is unable to contact the TACACS server. | ||
| cienaCesTacacsClientGlobal | 1.3.6.1.4.1.1271.2.3.2.1.1.1 | |||
| C32 cienaCesTacacsClientGlobalAccountingAccessAccepts | 1.3.6.1.4.1.1271.2.3.2.1.1.3.1.1.21 | Counter32 | read-only | The number of TACACS Access-Accept packets (valid or invalid) received from this server. |
| C32 cienaCesTacacsClientGlobalAccountingAccessRejects | 1.3.6.1.4.1.1271.2.3.2.1.1.3.1.1.22 | Counter32 | read-only | The number of TACACS Access-Reject packets (valid or invalid) received from this server. |
| C32 cienaCesTacacsClientGlobalAccountingAccessRequests | 1.3.6.1.4.1.1271.2.3.2.1.1.3.1.1.19 | Counter32 | read-only | The number of TACACS Access-Request packets sent to this server. This does not include retransmissions. |
| C32 cienaCesTacacsClientGlobalAccountingAccessRetransmissions | 1.3.6.1.4.1.1271.2.3.2.1.1.3.1.1.20 | Counter32 | read-only | The number of TACACS Access-Request packets retransmitted to this TACACS authentication server. |
| C32 cienaCesTacacsClientGlobalAccountingBadAuthenticators | 1.3.6.1.4.1.1271.2.3.2.1.1.3.1.1.24 | Counter32 | read-only | The number of TACACS Access-Response packets containing invalid authenticators or signature attributes received from this server. |
| C32 cienaCesTacacsClientGlobalAccountingBadHeaderSequence | 1.3.6.1.4.1.1271.2.3.2.1.1.3.1.1.27 | Counter32 | read-only | The number of TACACS packets which were received from this server on the authentication port and dropped for some other reason. |
| C32 cienaCesTacacsClientGlobalAccountingMalformedAccessResponses | 1.3.6.1.4.1.1271.2.3.2.1.1.3.1.1.23 | Counter32 | read-only | The number of malformed TACACS Access-Response packets received from this server. Malformed packets include packets with an invalid length. Bad authenticators or signature attributes or unknown types are not included as malformed access responses. |
| C32 cienaCesTacacsClientGlobalAccountingTimeouts | 1.3.6.1.4.1.1271.2.3.2.1.1.3.1.1.25 | Counter32 | read-only | The number of authentication timeouts to this server. After a timeout the client may retry sending to the same server, send to a different server, or give up. A retry to the same server is counted as a retransmit as well as a timeout. A send to a different server is counted as a request as well as a timeout. |
| C32 cienaCesTacacsClientGlobalAccountingUnknownTypes | 1.3.6.1.4.1.1271.2.3.2.1.1.3.1.1.26 | Counter32 | read-only | The number of TACACS packets of unknown type which were received from this server on the authentication port. |
| C32 cienaCesTacacsClientGlobalAuthenticationAccessAccepts | 1.3.6.1.4.1.1271.2.3.2.1.1.3.1.1.3 | Counter32 | read-only | The number of TACACS Access-Accept packets (valid or invalid) received from this server. |
| C32 cienaCesTacacsClientGlobalAuthenticationAccessRejects | 1.3.6.1.4.1.1271.2.3.2.1.1.3.1.1.4 | Counter32 | read-only | The number of TACACS Access-Reject packets (valid or invalid) received from this server. |
| C32 cienaCesTacacsClientGlobalAuthenticationAccessRequests | 1.3.6.1.4.1.1271.2.3.2.1.1.3.1.1.1 | Counter32 | read-only | The number of TACACS Access-Request packets sent to this server not including retransmissions. |
| C32 cienaCesTacacsClientGlobalAuthenticationAccessRetransmissions | 1.3.6.1.4.1.1271.2.3.2.1.1.3.1.1.2 | Counter32 | read-only | The number of TACACS Access-Request packets retransmitted to this TACACS authentication server. |
| C32 cienaCesTacacsClientGlobalAuthenticationBadAuthenticators | 1.3.6.1.4.1.1271.2.3.2.1.1.3.1.1.6 | Counter32 | read-only | The number of TACACS Access-Response packets containing invalid authenticators or signature attributes received from this server. |
| C32 cienaCesTacacsClientGlobalAuthenticationBadHeaderSequence | 1.3.6.1.4.1.1271.2.3.2.1.1.3.1.1.9 | Counter32 | read-only | The number of TACACS packets which were received from this server on the authentication port and dropped for some other reason. |
| C32 cienaCesTacacsClientGlobalAuthenticationMalformedAccessResponses | 1.3.6.1.4.1.1271.2.3.2.1.1.3.1.1.5 | Counter32 | read-only | The number of malformed TACACS Access-Response packets received from this server. Malformed packets include packets with an invalid length. Bad authenticators or signature attributes or unknown types are not included as malformed access responses. |
| C32 cienaCesTacacsClientGlobalAuthenticationTimeouts | 1.3.6.1.4.1.1271.2.3.2.1.1.3.1.1.7 | Counter32 | read-only | The number of authentication timeouts to this server. After a timeout the client may retry sending to the same server, send to a different server, or give up. A retry to the same server is counted as a retransmit as well as a timeout. A send to a different server is counted as a request as well as a timeout. |
| C32 cienaCesTacacsClientGlobalAuthenticationUnknownTypes | 1.3.6.1.4.1.1271.2.3.2.1.1.3.1.1.8 | Counter32 | read-only | The number of TACACS packets of unknown type which were received from this server on the authentication port. |
| C32 cienaCesTacacsClientGlobalAuthorizationAccessAccepts | 1.3.6.1.4.1.1271.2.3.2.1.1.3.1.1.12 | Counter32 | read-only | The number of TACACS Access-Accept packets (valid or invalid) received from this server. |
| C32 cienaCesTacacsClientGlobalAuthorizationAccessRejects | 1.3.6.1.4.1.1271.2.3.2.1.1.3.1.1.13 | Counter32 | read-only | The number of TACACS Access-Reject packets (valid or invalid) received from this server. |
| C32 cienaCesTacacsClientGlobalAuthorizationAccessRequests | 1.3.6.1.4.1.1271.2.3.2.1.1.3.1.1.10 | Counter32 | read-only | The number of TACACS Access-Request packets sent to this server. This does not include retransmissions. |
| C32 cienaCesTacacsClientGlobalAuthorizationAccessRetransmissions | 1.3.6.1.4.1.1271.2.3.2.1.1.3.1.1.11 | Counter32 | read-only | The number of TACACS Access-Request packets retransmitted to this TACACS authentication server. |
| C32 cienaCesTacacsClientGlobalAuthorizationBadAuthenticators | 1.3.6.1.4.1.1271.2.3.2.1.1.3.1.1.15 | Counter32 | read-only | The number of TACACS Access-Response packets containing invalid authenticators or signature attributes received from this server. |
| C32 cienaCesTacacsClientGlobalAuthorizationBadHeaderSequence | 1.3.6.1.4.1.1271.2.3.2.1.1.3.1.1.18 | Counter32 | read-only | The number of TACACS packets which were received from this server on the authentication port and dropped for some other reason. |
| C32 cienaCesTacacsClientGlobalAuthorizationMalformedAccessRespons | 1.3.6.1.4.1.1271.2.3.2.1.1.3.1.1.14 | Counter32 | read-only | The number of malformed TACACS Access-Response packets received from this server. Malformed packets include packets with an invalid length. Bad authenticators or signature attributes or unknown types are not included as malformed access responses. |
| C32 cienaCesTacacsClientGlobalAuthorizationTimeouts | 1.3.6.1.4.1.1271.2.3.2.1.1.3.1.1.16 | Counter32 | read-only | The number of authentication timeouts to this server. After a timeout the client may retry sending to the same server, send to a different server, or give up. A retry to the same server is counted as a retransmit as well as a timeout. A send to a different server is counted as a request as well as a timeout. |
| C32 cienaCesTacacsClientGlobalAuthorizationUnknownTypes | 1.3.6.1.4.1.1271.2.3.2.1.1.3.1.1.17 | Counter32 | read-only | The number of TACACS packets of unknown type which were received from this server on the authentication port. |
| CIE cienaCesTacacsClientGlobalServerClearStatistics | 1.3.6.1.4.1.1271.2.3.2.1.1.3.1.1.28 | CienaStatsClear | read-write | This object clears the statistics for a server. |
| INT cienaCesTacacsClientGlobalServers | 1.3.6.1.4.1.1271.2.3.2.1.1.1.15 | INTEGER | read-write | Setting this object enables or disables global servers. |
| cienaCesTacacsClientGlobalStatistics | 1.3.6.1.4.1.1271.2.3.2.1.1.3 | |||
| cienaCesTacacsClientGlobalStatisticsEntry | 1.3.6.1.4.1.1271.2.3.2.1.1.3.1.1 | not-accessible | TACACS global statistics entry. | |
| cienaCesTacacsClientGlobalStatisticsTable | 1.3.6.1.4.1.1271.2.3.2.1.1.3.1 | not-accessible | TACACS global statistics table. | |
| I32 cienaCesTacacsClientKeyMinLen | 1.3.6.1.4.1.1271.2.3.2.1.1.1.18 | Integer32 | read-write | Setting this object defines the minimum length for TACACS secret key. |
| cienaCesTacacsClientMIB | 1.3.6.1.4.1.1271.2.3.2 | Initial creation. | ||
| cienaCesTacacsClientMIBCompliances | 1.3.6.1.4.1.1271.2.3.2.3.1 | |||
| cienaCesTacacsClientMIBConformance | 1.3.6.1.4.1.1271.2.3.2.3 | |||
| cienaCesTacacsClientMIBGroups | 1.3.6.1.4.1.1271.2.3.2.3.2 | |||
| cienaCesTacacsClientMIBNotificationPrefix | 1.3.6.1.4.1.1271.2.3.2.2 | |||
| cienaCesTacacsClientMIBNotifications | 1.3.6.1.4.1.1271.2.3.2.2.0 | |||
| cienaCesTacacsClientMIBObjects | 1.3.6.1.4.1.1271.2.3.2.1 | |||
| CIE cienaCesTacacsClientOperState | 1.3.6.1.4.1.1271.2.3.2.1.1.1.2 | CienaGlobalState | read-only | This object specifies the operational state of the TACACS client. |
| I32 cienaCesTacacsClientPrivilegeLevelAdmin | 1.3.6.1.4.1.1271.2.3.2.1.1.1.5 | Integer32 | read-write | Indicates the privilege level used for mapping a range of TACACS privilege levels to the SAOS administrative privilege level. A privilege level returned by a server is compared to cienaCesTacacsClientPrivilegeLevelRW. If the server privilege level is less than cienaCesTacacsClientPrivilegeLevelRW and greater than or equal to the cienaCesTacacsClientPrivilegeLevelAdmin, the SAOS privilege level is 'admin.' |
| I32 cienaCesTacacsClientPrivilegeLevelDiag | 1.3.6.1.4.1.1271.2.3.2.1.1.1.7 | Integer32 | read-write | Indicates the privilege level used for mapping a range of TACACS privilege levels to SAOS diagnostic privilege level. A privilege level returned by a server is compared to this value. If the server privilege level is greater than or equal to the cienaCesTacacsClientDiagPrivilegeLevel,the SAOS privilege level is 'diag.' |
| I32 cienaCesTacacsClientPrivilegeLevelRW | 1.3.6.1.4.1.1271.2.3.2.1.1.1.6 | Integer32 | read-write | Indicates the privilege level used for mapping a range of TACACS privilege levels to the SAOS super user privilege level. A privilege level returned by a server is compared to cienaCesTacacsClientPrivilegeLevelDiag. If the server privilege level is less than cienaCesTacacsClientPrivilegeLevelDiag and greater than or equal to the cienaCesTacacsClientPrivilegeLevelRW, the SAOS privilege level is 'superuser.' |
| I32 cienaCesTacacsClientRetries | 1.3.6.1.4.1.1271.2.3.2.1.1.1.4 | Integer32 | read-write | Indicates the number of times the TACACS server should be tried before giving up on the server. |
| INT cienaCesTacacsClientSearchMethod | 1.3.6.1.4.1.1271.2.3.2.1.1.1.16 | INTEGER | read-write | Setting this object selects the search method. |
| cienaCesTacacsClientServer | 1.3.6.1.4.1.1271.2.3.2.1.1.2 | |||
| STR cienaCesTacacsClientServerAddr | 1.3.6.1.4.1.1271.2.3.2.1.1.2.1.1.2 | DisplayString | read-create | Host name or IP address of the TACACS server. |
| INT cienaCesTacacsClientServerApplication | 1.3.6.1.4.1.1271.2.3.2.1.1.2.1.1.6 | INTEGER | read-create | This object specifies how the TACACS server is used for authentication. Whether this TACACS server is used for userLogin authentication or dot1x authentication or both, is decided by the value of this MIB object. Dot1x is not supported on all platforms. |
| I32 cienaCesTacacsClientServerAuthPort | 1.3.6.1.4.1.1271.2.3.2.1.1.2.1.1.5 | Integer32 | read-create | The destination TCP port number to which TACACS messages are sent. The TACACS server is not used for authentication if this port number is 0. |
| cienaCesTacacsClientServerEntry | 1.3.6.1.4.1.1271.2.3.2.1.1.2.1.1 | not-accessible | TACACS server entry. | |
| I32 cienaCesTacacsClientServerIndex | 1.3.6.1.4.1.1271.2.3.2.1.1.2.1.1.1 | Integer32 | not-accessible | Specifies the index of this table. |
| I32 cienaCesTacacsClientServerPriority | 1.3.6.1.4.1.1271.2.3.2.1.1.2.1.1.4 | Integer32 | read-create | Specifies the priority of the TACACS servers configured on the device. This is the order in which the servers will accessed. |
| IP cienaCesTacacsClientServerResolvedAddr | 1.3.6.1.4.1.1271.2.3.2.1.1.2.1.1.3 | IpAddress | read-only | Specifies the resolved IP address if cienaCesTacacsClientServerAddr is set to host name. If cienaCesTacacsClientServerAddr is set to IP address then cienaCesTacacsClientServerResolvedAddr contains the same information as cienaCesTacacsClientServerAddr. |
| IP cienaCesTacacsClientServerResolvedInetAddr | 1.3.6.1.4.1.1271.2.3.2.1.1.2.1.1.9 | InetAddress | read-only | Specifies the resolved IP address if cienaCesTacacsClientServerAddr is set to host name. If cienaCesTacacsClientServerAddr is set to IP address then cienaCesTacacsClientServerResolvedInetAddress contains the same information as cienaCesTacacsClientServerAddr. This OID is used in conjunction with cienaCesTacacsClientServerResolvedInetAddrType. |
| IPt cienaCesTacacsClientServerResolvedInetAddrType | 1.3.6.1.4.1.1271.2.3.2.1.1.2.1.1.8 | InetAddressType | read-only | Specifies the resolved IP address type. Used in conjunction with cienaCesTacacsClientServerResolvedInetAddr. When set to: ipv4: cienaCesTacacsClientServerResolvedInetAddr should be compliant with InetAddressIPv4 ipv6: cienaCesTacacsClientServerResolvedInetAddr should be compliant with InetAddressIPv6. |
| ROW cienaCesTacacsClientServerStatus | 1.3.6.1.4.1.1271.2.3.2.1.1.2.1.1.7 | RowStatus | read-create | To create a row in this table, set this object to createAndGo(4). To create an entry, specify both cienaCesTacacsClientServerStatus and cienaCesTacacsClientServerAddr with the SNMP multiple set operation. To disable a TACACS server, set cienaCesTacacsClientServerStatus object to the 'notInService' status. |
| cienaCesTacacsClientServerTable | 1.3.6.1.4.1.1271.2.3.2.1.1.2.1 | not-accessible | Lists the possible TACACS servers. To create an entry, specify both cienaCesTacacsClientServerStatus and cienaCesTacacsClientServerAddr using the SNMP multiple set operation. | |
| CIE cienaCesTacacsClientSyslogAdminState | 1.3.6.1.4.1.1271.2.3.2.1.1.1.12 | CienaGlobalState | read-write | Setting this object administratively enables or disables TACACS Syslog messages on the device. |
| I32 cienaCesTacacsClientTimeout | 1.3.6.1.4.1.1271.2.3.2.1.1.1.3 | Integer32 | read-write | This object is the time in seconds between retransmissions to the TACACS server. |
RFC description
TACACS+ client authentication and authorization configuration for Ciena CES systems.
Start monitoring Ciena CES (Carrier Ethernet Switch) platforms with a free 30-day trial of IPNetwork Monitor. Import MIBs, browse SNMP OIDs, create custom SNMP monitors, configure alerts, and monitor any SNMP-enabled network device from a single console.