All MIBs › CIENA-CES-TACACS-CLIENT-MIB › cienaCesTacacsClientAuthKey
cienaCesTacacsClientAuthKey
Module: CIENA-CES-TACACS-CLIENT-MIB
OID (symbolic): CIENA-CES-TACACS-CLIENT-MIB::cienaCesTacacsClientAuthKey
OID (numeric): 1.3.6.1.4.1.1271.2.3.2.1.1.1.8
Node type: OBJECT-TYPE
Type: TacacsString
Access: read-write
Description: The authentication key to be used for TACACS Servers. Retrieving the value of this object via SNMP returns an empty string for security reasons.
What is cienaCesTacacsClientAuthKey?
This is the shared secret key the device uses to authenticate and encrypt its communication with TACACS+ servers. Because reading this object via SNMP always returns an empty string, an admin cannot use SNMP polling to confirm the configured key matches what's set on the TACACS server side, so a mismatch here would only be discovered indirectly, through TACACS login attempts failing even though the server and network path are otherwise fine. For example, after a security team rotates the TACACS shared secret on the server side, forgetting to push the matching value here would cause every TACACS login attempt on that switch to fail, while other switches with correctly-updated keys keep working.
Examples
Walk all instances (SNMPv2c):
snmpwalk -v2c -c public <target> 1.3.6.1.4.1.1271.2.3.2.1.1.1.8 snmpwalk -v2c -c public <target> CIENA-CES-TACACS-CLIENT-MIB::cienaCesTacacsClientAuthKey
Get a specific instance (index 1):
snmpget -v2c -c public <target> 1.3.6.1.4.1.1271.2.3.2.1.1.1.8.1 snmpget -v2c -c public <target> CIENA-CES-TACACS-CLIENT-MIB::cienaCesTacacsClientAuthKey.1
Set instance 1 (SNMPv2c):
snmpset -v2c -c private <target> 1.3.6.1.4.1.1271.2.3.2.1.1.1.8.1 s <value>
Start monitoring Ciena CES (Carrier Ethernet Switch) platforms with a free 30-day trial of IPNetwork Monitor. Create custom SNMP monitor using the CIENA-CES-TACACS-CLIENT-MIB::cienaCesTacacsClientAuthKey OID value, configure state conditions and alerts, and monitor any Ciena CES (Carrier Ethernet Switch) platforms from a single console.
OID Breakdown
Upper-level ancestors (9 from the standard OID tree / other modules)
| Numeric OID | Name | Module |
|---|---|---|
| 1 | iso | LANART-AGENT |
| 1.3 | org | AirPair-MIB |
| 1.3.6 | dod | AirPair-MIB |
| 1.3.6.1 | internet | AirPair-MIB |
| 1.3.6.1.4 | private | AirPair-MIB |
| 1.3.6.1.4.1 | enterprises | AirPair-MIB |
| 1.3.6.1.4.1.1271 | ciena | CIENA-SMI |
| 1.3.6.1.4.1.1271.2 | cienaCes | CIENA-SMI |
| 1.3.6.1.4.1.1271.2.3 | cienaCesStatistics | CIENA-SMI |
| Numeric OID | Name | Module |
|---|---|---|
| 1.3.6.1.4.1.1271.2.3.2 | cienaCesTacacsClientMIB | CIENA-CES-TACACS-CLIENT-MIB |
| 1.3.6.1.4.1.1271.2.3.2.1 | cienaCesTacacsClientMIBObjects | CIENA-CES-TACACS-CLIENT-MIB |
| 1.3.6.1.4.1.1271.2.3.2.1.1 | cienaCesTacacsClient | CIENA-CES-TACACS-CLIENT-MIB |
| 1.3.6.1.4.1.1271.2.3.2.1.1.1 | cienaCesTacacsClientGlobal | CIENA-CES-TACACS-CLIENT-MIB |
| 1.3.6.1.4.1.1271.2.3.2.1.1.1.8 | cienaCesTacacsClientAuthKey | CIENA-CES-TACACS-CLIENT-MIB |