All MIBs › CIENA-CES-TACACS-CLIENT-MIB › cienaCesTacacsClientPrivilegeLevelDiag
cienaCesTacacsClientPrivilegeLevelDiag
Module: CIENA-CES-TACACS-CLIENT-MIB
OID (symbolic): CIENA-CES-TACACS-CLIENT-MIB::cienaCesTacacsClientPrivilegeLevelDiag
OID (numeric): 1.3.6.1.4.1.1271.2.3.2.1.1.1.7
Node type: OBJECT-TYPE
Type: Integer32
Access: read-write
Description: Indicates the privilege level used for mapping a range of TACACS privilege levels to SAOS diagnostic privilege level. A privilege level returned by a server is compared to this value. If the server privilege level is greater than or equal to the cienaCesTacacsClientDiagPrivilegeLevel,the SAOS privilege level is 'diag.'
What is cienaCesTacacsClientPrivilegeLevelDiag?
This sets the threshold TACACS privilege level at or above which a user is mapped to the device's SAOS diag (diagnostic) role, the topmost tier in this three-level mapping scheme. Because diag is described as the highest tier here, with no upper object bounding it, this is effectively the gatekeeper value for the most privileged access the TACACS mapping can grant on this device, making it the single most security-sensitive of the three threshold objects to get right. For example, setting this to 15, the maximum, means only a user whose TACACS server explicitly returns the top privilege level 15 gets the diag role, a deliberately narrow ceiling.
Examples
Walk all instances (SNMPv2c):
snmpwalk -v2c -c public <target> 1.3.6.1.4.1.1271.2.3.2.1.1.1.7 snmpwalk -v2c -c public <target> CIENA-CES-TACACS-CLIENT-MIB::cienaCesTacacsClientPrivilegeLevelDiag
Get a specific instance (index 1):
snmpget -v2c -c public <target> 1.3.6.1.4.1.1271.2.3.2.1.1.1.7.1 snmpget -v2c -c public <target> CIENA-CES-TACACS-CLIENT-MIB::cienaCesTacacsClientPrivilegeLevelDiag.1
Set instance 1 (SNMPv2c):
snmpset -v2c -c private <target> 1.3.6.1.4.1.1271.2.3.2.1.1.1.7.1 i <value>
Start monitoring Ciena CES (Carrier Ethernet Switch) platforms with a free 30-day trial of IPNetwork Monitor. Create custom SNMP monitor using the CIENA-CES-TACACS-CLIENT-MIB::cienaCesTacacsClientPrivilegeLevelDiag OID value, configure state conditions and alerts, and monitor any Ciena CES (Carrier Ethernet Switch) platforms from a single console.
OID Breakdown
Upper-level ancestors (9 from the standard OID tree / other modules)
| Numeric OID | Name | Module |
|---|---|---|
| 1 | iso | LANART-AGENT |
| 1.3 | org | AirPair-MIB |
| 1.3.6 | dod | AirPair-MIB |
| 1.3.6.1 | internet | AirPair-MIB |
| 1.3.6.1.4 | private | AirPair-MIB |
| 1.3.6.1.4.1 | enterprises | AirPair-MIB |
| 1.3.6.1.4.1.1271 | ciena | CIENA-SMI |
| 1.3.6.1.4.1.1271.2 | cienaCes | CIENA-SMI |
| 1.3.6.1.4.1.1271.2.3 | cienaCesStatistics | CIENA-SMI |
| Numeric OID | Name | Module |
|---|---|---|
| 1.3.6.1.4.1.1271.2.3.2 | cienaCesTacacsClientMIB | CIENA-CES-TACACS-CLIENT-MIB |
| 1.3.6.1.4.1.1271.2.3.2.1 | cienaCesTacacsClientMIBObjects | CIENA-CES-TACACS-CLIENT-MIB |
| 1.3.6.1.4.1.1271.2.3.2.1.1 | cienaCesTacacsClient | CIENA-CES-TACACS-CLIENT-MIB |
| 1.3.6.1.4.1.1271.2.3.2.1.1.1 | cienaCesTacacsClientGlobal | CIENA-CES-TACACS-CLIENT-MIB |
| 1.3.6.1.4.1.1271.2.3.2.1.1.1.7 | cienaCesTacacsClientPrivilegeLevelDiag | CIENA-CES-TACACS-CLIENT-MIB |