CISCO-AUTHORIZATION-STATS-MIB

All MIBs › CISCO-AUTHORIZATION-STATS-MIB

Organization: Cisco Systems, Inc.

Last Updated: 2006-11-08

Category: Cisco Devices, RADIUS and AAA

Description: Monitors authorization request and response statistics on Cisco AAA-enabled devices.

Start monitoring vendor-neutral, standards-based MIB, any SNMPv3-capable network device (SNMP engine identity/boot/clock status) with a free 30-day trial of IPNetwork Monitor. Import MIBs, browse SNMP OIDs, create custom SNMP monitors, configure alerts, and monitor any SNMP-enabled network device from a single console.

What Is CISCO-AUTHORIZATION-STATS-MIB?

CISCO-AUTHORIZATION-STATS-MIB is a Cisco Systems, Inc. proprietary MIB reporting per-server authorization (RADIUS-style) transaction statistics. Its statistics table, keyed by server index, records server address type/address, client port number, round-trip time, access requests/retransmissions/accepts/rejects/challenges, malformed-access-response and bad-authenticator counts, pending requests, timeouts, unknown-type count, and server-group ID. As a performance MIB it lets an administrator watch authorization-server round-trip time and reject/timeout rates on Cisco Systems equipment. It is deployed on Cisco Systems devices performing RADIUS-style user authorization. Engineers can download the CISCO-AUTHORIZATION-STATS-MIB file directly to load it into their MIB browser.

IPNetwork Monitor allows you to monitor SNMP objects defined in CISCO-AUTHORIZATION-STATS-MIB. Use the built-in SNMP Monitoring Browser to explore available variables, view their current values and descriptions, and select the objects you want to monitor. You can then create SNMP monitors, configure thresholds, and receive alerts when monitored values change.

Supported Devices

Cisco Systems devices (RADIUS-style user authorization)

Monitoring Examples

An administrator monitors cAuthorizClientRoundTripTime and cAuthorizClientTimeouts to catch a slow or unresponsive authorization server on Cisco Systems equipment.

What Can Be Monitored

authorization-server round-trip time and reject/timeout rates

Imported Objects

From CISCO-SMI

ciscoMgmt

OBJECT-IDENTITY

From CISCO-TC

CiscoPort

From INET-ADDRESS-MIB

InetAddress
InetAddressType

From SNMPv2-CONF

MODULE-COMPLIANCE
OBJECT-GROUP

From SNMPv2-SMI

Counter32
Gauge32
Integer32
MODULE-IDENTITY
OBJECT-TYPE

From SNMPv2-TC

TimeInterval

How to Use in IPNetwork Monitor

Example using cAuthorizClientAccessRequests OID:

Select a Cisco device (RADIUS-style user authorization) as the target host to create a monitor — the SNMP service should be up and running on it. Click New Monitor, then check SNMP Custom on the Favorites tab, click Next, and confirm the host. On the next page, click Select... to open the built-in SNMP MIB Browser and type cAuthorizClientAccessRequests into the Find box to locate it in the OID tree, selecting the specific row/instance you want to monitor since this is a table column, then select it and click OK. The total number of Access-Request packets sent to authorization server since client start-up. On the monitor's Main parameters page you can set the target's SNMP port (default 161), credentials, polling interval, and other settings — see the SNMP Monitor help for details. On the State conditions and Alerting tabs, configure when the monitor should change state and trigger an alert; since this is a Counter32-type OID, Value bounds is the most useful condition here — trigger an alert if the counter increases sharply between polls relative to its normal baseline, since an unexpected spike often reflects a real change in traffic or activity. Click Finish to create the monitor; you can adjust any parameter later.

OIDs

OID symbolic	OID numeric	Type	Access	Description
ciscoAuthorizationStatsMibModule	1.3.6.1.4.1.9.9.343			The Cisco User Authorization Statistics MIB models counters and objects that are of management interest.
cStatsAuthorization	1.3.6.1.4.1.9.9.343.1
cAuthorizationGlobal	1.3.6.1.4.1.9.9.343.1.1
cAuthorizationStatsTable	1.3.6.1.4.1.9.9.343.1.2		not-accessible	The list of servers that may be queried for authorization attributes for connecting IPSec tunnel users.
cAuthorizationStatsEntry	1.3.6.1.4.1.9.9.343.1.2.1		not-accessible	An entry in the cAuthorizationStatsTable. These entries are created or destroyed whenever an authorization server connection is added or removed via one of the management interfaces to the tunnel server.
I32 cAuthorizServerIndex	1.3.6.1.4.1.9.9.343.1.2.1.1	Integer32	not-accessible	The unique number used as the index for this row.
IPt cAuthorizServerAddressType	1.3.6.1.4.1.9.9.343.1.2.1.2	InetAddressType	read-only	The type of Internet address used by this entry.
IP cAuthorizServerAddress	1.3.6.1.4.1.9.9.343.1.2.1.3	InetAddress	read-only	The IP address of the authorization server whose statistics are being reported.
CIS cAuthorizClientServerPortNum	1.3.6.1.4.1.9.9.343.1.2.1.4	CiscoPort	read-only	The UDP The port on the server to which authorization requests are directed.
NUM cAuthorizClientRoundTripTime	1.3.6.1.4.1.9.9.343.1.2.1.5	TimeInterval	read-only	The time interval between the most recent Access-Reply/Access-Challenge and the Access-Request.
C32 cAuthorizClientAccessRequestsEx	1.3.6.1.4.1.9.9.343.1.2.1.6	Counter32	read-only	The total number of Access-Request packets sent to authorization server since client start-up. This does not include retransmissions.
C32 cAuthorizClientAccessRetrans	1.3.6.1.4.1.9.9.343.1.2.1.7	Counter32	read-only	The total number of Access-Request packets retransmitted to authorization server since client start-up.
C32 cAuthorizClientAccessAccepts	1.3.6.1.4.1.9.9.343.1.2.1.8	Counter32	read-only	The total number of Access-Accept packets received by authorization server since client start-up.
C32 cAuthorizClientAccessRejects	1.3.6.1.4.1.9.9.343.1.2.1.9	Counter32	read-only	The total number of Access-Reject packets received by authorization server since client start-up.
C32 cAuthorizClientAccessChallenges	1.3.6.1.4.1.9.9.343.1.2.1.10	Counter32	read-only	The total number of Access-Challenge packets received by authorization server since client start-up.
C32 cAuthorizClientMalAccessResps	1.3.6.1.4.1.9.9.343.1.2.1.11	Counter32	read-only	The total number of malformed Access-Response packets received by authoriztion server since client start-up. Malformed packets include packets with an invalid length. Bad authenticators or Signature attributes are not included as malformed access responses.
C32 cAuthorizClientBadAuthenticates	1.3.6.1.4.1.9.9.343.1.2.1.12	Counter32	read-only	The total number of Access-Response packets containing invalid authenticators or Signature attributes received by authorization server since client start-up.
G32 cAuthorizClientPendingRequests	1.3.6.1.4.1.9.9.343.1.2.1.13	Gauge32	read-only	The total number of Access-Request packets destined for authorization server that have not yet timed out or received a response. This variable is incremented when an Access-Request is sent and decremented due to receipt of an Access-Reply or Access-Challenge, a timeout or retransmission.
C32 cAuthorizClientTimeouts	1.3.6.1.4.1.9.9.343.1.2.1.14	Counter32	read-only	The total number of timeouts to authorization server since client startup. After a timeout the client may retry to the same server, send to a different server, or give up. A retry to the same server is counted as a retransmit as well as a timeout. A send to a different server is counted as a Request as well as a timeout.
C32 cAuthorizClientUnknownTypes	1.3.6.1.4.1.9.9.343.1.2.1.15	Counter32	read-only	The total number of unknown type packets received by authorization server since client start-up.
I32 cAuthorizServerGroupId	1.3.6.1.4.1.9.9.343.1.2.1.16	Integer32	read-only	The Id of user group associated with authorization server. The group ID is an integer value assigned by the tunnel server. Group ID 0 is a special value used to refer all gorups.
cAuthorizationMIBConformance	1.3.6.1.4.1.9.9.343.2
cAuthorizationMIBCompliances	1.3.6.1.4.1.9.9.343.2.1
cAuthorizationMIBCompliance	1.3.6.1.4.1.9.9.343.2.1.1			The compliance statement for authorization clients implementing the Authorization Client MIB.
cAuthorizationGroup	1.3.6.1.4.1.9.9.343.2.2
cAuthorizationClientMIBGroup	1.3.6.1.4.1.9.9.343.2.2.1			The basic collection of objects providing management of Authorization Clients.

RFC description

Cisco MIB module for user authorization and AAA (Authentication, Authorization, Accounting) statistics. Defines counters and objects for tracking authorization requests, responses, timeouts, and transaction success/failure metrics.

Start monitoring Cisco devices (RADIUS-style user authorization) with a free 30-day trial of IPNetwork Monitor. Import MIBs, browse SNMP OIDs, create custom SNMP monitors, configure alerts, and monitor any SNMP-enabled network device from a single console.

Download CISCO-AUTHORIZATION-STATS-MIB