CISCOSB-AAA :: rlAAALineConsFailedLogins

MIB Reference — IPNetwork Monitor · Updated September 14, 2026

All MIBsCISCOSB-AAArlAAALineConsFailedLogins

rlAAALineConsFailedLogins

Module: CISCOSB-AAA

OID (symbolic): CISCOSB-AAA::rlAAALineConsFailedLogins

OID (numeric): 1.3.6.1.4.1.9.6.1.101.79.16.1.22

Node type: OBJECT-TYPE

Type: Counter32

Access: read-only

Description: Number of last consecutive failed logins

What is rlAAALineConsFailedLogins?

This read-only Counter32 tracks the number of consecutive failed login attempts most recently recorded on a given line. Admins watch this counter to detect brute-force attempts or a locked-out legitimate user repeatedly mistyping credentials on that line. For example, a console line showing a rapidly climbing count of consecutive failed logins alerts the admin to a possible unauthorized access attempt on that physical port.

Examples

Walk all instances (SNMPv2c):

snmpwalk -v2c -c public <target> 1.3.6.1.4.1.9.6.1.101.79.16.1.22
snmpwalk -v2c -c public <target> CISCOSB-AAA::rlAAALineConsFailedLogins

Get a specific instance (index 1):

snmpget -v2c -c public <target> 1.3.6.1.4.1.9.6.1.101.79.16.1.22.1
snmpget -v2c -c public <target> CISCOSB-AAA::rlAAALineConsFailedLogins.1

SNMPv3 example:

snmpget -v3 -l authPriv -u snmpv3-user -a SHA -A "AuthPassword1" -x AES -X "PrivPassword1" <target> rlAAALineConsFailedLogins.1

Start monitoring Cisco Small Business (SB) switches with a free 30-day trial of IPNetwork Monitor. Create custom SNMP monitor using the CISCOSB-AAA::rlAAALineConsFailedLogins OID value, configure state conditions and alerts, and monitor any Cisco Small Business (SB) switches from a single console.

How to Use in IPNetwork Monitor

Select a Cisco Small Business (SB) switch as the target host to create a monitor — the SNMP service should be up and running on it. Click New Monitor, then check SNMP Custom on the Favorites tab, click Next, and confirm the host. On the next page, click Select... to open the built-in SNMP MIB Browser and type rlAAALineConsFailedLogins into the Find box to locate it in the OID tree, selecting the specific row/instance you want to monitor since this is a table column, then select it and click OK. It reports the number of last consecutive failed logins. On the monitor's Main parameters page you can set the target's SNMP port (default 161), credentials, polling interval, and other settings — see the SNMP Monitor help for details. On the State conditions and Alerting tabs, configure when the monitor should change state and trigger an alert; since this is a Counter32-type OID, Value bounds is the most useful condition here — trigger an alert if the counter increases between polls, since a rising count of errors, failures, or discards often points to a real underlying problem. Click Finish to create the monitor; you can adjust any parameter later.

OID Breakdown

Upper-level ancestors (10 from the standard OID tree / other modules)
Numeric OIDNameModule
1isoLANART-AGENT
1.3orgAirPair-MIB
1.3.6dodAirPair-MIB
1.3.6.1internetAirPair-MIB
1.3.6.1.4privateAirPair-MIB
1.3.6.1.4.1enterprisesAirPair-MIB
1.3.6.1.4.1.9ciscoCAT2600-MIB
1.3.6.1.4.1.9.6otherEnterprisesCISCO-SMI
1.3.6.1.4.1.9.6.1ciscoSBCISCO-SMI
1.3.6.1.4.1.9.6.1.101switch001CISCOSB-MIB
Numeric OIDNameModule
1.3.6.1.4.1.9.6.1.101.79rlAAACISCOSB-AAA
1.3.6.1.4.1.9.6.1.101.79.16rlAAALineTableCISCOSB-AAA
1.3.6.1.4.1.9.6.1.101.79.16.1rlAAALineEntryCISCOSB-AAA
1.3.6.1.4.1.9.6.1.101.79.16.1.22rlAAALineConsFailedLoginsCISCOSB-AAA