CISCOSB-RADIUSSRV

All MIBs › CISCOSB-RADIUSSRV

Organization: Cisco Systems, Inc.

Last Updated: 2015-06-21

Category: RADIUS and AAA, Vendor: RADLAN/Cisco SB

Description: Manages Cisco Small Business RADIUS server configuration for 802.1X and management authentication.

Start monitoring vendor-neutral, standards-based MIB, any SNMPv3-capable network device (SNMP engine identity/boot/clock status) with a free 30-day trial of IPNetwork Monitor. Import MIBs, browse SNMP OIDs, create custom SNMP monitors, configure alerts, and monitor any SNMP-enabled network device from a single console.

What Is CISCOSB-RADIUSSRV?

This is a proprietary Cisco Small Business (CISCOSB) MIB for configuring the device's built-in RADIUS server used for 802.1X port authentication and management-plane AAA. It exposes server enable state, accounting/authentication UDP ports, shared secret keys (plaintext and MD5), trap enables for accounting/authentication success/failure events, and RADIUS server-group definitions tied to VLANs. Its monitoring relevance is centered on software/security configuration status, confirming the RADIUS service is enabled, correctly ported, and that trap notifications for authentication failures are active, which are key indicators for detecting authentication problems or attacks. No explicit external MIB dependency is stated, though it complements standard 802.1X port-authentication MIBs on the same device. It is typically deployed on Cisco Small Business series switches in SMB networks needing local RADIUS-based 802.1X authentication without a dedicated external AAA server. Engineers can download the CISCOSB-RADIUSSRV file directly to load it into their MIB browser.

IPNetwork Monitor allows you to monitor SNMP objects defined in CISCOSB-RADIUSSRV. Use the built-in SNMP Monitoring Browser to explore available variables, view their current values and descriptions, and select the objects you want to monitor. You can then create SNMP monitors, configure thresholds, and receive alerts when monitored values change.

Supported Devices

Cisco Small Business switch (CISCOSB series)

Monitoring Examples

Checking rlRadiusServEnable confirms the local RADIUS service is administratively enabled, while rlRadiusServAcctPort and rlRadiusServAuthPort verify it is listening on the expected UDP ports (typically 1813/1812). rlRadiusServTrapAuthFailure being disabled would mean authentication failures go unreported to the NMS, and rlRadiusServGroupTable's rlRadiusServGroupVLAN shows which VLAN a given RADIUS server group is associated with, useful for confirming per-VLAN authentication policy is correctly scoped.

What Can Be Monitored

RADIUS server enable status
accounting/authentication UDP port configuration
shared secret key configuration
authentication success/failure trap enable state
RADIUS server group VLAN association

Imported Objects

From CISCOSB-MIB

rlAAAEap	OBJECT-IDENTITY
rlRadius	OBJECT-IDENTITY
switch001	MODULE-IDENTITY

From INET-ADDRESS-MIB

InetAddress
InetAddressIPv6
InetAddressType

From Q-BRIDGE-MIB

VlanId

From SNMPv2-SMI

Counter32
IpAddress
MODULE-IDENTITY
OBJECT-TYPE
Unsigned32

From SNMPv2-TC

DateAndTime
DisplayString
MacAddress
RowStatus
TEXTUAL-CONVENTION
TimeStamp
TruthValue

OIDs

OID symbolic	OID numeric	Type	Access	Description
rlRadiusServ	1.3.6.1.4.1.9.6.1.101.226			The private MIB module definition for Authentication, Authorization and Accounting in CISCOSB devices.
STR rlRadiusServAcctLogDateTime	1.3.6.1.4.1.9.6.1.101.226.18.1.5	DisplayString	read-only	Date of accounting event.
rlRadiusServAcctLogEntry	1.3.6.1.4.1.9.6.1.101.226.18.1		not-accessible	The (conceptual) table listing the RADIUS server accounting log entry.
RLR rlRadiusServAcctLogEvent	1.3.6.1.4.1.9.6.1.101.226.18.1.4	RlRadiusServAcctLogEventType	read-only	Contains type of event.
U32 rlRadiusServAcctLogIndex	1.3.6.1.4.1.9.6.1.101.226.18.1.1	Unsigned32	not-accessible	Accounting Log Index
IP rlRadiusServAcctLogNASInetAddress	1.3.6.1.4.1.9.6.1.101.226.18.1.9	InetAddress	read-only	Accounting log user NAS Inet address. In case of dateTimeChanged and reboot event contains 0.
IPt rlRadiusServAcctLogNASInetAddressType	1.3.6.1.4.1.9.6.1.101.226.18.1.8	InetAddressType	read-only	Accounting log user NAS Inet address type. In case of dateTimeChanged and reboot event contains 0.
INT rlRadiusServAcctLogNASPort	1.3.6.1.4.1.9.6.1.101.226.18.1.10	INTEGER	read-only	Accounting log user NAS port. In case of dateTimeChanged and reboot event contains 0.
U32 rlRadiusServAcctLogSessionDuration	1.3.6.1.4.1.9.6.1.101.226.18.1.7	Unsigned32	read-only	Contains duration of user session in seconds. In case of dateTimeChanged and reboot event contains 0.
rlRadiusServAcctLogTable	1.3.6.1.4.1.9.6.1.101.226.18		not-accessible	The (conceptual) table listing the RADIUS server accounting log entry.
RLR rlRadiusServAcctLogTerminationReason	1.3.6.1.4.1.9.6.1.101.226.18.1.12	RlRadiusServAcctLogTerminationReasonType	read-only	User Session termination reason.
STR rlRadiusServAcctLogUpdatedDateTime	1.3.6.1.4.1.9.6.1.101.226.18.1.6	DisplayString	read-only	In case of dateTimeChanged event contains New assigned Date and Time. Otherwise contains 0.
STR rlRadiusServAcctLogUserAddress	1.3.6.1.4.1.9.6.1.101.226.18.1.11	DisplayString	read-only	Accounting log user address. In case of 1x user contains mac address string, in case of login contains inet address.
RLR rlRadiusServAcctLogUserAuth	1.3.6.1.4.1.9.6.1.101.226.18.1.3	RlRadiusServAcctLogUserAuthType	read-only	Contains type of authenticator.
STR rlRadiusServAcctLogUserName	1.3.6.1.4.1.9.6.1.101.226.18.1.2	DisplayString	read-only	Accounting Log User Name. In case of dateTimeChanged and reboot event contains 0.
INT rlRadiusServAcctPort	1.3.6.1.4.1.9.6.1.101.226.2	INTEGER	read-write	To define the accounting UDP port used for accounting requests.
INT rlRadiusServAuthPort	1.3.6.1.4.1.9.6.1.101.226.3	INTEGER	read-write	To define the authentication UDP port used for authentication requests.
T/F rlRadiusServClearAccounting	1.3.6.1.4.1.9.6.1.101.226.12	TruthValue	read-write	Setting this object to TRUE clears the Radius Accounting cache.
rlRadiusServClearClientStatisticsEntry	1.3.6.1.4.1.9.6.1.101.226.16.1		not-accessible	The row definition for this table.
INT rlRadiusServClearClientStatisticsIndex	1.3.6.1.4.1.9.6.1.101.226.16.1.1	INTEGER	read-only	Index in the table. Already 1.
IP rlRadiusServClearClientStatisticsInetAddress	1.3.6.1.4.1.9.6.1.101.226.16.1.3	InetAddress	read-write	Clear statistics Inet address parameter.
IPt rlRadiusServClearClientStatisticsInetAddressType	1.3.6.1.4.1.9.6.1.101.226.16.1.2	InetAddressType	read-write	Clear statistics Inet address type parameter.
rlRadiusServClearClientStatisticsTable	1.3.6.1.4.1.9.6.1.101.226.16		not-accessible	Action MIB to clear radius server statistics per client.
T/F rlRadiusServClearRejectedUsers	1.3.6.1.4.1.9.6.1.101.226.13	TruthValue	read-write	Setting this object to TRUE clears the Radius Rejected Users cache.
T/F rlRadiusServClearStatistics	1.3.6.1.4.1.9.6.1.101.226.14	TruthValue	read-write	Setting this object to TRUE clears the Radius server counters.
T/F rlRadiusServClearUnknownNas	1.3.6.1.4.1.9.6.1.101.226.20	TruthValue	read-write	Setting this object to TRUE clears the Radius Unknown Nas cache.
STR rlRadiusServClearUsersOfGivenGroup	1.3.6.1.4.1.9.6.1.101.226.15	DisplayString	read-write	Clears users of specified Group. 0 string signes to clear all users.
IP rlRadiusServClientInetAddress	1.3.6.1.4.1.9.6.1.101.226.11.1.2	InetAddress	read-write	The Inet address of the RADIUS client referred to in this table entry.
IPt rlRadiusServClientInetAddressType	1.3.6.1.4.1.9.6.1.101.226.11.1.1	InetAddressType	read-write	The Inet address type of RADIUS client reffered to in this table entry.
rlRadiusServClientInetEntry	1.3.6.1.4.1.9.6.1.101.226.11.1		not-accessible	The (conceptual) table listing the RADIUS Client entry.
STR rlRadiusServClientInetKey	1.3.6.1.4.1.9.6.1.101.226.11.1.3	DisplayString	read-write	Secret key to be shared with this RADIUS client.
OCT rlRadiusServClientInetKeyMD5	1.3.6.1.4.1.9.6.1.101.226.11.1.4	OCTET STRING	read-only	The MD5 of the rlRadiusServClientInetKey
ROW rlRadiusServClientInetStatus	1.3.6.1.4.1.9.6.1.101.226.11.1.5	RowStatus	read-write
rlRadiusServClientInetTable	1.3.6.1.4.1.9.6.1.101.226.11		not-accessible	The (conceptual) table listing the RADIUS server group entry.
T/F rlRadiusServClientInetUseGlobalKey	1.3.6.1.4.1.9.6.1.101.226.11.1.6	TruthValue	read-write	If this field is set to true the value in field rlRadiusServClientInetKey is ignored and instead the value in the MIB rlRadiusServDefaultKey is used. Otherwise the value in rlRadiusServClientInetKey is used.
STR rlRadiusServDefaultKey	1.3.6.1.4.1.9.6.1.101.226.4	DisplayString	read-write	Default Secret key to be shared with this all Radius Clients server.
OCT rlRadiusServDefaultKeyMD5	1.3.6.1.4.1.9.6.1.101.226.5	OCTET STRING	read-only	Default Secret key MD5.
T/F rlRadiusServEnable	1.3.6.1.4.1.9.6.1.101.226.1	TruthValue	read-write	Specifies whether Radius Server enabled on the switch.
STR rlRadiusServGroupACL1	1.3.6.1.4.1.9.6.1.101.226.9.1.4	DisplayString	read-write	To define first Radius Assigned ACL
STR rlRadiusServGroupACL2	1.3.6.1.4.1.9.6.1.101.226.9.1.5	DisplayString	read-write	To define second Radius Assigned ACL
rlRadiusServGroupEntry	1.3.6.1.4.1.9.6.1.101.226.9.1		not-accessible	The (conceptual) table listing the RADIUS server group entry.
STR rlRadiusServGroupName	1.3.6.1.4.1.9.6.1.101.226.9.1.1	DisplayString	read-write	To define Radius Server Group Name
INT rlRadiusServGroupPrvLevel	1.3.6.1.4.1.9.6.1.101.226.9.1.6	INTEGER	read-write	To define the user privilege level
ROW rlRadiusServGroupStatus	1.3.6.1.4.1.9.6.1.101.226.9.1.8	RowStatus	read-write
rlRadiusServGroupTable	1.3.6.1.4.1.9.6.1.101.226.9		not-accessible	The (conceptual) table listing the RADIUS server group entry.
STR rlRadiusServGroupTimeRangeName	1.3.6.1.4.1.9.6.1.101.226.9.1.7	DisplayString	read-write	To define the time user can connect
INT rlRadiusServGroupVLAN	1.3.6.1.4.1.9.6.1.101.226.9.1.2	INTEGER	read-write	To define Radius Assigned VLAN
STR rlRadiusServGroupVLANName	1.3.6.1.4.1.9.6.1.101.226.9.1.3	DisplayString	read-write	To define Radius Assigned VLAN name
STR rlRadiusServRejectedDateTime	1.3.6.1.4.1.9.6.1.101.226.17.1.5	DisplayString	read-only	Date of rejected event.
rlRadiusServRejectedEntry	1.3.6.1.4.1.9.6.1.101.226.17.1		not-accessible	The (conceptual) table listing the RADIUS Rejected user entry.
RLR rlRadiusServRejectedEvent	1.3.6.1.4.1.9.6.1.101.226.17.1.4	RlRadiusServRejectedEventType	read-only	Contains type of event.
U32 rlRadiusServRejectedIndex	1.3.6.1.4.1.9.6.1.101.226.17.1.1	Unsigned32	not-accessible	Rejected User Index
IP rlRadiusServRejectedNASInetAddress	1.3.6.1.4.1.9.6.1.101.226.17.1.8	InetAddress	read-only	Rejected user NAS Inet address. In case of dateTimeChanged and reboot event contains 0.
IPt rlRadiusServRejectedNASInetAddressType	1.3.6.1.4.1.9.6.1.101.226.17.1.7	InetAddressType	read-only	Rejected user NAS Inet address type. In case of dateTimeChange and reboot event contains 0.
INT rlRadiusServRejectedNASPort	1.3.6.1.4.1.9.6.1.101.226.17.1.9	INTEGER	read-only	Rejected user NAS port. In case of dateTimeChanged and reboot event contains 0.
RLR rlRadiusServRejectedReason	1.3.6.1.4.1.9.6.1.101.226.17.1.11	RlRadiusServRejectedReasonType	read-only	Rejected user reason.
rlRadiusServRejectedTable	1.3.6.1.4.1.9.6.1.101.226.17		not-accessible	The (conceptual) table listing the RADIUS server rejected user entry.
STR rlRadiusServRejectedUpdatedDateTime	1.3.6.1.4.1.9.6.1.101.226.17.1.6	DisplayString	read-only	In case of dateTimeChanged event contains New assigned Date and Time. Otherwise contains 0.
STR rlRadiusServRejectedUserAddress	1.3.6.1.4.1.9.6.1.101.226.17.1.10	DisplayString	read-only	Rejected user Inet address type. In case of 1x user contains mac address string, in case of login contains inet address.
STR rlRadiusServRejectedUserName	1.3.6.1.4.1.9.6.1.101.226.17.1.2	DisplayString	read-only	Rejected User Name. In case of dateTimeChanged and reboot event contains 0.
RLR rlRadiusServRejectedUserType	1.3.6.1.4.1.9.6.1.101.226.17.1.3	RlRadiusServUserType	read-only	Contains type of service.
T/F rlRadiusServTrapAcct	1.3.6.1.4.1.9.6.1.101.226.6	TruthValue	read-write	To enable sending accounting traps.
T/F rlRadiusServTrapAuthFailure	1.3.6.1.4.1.9.6.1.101.226.7	TruthValue	read-write	To enable sending traps when an authentication failed and Access-Reject is sent.
T/F rlRadiusServTrapAuthSuccess	1.3.6.1.4.1.9.6.1.101.226.8	TruthValue	read-write	To enable sending traps when a user is successfully authorized.
STR rlRadiusServUnknownNasDateTime	1.3.6.1.4.1.9.6.1.101.226.19.1.3	DisplayString	read-only	Date of unknown nas event.
rlRadiusServUnknownNasEntry	1.3.6.1.4.1.9.6.1.101.226.19.1		not-accessible	The (conceptual) table listing the RADIUS server unknown nas entry.
RLR rlRadiusServUnknownNasEvent	1.3.6.1.4.1.9.6.1.101.226.19.1.2	RlRadiusServUnknownNasEventType	read-only	Contains type of event.
U32 rlRadiusServUnknownNasIndex	1.3.6.1.4.1.9.6.1.101.226.19.1.1	Unsigned32	not-accessible	unknown nas Index
IP rlRadiusServUnknownNasInetAddress	1.3.6.1.4.1.9.6.1.101.226.19.1.9	InetAddress	read-only	Unknown nas Inet address. In case of dateTimeChanged and reboot event contains 0.
IPt rlRadiusServUnknownNasInetAddressType	1.3.6.1.4.1.9.6.1.101.226.19.1.5	InetAddressType	read-only	Unknown nas Inet address type. In case of dateTimeChanged and reboot event contains 0.
rlRadiusServUnknownNasTable	1.3.6.1.4.1.9.6.1.101.226.19		not-accessible	The (conceptual) table listing the RADIUS server unknown nas entry.
STR rlRadiusServUnknownNasUpdatedDateTime	1.3.6.1.4.1.9.6.1.101.226.19.1.4	DisplayString	read-only	In case of dateTimeChanged event contains New assigned Date and Time. Otherwise contains 0.
rlRadiusServUserEntry	1.3.6.1.4.1.9.6.1.101.226.10.1		not-accessible	The (conceptual) table listing the RADIUS server User entry.
STR rlRadiusServUserGroupName	1.3.6.1.4.1.9.6.1.101.226.10.1.4	DisplayString	read-write	Assigned Radius Server Group Name to specific user
STR rlRadiusServUserName	1.3.6.1.4.1.9.6.1.101.226.10.1.1	DisplayString	read-write	To define Radius Server User Name
STR rlRadiusServUserPassword	1.3.6.1.4.1.9.6.1.101.226.10.1.2	DisplayString	read-write	Plain text Radius Server User Password
OCT rlRadiusServUserPasswordMD5	1.3.6.1.4.1.9.6.1.101.226.10.1.3	OCTET STRING	read-only	The MD5 of the rlRadiusServUserPassword
ROW rlRadiusServUserStatus	1.3.6.1.4.1.9.6.1.101.226.10.1.5	RowStatus	read-write
rlRadiusServUserTable	1.3.6.1.4.1.9.6.1.101.226.10		not-accessible	The (conceptual) table listing the RADIUS server user entry.

RFC description

Cisco Small Business RADIUS server authentication, authorization, and accounting functionality on managed switches.

Start monitoring Cisco Small Business switch (CISCOSB series) with a free 30-day trial of IPNetwork Monitor. Import MIBs, browse SNMP OIDs, create custom SNMP monitors, configure alerts, and monitor any SNMP-enabled network device from a single console.

Download CISCOSB-RADIUSSRV

What Is CISCOSB-RADIUSSRV?

Supported Devices

Monitoring Examples

What Can Be Monitored

This MIB depends on

Related MIBs

RFC description