CT-DARADIUS-MIB

All MIBs › CT-DARADIUS-MIB

Category: Network Interfaces, RADIUS and AAA, VPN and Security, Vendor: Cabletron/Enterasys

Description: Configures Cabletron/Enterasys direct-attached RADIUS authentication server parameters and accounting settings.

Start monitoring vendor-neutral, standards-based MIB, any SNMPv3-capable network device (SNMP engine identity/boot/clock status) with a free 30-day trial of IPNetwork Monitor. Import MIBs, browse SNMP OIDs, create custom SNMP monitors, configure alerts, and monitor any SNMP-enabled network device from a single console.

What Is CT-DARADIUS-MIB?

CT-DARADIUS-MIB is a Cabletron Systems / Enterasys Networks enterprise MIB that configures the direct-attached RADIUS (DARADIUS) client used for centralized authentication and accounting on Cabletron/Enterasys switches and routers. It exposes configuration data such as enable/disable state, authentication and accounting retry counts, retry intervals, and a table of configured RADIUS server entries with IP addresses and shared secrets. Rather than hardware sensors, this module is used to monitor the operational readiness of the device's AAA (authentication, authorization, accounting) subsystem — confirming the RADIUS client is enabled, that the correct servers are reachable and configured with valid shared secrets, and that retry/timeout tuning is appropriate so login requests do not silently time out. It implicitly builds on standard RADIUS client concepts (RFC 2865/2866) and sits under the vendor's ctSSA enterprise subtree even though it does not formally import those standards. Typical deployment is legacy Cabletron/Enterasys managed switches and routers using centralized RADIUS authentication in enterprise wiring closets and campus networks. Engineers can download the CT-DARADIUS-MIB file directly to load it into their MIB browser.

IPNetwork Monitor allows you to monitor SNMP objects defined in CT-DARADIUS-MIB. Use the built-in SNMP Monitoring Browser to explore available variables, view their current values and descriptions, and select the objects you want to monitor. You can then create SNMP monitors, configure thresholds, and receive alerts when monitored values change.

Supported Devices

Cabletron/Enterasys managed switch
Cabletron/Enterasys router

Monitoring Examples

An administrator polls daRadiusgcEnabled to confirm the RADIUS client is active, then walks daRadiusServerCfgTable/daRadiusServerCfgEntry (indexed by scIndex) to check scIpAddress and scStatus for each configured server. If scStatus shows a server out of service while daRadiusgcAuthNumRetries and daRadiusgcAuthSecsBtwnRetries indicate repeated retry exhaustion, that signals the primary authentication server is unreachable and logins may be failing over or failing outright. Comparing gcAcctSecsBtwnRetries against daRadiusgcAcctNumRetries also helps confirm accounting records aren't being dropped due to overly tight timeouts.

What Can Be Monitored

RADIUS client enable state
authentication retry count and interval
accounting retry count and interval
configured RADIUS server IP and status
shared secret configuration presence

Imported Objects

From CTRON-OIDS

cabletron

OBJECT-IDENTITY

From RFC-1212

OBJECT-TYPE

From RFC1155-SMI

IpAddress

From RFC1213-MIB

DisplayString

OIDs

OID symbolic	OID numeric	Type	Access	Description
ctSSA	1.3.6.1.4.1.52.4497
daRadius	1.3.6.1.4.1.52.4497.24
daRadiusConfig	1.3.6.1.4.1.52.4497.24.1
daRadiusGeneralConfig	1.3.6.1.4.1.52.4497.24.1.1
INT daRadiusgcEnabled	1.3.6.1.4.1.52.4497.24.1.1.1	INTEGER	read-write	Administrative status for the RADIUS client.
INT daRadiusgcAuthNumRetries	1.3.6.1.4.1.52.4497.24.1.1.2	INTEGER	read-write	Number of times the RADIUS client will issue a request to a RADIUS Authentication Server if the server does not respond.
INT daRadiusgcAuthSecsBtwnRetries	1.3.6.1.4.1.52.4497.24.1.1.3	INTEGER	read-write	Number of seconds a RADIUS Authentication Server has to respond to a request before the RADIUS client gives up waiting.
INT daRadiusgcAcctNumRetries	1.3.6.1.4.1.52.4497.24.1.1.4	INTEGER	read-write	Number of times the RADIUS client will issue a request to a RADIUS Accounting Server attempting to solicit a response.
INT gcAcctSecsBtwnRetries	1.3.6.1.4.1.52.4497.24.1.1.5	INTEGER	read-write	Number of seconds a RADIUS Accounting Server has to respond to a request before the RADIUS client gives up waiting.
daRadiusServerCfgTable	1.3.6.1.4.1.52.4497.24.1.2		not-accessible	This table contains RADIUS server configurations used by the RADIUS client.
daRadiusServerCfgEntry	1.3.6.1.4.1.52.4497.24.1.2.1		not-accessible	Each entry contains configuration information for a RADIUS server.
INT scIndex	1.3.6.1.4.1.52.4497.24.1.2.1.1	INTEGER	read-only	Type of RADIUS server.
INT scStatus	1.3.6.1.4.1.52.4497.24.1.2.1.2	INTEGER	read-write	RADIUS client administrative status for the RADIUS server, indicating if the server is enabled to be used by the RADIUS client.
IP scIpAddress	1.3.6.1.4.1.52.4497.24.1.2.1.3	IpAddress	read-write	RADIUS server IP address.
STR scSharedSecret	1.3.6.1.4.1.52.4497.24.1.2.1.4	DisplayString	read-write	Shared secret used to authentication transactions between the RADIUS client and the RADIUS server.
INT scUdpPort	1.3.6.1.4.1.52.4497.24.1.2.1.5	INTEGER	read-write	RADIUS server UDP port.
daRadiusStats	1.3.6.1.4.1.52.4497.24.2
daRadiusGeneralStats	1.3.6.1.4.1.52.4497.24.2.1
INT gsInDiscards	1.3.6.1.4.1.52.4497.24.2.1.1	INTEGER	read-only	The number of packets received from RADIUS servers which were chosen to be discarded even though no errors had been detected. The packets were chosen to be discarded before the source RADIUS server was identified. One possible reason for discarding a packet could be because the packet was received after the RADIUS client gave up waiting for it.
INT gsInErrors	1.3.6.1.4.1.52.4497.24.2.1.2	INTEGER	read-only	The number of packets received from RADIUS servers that contained errors preventing them from being processed. The packets were found to contain errors before the source RADIUS server was identified.
daRadiusServerStatsTable	1.3.6.1.4.1.52.4497.24.2.2		not-accessible	This table contains RADIUS server statistics tallied by the RADIUS client.
daRadiusServerStatsEntry	1.3.6.1.4.1.52.4497.24.2.2.1		not-accessible	Each entry contains RADIUS server statistics tallied by the RADIUS client.
INT ssIndex	1.3.6.1.4.1.52.4497.24.2.2.1.1	INTEGER	read-only	Type of RADIUS server.
INT ssInPkts	1.3.6.1.4.1.52.4497.24.2.2.1.2	INTEGER	read-only	The number of packets received from the RADIUS server that were successfully handled by the RADIUS client.
INT ssInDiscards	1.3.6.1.4.1.52.4497.24.2.2.1.3	INTEGER	read-only	The number of packets received from the RADIUS server which were chosen to be discarded even though no errors had been detected. One possible reason for discarding a packet could be because the RADIUS code field of the packet was not recognized.
INT ssInErrors	1.3.6.1.4.1.52.4497.24.2.2.1.4	INTEGER	read-only	The number of packets received from the RADIUS server that contained errors preventing them from being processed.
INT ssOutPkts	1.3.6.1.4.1.52.4497.24.2.2.1.5	INTEGER	read-only	The number of packets transmitted to the RADIUS server.
INT ssOutErrors	1.3.6.1.4.1.52.4497.24.2.2.1.6	INTEGER	read-only	The number of packets the RADIUS client was unable to transmit to the RADIUS server due to transmission errors.
INT ssResponseTimeouts	1.3.6.1.4.1.52.4497.24.2.2.1.7	INTEGER	read-only	The number of times the RADIUS client did not receive a response from the RADIUS server within the expected time.

RFC description

RADIUS authentication client configuration and statistics for Cabletron systems.

Start monitoring Cabletron/Enterasys managed switch/router (RADIUS client) with a free 30-day trial of IPNetwork Monitor. Import MIBs, browse SNMP OIDs, create custom SNMP monitors, configure alerts, and monitor any SNMP-enabled network device from a single console.

Download CT-DARADIUS-MIB

What Is CT-DARADIUS-MIB?

Supported Devices

Monitoring Examples

What Can Be Monitored

This MIB depends on

Related MIBs

RFC description