DIAMETER-NASREQ-APPLICATION-MIB

All MIBs › DIAMETER-NASREQ-APPLICATION-MIB

Organization: IETF AAA Working Group.

Last Updated: 2002-02-26

Description: IETF MIB for managing Diameter NASREQ Application entities handling network access authentication on AAA servers and NAS equipment

Start monitoring vendor-neutral, standards-based MIB, any SNMPv3-capable network device (SNMP engine identity/boot/clock status) with a free 30-day trial of IPNetwork Monitor. Import MIBs, browse SNMP OIDs, create custom SNMP monitors, configure alerts, and monitor any SNMP-enabled network device from a single console.

What Is DIAMETER-NASREQ-APPLICATION-MIB?

This is an IETF standards-track MIB (based on an early Diameter NASREQ draft) for managing Diameter Network Access Server Requests Application entities, used in AAA (authentication, authorization, accounting) infrastructure for network access control. It exposes objects covering peer host addressing, RADIUS gateway interoperability, EAP authentication method statistics, and per-peer message counters for AA-Request/Answer exchanges. Monitoring this MIB reveals the software-level health of the Diameter NASREQ application on an AAA server or NAS device, such as whether EAP methods are being negotiated successfully and whether per-peer request/response counts indicate a responsive or stalled Diameter peer connection. It depends on the broader DIAMETER-MIB base module for session and transport-layer state, since NASREQ is an application layered on core Diameter. It is typically deployed in service-provider or enterprise AAA infrastructure, on Diameter/RADIUS gateway servers and network access servers handling subscriber authentication. Engineers implementing or auditing this functionality typically reference the DIAMETER-NASREQ-APPLICATION-MIB RFC/standard documentation for the authoritative specification.

IPNetwork Monitor allows you to monitor SNMP objects defined in DIAMETER-NASREQ-APPLICATION-MIB. Use the built-in SNMP Monitoring Browser to explore available variables, view their current values and descriptions, and select the objects you want to monitor. You can then create SNMP monitors, configure thresholds, and receive alerts when monitored values change.

Supported Devices

vendor-neutral, standards-based MIB, not tied to a specific manufacturer; applies to AAA servers and Network Access Servers (NAS)

Monitoring Examples

An operator would poll dnaPerPeerStatsTable entries, comparing dnaPerPeerStatsAARIn against dnaPerPeerStatsAAROut for a given dnaPeerServerIndex, to detect a peer that is receiving requests but not returning answers, indicating a stalled or overloaded AAA backend. The dnaEapStatsTable, keyed by dnaEapMethodIndex, can be checked via dnaEapMethodCount to see which EAP authentication methods are actually being used by clients and spot a sudden drop indicating a supplicant compatibility issue. dnaHostAddress and dnaRadiusGateway objects help confirm the NAS is pointed at the correct AAA server and RADIUS interworking gateway.

What Can Be Monitored

per-peer AA-Request/Answer message counts
EAP authentication method usage
RADIUS gateway interoperability status
NAS host address configuration
Diameter peer server responsiveness

Imported Objects

From INET-ADDRESS-MIB

InetAddress
InetAddressType

From SNMP-FRAMEWORK-MIB

SnmpAdminString

From SNMPv2-CONF

MODULE-COMPLIANCE
OBJECT-GROUP

From SNMPv2-SMI

Counter32
MODULE-IDENTITY
OBJECT-IDENTITY
OBJECT-TYPE
TimeTicks
Unsigned32
mib-2

How to Use in IPNetwork Monitor

Example using dnaHostTotalSessions OID:

Select an AAA server or network access server as the target host to create a monitor — the SNMP service should be up and running on it. Click New Monitor, then check SNMP Custom on the Favorites tab, click Next, and confirm the host. On the next page, click Select... to open the built-in SNMP MIB Browser and type dnaHostTotalSessions into the Find box to locate it in the OID tree, then select it and click OK. The total number of sessions since uptime. On the monitor's Main parameters page you can set the target's SNMP port (default 161), credentials, polling interval, and other settings — see the SNMP Monitor help for details. On the State conditions and Alerting tabs, configure when the monitor should change state and trigger an alert; since this is a Counter32-type OID, Value bounds is the most useful condition here — trigger an alert if the counter increases sharply between polls relative to its normal baseline, since an unexpected spike often reflects a real change in traffic or activity. Click Finish to create the monitor; you can adjust any parameter later.

OIDs

OID symbolic	OID numeric	Type	Access	Description
diameterMIB	1.3.6.1.2.1.119			The MIB module is based on the Diameter NASREQ Application, draft-ietf-aaa-diameternasreq-08.txt.
diameterNasreqAppMIB	1.3.6.1.2.1.119.2
diameterNasreqAppNotifs	1.3.6.1.2.1.119.2.0
diameterNasreqAppObjects	1.3.6.1.2.1.119.2.1
dnaHostCfgs	1.3.6.1.2.1.119.2.1.1
IPt dnaHostAddressType	1.3.6.1.2.1.119.2.1.1.1	InetAddressType	read-only	The type of internet address stored in diameterHostAddress.
IP dnaHostAddress	1.3.6.1.2.1.119.2.1.1.2	InetAddress	read-only	The IP-Address that corresponds to the Origin-Host AVP.
INT dnaRadiusGateway	1.3.6.1.2.1.119.2.1.1.3	INTEGER	read-only	Tells if this server is acting as a RADIUS/Diameter gateway.
dnaHostStats	1.3.6.1.2.1.119.2.1.2
dnaEapStatsTable	1.3.6.1.2.1.119.2.1.2.1		not-accessible	Table listing EAP counts.
dnaEapStatsEntry	1.3.6.1.2.1.119.2.1.2.1.1		not-accessible	A row entry representing an EAP method.
U32 dnaEapMethodIndex	1.3.6.1.2.1.119.2.1.2.1.1.1	Unsigned32	read-only	A number uniquely identifying the EAP method.
U32 dnaEapMethodCount	1.3.6.1.2.1.119.2.1.2.1.1.2	Unsigned32	read-only	The number of EAP requests for each method.
dnaHostSessionInfo	1.3.6.1.2.1.119.2.1.3
C32 dnaHostTotalSessionsEx	1.3.6.1.2.1.119.2.1.3.1	Counter32	read-only	The total number of sessions since uptime.
C32 dnaHostTotalActiveSessions	1.3.6.1.2.1.119.2.1.3.2	Counter32	read-only	The total number of active sessions.
dnaPeerStats	1.3.6.1.2.1.119.2.1.4
dnaPerPeerStatsTable	1.3.6.1.2.1.119.2.1.4.1		not-accessible	The table listing the Diameter Nasreq Peer Statistics.
dnaPerPeerStatsEntry	1.3.6.1.2.1.119.2.1.4.1.1		not-accessible	A row entry representing a Diameter Peer.
U32 dnaPeerServerIndex	1.3.6.1.2.1.119.2.1.4.1.1.1	Unsigned32	not-accessible	A number uniquely identifying each Diameter Peer with which the host server communicates.
C32 dnaPerPeerStatsAARIn	1.3.6.1.2.1.119.2.1.4.1.1.2	Counter32	read-only	AA-Request in per peer.
C32 dnaPerPeerStatsAAROut	1.3.6.1.2.1.119.2.1.4.1.1.3	Counter32	read-only	AA-Request out per peer.
C32 dnaPerPeerStatsDERIn	1.3.6.1.2.1.119.2.1.4.1.1.4	Counter32	read-only	Diameter-EAP-Request in per peer.
C32 dnaPerPeerStatsDEROut	1.3.6.1.2.1.119.2.1.4.1.1.5	Counter32	read-only	Diameter-EAP-Answer out per peer.
C32 dnaPerPeerStatsAARDropped	1.3.6.1.2.1.119.2.1.4.1.1.6	Counter32	read-only	AA-Request dropped per peer.
C32 dnaPerPeerStatsDERDropped	1.3.6.1.2.1.119.2.1.4.1.1.7	Counter32	read-only	AA-Request dropped per peer.
dnaPerPeerActiveSessionTable	1.3.6.1.2.1.119.2.1.4.2		not-accessible	The (conceptual) table listing the Diameter Nasreq Active Session Information.
dnaPerPeerActiveSessionEntry	1.3.6.1.2.1.119.2.1.4.2.1		not-accessible	An entry (conceptual row) representing a Diameter peer.
U32 dnaPerPeerSessionIndex	1.3.6.1.2.1.119.2.1.4.2.1.1	Unsigned32	read-only	A number identifying a peer session.
STR dnaPerPeerSessionId	1.3.6.1.2.1.119.2.1.4.2.1.2	SnmpAdminString	read-only	A unique string used to identify a specific session.
TIK dnaPerPeerSessionUptime	1.3.6.1.2.1.119.2.1.4.2.1.3	TimeTicks	read-only	The total amount of time the session has been up.
INT dnaPerPeerSessionAuthenStatus	1.3.6.1.2.1.119.2.1.4.2.1.4	INTEGER	read-only	The authentication status of a session.
INT dnaPerPeerSessionAuthorStatus	1.3.6.1.2.1.119.2.1.4.2.1.5	INTEGER	read-only	The authorization status of a session.
C32 dnaPerPeerSessionReauthenCount	1.3.6.1.2.1.119.2.1.4.2.1.6	Counter32	read-only	The number of times this session has been re-authenticated.
C32 dnaPerPeerSessionReauthorCount	1.3.6.1.2.1.119.2.1.4.2.1.7	Counter32	read-only	The number of times this session has been re-authorized.
TIK dnaPerPeerSessionAuthorLifetime	1.3.6.1.2.1.119.2.1.4.2.1.8	TimeTicks	read-only	The maximum number of seconds of service to be provided to the user before the user is to be re-authenticated and/or re-authorized.
dnaHistorySessionTable	1.3.6.1.2.1.119.2.1.4.3		not-accessible	The (conceptual) table listing session history information.
dnaHistorySessionEntry	1.3.6.1.2.1.119.2.1.4.3.1		not-accessible	An entry (conceptual row) representing information for a session.
U32 dnaHistorySessionIndex	1.3.6.1.2.1.119.2.1.4.3.1.1	Unsigned32	not-accessible	The maximum number of session information to keep.
STR dnaHistorySessionId	1.3.6.1.2.1.119.2.1.4.3.1.2	SnmpAdminString	read-only	A unique string used to identify a specific session.
TIK dnaHistorySessionUptime	1.3.6.1.2.1.119.2.1.4.3.1.3	TimeTicks	read-only	The total amount of time the session has been up.
INT dnaHistorySessionAuthenStatus	1.3.6.1.2.1.119.2.1.4.3.1.4	INTEGER	read-only	The authentication status of a session.
INT dnaHistorySessionAuthorStatus	1.3.6.1.2.1.119.2.1.4.3.1.5	INTEGER	read-only	The authorization status of a session.
C32 dnaHistorySessionReauthenCount	1.3.6.1.2.1.119.2.1.4.3.1.6	Counter32	read-only	The number of times this session has been re-authenticated.
C32 dnaHistorySessionReauthorCount	1.3.6.1.2.1.119.2.1.4.3.1.7	Counter32	read-only	The number of times this session has been re-authorized.
TIK dnaHistorySessionAuthorLifetime	1.3.6.1.2.1.119.2.1.4.3.1.8	TimeTicks	read-only	The maximum number of seconds of service to be provided to the user before the user is to be re-authenticated and/or re-authorized.
diameterNasreqAppConform	1.3.6.1.2.1.119.2.2
dnaMIBCompliances	1.3.6.1.2.1.119.2.2.1
dnaMIBCompliance	1.3.6.1.2.1.119.2.2.1.1			The compliance statement for diameter base protocol entities.
dnaMIBGroups	1.3.6.1.2.1.119.2.2.2
dnaHostCfgGroup	1.3.6.1.2.1.119.2.2.2.1			A collection of objects providing configuration common to the server.

RFC description

Tracks Diameter NASREQ AAA protocol statistics for network access servers.

Start monitoring AAA servers and network access servers with a free 30-day trial of IPNetwork Monitor. Import MIBs, browse SNMP OIDs, create custom SNMP monitors, configure alerts, and monitor any SNMP-enabled network device from a single console.

Download DIAMETER-NASREQ-APPLICATION-MIB