ELTEX-MES-AAA-STATISTICS-MIB

All MIBs › ELTEX-MES-AAA-STATISTICS-MIB

Category: Vendor: Eltex

Description: Eltex MES AAA statistics MIB for collecting RADIUS/TACACS+ authentication transaction counters and server response statistics.

Start monitoring vendor-neutral, standards-based MIB, any SNMPv3-capable network device (SNMP engine identity/boot/clock status) with a free 30-day trial of IPNetwork Monitor. Import MIBs, browse SNMP OIDs, create custom SNMP monitors, configure alerts, and monitor any SNMP-enabled network device from a single console.

What Is ELTEX-MES-AAA-STATISTICS-MIB?

ELTEX-MES-AAA-STATISTICS-MIB is a vendor-specific MIB for Eltex MES (Metro Ethernet Switch) devices that exposes RADIUS and TACACS+ AAA transaction counters for both authentication and accounting traffic. It provides scalar RADIUS authentication-server counters (eltRadiusAuthServTotalAccessRequests, AccessAccepts, AccessRejects, AccessChallenges, AverageResponseDelay, TotalTimeouts, TotalMalformedAccessRequests, TotalPacketsDropped) and a parallel set of RADIUS accounting-server counters, plus an eltTacacsStatsTable (indexed by eltTacacsServerAddress) tracking per-TACACS+-server socket opens/closes/aborts/errors/timeouts and packets sent/received, and an eltRadiusServerStatusTable reporting per-server dead status and remaining dead time. Because these are direct request/response/timeout counters, this MIB is well suited for monitoring whether a configured RADIUS or TACACS+ server is responding reliably — rising eltRadiusAuthServTotalTimeouts or eltTacacsSocketTimeouts alongside a true eltRadiusServerDeadStatus would indicate an AAA server has become unreachable, forcing fallback authentication behavior on the switch. It depends on ELTEX-MES-MNG-MIB (for the eltMesAAAStatMIB anchor point) and the INET-ADDRESS-MIB textual conventions, and is deployed on Eltex MES-series switches performing 802.1X/management-plane AAA against external RADIUS/TACACS+ servers; administrators can download the ELTEX-MES-AAA-STATISTICS-MIB file to load it into their MIB browser when auditing AAA reliability on these switches.

IPNetwork Monitor allows you to monitor SNMP objects defined in ELTEX-MES-AAA-STATISTICS-MIB. Use the built-in SNMP Monitoring Browser to explore available variables, view their current values and descriptions, and select the objects you want to monitor. You can then create SNMP monitors, configure thresholds, and receive alerts when monitored values change.

Supported Devices

Eltex MES-series Metro Ethernet Switches

Monitoring Examples

An operator polls eltRadiusAuthServAccessRejects and eltRadiusAuthServTotalTimeouts against eltRadiusAuthServTotalAccessRequests to gauge RADIUS authentication health; a spike in timeouts alongside eltRadiusServerDeadStatus becoming true would indicate the configured RADIUS server has stopped responding.

What Can Be Monitored

RADIUS authentication request/accept/reject/challenge counters
RADIUS accounting request/response counters
RADIUS/TACACS+ average and maximum response delay
TACACS+ socket open/close/timeout counters
RADIUS server dead status and remaining dead time
malformed/dropped AAA packet counters

Imported Objects

From ELTEX-MES-MNG-MIB

eltMesAAAStatMIB

OBJECT-IDENTITY

From INET-ADDRESS-MIB

InetAddress
InetAddressType

From SNMPv2-SMI

Counter32
IpAddress
MODULE-IDENTITY
OBJECT-TYPE
Unsigned32

From SNMPv2-TC

DisplayString
TEXTUAL-CONVENTION
TruthValue

How to Use in IPNetwork Monitor

Example using eltRadiusAuthServTotalAccessRequests OID:

Select an Eltex MES-series switch (RADIUS/TACACS+ AAA transaction counters) as the target host to create a monitor — the SNMP service should be up and running on it. Click New Monitor, then check SNMP Custom on the Favorites tab, click Next, and confirm the host. On the next page, click Select... to open the built-in SNMP MIB Browser and type eltRadiusAuthServTotalAccessRequests into the Find box to locate it in the OID tree, then select it and click OK. The number of packets received on the authentication port. On the monitor's Main parameters page you can set the target's SNMP port (default 161), credentials, polling interval, and other settings — see the SNMP Monitor help for details. On the State conditions and Alerting tabs, configure when the monitor should change state and trigger an alert; since this is a Counter32-type OID, Value bounds is the most useful condition here — trigger an alert if the counter increases sharply between polls relative to its normal baseline, since an unexpected spike often reflects a real change in traffic or activity. Click Finish to create the monitor; you can adjust any parameter later.

OIDs

OID symbolic	OID numeric	Type	Access	Description
C32 eltRadiusAuthServTotalAccessRequestsEx	1.3.6.1.4.1.35265.1.23.1.3.1	Counter32	read-only	The number of packets received on the authentication port.
C32 eltRadiusAuthServTotalAccessAccepts	1.3.6.1.4.1.35265.1.23.1.3.2	Counter32	read-only	The number of RADIUS Access-Accept packets sent.
C32 eltRadiusAuthServAccessRejects	1.3.6.1.4.1.35265.1.23.1.3.3	Counter32	read-only	The number of RADIUS Access-Reject packets sent.
C32 eltRadiusAuthServAccessChallenges	1.3.6.1.4.1.35265.1.23.1.3.4	Counter32	read-only	The number of RADIUS Access-Challenge packets sent.
C32 eltRadiusAuthServAverageResponseDelay	1.3.6.1.4.1.35265.1.23.1.3.5	Counter32	read-only	Average response delay(ms) Average time from when the packet was first transmitted to when it received a response. If the response timed out and the packet was sent again, this value includes the timeout. If the packet never received a response, this is not included in the average.
C32 eltRadiusAuthServMaximumResponseDelay	1.3.6.1.4.1.35265.1.23.1.3.6	Counter32	read-only	Maximum response delay(ms) Maximum delay observed while gathering average response delay information.
U32 eltRadiusAuthServTotalTimeouts	1.3.6.1.4.1.35265.1.23.1.3.7	Unsigned32	read-only	Number of times a server did not respond, and the RADIUS server re-sent the packet.
C32 eltRadiusAuthServTotalMalformedAccessRequests	1.3.6.1.4.1.35265.1.23.1.3.8	Counter32	read-only	The number of malformed RADIUS Access-Request packets received. Bad authenticators and unknown types are not included as malformed Access-Requests.
C32 eltRadiusAuthServMaximumBufferSize	1.3.6.1.4.1.35265.1.23.1.3.9	Counter32	read-only	The maximum buffer size in bytes.
C32 eltRadiusAuthServTotalPacketsDropped	1.3.6.1.4.1.35265.1.23.1.3.10	Counter32	read-only	The number of incoming packets silently discarded for some reason other than malformed, bad authenticators or unknown types.
C32 eltRadiusAccServTotalRequests	1.3.6.1.4.1.35265.1.23.1.3.11	Counter32	read-only	The number of packets received on the accounting port.
C32 eltRadiusAccServTotalDupRequests	1.3.6.1.4.1.35265.1.23.1.3.12	Counter32	read-only	The number of duplicate RADIUS Accounting-Request packets received.
C32 eltRadiusAccServTotalResponses	1.3.6.1.4.1.35265.1.23.1.3.13	Counter32	read-only	The number of RADIUS Accounting-Response packets sent.
C32 eltRadiusAccServAverageResponseDelay	1.3.6.1.4.1.35265.1.23.1.3.14	Counter32	read-only	Average response delay(ms) Average time from when the packet was first transmitted to when it received a response. If the response timed out and the packet was sent again, this value includes the timeout. If the packet never received a response, this is not included in the average.
C32 eltRadiusAccServMaximumResponseDelay	1.3.6.1.4.1.35265.1.23.1.3.15	Counter32	read-only	Maximum response delay(ms) Maximum delay observed while gathering average response delay information.
U32 eltRadiusAccServTotalTimeouts	1.3.6.1.4.1.35265.1.23.1.3.16	Unsigned32	read-only	Number of times a server did not respond, and the RADIUS server re-sent the packet.
C32 eltRadiusAccServTotalMalformedAccessRequests	1.3.6.1.4.1.35265.1.23.1.3.17	Counter32	read-only	The number of malformed RADIUS Accounting-Request packets received. Bad authenticators or unknown types are not included as malformed Access-Requests.
C32 eltRadiusAccServMaximumBufferSize	1.3.6.1.4.1.35265.1.23.1.3.18	Counter32	read-only	The maximum buffer size in bytes.
C32 eltRadiusAccServTotalPacketsDropped	1.3.6.1.4.1.35265.1.23.1.3.19	Counter32	read-only	The number of incoming packets silently discarded for a reason other than malformed, bad authenticators, or unknown types.
eltTacacsStatsTable	1.3.6.1.4.1.35265.1.23.1.3.20		not-accessible	This table contains the statistics for the TACACS+ servers.
eltTacacsStatsEntry	1.3.6.1.4.1.35265.1.23.1.3.20.1		not-accessible	AEntry is TACACS + server, containing its statistics.
IP eltTacacsServerAddress	1.3.6.1.4.1.35265.1.23.1.3.20.1.1	IpAddress	read-write	The IP address of the TACACS+ server referred to in this table entry.
U32 eltTacacsSocketOpens	1.3.6.1.4.1.35265.1.23.1.3.20.1.2	Unsigned32	read-write	Number of successful TCP socket connections to the TACACS+ server.
U32 eltTacacsSocketCloses	1.3.6.1.4.1.35265.1.23.1.3.20.1.3	Unsigned32	read-write	Number of successfully closed TCP socket attempts.
U32 eltTacacsSocketAborts	1.3.6.1.4.1.35265.1.23.1.3.20.1.4	Unsigned32	read-write	Number of premature TCP socket closures to the TACACS+ server; that is, the peer did not wait for a reply from the server after a the peer sent its request.
U32 eltTacacsSocketErrors	1.3.6.1.4.1.35265.1.23.1.3.20.1.5	Unsigned32	read-write	Any other socket read or write errors, such as incorrect packet format and length.
U32 eltTacacsSocketTimeouts	1.3.6.1.4.1.35265.1.23.1.3.20.1.6	Unsigned32	read-write	Number of times a server did not respond.
U32 eltTacacsFailesConnAttemps	1.3.6.1.4.1.35265.1.23.1.3.20.1.7	Unsigned32	read-write	Number of failed TCP socket connections to the TACACS+ server.
U32 eltTacacsTotalPackageSent	1.3.6.1.4.1.35265.1.23.1.3.20.1.8	Unsigned32	read-write	Number of packets sent to the TACACS+ server.
U32 eltTacacsTotalPackageRecv	1.3.6.1.4.1.35265.1.23.1.3.20.1.9	Unsigned32	read-write	Number of packets received from the TACACS+ server.
eltRadiusServerStatusTable	1.3.6.1.4.1.35265.1.23.1.3.21		not-accessible	The (conceptual) table listing the RADIUS servers with which the cliient shares a secret.
eltRadiusServerStatusEntry	1.3.6.1.4.1.35265.1.23.1.3.21.1		not-accessible	An entry (conceptual row) representing a RADIUS server with which the client shares a secret.
IPt eltRadiusServerAddressType	1.3.6.1.4.1.35265.1.23.1.3.21.1.1	InetAddressType	read-write	The Inet address type of RADIUS server reffered to in this table entry .IPv6Z type is not supported.
IP eltRadiusServerAddress	1.3.6.1.4.1.35265.1.23.1.3.21.1.2	InetAddress	read-write	The IP address of the RADIUS server referred to in this table entry.
INT eltRadiusServerAuthPortNumber	1.3.6.1.4.1.35265.1.23.1.3.21.1.3	INTEGER	read-write	The UDP port the client is using to send authentication requests to this server.
INT eltRadiusServerAcctPortNumber	1.3.6.1.4.1.35265.1.23.1.3.21.1.4	INTEGER	read-write	The UDP port the client is using to send accounting requests to this server.
U32 eltRadiusServerAuthClientTimeouts	1.3.6.1.4.1.35265.1.23.1.3.21.1.5	Unsigned32	read-only	The timeouts this RADIUS server to reply.
T/F eltRadiusServerDeadStatus	1.3.6.1.4.1.35265.1.23.1.3.21.1.6	TruthValue	read-only	The dead status for this RADIUS server.
U32 eltRadiusServerRemainDeadTime	1.3.6.1.4.1.35265.1.23.1.3.21.1.7	Unsigned32	read-only	The remain dead time for this RADIUS server.
INT eltRadiusServerStatusReset	1.3.6.1.4.1.35265.1.23.1.3.22	INTEGER	read-write	Reset dead status for all RADIUS servers.

RFC description

RADIUS authentication and AAA statistics MIB tracking authentication requests, response times, and server performance metrics.

Start monitoring Eltex MES-series switch (RADIUS/TACACS+ AAA transaction counters) with a free 30-day trial of IPNetwork Monitor. Import MIBs, browse SNMP OIDs, create custom SNMP monitors, configure alerts, and monitor any SNMP-enabled network device from a single console.

Download ELTEX-MES-AAA-STATISTICS-MIB