All MIBs › ENTERASYS-AAA-POLICY-MIB
Organization: Enterasys Networks, Inc
Last Updated: 2004-07-29
Category: Domain: Security, RADIUS and AAA, Vendor: Enterasys/Cabletron
Description: Enterasys Networks MIB for configuring AAA (authentication, authorization, accounting) service policies and protocol selection.
Start monitoring vendor-neutral, standards-based MIB, any SNMPv3-capable network device (SNMP engine identity/boot/clock status) with a free 30-day trial of IPNetwork Monitor. Import MIBs, browse SNMP OIDs, create custom SNMP monitors, configure alerts, and monitor any SNMP-enabled network device from a single console.
What Is ENTERASYS-AAA-POLICY-MIB?
ENTERASYS-AAA-POLICY-MIB is a proprietary Enterasys Networks MIB for configuring authentication, authorization, and accounting (AAA) service policies, including which protocol (e.g., RADIUS, TACACS+) is used for management access authentication and accounting. It exposes a management-access policy table describing per-access-method authentication and accounting protocol selection. Its monitoring value is primarily configuration/security-posture verification: an administrator can confirm that management access to the device is protected by the intended remote authentication and accounting protocol, which is a software/security configuration check rather than a hardware or performance metric. It is a vendor extension with no stated dependency on a specific standard AAA MIB, functioning as Enterasys' own policy layer. It is deployed on Enterasys (Extreme Networks) switches and controllers where centralized AAA is used to secure administrative access. Engineers can download the ENTERASYS-AAA-POLICY-MIB file directly to load it into their MIB browser.
IPNetwork Monitor allows you to monitor SNMP objects defined in ENTERASYS-AAA-POLICY-MIB. Use the built-in SNMP Monitoring Browser to explore available variables, view their current values and descriptions, and select the objects you want to monitor. You can then create SNMP monitors, configure thresholds, and receive alerts when monitored values change.
Supported Devices
- Enterasys (Extreme Networks) switch or controller
Monitoring Examples
An administrator would poll etsysAAAMgmtAccessTable/etsysAAAMgmtAccessEntry to see, per management access method, the configured etsysAAAMgmtAccessProtocol, etsysAAAMgmtRemoteAuthProtocol, and etsysAAAMgmtRemoteAcctProtocol, verifying that console, SSH, or web-management access is all routed through the expected RADIUS/TACACS+ server rather than falling back to local authentication. This would typically be checked after a policy change or during a security audit to ensure no access method was left misconfigured. The MIB is configuration-state oriented rather than exposing live authentication event counters.
What Can Be Monitored
- management access authentication protocol
- remote authentication protocol
- remote accounting protocol
- per-access-method AAA configuration
Imported Objects
From ENTERASYS-MIB-NAMES
| etsysModules | OBJECT-IDENTITY |
From SNMPv2-CONF
| MODULE-COMPLIANCE | |
| OBJECT-GROUP |
From SNMPv2-SMI
| MODULE-IDENTITY | |
| OBJECT-TYPE |
From SNMPv2-TC
| TEXTUAL-CONVENTION |
OIDs
RFC description
Configures authentication services using RADIUS/TACACS+ protocols on Enterasys network devices.
Start monitoring Enterasys Networks switch (legacy, later Extreme Networks) (AAA policy config) with a free 30-day trial of IPNetwork Monitor. Import MIBs, browse SNMP OIDs, create custom SNMP monitors, configure alerts, and monitor any SNMP-enabled network device from a single console.