ENTERASYS-NAC-APPLIANCE-MIB

All MIBs › ENTERASYS-NAC-APPLIANCE-MIB

Organization: Enterasys Networks, Inc

Last Updated: 2010-03-09

Category: Domain: Security, Vendor: Enterasys/Cabletron

Description: Enterasys Networks MIB for monitoring NAC (Network Access Control) appliance status and endpoint compliance statistics.

Start monitoring vendor-neutral, standards-based MIB, any SNMPv3-capable network device (SNMP engine identity/boot/clock status) with a free 30-day trial of IPNetwork Monitor. Import MIBs, browse SNMP OIDs, create custom SNMP monitors, configure alerts, and monitor any SNMP-enabled network device from a single console.

What Is ENTERASYS-NAC-APPLIANCE-MIB?

This Enterasys Networks enterprise MIB monitors the status and statistics of a Network Access Control (NAC) appliance, a device that authenticates and assesses endpoints before granting network access. It exposes counters covering authentication request volume, successes, failures, RADIUS challenges, and various categories of malformed/invalid/duplicate/dropped requests, plus endpoint assessment request counts. This is squarely a performance/fault-monitoring MIB for NAC appliance software: rising failure, malformed-request, or dropped-packet counters reveal authentication protocol problems, RADIUS misconfiguration, or an attack against the NAC service, while assessment request counts reflect endpoint compliance-checking throughput. It has an implicit dependency on RADIUS protocol semantics (challenges, authentication requests) though it is not formally layered on a standard RADIUS MIB. It is deployed on Enterasys NAC Gateway/Controller appliances used to enforce endpoint compliance policy at the network edge, where ENTERASYS-NAC-APPLIANCE-MIB SNMP monitoring tracks authentication failure rates and potential attacks.

IPNetwork Monitor allows you to monitor SNMP objects defined in ENTERASYS-NAC-APPLIANCE-MIB. Use the built-in SNMP Monitoring Browser to explore available variables, view their current values and descriptions, and select the objects you want to monitor. You can then create SNMP monitors, configure thresholds, and receive alerts when monitored values change.

Supported Devices

Enterasys NAC Gateway/Controller appliance

Monitoring Examples

An administrator would trend etsysNacApplAuthenticationRequests against etsysNacApplAuthenticationFailures to compute a failure rate, and a spike in etsysNacApplAuthenticationMalformedRequests or etsysNacApplAuthenticationDroppedPackets would point to a misbehaving supplicant or a denial-of-service condition against the NAC service. etsysNacApplAssessmentRequests tracks how many endpoint posture-assessment checks the appliance has processed, useful for capacity planning during large-scale device onboarding events.

What Can Be Monitored

authentication request count
authentication success/failure counts
RADIUS challenge count
malformed/invalid/duplicate request counts
dropped packet count
endpoint assessment request count

Imported Objects

From ENTERASYS-MIB-NAMES

etsysModules

OBJECT-IDENTITY

From SNMPv2-CONF

MODULE-COMPLIANCE
OBJECT-GROUP

From SNMPv2-SMI

Counter64
MODULE-IDENTITY
OBJECT-TYPE

How to Use in IPNetwork Monitor

Example using etsysNacApplAuthenticationRequests OID:

Select an Enterasys NAC Gateway/Controller appliance as the target host to create a monitor — the SNMP service should be up and running on it. Click New Monitor, then check SNMP Custom on the Favorites tab, click Next, and confirm the host. On the next page, click Select... to open the built-in SNMP MIB Browser and type etsysNacApplAuthenticationRequests into the Find box to locate it in the OID tree, then select it and click OK. Represents the number of authentication requests made since the NAC was started. On the monitor's Main parameters page you can set the target's SNMP port (default 161), credentials, polling interval, and other settings — see the SNMP Monitor help for details. On the State conditions and Alerting tabs, configure when the monitor should change state and trigger an alert; since this is a Counter64-type OID, Value bounds is the most useful condition here — trigger an alert if the counter increases sharply between polls relative to its normal baseline, since an unexpected spike often reflects a real change in traffic or activity. Click Finish to create the monitor; you can adjust any parameter later.

OIDs

OID symbolic	OID numeric	Type	Access	Description
etsysNacApplianceMIB	1.3.6.1.4.1.5624.1.2.73			This MIB module defines a portion of the SNMP enterprise MIBs under Enterasys Networks' enterprise OID pertaining to NAC Appliance Status.
etsysNacApplianceObjects	1.3.6.1.4.1.5624.1.2.73.1
C64 etsysNacApplAuthenticationRequestsEx	1.3.6.1.4.1.5624.1.2.73.1.1	Counter64	read-only	Represents the number of authentication requests made since the NAC was started.
C64 etsysNacApplAuthenticationSuccesses	1.3.6.1.4.1.5624.1.2.73.1.2	Counter64	read-only	Represents the number of successful authentication requests made since the NAC was started.
C64 etsysNacApplAuthenticationFailures	1.3.6.1.4.1.5624.1.2.73.1.3	Counter64	read-only	Represents the number of failed authentication requests made since the NAC was started.
C64 etsysNacApplRadiusChallenges	1.3.6.1.4.1.5624.1.2.73.1.4	Counter64	read-only	Represents the number of Radius challenges made since the NAC was started.
C64 etsysNacApplAuthenticationInvalidRequests	1.3.6.1.4.1.5624.1.2.73.1.5	Counter64	read-only	Represents the number of invalid authentication requests made since the NAC was started.
C64 etsysNacApplAuthenticationDuplicateRequests	1.3.6.1.4.1.5624.1.2.73.1.6	Counter64	read-only	Represents the number of duplicate authentication requests made since the NAC was started.
C64 etsysNacApplAuthenticationMalformedRequests	1.3.6.1.4.1.5624.1.2.73.1.7	Counter64	read-only	Represents the number of malformed authentication requests made since the NAC was started.
C64 etsysNacApplAuthenticationBadRequests	1.3.6.1.4.1.5624.1.2.73.1.8	Counter64	read-only	Represents the number of bad authentication requests made since the NAC was started.
C64 etsysNacApplAuthenticationDroppedPackets	1.3.6.1.4.1.5624.1.2.73.1.9	Counter64	read-only	Represents the number of dropped authentication packets since the NAC was started.
C64 etsysNacApplAuthenticationUnknownTypes	1.3.6.1.4.1.5624.1.2.73.1.10	Counter64	read-only	Represents the number of unknown authentication types since the NAC was started.
C64 etsysNacApplAssessmentRequests	1.3.6.1.4.1.5624.1.2.73.1.11	Counter64	read-only	Represents the number of assessment requests made since the NAC was started.
C64 etsysNacApplCaptivePortalRequests	1.3.6.1.4.1.5624.1.2.73.1.12	Counter64	read-only	Represents the number of captive portal requests made since the NAC was started.
C64 etsysNacApplContactLostSwitches	1.3.6.1.4.1.5624.1.2.73.1.13	Counter64	read-only	Represents the number of configured switches with which the NAC has lost SNMP contact.
C64 etsysNacApplIPResolutionFailures	1.3.6.1.4.1.5624.1.2.73.1.14	Counter64	read-only	Represents the number of failed IP Resolution attempts made since the NAC was started.
C64 etsysNacApplIPResolutionTimeouts	1.3.6.1.4.1.5624.1.2.73.1.15	Counter64	read-only	Represents the number of IP Resolution attempts that timed out since the NAC was started.
C64 etsysNacApplConnectedAgents	1.3.6.1.4.1.5624.1.2.73.1.16	Counter64	read-only	Represents the number of End-System Assessment Agents currently connected to the NAC.
etsysNacApplianceMIBConformance	1.3.6.1.4.1.5624.1.2.73.2
etsysNacApplianceMIBGroups	1.3.6.1.4.1.5624.1.2.73.2.1
etsysNacApplianceMIBGroup	1.3.6.1.4.1.5624.1.2.73.2.1.1			The basic collection of objects providing status information about the NAC Appliance.
etsysNacApplianceMIBCompliances	1.3.6.1.4.1.5624.1.2.73.2.2
etsysNacApplianceMIBCompliance	1.3.6.1.4.1.5624.1.2.73.2.2.1			The compliance statement for clients implementing the NAC Appliance Status MIB.

RFC description

Enterasys NAC Appliance status monitoring including authentication requests, successes, and policy enforcement statistics.

Start monitoring Enterasys NAC Gateway/Controller appliance with a free 30-day trial of IPNetwork Monitor. Import MIBs, browse SNMP OIDs, create custom SNMP monitors, configure alerts, and monitor any SNMP-enabled network device from a single console.

Download ENTERASYS-NAC-APPLIANCE-MIB