ERICSSON-ROUTER-RADIUS-MIB

All MIBs › ERICSSON-ROUTER-RADIUS-MIB

Organization: Ericsson AB.

Last Updated: 2015-01-14

Category: Protocol: RADIUS, Vendor: Ericsson

Description: Monitors RADIUS authentication and accounting client statistics and server reachability on Ericsson routers.

Start monitoring vendor-neutral, standards-based MIB, any SNMPv3-capable network device (SNMP engine identity/boot/clock status) with a free 30-day trial of IPNetwork Monitor. Import MIBs, browse SNMP OIDs, create custom SNMP monitors, configure alerts, and monitor any SNMP-enabled network device from a single console.

What Is ERICSSON-ROUTER-RADIUS-MIB?

This is an Ericsson enterprise MIB for SmartEdge/SM/SSR routers that supplements the standard RADIUS-AUTH-CLIENT-MIB (RFC 2618) and RADIUS-ACC-CLIENT-MIB (RFC 2620) with vendor-specific objects for RADIUS server management. It exposes configuration parameters (timeouts, retry counts, deadtime, domain stripping) and per-server operational state for both authentication and accounting servers used by the router's AAA subsystem. Its monitoring emphasis is software/service health rather than raw hardware — server reachability state, last-change timestamps, and send-error counters reveal whether RADIUS authentication or accounting is silently failing before it impacts subscriber logins. It explicitly depends on and extends the standard IETF RADIUS-AUTH-CLIENT-MIB and RADIUS-ACC-CLIENT-MIB. It is deployed on Ericsson broadband/edge routers that authenticate and account for subscriber sessions via RADIUS, and network engineers can download the ERICSSON-ROUTER-RADIUS-MIB file to load it into their MIB browser for configuration reference.

IPNetwork Monitor allows you to monitor SNMP objects defined in ERICSSON-ROUTER-RADIUS-MIB. Use the built-in SNMP Monitoring Browser to explore available variables, view their current values and descriptions, and select the objects you want to monitor. You can then create SNMP monitors, configure thresholds, and receive alerts when monitored values change.

Supported Devices

Ericsson SmartEdge (MSER) router
Ericsson Smart Service Router (SSR)
Ericsson SM Metro Ethernet platform

Monitoring Examples

The eriRouterRadiusAuthSrvTable/eriRouterRadiusAuthSrvEntry expose per-server eriRouterRadiusAuthSrvState, eriRouterRadiusAuthSrvLastChange, and eriRouterRadiusAuthSrvSendErrors, alongside scalar timers like eriRouterRadiusAuthPktTimeout, eriRouterRadiusAuthSrvTimeout, and eriRouterRadiusAuthDeadtime. An operator polling eriRouterRadiusAuthSrvState would notice a server flip to a dead/unreachable state combined with rising eriRouterRadiusAuthSrvSendErrors, indicating subscriber authentication requests are failing over to a backup RADIUS server.

What Can Be Monitored

RADIUS auth server reachability state
RADIUS server timeout and deadtime settings
RADIUS server send-error counts
accounting packet timeout
auth server last-change timestamp

Imported Objects

From ERICSSON-ROUTER-SMI

eriRouterMgmt

OBJECT-IDENTITY

From RADIUS-ACC-CLIENT-MIB

radiusAccClientServerPortNumber	OBJECT-TYPE
radiusAccServerAddress	OBJECT-TYPE
radiusAccServerEntry	OBJECT-TYPE

From RADIUS-AUTH-CLIENT-MIB

radiusAuthClientServerPortNumber	OBJECT-TYPE
radiusAuthServerAddress	OBJECT-TYPE
radiusAuthServerEntry	OBJECT-TYPE

From SNMP-FRAMEWORK-MIB

SnmpAdminString

From SNMPv2-CONF

MODULE-COMPLIANCE
NOTIFICATION-GROUP
OBJECT-GROUP

From SNMPv2-SMI

Counter32
MODULE-IDENTITY
NOTIFICATION-TYPE
OBJECT-TYPE
Unsigned32

From SNMPv2-TC

TEXTUAL-CONVENTION
TimeStamp
TruthValue

How to Use in IPNetwork Monitor

Example using eriRouterRadiusAuthSrvSendErrors OID:

Select an Ericsson SmartEdge/SM/SSR broadband/edge router (Redback Networks heritage) (RADIUS auth/accounting server extensions) as the target host to create a monitor — the SNMP service should be up and running on it. Click New Monitor, then check SNMP Custom on the Favorites tab, click Next, and confirm the host. On the next page, click Select... to open the built-in SNMP MIB Browser and type eriRouterRadiusAuthSrvSendErrors into the Find box to locate it in the OID tree, selecting the specific row/instance you want to monitor since this is a table column, then select it and click OK. The number of packets destined to this RADIUS server which could not be transmitted due to an error. On the monitor's Main parameters page you can set the target's SNMP port (default 161), credentials, polling interval, and other settings — see the SNMP Monitor help for details. On the State conditions and Alerting tabs, configure when the monitor should change state and trigger an alert; since this is a Counter32-type OID, Value bounds is the most useful condition here — trigger an alert if the counter increases between polls, since a rising count of errors, failures, or discards often points to a real underlying problem. Click Finish to create the monitor; you can adjust any parameter later.

OIDs

OID symbolic	OID numeric	Type	Access	Description
eriRouterRadiusMib	1.3.6.1.4.1.193.218.2.32			This enterprise MIB supplements the standard Remote Access Dialin User Service (RADIUS) MIBs, namely: RADIUS-AUTH-CLIENT-MIB (RFC 2618) RADIUS-ACC-CLIENT-MIB (RFC 2620) This module defines additional objects and notifications for managing the RADIUS authentication and accounting servers in use by the enterprise system. All mib objects defined in this module are viewed within the context identified in the SNMP protocol (i.e. the community string in v1/v2c or the contextName in v3).
eriRouterRadiusMIBNotifications	1.3.6.1.4.1.193.218.2.32.0
NTF eriRouterRadiusAuthStateChange	1.3.6.1.4.1.193.218.2.32.0.1			This notification signifies that a RADIUS authorization server has transitioned to 'up' or 'down'. Note: if eriRouterRadiusAuthSrvState's value is 'down' and eriRouterRadiusReason's value is 'packetTimeout', then eriRouterRadiusUsername's value will be a username. For all other cases, eriRouterRadiusUsername's value will be a zero-length string.
NTF eriRouterRadiusAcctStateChange	1.3.6.1.4.1.193.218.2.32.0.2			This notification signifies that a RADIUS accounting server has transitioned to 'up' or 'down'. Note: if eriRouterRadiusAcctSrvState's value is 'down' and eriRouterRadiusReason's value is 'packetTimeout', then eriRouterRadiusUsername's value will be a username. For all other cases, eriRouterRadiusUsername's value will be a zero-length string.
eriRouterRadiusMIBObjects	1.3.6.1.4.1.193.218.2.32.1
eriRouterRadiusAuthObjects	1.3.6.1.4.1.193.218.2.32.1.1
U32 eriRouterRadiusAuthPktTimeout	1.3.6.1.4.1.193.218.2.32.1.1.1	Unsigned32	read-write	The maximum amount of time to wait for a response from a RADIUS authorization server before assuming the packet was lost. The SNMP set command is not supported for this MIB attribute.
U32 eriRouterRadiusAuthSrvTimeout	1.3.6.1.4.1.193.218.2.32.1.1.2	Unsigned32	read-write	The maximum amount of time to wait for any response from a RADIUS authorization server before assuming the server is unreachable. A value of '0' indicates that there is no timeout value. In this case a server is considered to be unreachable when no response is received within the eriRouterRadiusAuthPktTimeout window. The SNMP set command is not supported for this MIB attribute.
U32 eriRouterRadiusAuthDeadtime	1.3.6.1.4.1.193.218.2.32.1.1.3	Unsigned32	read-write	After a RADIUS authorization server has been transitioned to 'down' it will be assumed to be unreachable for this interval. After that point the system may start sending requests to the server again. A value of '0' indicates the system may start sending requests to the server immediately. The SNMP set command is not supported for this MIB attribute.
U32 eriRouterRadiusAuthTries	1.3.6.1.4.1.193.218.2.32.1.1.4	Unsigned32	read-write	The number of times the system will attempt to transmit an authorization request to a RADIUS server. If multiple RADIUS authorization servers have been configured retransmissions will cycle through the other servers before being retransmitted to the server that originally failed to respond. The SNMP set command is not supported for this MIB attribute.
eriRouterRadiusAuthSrvTable	1.3.6.1.4.1.193.218.2.32.1.1.5		not-accessible	This table augments the radiusAuthServerTable. All entries that exist in that table will have a corresponding entry in this table.
eriRouterRadiusAuthSrvEntry	1.3.6.1.4.1.193.218.2.32.1.1.5.1		not-accessible	A proprietary extension to the radiusAuthServerEntry.
ERI eriRouterRadiusAuthSrvState	1.3.6.1.4.1.193.218.2.32.1.1.5.1.1	EriRouterRadiusServerState	read-only	The current state of the RADIUS server.
TIM eriRouterRadiusAuthSrvLastChange	1.3.6.1.4.1.193.218.2.32.1.1.5.1.2	TimeStamp	read-only	The value of sysUpTime when this server last changed state. If eriRouterRadiusAuthSrvState is 'unknown' this is effectively the value of sysUpTime when this server was initially configured.
TIM eriRouterRadiusAuthSrvCounterResetTime	1.3.6.1.4.1.193.218.2.32.1.1.5.1.3	TimeStamp	read-only	The value of sysUpTime on the most recent occasion when any of the counters for this RADIUS server experienced a discontinuity. Note: this includes counters in this table as well as those in radiusAuthServerTable.
C32 eriRouterRadiusAuthSrvSendErrorsEx	1.3.6.1.4.1.193.218.2.32.1.1.5.1.4	Counter32	read-only	The number of packets destined to this RADIUS server which could not be transmitted due to an error. Discontinuities in the value of this counter are indicated by the value of eriRouterRadiusAuthSrvCounterResetTime.
T/F eriRouterRadiusAuthStripDomain	1.3.6.1.4.1.193.218.2.32.1.1.6	TruthValue	read-write	If this object is false, the entire username, including the domain name is sent to the RADIUS server. If true, the domain portion of a structured username is stripped before relaying a request to a RADIUS server. The SNMP set command is not supported for this MIB attribute.
eriRouterRadiusAcctObjects	1.3.6.1.4.1.193.218.2.32.1.2
U32 eriRouterRadiusAcctPktTimeout	1.3.6.1.4.1.193.218.2.32.1.2.1	Unsigned32	read-write	The maximum amount of time to wait for a response from a RADIUS accounting server before assuming the packet was lost. Note: if the system is using a RADIUS server for both authorization and accounting, this object's value will be ignored for that server. Instead the eriRouterRadiusAuthPktTimeout value will be used for all requests going to that server. The SNMP set command is not supported for this MIB attribute.
U32 eriRouterRadiusAcctSrvTimeout	1.3.6.1.4.1.193.218.2.32.1.2.2	Unsigned32	read-write	The maximum amount of time to wait for any response from a RADIUS accounting server before assuming the server is unreachable. A value of '0' indicates that there is no timeout value. In this case a server is considered to be unreachable when no response is received within the eriRouterRadiusAcctPktTimeout window. Note: if the system is using a RADIUS server for both authorization and accounting, this object's value will be ignored for that server. Instead the eriRouterRadiusAuthSrvTimeout value will be used for that server. The SNMP set command is not supported for this MIB attribute.
U32 eriRouterRadiusAcctDeadtime	1.3.6.1.4.1.193.218.2.32.1.2.3	Unsigned32	read-write	After a RADIUS accounting server has been transitioned to 'down' it will be assumed to be unreachable for this interval. After that point the system may start sending accounting records to the server again. A value of '0' indicates the system may start sending records to the server immediately. Note: if the system is using a RADIUS server for both authorization and accounting, this object's value will be ignored for that server. Instead the eriRouterRadiusAuthDeadtime value will be used for that server. The SNMP set command is not supported for this MIB attribute.
U32 eriRouterRadiusAcctTries	1.3.6.1.4.1.193.218.2.32.1.2.4	Unsigned32	read-write	The number of times the system will attempt to transmit an accounting record to a RADIUS server. If multiple RADIUS accounting servers have been configured retransmissions will cycle through the other servers before being retransmitted to the server that originally failed to respond. Note: if the system is using a RADIUS server for both authorization and accounting, this object's value will be ignored for that server. Instead the eriRouterRadiusAuthTries value will be used for that server. The SNMP set command is not supported for this MIB attribute.
eriRouterRadiusAcctSrvTable	1.3.6.1.4.1.193.218.2.32.1.2.5		not-accessible	This table augments the radiusAccServerTable. All entries that exist in that table will have a corresponding entry in this table.
eriRouterRadiusAcctSrvEntry	1.3.6.1.4.1.193.218.2.32.1.2.5.1		not-accessible	A proprietary extension to the radiusAccServerEntry.
ERI eriRouterRadiusAcctSrvState	1.3.6.1.4.1.193.218.2.32.1.2.5.1.1	EriRouterRadiusServerState	read-only	The current state of the RADIUS server.
TIM eriRouterRadiusAcctSrvLastChange	1.3.6.1.4.1.193.218.2.32.1.2.5.1.2	TimeStamp	read-only	The value of sysUpTime when this server last changed state. If eriRouterRadiusAcctSrvState is 'unknown' this is effectively the value of sysUpTime when this server was initially configured.
TIM eriRouterRadiusAcctSrvCounterResetTime	1.3.6.1.4.1.193.218.2.32.1.2.5.1.3	TimeStamp	read-only	The value of sysUpTime on the most recent occasion when any of the counters for this RADIUS server experienced a discontinuity. Note: this includes counters in this table as well as those in radiusAccServerTable.
C32 eriRouterRadiusAcctSrvSendErrors	1.3.6.1.4.1.193.218.2.32.1.2.5.1.4	Counter32	read-only	The number of packets destined to this RADIUS server which could not be transmitted due to an error. Discontinuities in the value of this counter are indicated by the value of eriRouterRadiusAcctSrvCounterResetTime.
T/F eriRouterRadiusAcctStripDomain	1.3.6.1.4.1.193.218.2.32.1.2.6	TruthValue	read-write	If this object is false, the entire username, including the domain name is sent to the RADIUS server. If true, the domain portion of a structured username is stripped before relaying a request to a RADIUS server. The SNMP set command is not supported for this MIB attribute.
eriRouterRadiusNotifyObjects	1.3.6.1.4.1.193.218.2.32.1.3
U32 eriRouterRadiusClientPort	1.3.6.1.4.1.193.218.2.32.1.3.1	Unsigned32	accessible-for-notify	A system may be configured to use a range of source TCP/IP ports when sending requests to a RADIUS server. When a server transitions to 'up' or 'down' and a state-change notification is generated, an instance of this object is included to indicate which source port was being used when the server changed state.
STR eriRouterRadiusContext	1.3.6.1.4.1.193.218.2.32.1.3.2	SnmpAdminString	accessible-for-notify	The name of the context in which this server is configured.
ERI eriRouterRadiusReason	1.3.6.1.4.1.193.218.2.32.1.3.3	EriRouterRadiusServerReason	accessible-for-notify	The reason for the server's last state change.
STR eriRouterRadiusUsername	1.3.6.1.4.1.193.218.2.32.1.3.4	SnmpAdminString	accessible-for-notify	The name of the user the system was trying to authenticate or send accouting information for when the RADIUS server transitioned to 'down'. Note: the 'username' is only valid when transitioning due to a packet-level timeout. When transitioning due to any other reason the value for this object will be a zero-length string.
eriRouterRadiusMIBConformance	1.3.6.1.4.1.193.218.2.32.2
eriRouterRadiusCompliances	1.3.6.1.4.1.193.218.2.32.2.1
eriRouterRadiusCompliance	1.3.6.1.4.1.193.218.2.32.2.1.1			The compliance statement for SNMP entities which implement this MIB.
eriRouterRadiusCompliance2	1.3.6.1.4.1.193.218.2.32.2.1.2			The compliance statement for SNMP entities which implement this MIB.
eriRouterRadiusGroups	1.3.6.1.4.1.193.218.2.32.2.2
eriRouterRadiusAuthGroup	1.3.6.1.4.1.193.218.2.32.2.2.1			The collection of objects used to manage RADIUS authentication servers.
eriRouterRadiusAcctGroup	1.3.6.1.4.1.193.218.2.32.2.2.2			The collection of objects used to manage RADIUS accounting servers.
eriRouterRadiusNotifyGroup	1.3.6.1.4.1.193.218.2.32.2.2.3			The collection of objects used only in notifications.
eriRouterRadiusAuthNotifyGroup	1.3.6.1.4.1.193.218.2.32.2.2.4			Notification for tracking the status of RADIUS authentication servers.
eriRouterRadiusAcctNotifyGroup	1.3.6.1.4.1.193.218.2.32.2.2.5			Notification for tracking the status of RADIUS accounting servers.
eriRouterRadiusAuthGroup2	1.3.6.1.4.1.193.218.2.32.2.2.6			The collection of objects used to manage RADIUS authentication servers.
eriRouterRadiusAcctGroup2	1.3.6.1.4.1.193.218.2.32.2.2.7			The collection of objects used to manage RADIUS accounting servers.

RFC description

Supplements standard RADIUS MIBs with enterprise-specific RADIUS server management and notification objects.

Start monitoring Ericsson SmartEdge/SM/SSR broadband/edge router (Redback Networks heritage) (RADIUS auth/accounting server extensions) with a free 30-day trial of IPNetwork Monitor. Import MIBs, browse SNMP OIDs, create custom SNMP monitors, configure alerts, and monitor any SNMP-enabled network device from a single console.

Download ERICSSON-ROUTER-RADIUS-MIB