All MIBs › ERICSSON-ROUTER-TACACS-MIB
Organization: Ericsson AB.
Last Updated: 2015-01-14
Category: Protocol: TACACS, Vendor: Ericsson
Description: Monitors TACACS+ authentication, authorization, and accounting client statistics on Ericsson routers.
Start monitoring vendor-neutral, standards-based MIB, any SNMPv3-capable network device (SNMP engine identity/boot/clock status) with a free 30-day trial of IPNetwork Monitor. Import MIBs, browse SNMP OIDs, create custom SNMP monitors, configure alerts, and monitor any SNMP-enabled network device from a single console.
What Is ERICSSON-ROUTER-TACACS-MIB?
ERICSSON-ROUTER-TACACS-MIB is a vendor-specific module for Ericsson SmartEdge/SM/SSR routers that monitors the router's TACACS+ authentication, authorization, and accounting (AAA) client, tracking the state of each configured TACACS+ server. It exposes per-server configuration (address, port, index) alongside runtime state and diagnostic message fields, plus a notification for TACACS+ server state changes. From a hardware/software status perspective this is a software service-health MIB: it reports whether each TACACS+ AAA server is reachable/responsive from the router's control plane, which is essential to confirming that remote administrative login and accounting continue to function. It has an implicit dependency on the router's general authentication/AAA framework rather than another formal external MIB. It is typically deployed in enterprise and carrier networks where centralized TACACS+ servers authenticate CLI/SNMP administrative access to Ericsson routers, and the ERICSSON-ROUTER-TACACS-MIB MIB defines the objects used to monitor that authentication state.
IPNetwork Monitor allows you to monitor SNMP objects defined in ERICSSON-ROUTER-TACACS-MIB. Use the built-in SNMP Monitoring Browser to explore available variables, view their current values and descriptions, and select the objects you want to monitor. You can then create SNMP monitors, configure thresholds, and receive alerts when monitored values change.
Supported Devices
- Ericsson SmartEdge Multi-service Edge Router (MSER)
- Ericsson SM Metro Ethernet platform
- Ericsson Smart Service Router (SSR)
Monitoring Examples
An operator would poll eriRouterTacacsServerIndex, eriRouterTacacsServerAddress, and eriRouterTacacsServerState from the TACACS+ server list to see which authentication servers the router currently considers up or down, using eriRouterTacacsServerReason and eriRouterTacacsServerMsg for diagnostic detail on a failed server. A transition of eriRouterTacacsServerState to a down/unreachable value, especially paired with a notification under eriRouterTacacsMIBNotifications, would indicate that administrative logins authenticating against that TACACS+ server are at risk of failing. eriRouterTacacsUserName can be correlated with accounting events to audit which administrative user triggered a given AAA transaction.
What Can Be Monitored
- TACACS+ server reachability/state
- TACACS+ server address and port
- authentication failure reason
- TACACS+ server diagnostic messages
- authenticated username
- accounting events
Imported Objects
From ERICSSON-ROUTER-SMI
| eriRouterMgmt | OBJECT-IDENTITY |
From INET-ADDRESS-MIB
| InetAddress | |
| InetAddressType |
From SNMP-FRAMEWORK-MIB
| SnmpAdminString |
From SNMPv2-CONF
| MODULE-COMPLIANCE | |
| NOTIFICATION-GROUP | |
| OBJECT-GROUP |
From SNMPv2-SMI
| MODULE-IDENTITY | |
| NOTIFICATION-TYPE | |
| OBJECT-TYPE | |
| Unsigned32 |
From SNMPv2-TC
| TEXTUAL-CONVENTION |
OIDs
RFC description
TACACS+ server state and notifications for Ericsson routers.
Start monitoring Ericsson SmartEdge/SM/SSR router (Redback Networks heritage) (TACACS+ AAA client server state) with a free 30-day trial of IPNetwork Monitor. Import MIBs, browse SNMP OIDs, create custom SNMP monitors, configure alerts, and monitor any SNMP-enabled network device from a single console.