EdgeSwitch-RADIUS-AUTH-CLIENT-MIB

All MIBs › EdgeSwitch-RADIUS-AUTH-CLIENT-MIB

Organization: Broadcom Inc

Last Updated: 2014-04-21

Category: Protocol: RADIUS, RADIUS and AAA, Vendor: EdgeSwitch/Ubiquiti

Description: Ubiquiti EdgeSwitch RADIUS authentication client MIB for managing RADIUS server settings and authentication statistics.

Start monitoring vendor-neutral, standards-based MIB, any SNMPv3-capable network device (SNMP engine identity/boot/clock status) with a free 30-day trial of IPNetwork Monitor. Import MIBs, browse SNMP OIDs, create custom SNMP monitors, configure alerts, and monitor any SNMP-enabled network device from a single console.

What Is EdgeSwitch-RADIUS-AUTH-CLIENT-MIB?

The EdgeSwitch-RADIUS-AUTH-CLIENT-MIB is a Ubiquiti Networks private MIB, built on the Broadcom FastPath switch software base, that manages the RADIUS authentication client used by EdgeSwitch managed switches. It exposes configuration objects for RADIUS server addresses, ports, shared secrets, timeouts and retry counts, alongside runtime statistics on authentication requests, accepts, rejects and timeouts. It is primarily used to monitor the software-level health of the switch's authentication service — whether RADIUS requests are succeeding, being retried, or timing out — which is a key indicator of a malfunctioning or unreachable authentication server rather than of switch hardware. As a RADIUS client MIB it closely parallels the IETF RADIUS-AUTH-CLIENT-MIB (RFC 4668) structure, and it depends on that standard framework for its statistics naming conventions. It is deployed on EdgeSwitch access and aggregation switches that authenticate administrative logins or 802.1X port access against a centralized RADIUS server, where EdgeSwitch-RADIUS-AUTH-CLIENT-MIB SNMP monitoring reveals whether authentication requests are succeeding or timing out.

IPNetwork Monitor allows you to monitor SNMP objects defined in EdgeSwitch-RADIUS-AUTH-CLIENT-MIB. Use the built-in SNMP Monitoring Browser to explore available variables, view their current values and descriptions, and select the objects you want to monitor. You can then create SNMP monitors, configure thresholds, and receive alerts when monitored values change.

Supported Devices

Ubiquiti EdgeSwitch managed switches

Monitoring Examples

An administrator would poll counters analogous to radiusAuthClientAccessRequests, radiusAuthClientAccessAccepts, and radiusAuthClientAccessRejects to confirm that login attempts are being processed correctly by the configured RADIUS server. A rising radiusAuthClientAccessTimeouts (or equivalent retransmission counter) alongside a static accept count would indicate the RADIUS server is unreachable or overloaded, prompting a check of network connectivity or server load rather than the switch itself. No hardware sensor objects are present in this module — sample objects were not available for this MIB, so this example follows the standard RADIUS client MIB pattern this module is modeled on.

What Can Be Monitored

RADIUS authentication requests/accepts/rejects
RADIUS server reachability and timeouts
authentication retry counts
configured RADIUS server address/port/timeout settings

Imported Objects

From EdgeSwitch-REF-MIB

fastPath

OBJECT-IDENTITY

From IF-MIB

InterfaceIndexOrZero

From INET-ADDRESS-MIB

InetAddress
InetAddressType

From RFC1213-MIB

DisplayString

From SNMPv2-SMI

Counter32
Integer32
IpAddress
MODULE-IDENTITY
NOTIFICATION-TYPE
OBJECT-TYPE
Unsigned32

From SNMPv2-TC

RowStatus

OIDs

OID symbolic	OID numeric	Type	Access	Description
fastPathRadius	1.3.6.1.4.1.4413.1.1.8			The Ubiquiti Private MIB for FastPath Radius Authentication Client
agentRadiusConfigGroup	1.3.6.1.4.1.4413.1.1.8.1
U32 agentRadiusMaxTransmit	1.3.6.1.4.1.4413.1.1.8.1.1	Unsigned32	read-write	Maximum number of retransmissions of a RADIUS request packet
U32 agentRadiusTimeout	1.3.6.1.4.1.4413.1.1.8.1.2	Unsigned32	read-write	Time out duration (in seconds) before packets are retransmitted
INT agentRadiusAccountingMode	1.3.6.1.4.1.4413.1.1.8.1.3	INTEGER	read-write	Identifies if RADIUS Accounting has been enabled or not
INT agentRadiusStatsClear	1.3.6.1.4.1.4413.1.1.8.1.4	INTEGER	read-write	When set to enable(1), all Radius statistics will be reset.
I32 agentRadiusAccountingIndexNextValid	1.3.6.1.4.1.4413.1.1.8.1.5	Integer32	read-only	Indicates the next valid index into the agentRadiusAccountingConfigTable for creation. If no additional entries are allowed, this will be 0.
agentRadiusAccountingConfigTable	1.3.6.1.4.1.4413.1.1.8.1.6		not-accessible	Table with information about Radius Accounting Server IP Addresses, port numbers and shared secret. Only one entry is supported at this time.
agentRadiusAccountingConfigEntry	1.3.6.1.4.1.4413.1.1.8.1.6.1		not-accessible	Entry consisting of configuration data for a Radius Accounting Server.
I32 agentRadiusAccountingServerIndex	1.3.6.1.4.1.4413.1.1.8.1.6.1.1	Integer32	not-accessible	Unique index of the configured RADIUS accounting server. The next valid value of this object for creation is specified by agentRadiusAccountingIndexNextValid.
IP agentRadiusAccountingServerAddress	1.3.6.1.4.1.4413.1.1.8.1.6.1.2	InetAddress	read-create	IP Address of the configured RADIUS accounting server. This object cannot be changed after creation.
IPt agentRadiusAccountingServerAddressType	1.3.6.1.4.1.4413.1.1.8.1.6.1.3	InetAddressType	read-create	IP Address Type of the configured RADIUS accounting server. This object cannot be changed after creation.
U32 agentRadiusAccountingPort	1.3.6.1.4.1.4413.1.1.8.1.6.1.4	Unsigned32	read-write	Port number for the RADIUS accounting server.
STR agentRadiusAccountingSecret	1.3.6.1.4.1.4413.1.1.8.1.6.1.5	DisplayString	read-write	Configured shared sercret for the RADIUS accounting server.
ROW agentRadiusAccountingStatus	1.3.6.1.4.1.4413.1.1.8.1.6.1.6	RowStatus	read-create	Creates or destroys a RADIUS accounting server entry. During creation, the next available index is specified by the agentRadiusAccountingIndexNextValid object. Rows creation using a different value for agentRadiusAccountingServerIndex will fail. active(1) - This entry is active. createAndGo(4) - Creates a new entry. destroy(6) - Deletes an entry.
STR agentRadiusAccountingServerName	1.3.6.1.4.1.4413.1.1.8.1.6.1.7	DisplayString	read-create	Configured identification name for the RADIUS Accounting server.
I32 agentRadiusServerIndexNextValid	1.3.6.1.4.1.4413.1.1.8.1.7	Integer32	read-only	Indicates the next valid index into the agentRadiusServerConfigTable for creation. If no additional entries are allowed, this will be 0.
agentRadiusServerConfigTable	1.3.6.1.4.1.4413.1.1.8.1.8		not-accessible	Table with information about Radius Authentication Server IP Addresses, port numbers and shared secret
agentRadiusServerConfigEntry	1.3.6.1.4.1.4413.1.1.8.1.8.1		not-accessible	Entry consisting of configuration data for a Radius Authentication Server.
I32 agentRadiusServerIndex	1.3.6.1.4.1.4413.1.1.8.1.8.1.1	Integer32	not-accessible	Unique index of the configured RADIUS server
IP agentRadiusServerAddress	1.3.6.1.4.1.4413.1.1.8.1.8.1.2	InetAddress	read-create	IP Address of the configured RADIUS server. This object cannot be changed after creation.
IPt agentRadiusServerAddressType	1.3.6.1.4.1.4413.1.1.8.1.8.1.3	InetAddressType	read-create	IP Address Type of the configured RADIUS server. This object cannot be changed after creation.
U32 agentRadiusServerPort	1.3.6.1.4.1.4413.1.1.8.1.8.1.4	Unsigned32	read-write	Port number for the RADIUS server.
STR agentRadiusServerSecret	1.3.6.1.4.1.4413.1.1.8.1.8.1.5	DisplayString	read-write	Configured shared sercret for the RADIUS server.
INT agentRadiusServerPrimaryMode	1.3.6.1.4.1.4413.1.1.8.1.8.1.6	INTEGER	read-write	Configure the RADIUS server to be the primary server. If there is any other server that is configured to be primary, that server is set to be a seconday server and this entry is set Primary.
INT agentRadiusServerCurrentMode	1.3.6.1.4.1.4413.1.1.8.1.8.1.7	INTEGER	read-only	Indicate if the RADIUS server is the current server in user for authentication.
INT agentRadiusServerMsgAuth	1.3.6.1.4.1.4413.1.1.8.1.8.1.8	INTEGER	read-write	Enable or disable the message authenticator attribute for this RADIUS server.
ROW agentRadiusServerRowStatus	1.3.6.1.4.1.4413.1.1.8.1.8.1.9	RowStatus	read-create	Creates or destroys a RADIUS Authentication server entry. During creation, the next available index is specified by the agentRadiusServerIndexNextValid object. Rows creation using a different value for agentRadiusServerIndex will fail. active(1) - This entry is active. createAndGo(4) - Creates a new entry. destroy(6) - Deletes an entry.
STR agentRadiusServerName	1.3.6.1.4.1.4413.1.1.8.1.8.1.10	DisplayString	read-create	Configured identification name for the RADIUS server.
IP agentRadiusServerInetAddress	1.3.6.1.4.1.4413.1.1.8.1.8.1.11	InetAddress	read-create	IP Address of the configured RADIUS server. This object cannot be changed after creation.
U32 agentRadiusServerTimeout	1.3.6.1.4.1.4413.1.1.8.1.8.1.12	Unsigned32	read-write	Time out duration (in seconds) before packets are retransmitted
U32 agentRadiusServerRetransmit	1.3.6.1.4.1.4413.1.1.8.1.8.1.13	Unsigned32	read-write	Maximum number of retransmissions of a RADIUS request packet
U32 agentRadiusServerDeadtime	1.3.6.1.4.1.4413.1.1.8.1.8.1.14	Unsigned32	read-write	Length of time (in minutes) for which a RADIUS server is skipped over by transaction requests.
IP agentRadiusServerSourceIPAddr	1.3.6.1.4.1.4413.1.1.8.1.8.1.15	IpAddress	read-write	Source IP address that will be used for the communication with RADIUS servers.
U32 agentRadiusServerPriority	1.3.6.1.4.1.4413.1.1.8.1.8.1.16	Unsigned32	read-write	Priority specifies the order in which the servers will be used, where 0 is the highest priority in radius server config mode.
INT agentRadiusServerUsageType	1.3.6.1.4.1.4413.1.1.8.1.8.1.17	INTEGER	read-write	Specify the usage type of the server.
U32 agentRadiusAuthenticationServers	1.3.6.1.4.1.4413.1.1.8.1.9	Unsigned32	read-only	Number of RADIUS Authentication Servers that have been configured.
U32 agentRadiusAccountingServers	1.3.6.1.4.1.4413.1.1.8.1.10	Unsigned32	read-only	Number of RADIUS Accounting Servers that have been configured.
U32 agentRadiusNamedAuthenticationServerGroups	1.3.6.1.4.1.4413.1.1.8.1.11	Unsigned32	read-only	Number of configured RADIUS named Authentication Server groups.
U32 agentRadiusNamedAccountingServerGroups	1.3.6.1.4.1.4413.1.1.8.1.12	Unsigned32	read-only	Number of configured RADIUS named Accounting Server groups.
U32 agentRadiusDeadTime	1.3.6.1.4.1.4413.1.1.8.1.13	Unsigned32	read-write	Length of time (in minutes) for which a RADIUS server is skipped over by transaction requests.
STR agentRadiusServerKey	1.3.6.1.4.1.4413.1.1.8.1.14	DisplayString	read-write	RADIUS Server key specifies the authentication and encryption key for all RADIUS communications between the switch and the RADIUS server. This key must match the encryption used on the RADIUS daemon.
IP agentRadiusSourceIPAddr	1.3.6.1.4.1.4413.1.1.8.1.15	IpAddress	read-write	Source IP address that will be used for the communication with RADIUS servers.
IP agentRadiusNasIpAddress	1.3.6.1.4.1.4413.1.1.8.1.16	IpAddress	read-write	Used to set the NAS-IP address for the radius server.
INT agentAuthorizationNetworkRadiusMode	1.3.6.1.4.1.4413.1.1.8.1.17	INTEGER	read-write	Used to enable/disable Vlan assignment mode.
NUM agentRadiusSourceInterface	1.3.6.1.4.1.4413.1.1.8.1.18	InterfaceIndexOrZero	read-write	A source-interface selection on an Interface Index (like vlan based routing interface, port based routing interface, loopback interface). A non-zero value indicates ifIndex for the corresponding interface entry in the ifTable is selected. A zero value indicates the source-interface un-selection.

RFC description

EdgeSwitch vendor MIB for RADIUS authentication client configuration and monitoring on Ubiquiti EdgeSwitch managed switching platforms.

Start monitoring Ubiquiti EdgeSwitch (Broadcom FastPath-based) switch (RADIUS authentication client) with a free 30-day trial of IPNetwork Monitor. Import MIBs, browse SNMP OIDs, create custom SNMP monitors, configure alerts, and monitor any SNMP-enabled network device from a single console.

Download EdgeSwitch-RADIUS-AUTH-CLIENT-MIB

What Is EdgeSwitch-RADIUS-AUTH-CLIENT-MIB?

Supported Devices

Monitoring Examples

What Can Be Monitored

This MIB depends on

Related MIBs

RFC description