FDRY-TACACS-MIB

All MIBs › FDRY-TACACS-MIB

Organization: Brocade Communications Systems, Inc.

Last Updated: 2010-06-02

Category: Protocol: TACACS, Vendor: Foundry/Brocade

Description: Foundry/Brocade FastIron MIB for TACACS+ server configuration and access control settings on FastIron switches.

Start monitoring vendor-neutral, standards-based MIB, any SNMPv3-capable network device (SNMP engine identity/boot/clock status) with a free 30-day trial of IPNetwork Monitor. Import MIBs, browse SNMP OIDs, create custom SNMP monitors, configure alerts, and monitor any SNMP-enabled network device from a single console.

What Is FDRY-TACACS-MIB?

FDRY-TACACS-MIB is a Brocade/Foundry proprietary MIB for FastIron switches covering TACACS+ authentication server configuration, combining IPv4 and IPv6 TACACS+ server settings into a unified table per its module description. It exposes configuration data under the fdryTacacsServer subtree, presumably server address, port, and priority settings for centralized AAA. This is primarily a configuration-status MIB rather than hardware health monitoring, though confirming reachable/configured TACACS+ servers is important for verifying the software/authentication service dependency the switch relies on for administrative login. It depends on the TACACS+ protocol, a widely adopted AAA mechanism, as the service being configured. It is deployed on Brocade/Foundry FastIron switches in environments using centralized TACACS+ AAA for device administration access control, and the FDRY-TACACS-MIB download is available for administrators to load into their MIB browser.

IPNetwork Monitor allows you to monitor SNMP objects defined in FDRY-TACACS-MIB. Use the built-in SNMP Monitoring Browser to explore available variables, view their current values and descriptions, and select the objects you want to monitor. You can then create SNMP monitors, configure thresholds, and receive alerts when monitored values change.

Supported Devices

Brocade/Foundry FastIron Ethernet switch

Monitoring Examples

An admin would poll under the fdryTacacsServer subtree to enumerate configured TACACS+ server entries (address, port, and priority), verifying that all expected authentication servers are present and correctly ordered. Only the top-level fdryTacacsServer object name was available in the source, so specific per-entry column names cannot be cited, but a realistic scenario would be confirming a newly added TACACS+ server appears in the table before removing an old one, to avoid an administrative authentication lockout.

What Can Be Monitored

configured TACACS+ server entries
TACACS+ server address/port/priority (inferred)

Imported Objects

From FDRY-RADIUS-MIB

ServerUsage

From FOUNDRY-SN-ROOT-MIB

fdryTacacs

OBJECT-IDENTITY

From INET-ADDRESS-MIB

InetAddress
InetAddressType

From SNMPv2-SMI

MODULE-IDENTITY
OBJECT-TYPE
Unsigned32

From SNMPv2-TC

DisplayString
RowStatus

OIDs

OID symbolic	OID numeric	Type	Access	Description
fdryTacacsMIB	1.3.6.1.4.1.1991.1.1.9.1			The Brocade proprietary MIB module for Tacacs Authentication Servers It has new table combines Ipv4 and Ipv6 Tacacs Authentication Servers configuration. Copyright 1996-2010 Brocade Communications Systems, Inc. All rights reserved. This Brocade Communications Systems SNMP Management Information Base Specification embodies Brocade Communications Systems' confidential and proprietary intellectual property. Brocade Communications Systems retains all title and ownership in the Specification, including any revisions. This Specification is supplied AS IS, and Brocade Communications Systems makes no warranty, either express or implied, as to the use, operation, condition, or performance of the specification, and any unintended consequence it may on the user environment.
fdryTacacsServer	1.3.6.1.4.1.1991.1.1.9.1.1
fdryTacacsServerTable	1.3.6.1.4.1.1991.1.1.9.1.1.1		not-accessible	Tacacs server table, listing the Tacacs authentication servers. This table is currently supported by FastIron platform.
fdryTacacsServerEntry	1.3.6.1.4.1.1991.1.1.9.1.1.1.1		not-accessible	An entry in the Tacacs server table. This table uses running index as the Index to the table. Reasons to go for running index Scheme than IP addresses: 1. The table will be Virtual Routing and Forwarding(VRF) independent that multiple VRFs could share the same address type and address. 2. Index with address type and address could be potentially 17 unsigned integer, parsing and finding next index takes CPU time. The PDU gets to be huge too! 3. IP address is just another attribute, they are supposed to be list of servers.
U32 fdryTacacsServerIndex	1.3.6.1.4.1.1991.1.1.9.1.1.1.1.1	Unsigned32	not-accessible	The index to the Tacacs server Table. FastIron platform supports upto 8 servers.
IPt fdryTacacsServerAddrType	1.3.6.1.4.1.1991.1.1.9.1.1.1.1.2	InetAddressType	read-create	Tacacs server IP address Type. FastIron supports address types of ipv4(1) and ipv6(2).
IP fdryTacacsServerAddr	1.3.6.1.4.1.1991.1.1.9.1.1.1.1.3	InetAddress	read-create	Tacacs server IP address.
U32 fdryTacacsServerAuthPort	1.3.6.1.4.1.1991.1.1.9.1.1.1.1.4	Unsigned32	read-create	Authentication UDP port number.
STR fdryTacacsServerRowKey	1.3.6.1.4.1.1991.1.1.9.1.1.1.1.5	DisplayString	read-create	Authentication key displayed as encrypted text. FastIron platform supports keysize upto 32 characters.
SER fdryTacacsServerUsage	1.3.6.1.4.1.1991.1.1.9.1.1.1.1.6	ServerUsage	read-create	To allow this server to be dedicated for a particular AAA activity.
ROW fdryTacacsServerRowStatus	1.3.6.1.4.1.1991.1.1.9.1.1.1.1.7	RowStatus	read-create	This variable is used to create, modify, or delete a row in this table. When a row in this table is in active(1) state, no objects in that row can be modified except this object.

RFC description

Brocade TACACS+ authentication server configuration MIB supporting IPv4 and IPv6 TACACS server management.

Start monitoring Brocade/Foundry FastIron switch (TACACS+ AAA config) with a free 30-day trial of IPNetwork Monitor. Import MIBs, browse SNMP OIDs, create custom SNMP monitors, configure alerts, and monitor any SNMP-enabled network device from a single console.

Download FDRY-TACACS-MIB

What Is FDRY-TACACS-MIB?

Supported Devices

Monitoring Examples

What Can Be Monitored

This MIB depends on

Related MIBs

RFC description