HUAWEI-TACACS-MIB

All MIBs › HUAWEI-TACACS-MIB

Category: Protocol: TACACS, RADIUS and AAA, Vendor: Huawei

Description: Huawei TACACS+ MIB for managing TACACS+ server groups, authentication parameters, and AAA accounting configuration.

Start monitoring vendor-neutral, standards-based MIB, any SNMPv3-capable network device (SNMP engine identity/boot/clock status) with a free 30-day trial of IPNetwork Monitor. Import MIBs, browse SNMP OIDs, create custom SNMP monitors, configure alerts, and monitor any SNMP-enabled network device from a single console.

What Is HUAWEI-TACACS-MIB?

HUAWEI-TACACS-MIB is a Huawei proprietary MIB configuring TACACS+ authentication/authorization/accounting server groups on Huawei devices. Its server-group table, keyed by group name, records the source IP used for TACACS+ requests, the shared secret key, response timer, associated domain, and separate priority indicators for authentication, authorization, and accounting server roles. As a configuration MIB it lets an administrator audit which TACACS+ server group and source IP a device is configured to use, and confirm the timer setting when diagnosing slow AAA responses. It is deployed on Huawei switches/routers using TACACS+ for centralized AAA. Engineers can download the HUAWEI-TACACS-MIB file directly to load it into their MIB browser.

IPNetwork Monitor allows you to monitor SNMP objects defined in HUAWEI-TACACS-MIB. Use the built-in SNMP Monitoring Browser to explore available variables, view their current values and descriptions, and select the objects you want to monitor. You can then create SNMP monitors, configure thresholds, and receive alerts when monitored values change.

Supported Devices

Huawei switches/routers (TACACS+ AAA)

Monitoring Examples

An administrator checks hwTACACSServerGroupTimer for a device reporting slow login prompts to confirm whether the configured TACACS+ response timeout is set too aggressively for the actual network latency to the AAA server.

What Can Be Monitored

TACACS+ server group configuration (source IP, timer, priorities)

Imported Objects

From HUAWEI-3COM-OID-MIB

huawei	OBJECT-IDENTITY
huaweiDatacomm	OBJECT-IDENTITY
huaweiMgmt	OBJECT-IDENTITY

From RFC-1212

OBJECT-TYPE

From RFC-1215

TRAP-TYPE

From RFC1213-MIB

DisplayString

From SNMPv2-SMI

Counter32
Gauge32
Integer32
IpAddress
NOTIFICATION-TYPE
Unsigned32

From SNMPv2-TC

RowStatus

How to Use in IPNetwork Monitor

Example using hwTACACSAuthenClientAccessReqPacket OID:

Select a Huawei switch or router using TACACS+ AAA as the target host to create a monitor — the SNMP service should be up and running on it. Click New Monitor, then check SNMP Custom on the Favorites tab, click Next, and confirm the host. On the next page, click Select... to open the built-in SNMP MIB Browser and type hwTACACSAuthenClientAccessReqPacket into the Find box to locate it in the OID tree, selecting the specific row/instance you want to monitor since this is a table column, then select it and click OK. It reports the request packets about authen server. On the monitor's Main parameters page you can set the target's SNMP port (default 161), credentials, polling interval, and other settings — see the SNMP Monitor help for details. On the State conditions and Alerting tabs, configure when the monitor should change state and trigger an alert; since this is a Counter32-type OID, Value bounds is the most useful condition here — trigger an alert if the counter increases sharply between polls relative to its normal baseline, since an unexpected spike often reflects a real change in traffic or activity. Click Finish to create the monitor; you can adjust any parameter later.

OIDs

OID symbolic	OID numeric	Type	Access	Description
hwTACACS	1.3.6.1.4.1.2011.5.25.20
C32 hwTACACSAccClientPacketsDropped	1.3.6.1.4.1.2011.5.25.20.1.2.1.62	Counter32	read-only	Drop packets about accounting server
C32 hwTACACSAccClientReqCommandLevel	1.3.6.1.4.1.2011.5.25.20.1.2.1.55	Counter32	read-only	Request command level packets about accounting server
C32 hwTACACSAccClientReqConnection	1.3.6.1.4.1.2011.5.25.20.1.2.1.52	Counter32	read-only	Request connection packets about accounting server
C32 hwTACACSAccClientReqEXEC	1.3.6.1.4.1.2011.5.25.20.1.2.1.53	Counter32	read-only	Request exec packets about accounting server
C32 hwTACACSAccClientReqNetwork	1.3.6.1.4.1.2011.5.25.20.1.2.1.51	Counter32	read-only	Request network packets about accounting server
C32 hwTACACSAccClientReqPacket	1.3.6.1.4.1.2011.5.25.20.1.2.1.50	Counter32	read-only	Request packets about accounting server
C32 hwTACACSAccClientReqPending	1.3.6.1.4.1.2011.5.25.20.1.2.1.59	Counter32	read-only	Request pending packets about accounting server
C32 hwTACACSAccClientReqSysEvent	1.3.6.1.4.1.2011.5.25.20.1.2.1.54	Counter32	read-only	Request system event packets about accounting server
C32 hwTACACSAccClientReqUpdate	1.3.6.1.4.1.2011.5.25.20.1.2.1.56	Counter32	read-only	Request update packets about accounting server
C32 hwTACACSAccClientResError	1.3.6.1.4.1.2011.5.25.20.1.2.1.58	Counter32	read-only	Response error packets about accounting server
C32 hwTACACSAccClientResPacket	1.3.6.1.4.1.2011.5.25.20.1.2.1.57	Counter32	read-only	Response packets about accounting server
I32 hwTACACSAccClientRoundTripTime	1.3.6.1.4.1.2011.5.25.20.1.2.1.49	Integer32	read-only	Round trip time about accounting server
C32 hwTACACSAccClientTimeouts	1.3.6.1.4.1.2011.5.25.20.1.2.1.60	Counter32	read-only	Time out packets about accounting server
C32 hwTACACSAccClientUnknownTypes	1.3.6.1.4.1.2011.5.25.20.1.2.1.61	Counter32	read-only	Unknown types packets about accounting server
C32 hwTACACSAuthenClientAccessConAbort	1.3.6.1.4.1.2011.5.25.20.1.2.1.26	Counter32	read-only	Connection abort packets about authen server
C32 hwTACACSAuthenClientAccessConPack	1.3.6.1.4.1.2011.5.25.20.1.2.1.25	Counter32	read-only	Connection packets about authen server
C32 hwTACACSAuthenClientAccessReqChaPass	1.3.6.1.4.1.2011.5.25.20.1.2.1.12	Counter32	read-only	Request change password packets about authen server
C32 hwTACACSAuthenClientAccessReqLogin	1.3.6.1.4.1.2011.5.25.20.1.2.1.11	Counter32	read-only	Request login packets about authen server
C32 hwTACACSAuthenClientAccessReqPacketEx	1.3.6.1.4.1.2011.5.25.20.1.2.1.10	Counter32	read-only	Request packets about authen server
C32 hwTACACSAuthenClientAccessReqSendAuth	1.3.6.1.4.1.2011.5.25.20.1.2.1.14	Counter32	read-only	Request send authen packets about authen server
C32 hwTACACSAuthenClientAccessReqSendPass	1.3.6.1.4.1.2011.5.25.20.1.2.1.13	Counter32	read-only	Request send password packets about authen server
C32 hwTACACSAuthenClientAccessResError	1.3.6.1.4.1.2011.5.25.20.1.2.1.22	Counter32	read-only	Response error packets about authen server
C32 hwTACACSAuthenClientAccessResFail	1.3.6.1.4.1.2011.5.25.20.1.2.1.17	Counter32	read-only	Response fail packets about authen server
C32 hwTACACSAuthenClientAccessResFollow	1.3.6.1.4.1.2011.5.25.20.1.2.1.23	Counter32	read-only	Follow packets about authen server
C32 hwTACACSAuthenClientAccessResGetData	1.3.6.1.4.1.2011.5.25.20.1.2.1.18	Counter32	read-only	Get data packets about authen server
C32 hwTACACSAuthenClientAccessResGetPass	1.3.6.1.4.1.2011.5.25.20.1.2.1.20	Counter32	read-only	Get password packets about authen server
C32 hwTACACSAuthenClientAccessResGetUser	1.3.6.1.4.1.2011.5.25.20.1.2.1.19	Counter32	read-only	Get user packets about authen server
C32 hwTACACSAuthenClientAccessResPack	1.3.6.1.4.1.2011.5.25.20.1.2.1.15	Counter32	read-only	Response packets about authen server
C32 hwTACACSAuthenClientAccessResPass	1.3.6.1.4.1.2011.5.25.20.1.2.1.16	Counter32	read-only	Response pass packets about authen server
C32 hwTACACSAuthenClientAccessResRestart	1.3.6.1.4.1.2011.5.25.20.1.2.1.21	Counter32	read-only	Restart packets about authen server
C32 hwTACACSAuthenClientMalformedAccessResponses	1.3.6.1.4.1.2011.5.25.20.1.2.1.24	Counter32	read-only	Response packets about authen server
C32 hwTACACSAuthenClientPacketsDropped	1.3.6.1.4.1.2011.5.25.20.1.2.1.30	Counter32	read-only	Drop packets about authen server
C32 hwTACACSAuthenClientPendingRequests	1.3.6.1.4.1.2011.5.25.20.1.2.1.27	Counter32	read-only	Request pending packets about authen server
I32 hwTACACSAuthenClientRoundTripTime	1.3.6.1.4.1.2011.5.25.20.1.2.1.9	Integer32	read-only	Round trip time about authen server
C32 hwTACACSAuthenClientTimeouts	1.3.6.1.4.1.2011.5.25.20.1.2.1.28	Counter32	read-only	Time out packets about authen server
C32 hwTACACSAuthenClientUnknownTypes	1.3.6.1.4.1.2011.5.25.20.1.2.1.29	Counter32	read-only	Unknown type packets about authen server
C32 hwTACACSAuthorClientPacketsDropped	1.3.6.1.4.1.2011.5.25.20.1.2.1.48	Counter32	read-only	Drop packets about author server
C32 hwTACACSAuthorClientReqCommandLevel	1.3.6.1.4.1.2011.5.25.20.1.2.1.37	Counter32	read-only	Request command level packets about author server
C32 hwTACACSAuthorClientReqEXEC	1.3.6.1.4.1.2011.5.25.20.1.2.1.33	Counter32	read-only	Request exec packets about author server
C32 hwTACACSAuthorClientReqIPCP	1.3.6.1.4.1.2011.5.25.20.1.2.1.35	Counter32	read-only	Request ipcp packets about author server
C32 hwTACACSAuthorClientReqLCP	1.3.6.1.4.1.2011.5.25.20.1.2.1.34	Counter32	read-only	Request lcp packets about author server
C32 hwTACACSAuthorClientReqPacket	1.3.6.1.4.1.2011.5.25.20.1.2.1.32	Counter32	read-only	Request packets about author server
C32 hwTACACSAuthorClientReqPending	1.3.6.1.4.1.2011.5.25.20.1.2.1.45	Counter32	read-only	Request pending packets about author server
C32 hwTACACSAuthorClientReqVPDN	1.3.6.1.4.1.2011.5.25.20.1.2.1.36	Counter32	read-only	Request vpdn packets about author server
C32 hwTACACSAuthorClientResCommandLevel	1.3.6.1.4.1.2011.5.25.20.1.2.1.43	Counter32	read-only	Response command level packets about author server
C32 hwTACACSAuthorClientResError	1.3.6.1.4.1.2011.5.25.20.1.2.1.44	Counter32	read-only	Response error packets about author server
C32 hwTACACSAuthorClientResEXEC	1.3.6.1.4.1.2011.5.25.20.1.2.1.39	Counter32	read-only	Response exec packet about author server
C32 hwTACACSAuthorClientResIPCP	1.3.6.1.4.1.2011.5.25.20.1.2.1.41	Counter32	read-only	Response ipcp packets about author server
C32 hwTACACSAuthorClientResLCP	1.3.6.1.4.1.2011.5.25.20.1.2.1.40	Counter32	read-only	Response lcp packets about author server
C32 hwTACACSAuthorClientResPack	1.3.6.1.4.1.2011.5.25.20.1.2.1.38	Counter32	read-only	Response packets about author server
C32 hwTACACSAuthorClientResVPDN	1.3.6.1.4.1.2011.5.25.20.1.2.1.42	Counter32	read-only	Response vpdn packets about author server
I32 hwTACACSAuthorClientRoundTripTime	1.3.6.1.4.1.2011.5.25.20.1.2.1.31	Integer32	read-only	Round trip time about author server
C32 hwTACACSAuthorClientTimeouts	1.3.6.1.4.1.2011.5.25.20.1.2.1.46	Counter32	read-only	Time out packets about author server
C32 hwTACACSAuthorClientUnknownTypes	1.3.6.1.4.1.2011.5.25.20.1.2.1.47	Counter32	read-only	Unknown type packets about author server
OCT hwTACACSGroupName	1.3.6.1.4.1.2011.5.25.20.1.2.1.1	OCTET STRING	read-only	Hwtacac server template name
IP hwTACACSServerAddr	1.3.6.1.4.1.2011.5.25.20.1.2.1.2	IpAddress	read-only	Specify server ip address
hwTACACSServerConfig	1.3.6.1.4.1.2011.5.25.20.1
IP hwTACACSServerGroupCurAccout	1.3.6.1.4.1.2011.5.25.20.1.1.1.11	IpAddress	read-only	Current account server
IP hwTACACSServerGroupCurAuthen	1.3.6.1.4.1.2011.5.25.20.1.1.1.9	IpAddress	read-only	Current authen server
IP hwTACACSServerGroupCurAuthor	1.3.6.1.4.1.2011.5.25.20.1.1.1.10	IpAddress	read-only	Current author server
INT hwTACACSServerGroupDomain	1.3.6.1.4.1.2011.5.25.20.1.1.1.5	INTEGER	read-create	Domain switch:1,open;2,close
OCT hwTACACSServerGroupKey	1.3.6.1.4.1.2011.5.25.20.1.1.1.3	OCTET STRING	read-create	Specify group encryption shared-key
OCT hwTACACSServerGroupName	1.3.6.1.4.1.2011.5.25.20.1.1.1.1	OCTET STRING	read-only	Hwtacac server template name
IP hwTACACSServerGroupPriAccout	1.3.6.1.4.1.2011.5.25.20.1.1.1.8	IpAddress	read-only	Primary accounting server
IP hwTACACSServerGroupPriAuthen	1.3.6.1.4.1.2011.5.25.20.1.1.1.6	IpAddress	read-only	Primary authen server
IP hwTACACSServerGroupPriAuthor	1.3.6.1.4.1.2011.5.25.20.1.1.1.7	IpAddress	read-only	Primary author server
ROW hwTACACSServerGroupRowStatus	1.3.6.1.4.1.2011.5.25.20.1.1.1.12	RowStatus	read-create	RowStatus
IP hwTACACSServerGroupSourceIP	1.3.6.1.4.1.2011.5.25.20.1.1.1.2	IpAddress	read-create	Specify hwtacacs source-ip
hwTACACSServerGroupTable	1.3.6.1.4.1.2011.5.25.20.1.1		not-accessible	Group table
hwTACACSServerGroupTableEntry	1.3.6.1.4.1.2011.5.25.20.1.1.1		not-accessible	Group table entry
I32 hwTACACSServerGroupTimer	1.3.6.1.4.1.2011.5.25.20.1.1.1.4	Integer32	read-create	Set time interval before retry the down-server
OCT hwTACACSServerKey	1.3.6.1.4.1.2011.5.25.20.1.2.1.5	OCTET STRING	read-create	Specify server encryption shared-key
I32 hwTACACSServerPort	1.3.6.1.4.1.2011.5.25.20.1.2.1.3	Integer32	read-create	Specify server port
INT hwTACACSServerPriAcct	1.3.6.1.4.1.2011.5.25.20.1.2.1.8	INTEGER	read-create	Primary account server:1:no,2:yes
INT hwTACACSServerPriAuthen	1.3.6.1.4.1.2011.5.25.20.1.2.1.6	INTEGER	read-create	Primary authen server:1:no,2:yes
INT hwTACACSServerPriAuthor	1.3.6.1.4.1.2011.5.25.20.1.2.1.7	INTEGER	read-create	Primary author server:1:no,2:yes
ROW hwTACACSServerRowStatus	1.3.6.1.4.1.2011.5.25.20.1.2.1.63	RowStatus	read-create	RowStatus
hwTACACSServerTable	1.3.6.1.4.1.2011.5.25.20.1.2		not-accessible	Server table
hwTACACSServerTableEntry	1.3.6.1.4.1.2011.5.25.20.1.2.1		not-accessible	Server table entry
I32 hwTACACSTimeout	1.3.6.1.4.1.2011.5.25.20.1.2.1.4	Integer32	read-create	Specify server response timeout

RFC description

Configures TACACS+ server groups for authentication and authorization on Huawei devices.

Start monitoring Huawei switch or router using TACACS+ AAA with a free 30-day trial of IPNetwork Monitor. Import MIBs, browse SNMP OIDs, create custom SNMP monitors, configure alerts, and monitor any SNMP-enabled network device from a single console.

Download HUAWEI-TACACS-MIB