Juniper-RADIUS-Disconnect-MIB

All MIBs › Juniper-RADIUS-Disconnect-MIB

Organization: Juniper Networks, Inc.

Last Updated: 2004-06-09

Category: Protocol: RADIUS, RADIUS and AAA, Vendor: Juniper

Description: Juniper Networks MIB for monitoring RADIUS disconnect (CoA) message processing for subscriber session termination.

Start monitoring vendor-neutral, standards-based MIB, any SNMPv3-capable network device (SNMP engine identity/boot/clock status) with a free 30-day trial of IPNetwork Monitor. Import MIBs, browse SNMP OIDs, create custom SNMP monitors, configure alerts, and monitor any SNMP-enabled network device from a single console.

What Is Juniper-RADIUS-Disconnect-MIB?

Juniper-RADIUS-Disconnect-MIB is a Juniper Networks private MIB for monitoring processing of RADIUS Disconnect / Change-of-Authorization (CoA) messages, defined in RFC 3576/5176, which a AAA server uses to forcibly terminate a subscriber's session. It exposes per-RADIUS-client statistics such as disconnect requests, accepts, and rejects, alongside detailed error counters for missing shared secrets, unknown session IDs, bad authenticators, unknown packet types, and invalid client addresses. Its monitoring value is software/AAA-protocol health rather than hardware: request/accept/reject counters show whether the disconnect workflow is functioning end to end, while bad-authenticator, no-secret, and invalid-client-address counters flag a misconfigured shared secret, an unauthorized disconnect source, or a subscriber-session lookup failure. It implements the RFC 3576/5176 Dynamic Authorization Extensions to RADIUS and complements the standard RADIUS client/server MIBs (RFC 4668/4669) used for broadband subscriber management. It is deployed on Juniper broadband edge routers providing subscriber management, where a RADIUS/AAA server issues session disconnects for policy enforcement or fraud response. Engineers can download the Juniper-RADIUS-Disconnect-MIB file directly to load it into their MIB browser.

IPNetwork Monitor allows you to monitor SNMP objects defined in Juniper-RADIUS-Disconnect-MIB. Use the built-in SNMP Monitoring Browser to explore available variables, view their current values and descriptions, and select the objects you want to monitor. You can then create SNMP monitors, configure thresholds, and receive alerts when monitored values change.

Supported Devices

Juniper Networks broadband/subscriber-edge routers (E-series, MX)

Monitoring Examples

An operator checks juniRadiusDisconnectClientTable/juniRadiusDisconnectClientEntry (juniRadiusDisconnectClientAddress, juniRadiusDisconnectClientPortNumber) to confirm which RADIUS servers are authorized to send disconnect messages, while a rising juniRadiusDisconnectNoSecret or juniRadiusDisconnectBadAuthenticators count reveals a misconfigured shared secret causing legitimate disconnects to be silently rejected. Comparing juniRadiusDisconnectRequests against juniRadiusDisconnectAccepts and juniRadiusDisconnectRejects over time shows whether CoA-driven session terminations are succeeding as expected, and juniRadiusDisconnectInvalidClientAddresses would flag disconnect attempts from an unrecognized source.

What Can Be Monitored

RADIUS disconnect request/accept/reject counts
per-client disconnect statistics
bad authenticator error count
missing shared secret error count
unknown session ID error count
invalid client address count

Imported Objects

From Juniper-MIBs

juniMibs

MODULE-IDENTITY

From SNMPv2-CONF

MODULE-COMPLIANCE
OBJECT-GROUP

From SNMPv2-SMI

Counter32
Integer32
IpAddress
MODULE-IDENTITY
OBJECT-TYPE

From SNMPv2-TC

DisplayString
RowStatus

OIDs

OID symbolic	OID numeric	Type	Access	Description
juniRadiusDisconnectMIB	1.3.6.1.4.1.4874.2.2.67			The RADIUS Disconnect MIB for the Juniper Networks enterprise.
juniRadiusDisconnectObjects	1.3.6.1.4.1.4874.2.2.67.1
juniRadiusDisconnect	1.3.6.1.4.1.4874.2.2.67.1.1
C32 juniRadiusDisconnectInvalidClientAddresses	1.3.6.1.4.1.4874.2.2.67.1.1.1	Counter32	read-only	The number of RADIUS disconnect packets received from unknown addresses.
juniRadiusDisconnectClientTable	1.3.6.1.4.1.4874.2.2.67.1.1.2		not-accessible	The (conceptual) table listing the RADIUS authentication servers with which the disconnect shares a secret.
juniRadiusDisconnectClientEntry	1.3.6.1.4.1.4874.2.2.67.1.1.2.1		not-accessible	An entry (conceptual row) representing a RADIUS disconnect client with which the server shares a secret.
IP juniRadiusDisconnectClientAddress	1.3.6.1.4.1.4874.2.2.67.1.1.2.1.1	IpAddress	not-accessible	The IP address of the RADIUS client referred to in this table entry. A value of 0.0.0.0 indicates this entry is not in use.
I32 juniRadiusDisconnectClientPortNumber	1.3.6.1.4.1.4874.2.2.67.1.1.2.1.2	Integer32	read-only	The UDP port the server is listening on to recieve disconnect requests from this client.
C32 juniRadiusDisconnectRequests	1.3.6.1.4.1.4874.2.2.67.1.1.2.1.3	Counter32	read-only	The number of RADIUS Disconnect packets received from this client.
C32 juniRadiusDisconnectAccepts	1.3.6.1.4.1.4874.2.2.67.1.1.2.1.4	Counter32	read-only	The number of RADIUS Disconnects that were succesful.
C32 juniRadiusDisconnectRejects	1.3.6.1.4.1.4874.2.2.67.1.1.2.1.5	Counter32	read-only	The number of RADIUS Disconnects not successful.
C32 juniRadiusDisconnectNoSecret	1.3.6.1.4.1.4874.2.2.67.1.1.2.1.6	Counter32	read-only	The number of RADIUS Disconnect requests recieved from this client while no secret is set.
C32 juniRadiusDisconnectNoSessionIds	1.3.6.1.4.1.4874.2.2.67.1.1.2.1.7	Counter32	read-only	The number of RADIUS Disconnect requests recieved from this client with no session-id present.
C32 juniRadiusDisconnectBadAuthenticators	1.3.6.1.4.1.4874.2.2.67.1.1.2.1.8	Counter32	read-only	The number of RADIUS disconnect packets containing invalid authenticators received from this client.
C32 juniRadiusDisconnectUnknownTypes	1.3.6.1.4.1.4874.2.2.67.1.1.2.1.9	Counter32	read-only	The number of RADIUS packets of unknown type which were received from this client on the authentication port.
C32 juniRadiusDisconnectPacketsDropped	1.3.6.1.4.1.4874.2.2.67.1.1.2.1.10	Counter32	read-only	The number of RADIUS packets of which were received from this client on the authentication port and dropped for some other reason.
juniRadiusDisconnectCfgClientTable	1.3.6.1.4.1.4874.2.2.67.1.1.3		not-accessible	The (conceptual) table listing the RADIUS disconnect clients with which the server shares a secret.
juniRadiusDisconnectCfgClientEntry	1.3.6.1.4.1.4874.2.2.67.1.1.3.1		not-accessible	An entry (conceptual row) representing a RADIUS authentication server with which the disconnect shares a secret.
IP juniRadiusDisconnectCfgClientAddress	1.3.6.1.4.1.4874.2.2.67.1.1.3.1.1	IpAddress	not-accessible	The IP address of the RADIUS disconnect client referred to in this table entry.
I32 juniRadiusDisconnectCfgClientPortNumber	1.3.6.1.4.1.4874.2.2.67.1.1.3.1.2	Integer32	read-create	The UDP port the server is listening on to recieve disconnect requests from this client.
STR juniRadiusDisconnectCfgKey	1.3.6.1.4.1.4874.2.2.67.1.1.3.1.3	DisplayString	read-create	The secret (RADIUS authenticator) used by the serevr during exchanges with this client. The default is a zero-length string, indicating no authenticator is used.
ROW juniRadiusDisconnectCfgRowStatus	1.3.6.1.4.1.4874.2.2.67.1.1.3.1.4	RowStatus	read-create	Supports 'createAndGo' and 'destroy' only.
juniRadiusDisconnectMIBConformance	1.3.6.1.4.1.4874.2.2.67.2
juniRadiusDisconnectMIBCompliances	1.3.6.1.4.1.4874.2.2.67.2.1
juniRadiusAuthDisconnectCompliance	1.3.6.1.4.1.4874.2.2.67.2.1.1			The compliance statement for entities which implement the Juniper RADIUS Disconnect MIB.
juniRadiusDisconnectMIBGroups	1.3.6.1.4.1.4874.2.2.67.2.2
juniRadiusDisconnectGroup	1.3.6.1.4.1.4874.2.2.67.2.2.1			The basic collection of objects providing management of RADIUS Disconnect.

RFC description

Manages RADIUS Disconnect protocol for client session termination in Juniper Networks JUNOSe systems (deprecated).

Start monitoring Juniper Networks broadband/subscriber-edge router (E-series, MX) — RADIUS Disconnect/CoA with a free 30-day trial of IPNetwork Monitor. Import MIBs, browse SNMP OIDs, create custom SNMP monitors, configure alerts, and monitor any SNMP-enabled network device from a single console.

Download Juniper-RADIUS-Disconnect-MIB

What Is Juniper-RADIUS-Disconnect-MIB?

Supported Devices

Monitoring Examples

What Can Be Monitored

This MIB depends on

Related MIBs

RFC description