Juniper-RADIUS-Initiated-Request-MIB

All MIBs › Juniper-RADIUS-Initiated-Request-MIB

Organization: Juniper Networks, Inc.

Last Updated: 2004-06-10

Category: Protocol: RADIUS, RADIUS and AAA, Vendor: Juniper

Description: Juniper Networks MIB for handling RADIUS-initiated change-of-authorization and disconnect requests from RADIUS servers.

Start monitoring vendor-neutral, standards-based MIB, any SNMPv3-capable network device (SNMP engine identity/boot/clock status) with a free 30-day trial of IPNetwork Monitor. Import MIBs, browse SNMP OIDs, create custom SNMP monitors, configure alerts, and monitor any SNMP-enabled network device from a single console.

What Is Juniper-RADIUS-Initiated-Request-MIB?

Juniper-RADIUS-Initiated-Request-MIB is a Juniper Networks enterprise MIB covering RADIUS server-initiated requests, such as Change-of-Authorization and Disconnect messages, on JUNOSe E-series routers. It exposes counters for disconnect requests, accepts, and rejects, plus error conditions like invalid client addresses, unknown request types, missing shared secrets, and bad authenticators, alongside a table of RADIUS clients authorized to send such requests. Its main monitoring value is as a software/protocol health indicator: rising reject, no-secret, or bad-authenticator counts flag AAA misconfiguration or an unauthorized/misconfigured RADIUS server attempting to control subscriber sessions, rather than any hardware condition. It complements standard RADIUS Authentication/Accounting MIBs (RFC 2618/2620) and the router's broader AAA subsystem. It is typically deployed on broadband/edge access routers where a centralized RADIUS server dynamically disconnects or re-authorizes subscriber sessions. Engineers can download the Juniper-RADIUS-Initiated-Request-MIB file directly to load it into their MIB browser.

IPNetwork Monitor allows you to monitor SNMP objects defined in Juniper-RADIUS-Initiated-Request-MIB. Use the built-in SNMP Monitoring Browser to explore available variables, view their current values and descriptions, and select the objects you want to monitor. You can then create SNMP monitors, configure thresholds, and receive alerts when monitored values change.

Supported Devices

Juniper E-series router (JUNOSe broadband/edge access platform)

Monitoring Examples

An admin watching juniRadiusInitiatedRequestDisconnectRequests alongside juniRadiusInitiatedRequestDisconnectRejects can spot a spike in rejected disconnects, then check juniRadiusInitiatedRequestClientTable (keyed by juniRadiusInitiatedRequestClientAddress and juniRadiusInitiatedRequestClientPortNumber) to confirm which servers are authorized to issue them. A nonzero juniRadiusInitiatedRequestNoSecret or juniRadiusInitiatedRequestInvalidClientAddresses counter points to a shared-secret mismatch or an unauthorized server attempting session control.

What Can Be Monitored

disconnect request/accept/reject counts
invalid client address attempts
missing shared-secret events
bad authenticator events
unknown request type counts
authorized RADIUS client list

Imported Objects

From Juniper-MIBs

juniMibs

MODULE-IDENTITY

From Juniper-TC

JuniEnable

From SNMPv2-CONF

MODULE-COMPLIANCE
OBJECT-GROUP

From SNMPv2-SMI

Counter32
Integer32
IpAddress
MODULE-IDENTITY
OBJECT-TYPE

From SNMPv2-TC

DisplayString
RowStatus

How to Use in IPNetwork Monitor

Example using juniRadiusInitiatedRequestInvalidClientAddresses OID:

Select a Juniper E-series router, JUNOSe broadband/edge platform (RADIUS CoA/Disconnect requests) as the target host to create a monitor — the SNMP service should be up and running on it. Click New Monitor, then check SNMP Custom on the Favorites tab, click Next, and confirm the host. On the next page, click Select... to open the built-in SNMP MIB Browser and type juniRadiusInitiatedRequestInvalidClientAddresses into the Find box to locate it in the OID tree, then select it and click OK. The number of RADIUS initiated request packets received from unknown addresses. On the monitor's Main parameters page you can set the target's SNMP port (default 161), credentials, polling interval, and other settings — see the SNMP Monitor help for details. On the State conditions and Alerting tabs, configure when the monitor should change state and trigger an alert; since this is a Counter32-type OID, Value bounds is the most useful condition here — trigger an alert if the counter increases sharply between polls relative to its normal baseline, since an unexpected spike often reflects a real change in traffic or activity. Click Finish to create the monitor; you can adjust any parameter later.

OIDs

OID symbolic	OID numeric	Type	Access	Description
juniRadiusInitiatedRequestMIB	1.3.6.1.4.1.4874.2.2.75			The RADIUS Disconnect MIB for the Juniper Networks enterprise.
juniRadiusInitiatedRequestObjects	1.3.6.1.4.1.4874.2.2.75.1
juniRadiusInitiatedRequest	1.3.6.1.4.1.4874.2.2.75.1.1
C32 juniRadiusInitiatedRequestInvalidClientAddressesEx	1.3.6.1.4.1.4874.2.2.75.1.1.1	Counter32	read-only	The number of RADIUS initiated request packets received from unknown addresses.
juniRadiusInitiatedRequestClientTable	1.3.6.1.4.1.4874.2.2.75.1.1.2		not-accessible	The (conceptual) table listing the RADIUS authentication servers with which the ERX shares a secret.
juniRadiusInitiatedRequestClientEntry	1.3.6.1.4.1.4874.2.2.75.1.1.2.1		not-accessible	An entry (conceptual row) representing a RADIUS initiated request client with which the server shares a secret.
IP juniRadiusInitiatedRequestClientAddress	1.3.6.1.4.1.4874.2.2.75.1.1.2.1.1	IpAddress	not-accessible	The IP address of the RADIUS client referred to in this table entry. A value of 0.0.0.0 indicates this entry is not in use.
I32 juniRadiusInitiatedRequestClientPortNumber	1.3.6.1.4.1.4874.2.2.75.1.1.2.1.2	Integer32	read-only	The UDP port the server is listening on to recieve disconnect requests from this client.
C32 juniRadiusInitiatedRequestUnknownTypes	1.3.6.1.4.1.4874.2.2.75.1.1.2.1.3	Counter32	read-only	The number of RADIUS packets of unknown type which were received from this client on the authentication port.
C32 juniRadiusInitiatedRequestNoSecret	1.3.6.1.4.1.4874.2.2.75.1.1.2.1.4	Counter32	read-only	The number of RADIUS Disconnect requests recieved from this client while no secret is set.
C32 juniRadiusInitiatedRequestDisconnectRequests	1.3.6.1.4.1.4874.2.2.75.1.1.2.1.5	Counter32	read-only	The number of RADIUS Disconnect packets received from this client.
C32 juniRadiusInitiatedRequestDisconnectAccepts	1.3.6.1.4.1.4874.2.2.75.1.1.2.1.6	Counter32	read-only	The number of RADIUS Disconnects that were succesful.
C32 juniRadiusInitiatedRequestDisconnectRejects	1.3.6.1.4.1.4874.2.2.75.1.1.2.1.7	Counter32	read-only	The number of RADIUS Disconnects not successful.
C32 juniRadiusInitiatedRequestDisconnectNoSessionIds	1.3.6.1.4.1.4874.2.2.75.1.1.2.1.8	Counter32	read-only	The number of RADIUS Disconnect requests recieved from this client with no session-id present.
C32 juniRadiusInitiatedRequestDisconnectBadAuthenticators	1.3.6.1.4.1.4874.2.2.75.1.1.2.1.9	Counter32	read-only	The number of RADIUS disconnect packets containing invalid authenticators received from this client.
C32 juniRadiusInitiatedRequestDisconnectPacketsDropped	1.3.6.1.4.1.4874.2.2.75.1.1.2.1.10	Counter32	read-only	The number of RADIUS disconnect packets which were received from this client on the authentication port and dropped for some other reason.
C32 juniRadiusInitiatedRequestCoaRequests	1.3.6.1.4.1.4874.2.2.75.1.1.2.1.11	Counter32	read-only	The number of RADIUS Change of Authorization packets received from this client.
C32 juniRadiusInitiatedRequestCoaAccepts	1.3.6.1.4.1.4874.2.2.75.1.1.2.1.12	Counter32	read-only	The number of RADIUS Change of Authorization requests that were succesful.
C32 juniRadiusInitiatedRequestCoaRejects	1.3.6.1.4.1.4874.2.2.75.1.1.2.1.13	Counter32	read-only	The number of RADIUS Change of Authorization requests that were not successful.
C32 juniRadiusInitiatedRequestCoaNoSessionIds	1.3.6.1.4.1.4874.2.2.75.1.1.2.1.14	Counter32	read-only	The number of RADIUS Change of Authorization requests recieved from this client with no session-id present.
C32 juniRadiusInitiatedRequestCoaBadAuthenticators	1.3.6.1.4.1.4874.2.2.75.1.1.2.1.15	Counter32	read-only	The number of RADIUS Change of Authorization packets containing invalid authenticators received from this client.
C32 juniRadiusInitiatedRequestCoaPacketsDropped	1.3.6.1.4.1.4874.2.2.75.1.1.2.1.16	Counter32	read-only	The number of RADIUS Change of Authorization packets which were received from this client on the authentication port and dropped for some other reason.
juniRadiusInitiatedRequestCfgClientTable	1.3.6.1.4.1.4874.2.2.75.1.1.3		not-accessible	The (conceptual) table listing the RADIUS initiated request clients with which the server shares a secret.
juniRadiusInitiatedRequestCfgClientEntry	1.3.6.1.4.1.4874.2.2.75.1.1.3.1		not-accessible	An entry (conceptual row) representing a RADIUS authentication server with which the ERX shares a secret.
IP juniRadiusInitiatedRequestCfgClientAddress	1.3.6.1.4.1.4874.2.2.75.1.1.3.1.1	IpAddress	not-accessible	The IP address of the RADIUS disconnect client referred to in this table entry.
I32 juniRadiusInitiatedRequestCfgClientPortNumber	1.3.6.1.4.1.4874.2.2.75.1.1.3.1.2	Integer32	read-create	The UDP port the server is listening on to recieve requests from this client.
STR juniRadiusInitiatedRequestCfgKey	1.3.6.1.4.1.4874.2.2.75.1.1.3.1.3	DisplayString	read-create	The secret (RADIUS authenticator) used by the serevr during exchanges with this client. The default is a zero-length string, indicating no authenticator is used.
JUN juniRadiusInitiatedRequestCfgDisconnect	1.3.6.1.4.1.4874.2.2.75.1.1.3.1.4	JuniEnable	read-create	When enabled, RADIUS initiated disconnect requests are processed.
JUN juniRadiusInitiatedRequestCfgChangeOfAuthorization	1.3.6.1.4.1.4874.2.2.75.1.1.3.1.5	JuniEnable	read-create	When enabled, RADIUS change of authorization requests are processed.
ROW juniRadiusInitiatedRequestCfgRowStatus	1.3.6.1.4.1.4874.2.2.75.1.1.3.1.6	RowStatus	read-create	Supports 'createAndGo' and 'destroy' only.
juniRadiusInitiatedRequestMIBConformance	1.3.6.1.4.1.4874.2.2.75.2
juniRadiusInitiatedRequestMIBCompliances	1.3.6.1.4.1.4874.2.2.75.2.1
juniRadiusAuthInitiatedRequestCompliance	1.3.6.1.4.1.4874.2.2.75.2.1.1			The compliance statement for entities which implement the Juniper RADIUS Initiated Request MIB.
juniRadiusInitiatedRequestMIBGroups	1.3.6.1.4.1.4874.2.2.75.2.2
juniRadiusInitiatedRequestGroup	1.3.6.1.4.1.4874.2.2.75.2.2.1			The basic collection of objects providing management of RADIUS Initiated Request.

RFC description

Supports RADIUS Disconnect and CoA messages for dynamic session management derived from RFC 3576 on Juniper ERX platforms.

Start monitoring Juniper E-series router, JUNOSe broadband/edge platform (RADIUS CoA/Disconnect requests) with a free 30-day trial of IPNetwork Monitor. Import MIBs, browse SNMP OIDs, create custom SNMP monitors, configure alerts, and monitor any SNMP-enabled network device from a single console.

Download Juniper-RADIUS-Initiated-Request-MIB