ME1200-AUTH-MIB

All MIBs › ME1200-AUTH-MIB

Organization: Cisco Systems, Inc

Last Updated: 2014-04-07

Category: Domain: Security, Vendor: Cisco

Description: Cisco ME1200 Metro Ethernet switch MIB defining authentication method configuration including RADIUS and TACACS+ settings.

Start monitoring vendor-neutral, standards-based MIB, any SNMPv3-capable network device (SNMP engine identity/boot/clock status) with a free 30-day trial of IPNetwork Monitor. Import MIBs, browse SNMP OIDs, create custom SNMP monitors, configure alerts, and monitor any SNMP-enabled network device from a single console.

What Is ME1200-AUTH-MIB?

ME1200-AUTH-MIB is a Cisco proprietary module for the ME1200 Metro Ethernet switch family, defining authentication method configuration for management access, including RADIUS and TACACS+ ordering for console, Telnet, and SSH sessions. It exposes per-access-method tables listing the ordered authentication methods configured for console, Telnet, and SSH login. Its monitoring value is primarily configuration/security status: administrators can verify which authentication method (local, RADIUS, TACACS+) is configured and in what priority order for each management access path, ensuring consistent access control policy. It depends on the device's underlying management-access model and typically works alongside RADIUS/TACACS+ client MIBs for full authentication visibility. It is typically deployed on Cisco ME1200 switches in service-provider or enterprise metro networks where centralized AAA policy compliance must be confirmed via SNMP, and ME1200-AUTH-MIB SNMP monitoring is exactly the mechanism used to verify that policy stays consistent across console, Telnet, and SSH access.

IPNetwork Monitor allows you to monitor SNMP objects defined in ME1200-AUTH-MIB. Use the built-in SNMP Monitoring Browser to explore available variables, view their current values and descriptions, and select the objects you want to monitor. You can then create SNMP monitors, configure thresholds, and receive alerts when monitored values change.

Supported Devices

Cisco ME1200 Metro Ethernet switch

Monitoring Examples

An administrator would poll me1200AuthAgentConsoleMethodsTable, me1200AuthAgentTelnetMethodsTable, and me1200AuthAgentSSHMethodsTable, checking each me1200AuthAgentXMethodsMethod entry in order to confirm the configured authentication method sequence for each access path. Finding an SSH methods table falling back to local authentication when RADIUS/TACACS+ was expected would reveal an AAA configuration drift or a failed centralized authentication server.

What Can Be Monitored

console authentication method order
Telnet authentication method order
SSH authentication method order
configured AAA method priority

Imported Objects

From CISCOME1200-MIB

me1200SwitchMgmt

OBJECT-IDENTITY

From INET-ADDRESS-MIB

InetAddressIPv6

From ME1200-TC

ME1200DisplayString
ME1200Unsigned8

From SNMPv2-CONF

MODULE-COMPLIANCE
OBJECT-GROUP

From SNMPv2-SMI

Integer32
IpAddress
MODULE-IDENTITY
OBJECT-TYPE
Unsigned32

From SNMPv2-TC

TEXTUAL-CONVENTION
TruthValue

OIDs

OID symbolic	OID numeric	Type	Access	Description
me1200AuthMib	1.3.6.1.4.1.9.9.815.1.48			This is a private MIB for authentication
me1200AuthObjects	1.3.6.1.4.1.9.9.815.1.48.1
me1200AuthConfig	1.3.6.1.4.1.9.9.815.1.48.1.2
me1200AuthGlobals	1.3.6.1.4.1.9.9.815.1.48.1.2.1
me1200AuthAgents	1.3.6.1.4.1.9.9.815.1.48.1.2.1.1
me1200AuthAgentConsole	1.3.6.1.4.1.9.9.815.1.48.1.2.1.1.1
me1200AuthAgentConsoleMethodsTable	1.3.6.1.4.1.9.9.815.1.48.1.2.1.1.1.1		not-accessible	This is an ordered table of methods used to authenticate console access
me1200AuthAgentConsoleMethodsEntry	1.3.6.1.4.1.9.9.815.1.48.1.2.1.1.1.1.1		not-accessible	Each entry defines a method to be consulted with a priorty equal to the index
I32 me1200AuthAgentConsoleMethodsMetodIndex	1.3.6.1.4.1.9.9.815.1.48.1.2.1.1.1.1.1.1	Integer32	not-accessible	Method priority index, from 0 to 3 where 0 is the highest priority index
ME1 me1200AuthAgentConsoleMethodsMethod	1.3.6.1.4.1.9.9.815.1.48.1.2.1.1.1.1.1.2	ME1200AuthMethod	read-write	Authentication method
me1200AuthAgentTelnet	1.3.6.1.4.1.9.9.815.1.48.1.2.1.1.2
me1200AuthAgentTelnetMethodsTable	1.3.6.1.4.1.9.9.815.1.48.1.2.1.1.2.1		not-accessible	This is an ordered table of methods used to authenticate telnet access
me1200AuthAgentTelnetMethodsEntry	1.3.6.1.4.1.9.9.815.1.48.1.2.1.1.2.1.1		not-accessible	Each entry defines a method to be consulted with a priorty equal to the index
I32 me1200AuthAgentTelnetMethodsMetodIndex	1.3.6.1.4.1.9.9.815.1.48.1.2.1.1.2.1.1.1	Integer32	not-accessible	Method priority index, from 0 to 3 where 0 is the highest priority index
ME1 me1200AuthAgentTelnetMethodsMethod	1.3.6.1.4.1.9.9.815.1.48.1.2.1.1.2.1.1.2	ME1200AuthMethod	read-write	Authentication method
me1200AuthAgentSSH	1.3.6.1.4.1.9.9.815.1.48.1.2.1.1.3
me1200AuthAgentSSHMethodsTable	1.3.6.1.4.1.9.9.815.1.48.1.2.1.1.3.1		not-accessible	This is an ordered table of methods used to authenticate ssh access
me1200AuthAgentSSHMethodsEntry	1.3.6.1.4.1.9.9.815.1.48.1.2.1.1.3.1.1		not-accessible	Each entry defines a method to be consulted with a priorty equal to the index
I32 me1200AuthAgentSSHMethodsMetodIndex	1.3.6.1.4.1.9.9.815.1.48.1.2.1.1.3.1.1.1	Integer32	not-accessible	Method priority index, from 0 to 3 where 0 is the highest priority index
ME1 me1200AuthAgentSSHMethodsMethod	1.3.6.1.4.1.9.9.815.1.48.1.2.1.1.3.1.1.2	ME1200AuthMethod	read-write	Authentication method
me1200AuthAgentHTTP	1.3.6.1.4.1.9.9.815.1.48.1.2.1.1.4
me1200AuthAgentHTTPMethodsTable	1.3.6.1.4.1.9.9.815.1.48.1.2.1.1.4.1		not-accessible	This is an ordered table of methods used to authenticate HTTP access
me1200AuthAgentHTTPMethodsEntry	1.3.6.1.4.1.9.9.815.1.48.1.2.1.1.4.1.1		not-accessible	Each entry defines a method to be consulted with a priorty equal to the index
I32 me1200AuthAgentHTTPMethodsMetodIndex	1.3.6.1.4.1.9.9.815.1.48.1.2.1.1.4.1.1.1	Integer32	not-accessible	Method priority index, from 0 to 3 where 0 is the highest priority index
ME1 me1200AuthAgentHTTPMethodsMethod	1.3.6.1.4.1.9.9.815.1.48.1.2.1.1.4.1.1.2	ME1200AuthMethod	read-write	Authentication method
me1200AuthAgentAuthorConsole	1.3.6.1.4.1.9.9.815.1.48.1.2.1.1.11
ME1 me1200AuthAgentAuthorConsoleMethod	1.3.6.1.4.1.9.9.815.1.48.1.2.1.1.11.1	ME1200AuthAuthorMethod	read-write	Authorization method
T/F me1200AuthAgentAuthorConsoleCmdEnable	1.3.6.1.4.1.9.9.815.1.48.1.2.1.1.11.2	TruthValue	read-write	Enable authorization of commands
ME1 me1200AuthAgentAuthorConsoleCmdPrivLvl	1.3.6.1.4.1.9.9.815.1.48.1.2.1.1.11.3	ME1200Unsigned8	read-write	Command privilege level. Authorize all commands with a privilege level higher than or equal to this level. Valid values are in the range 0 to 15
T/F me1200AuthAgentAuthorConsoleCfgCmdEnable	1.3.6.1.4.1.9.9.815.1.48.1.2.1.1.11.4	TruthValue	read-write	Also authorize configuration commands
me1200AuthAgentAuthorTelnet	1.3.6.1.4.1.9.9.815.1.48.1.2.1.1.12
ME1 me1200AuthAgentAuthorTelnetMethod	1.3.6.1.4.1.9.9.815.1.48.1.2.1.1.12.1	ME1200AuthAuthorMethod	read-write	Authorization method
T/F me1200AuthAgentAuthorTelnetCmdEnable	1.3.6.1.4.1.9.9.815.1.48.1.2.1.1.12.2	TruthValue	read-write	Enable authorization of commands
ME1 me1200AuthAgentAuthorTelnetCmdPrivLvl	1.3.6.1.4.1.9.9.815.1.48.1.2.1.1.12.3	ME1200Unsigned8	read-write	Command privilege level. Authorize all commands with a privilege level higher than or equal to this level. Valid values are in the range 0 to 15
T/F me1200AuthAgentAuthorTelnetCfgCmdEnable	1.3.6.1.4.1.9.9.815.1.48.1.2.1.1.12.4	TruthValue	read-write	Also authorize configuration commands
me1200AuthAgentAuthorSSH	1.3.6.1.4.1.9.9.815.1.48.1.2.1.1.13
ME1 me1200AuthAgentAuthorSSHMethod	1.3.6.1.4.1.9.9.815.1.48.1.2.1.1.13.1	ME1200AuthAuthorMethod	read-write	Authorization method
T/F me1200AuthAgentAuthorSSHCmdEnable	1.3.6.1.4.1.9.9.815.1.48.1.2.1.1.13.2	TruthValue	read-write	Enable authorization of commands
ME1 me1200AuthAgentAuthorSSHCmdPrivLvl	1.3.6.1.4.1.9.9.815.1.48.1.2.1.1.13.3	ME1200Unsigned8	read-write	Command privilege level. Authorize all commands with a privilege level higher than or equal to this level. Valid values are in the range 0 to 15
T/F me1200AuthAgentAuthorSSHCfgCmdEnable	1.3.6.1.4.1.9.9.815.1.48.1.2.1.1.13.4	TruthValue	read-write	Also authorize configuration commands
me1200AuthAgentAcctConsole	1.3.6.1.4.1.9.9.815.1.48.1.2.1.1.21
ME1 me1200AuthAgentAcctConsoleMethod	1.3.6.1.4.1.9.9.815.1.48.1.2.1.1.21.1	ME1200AuthAcctMethod	read-write	Accounting method
T/F me1200AuthAgentAcctConsoleCmdEnable	1.3.6.1.4.1.9.9.815.1.48.1.2.1.1.21.2	TruthValue	read-write	Enable accounting of commands
ME1 me1200AuthAgentAcctConsoleCmdPrivLvl	1.3.6.1.4.1.9.9.815.1.48.1.2.1.1.21.3	ME1200Unsigned8	read-write	Command privilege level. Log all commands with a privilege level higher than or equal to this level. Valid values are in the range 0 to 15
T/F me1200AuthAgentAcctConsoleExecEnable	1.3.6.1.4.1.9.9.815.1.48.1.2.1.1.21.4	TruthValue	read-write	Enable exec (login) accounting
me1200AuthAgentAcctTelnet	1.3.6.1.4.1.9.9.815.1.48.1.2.1.1.22
ME1 me1200AuthAgentAcctTelnetMethod	1.3.6.1.4.1.9.9.815.1.48.1.2.1.1.22.1	ME1200AuthAcctMethod	read-write	Accounting method
T/F me1200AuthAgentAcctTelnetCmdEnable	1.3.6.1.4.1.9.9.815.1.48.1.2.1.1.22.2	TruthValue	read-write	Enable accounting of commands
ME1 me1200AuthAgentAcctTelnetCmdPrivLvl	1.3.6.1.4.1.9.9.815.1.48.1.2.1.1.22.3	ME1200Unsigned8	read-write	Command privilege level. Log all commands with a privilege level higher than or equal to this level. Valid values are in the range 0 to 15
T/F me1200AuthAgentAcctTelnetExecEnable	1.3.6.1.4.1.9.9.815.1.48.1.2.1.1.22.4	TruthValue	read-write	Enable exec (login) accounting
me1200AuthAgentAcctSSH	1.3.6.1.4.1.9.9.815.1.48.1.2.1.1.23
ME1 me1200AuthAgentAcctSSHMethod	1.3.6.1.4.1.9.9.815.1.48.1.2.1.1.23.1	ME1200AuthAcctMethod	read-write	Accounting method
T/F me1200AuthAgentAcctSSHCmdEnable	1.3.6.1.4.1.9.9.815.1.48.1.2.1.1.23.2	TruthValue	read-write	Enable accounting of commands
ME1 me1200AuthAgentAcctSSHCmdPrivLvl	1.3.6.1.4.1.9.9.815.1.48.1.2.1.1.23.3	ME1200Unsigned8	read-write	Command privilege level. Log all commands with a privilege level higher than or equal to this level. Valid values are in the range 0 to 15
T/F me1200AuthAgentAcctSSHExecEnable	1.3.6.1.4.1.9.9.815.1.48.1.2.1.1.23.4	TruthValue	read-write	Enable exec (login) accounting
me1200AuthRADIUS	1.3.6.1.4.1.9.9.815.1.48.1.2.1.2
me1200AuthRADIUSglobal	1.3.6.1.4.1.9.9.815.1.48.1.2.1.2.1
U32 me1200AuthRADIUSglobalTimeout	1.3.6.1.4.1.9.9.815.1.48.1.2.1.2.1.1	Unsigned32	read-write	Global timeout for for RADIUS servers. Can be overridden by individual host entries. (1 to 1000 seconds)
U32 me1200AuthRADIUSglobalRetransmit	1.3.6.1.4.1.9.9.815.1.48.1.2.1.2.1.2	Unsigned32	read-write	Global retransmit count for RADIUS servers. Can be overridden by individual host entries. (1 to 1000 times)
U32 me1200AuthRADIUSglobalDeadtime	1.3.6.1.4.1.9.9.815.1.48.1.2.1.2.1.3	Unsigned32	read-write	Global deadtime for RADIUS servers. (0 to 1440 minutes)
STR me1200AuthRADIUSglobalKey	1.3.6.1.4.1.9.9.815.1.48.1.2.1.2.1.4	ME1200DisplayString	read-write	Global secret key for RADIUS servers. Can be overridden by individual host entries.
me1200AuthRADIUSconfig	1.3.6.1.4.1.9.9.815.1.48.1.2.1.2.2
T/F me1200AuthRADIUSconfigNasIpv4Enable	1.3.6.1.4.1.9.9.815.1.48.1.2.1.2.2.1	TruthValue	read-write	Enable Global NAS IPv4 address
IP me1200AuthRADIUSconfigNasIpv4Address	1.3.6.1.4.1.9.9.815.1.48.1.2.1.2.2.2	IpAddress	read-write	Global NAS IPv4 address
T/F me1200AuthRADIUSconfigNasIpv6Enable	1.3.6.1.4.1.9.9.815.1.48.1.2.1.2.2.3	TruthValue	read-write	Enable Global NAS IPv6 address
ADR me1200AuthRADIUSconfigNasIpv6Address	1.3.6.1.4.1.9.9.815.1.48.1.2.1.2.2.4	InetAddressIPv6	read-write	Global NAS IPv6 address
STR me1200AuthRADIUSconfigNasIdentifier	1.3.6.1.4.1.9.9.815.1.48.1.2.1.2.2.5	ME1200DisplayString	read-write	Global NAS Identifier
me1200AuthRADIUShostTable	1.3.6.1.4.1.9.9.815.1.48.1.2.1.2.3		not-accessible	This is a table of Radius servers useed to query for RADIUS authentication
me1200AuthRADIUShostEntry	1.3.6.1.4.1.9.9.815.1.48.1.2.1.2.3.1		not-accessible	Each entry defines a RADIUS server, with attributes used for contacting it. Host entries are consulted in numerical order of the entry index
I32 me1200AuthRADIUShostIndex	1.3.6.1.4.1.9.9.815.1.48.1.2.1.2.3.1.1	Integer32	not-accessible	Host entry index
STR me1200AuthRADIUShostAddress	1.3.6.1.4.1.9.9.815.1.48.1.2.1.2.3.1.2	ME1200DisplayString	read-write	IPv4/IPv6 address or hostname of this server
U32 me1200AuthRADIUShostAuthPort	1.3.6.1.4.1.9.9.815.1.48.1.2.1.2.3.1.3	Unsigned32	read-write	Authentication port number (UDP) for use for this server
U32 me1200AuthRADIUShostAcctPort	1.3.6.1.4.1.9.9.815.1.48.1.2.1.2.3.1.4	Unsigned32	read-write	Accounting port number (UDP) to use for this server
U32 me1200AuthRADIUShostTimeout	1.3.6.1.4.1.9.9.815.1.48.1.2.1.2.3.1.5	Unsigned32	read-write	Seconds to wait for a response from this server. Use global timeout if zero
U32 me1200AuthRADIUShostRetransmit	1.3.6.1.4.1.9.9.815.1.48.1.2.1.2.3.1.6	Unsigned32	read-write	Number of times a request is resent to an unresponding server. Use global retransmit if zero
STR me1200AuthRADIUShostKey	1.3.6.1.4.1.9.9.815.1.48.1.2.1.2.3.1.7	ME1200DisplayString	read-write	The secret key to use for this server. Use global key if empty
me1200AuthTACACS	1.3.6.1.4.1.9.9.815.1.48.1.2.1.3
me1200AuthTACACSglobal	1.3.6.1.4.1.9.9.815.1.48.1.2.1.3.1
U32 me1200AuthTACACSglobalTimeout	1.3.6.1.4.1.9.9.815.1.48.1.2.1.3.1.1	Unsigned32	read-write	Global timeout for for TACACS servers. Can be overridden by individual host entries. (1 to 1000 seconds)
U32 me1200AuthTACACSglobalDeadtime	1.3.6.1.4.1.9.9.815.1.48.1.2.1.3.1.2	Unsigned32	read-write	Global deadtime for TACACS servers. (0 to 1440 minutes)
STR me1200AuthTACACSglobalKey	1.3.6.1.4.1.9.9.815.1.48.1.2.1.3.1.3	ME1200DisplayString	read-write	Global secret key for TACACS servers. Can be overridden by individual host entries.
me1200AuthTACACShostTable	1.3.6.1.4.1.9.9.815.1.48.1.2.1.3.2		not-accessible	This is a table of Tacacs servers useed to query for TACACS authentication
me1200AuthTACACShostEntry	1.3.6.1.4.1.9.9.815.1.48.1.2.1.3.2.1		not-accessible	Each entry defines a TACACS server, with attributes used for contacting it. Host entries are consulted in numerical order of the entry index
I32 me1200AuthTACACShostIndex	1.3.6.1.4.1.9.9.815.1.48.1.2.1.3.2.1.1	Integer32	not-accessible	Host entry index
STR me1200AuthTACACShostAddress	1.3.6.1.4.1.9.9.815.1.48.1.2.1.3.2.1.2	ME1200DisplayString	read-write	IPv4/IPv6 address or hostname of this server
U32 me1200AuthTACACShostAuthPort	1.3.6.1.4.1.9.9.815.1.48.1.2.1.3.2.1.3	Unsigned32	read-write	Authentication port number (TCP) to use for this server
U32 me1200AuthTACACShostTimeout	1.3.6.1.4.1.9.9.815.1.48.1.2.1.3.2.1.4	Unsigned32	read-write	Seconds to wait for a response from this server. Use global timeout if zero
STR me1200AuthTACACShostKey	1.3.6.1.4.1.9.9.815.1.48.1.2.1.3.2.1.5	ME1200DisplayString	read-write	The secret key to use for this server. Use global key if empty
me1200AuthMibConformance	1.3.6.1.4.1.9.9.815.1.48.2
me1200AuthMibCompliances	1.3.6.1.4.1.9.9.815.1.48.2.1
me1200AuthMibCompliance	1.3.6.1.4.1.9.9.815.1.48.2.1.1			The compliance statement for the implementation.
me1200AuthMibGroups	1.3.6.1.4.1.9.9.815.1.48.2.2
me1200AuthAgentConsoleMethodsTableInfoGroup	1.3.6.1.4.1.9.9.815.1.48.2.2.1			A collection of objects suitable for bulk operations.
me1200AuthAgentTelnetMethodsTableInfoGroup	1.3.6.1.4.1.9.9.815.1.48.2.2.2			A collection of objects suitable for bulk operations.
me1200AuthAgentSSHMethodsTableInfoGroup	1.3.6.1.4.1.9.9.815.1.48.2.2.3			A collection of objects suitable for bulk operations.
me1200AuthAgentHTTPMethodsTableInfoGroup	1.3.6.1.4.1.9.9.815.1.48.2.2.4			A collection of objects suitable for bulk operations.
me1200AuthAgentAuthorConsoleInfoGroup	1.3.6.1.4.1.9.9.815.1.48.2.2.5			A collection of objects suitable for bulk operations.
me1200AuthAgentAuthorTelnetInfoGroup	1.3.6.1.4.1.9.9.815.1.48.2.2.6			A collection of objects suitable for bulk operations.
me1200AuthAgentAuthorSSHInfoGroup	1.3.6.1.4.1.9.9.815.1.48.2.2.7			A collection of objects suitable for bulk operations.
me1200AuthAgentAcctConsoleInfoGroup	1.3.6.1.4.1.9.9.815.1.48.2.2.8			A collection of objects suitable for bulk operations.
me1200AuthAgentAcctTelnetInfoGroup	1.3.6.1.4.1.9.9.815.1.48.2.2.9			A collection of objects suitable for bulk operations.
me1200AuthAgentAcctSSHInfoGroup	1.3.6.1.4.1.9.9.815.1.48.2.2.10			A collection of objects suitable for bulk operations.
me1200AuthRADIUSglobalInfoGroup	1.3.6.1.4.1.9.9.815.1.48.2.2.11			A collection of objects suitable for bulk operations.
me1200AuthRADIUSconfigInfoGroup	1.3.6.1.4.1.9.9.815.1.48.2.2.12			A collection of objects suitable for bulk operations.
me1200AuthRADIUShostTableInfoGroup	1.3.6.1.4.1.9.9.815.1.48.2.2.13			A collection of objects suitable for bulk operations.
me1200AuthTACACSglobalInfoGroup	1.3.6.1.4.1.9.9.815.1.48.2.2.14			A collection of objects suitable for bulk operations.
me1200AuthTACACShostTableInfoGroup	1.3.6.1.4.1.9.9.815.1.48.2.2.15			A collection of objects suitable for bulk operations.

RFC description

Cisco ME1200 switch authentication and authorization management with RADIUS and TACACS+ server support.

Start monitoring Cisco ME1200 Metro Ethernet switch (RADIUS/TACACS+ auth ordering) with a free 30-day trial of IPNetwork Monitor. Import MIBs, browse SNMP OIDs, create custom SNMP monitors, configure alerts, and monitor any SNMP-enabled network device from a single console.

Download ME1200-AUTH-MIB

What Is ME1200-AUTH-MIB?

Supported Devices

Monitoring Examples

What Can Be Monitored

This MIB depends on

Related MIBs

RFC description