All MIBs › RADIUS-ACC-CLIENT-MIB
Organization: IETF RADIUS Extensions Working Group.
Last Updated: 2006-08-21
Category: RADIUS and AAA
Description:
Monitors RADIUS accounting client operations, tracking outgoing Accounting-Requests and incoming Accounting-Responses per configured server.
Imported Objects
From INET-ADDRESS-MIB
| InetAddress | |
| InetAddressType | |
| InetPortNumber |
From SNMP-FRAMEWORK-MIB
| SnmpAdminString |
From SNMPv2-CONF
| MODULE-COMPLIANCE | |
| OBJECT-GROUP |
From SNMPv2-SMI
| Counter32 | |
| Gauge32 | |
| Integer32 | |
| IpAddress | |
| MODULE-IDENTITY | |
| OBJECT-IDENTITY | |
| OBJECT-TYPE | |
| TimeTicks | |
| mib-2 |
What Is RADIUS-ACC-CLIENT-MIB?
RADIUS-ACC-CLIENT-MIB (RFC 4670) is a vendor-neutral IETF standards-track module for entities implementing the client side of the RADIUS accounting protocol, commonly a network access server, router, or switch performing AAA. It exposes per-configured-server accounting traffic statistics: requests sent, responses received, retransmissions, malformed responses, and round-trip timing, along with client-wide identifiers and invalid-server-address counts. It is used to monitor the software/protocol health of the accounting client's relationship with its RADIUS servers — rising retransmissions or malformed responses, or a growing round-trip time, indicate a struggling or unreachable RADIUS accounting server, while invalid server address counts can flag misconfiguration. Administrators consulting the RADIUS-ACC-CLIENT-MIB OID list will find these counters organized under a single enterprise-registered subtree alongside the client-wide identifiers. It builds on the base RADIUS accounting protocol standard and is a companion to RADIUS authentication client MIBs used in the same AAA infrastructure. It is deployed on network access servers, routers, or switches wherever RADIUS accounting is used for usage tracking or billing.
IPNetwork Monitor allows you to monitor SNMP objects defined in RADIUS-ACC-CLIENT-MIB. Use the built-in SNMP Monitoring Browser to explore available variables, view their current values and descriptions, and select the objects you want to monitor. You can then create SNMP monitors, configure thresholds, and receive alerts when monitored values change.
What Can Be Monitored
- accounting requests sent per server
- accounting responses received
- retransmissions
- malformed responses
- round-trip time to RADIUS server
- invalid server address count
Supported Devices
- vendor-neutral, standards-based MIB, not tied to a specific manufacturer
- network access servers, routers, and switches performing RADIUS accounting
Monitoring Examples
An administrator would poll the radiusAccServerTable (radiusAccServerEntry, keyed by radiusAccServerIndex and radiusAccServerAddress) alongside radiusAccClientRequests, radiusAccClientRetransmissions, and radiusAccClientResponses to see whether accounting requests to a given server are being answered; a rising radiusAccClientRetransmissions or radiusAccClientMalformedResponses count combined with a growing radiusAccClientRoundTripTime points to a failing or overloaded RADIUS accounting server.
OIDs
| OID symbolic | OID numeric | Type | Access | Description |
|---|---|---|---|---|
| radiusMIB | 1.3.6.1.2.1.67 | The OID assigned to RADIUS MIB work by the IANA. | ||
| radiusAccounting | 1.3.6.1.2.1.67.2 | |||
| radiusAccClientMIB | 1.3.6.1.2.1.67.2.2 | The MIB module for entities implementing the client side of the Remote Authentication Dial-In User Service (RADIUS) accounting protocol. Copyright (C) The Internet Society (2006). This version of this MIB module is part of RFC 4670; see the RFC itself for full legal notices. | ||
| radiusAccClientMIBObjects | 1.3.6.1.2.1.67.2.2.1 | |||
| radiusAccClient | 1.3.6.1.2.1.67.2.2.1.1 | |||
| C32 radiusAccClientInvalidServerAddresses | 1.3.6.1.2.1.67.2.2.1.1.1 | Counter32 | read-only | The number of RADIUS Accounting-Response packets received from unknown addresses. |
| STR radiusAccClientIdentifier | 1.3.6.1.2.1.67.2.2.1.1.2 | SnmpAdminString | read-only | The NAS-Identifier of the RADIUS accounting client. This is not necessarily the same as sysName in MIB II. |
| radiusAccServerTable | 1.3.6.1.2.1.67.2.2.1.1.3 | not-accessible | The (conceptual) table listing the RADIUS accounting servers with which the client shares a secret. | |
| radiusAccServerEntry | 1.3.6.1.2.1.67.2.2.1.1.3.1 | not-accessible | An entry (conceptual row) representing a RADIUS accounting server with which the client shares a secret. | |
| I32 radiusAccServerIndex | 1.3.6.1.2.1.67.2.2.1.1.3.1.1 | Integer32 | not-accessible | A number uniquely identifying each RADIUS Accounting server with which this client communicates. |
| IP radiusAccServerAddress | 1.3.6.1.2.1.67.2.2.1.1.3.1.2 | IpAddress | read-only | The IP address of the RADIUS accounting server referred to in this table entry. |
| I32 radiusAccClientServerPortNumber | 1.3.6.1.2.1.67.2.2.1.1.3.1.3 | Integer32 | read-only | The UDP port the client is using to send requests to this server. |
| TIK radiusAccClientRoundTripTime | 1.3.6.1.2.1.67.2.2.1.1.3.1.4 | TimeTicks | read-only | The time interval between the most recent Accounting-Response and the Accounting-Request that matched it from this RADIUS accounting server. |
| C32 radiusAccClientRequests | 1.3.6.1.2.1.67.2.2.1.1.3.1.5 | Counter32 | read-only | The number of RADIUS Accounting-Request packets sent. This does not include retransmissions. |
| C32 radiusAccClientRetransmissions | 1.3.6.1.2.1.67.2.2.1.1.3.1.6 | Counter32 | read-only | The number of RADIUS Accounting-Request packets retransmitted to this RADIUS accounting server. Retransmissions include retries where the Identifier and Acct-Delay have been updated, as well as those in which they remain the same. |
| C32 radiusAccClientResponses | 1.3.6.1.2.1.67.2.2.1.1.3.1.7 | Counter32 | read-only | The number of RADIUS packets received on the accounting port from this server. |
| C32 radiusAccClientMalformedResponses | 1.3.6.1.2.1.67.2.2.1.1.3.1.8 | Counter32 | read-only | The number of malformed RADIUS Accounting-Response packets received from this server. Malformed packets include packets with an invalid length. Bad authenticators and unknown types are not included as malformed accounting responses. |
| C32 radiusAccClientBadAuthenticators | 1.3.6.1.2.1.67.2.2.1.1.3.1.9 | Counter32 | read-only | The number of RADIUS Accounting-Response packets that contained invalid authenticators received from this server. |
| G32 radiusAccClientPendingRequests | 1.3.6.1.2.1.67.2.2.1.1.3.1.10 | Gauge32 | read-only | The number of RADIUS Accounting-Request packets sent to this server that have not yet timed out or received a response. This variable is incremented when an Accounting-Request is sent and decremented due to receipt of an Accounting-Response, a timeout, or a retransmission. |
| C32 radiusAccClientTimeouts | 1.3.6.1.2.1.67.2.2.1.1.3.1.11 | Counter32 | read-only | The number of accounting timeouts to this server. After a timeout, the client may retry to the same server, send to a different server, or give up. A retry to the same server is counted as a retransmit as well as a timeout. A send to a different server is counted as an Accounting-Request as well as a timeout. |
| C32 radiusAccClientUnknownTypes | 1.3.6.1.2.1.67.2.2.1.1.3.1.12 | Counter32 | read-only | The number of RADIUS packets of unknown type that were received from this server on the accounting port. |
| C32 radiusAccClientPacketsDropped | 1.3.6.1.2.1.67.2.2.1.1.3.1.13 | Counter32 | read-only | The number of RADIUS packets that were received from this server on the accounting port and dropped for some other reason. |
| radiusAccServerExtTable | 1.3.6.1.2.1.67.2.2.1.1.4 | not-accessible | The (conceptual) table listing the RADIUS accounting servers with which the client shares a secret. | |
| radiusAccServerExtEntry | 1.3.6.1.2.1.67.2.2.1.1.4.1 | not-accessible | An entry (conceptual row) representing a RADIUS accounting server with which the client shares a secret. | |
| I32 radiusAccServerExtIndex | 1.3.6.1.2.1.67.2.2.1.1.4.1.1 | Integer32 | not-accessible | A number uniquely identifying each RADIUS Accounting server with which this client communicates. |
| IPt radiusAccServerInetAddressType | 1.3.6.1.2.1.67.2.2.1.1.4.1.2 | InetAddressType | read-only | The type of address format used for the radiusAccServerInetAddress object. |
| IP radiusAccServerInetAddress | 1.3.6.1.2.1.67.2.2.1.1.4.1.3 | InetAddress | read-only | The IP address of the RADIUS accounting server referred to in this table entry, using the version-neutral IP address format. |
| INE radiusAccClientServerInetPortNumber | 1.3.6.1.2.1.67.2.2.1.1.4.1.4 | InetPortNumber | read-only | The UDP port the client is using to send requests to this accounting server. The value zero (0) is invalid. |
| TIK radiusAccClientExtRoundTripTime | 1.3.6.1.2.1.67.2.2.1.1.4.1.5 | TimeTicks | read-only | The time interval between the most recent Accounting-Response and the Accounting-Request that matched it from this RADIUS accounting server. |
| C32 radiusAccClientExtRequests | 1.3.6.1.2.1.67.2.2.1.1.4.1.6 | Counter32 | read-only | The number of RADIUS Accounting-Request packets sent. This does not include retransmissions. This counter may experience a discontinuity when the RADIUS Accounting Client module within the managed entity is reinitialized, as indicated by the current value of radiusAccClientCounterDiscontinuity. |
| C32 radiusAccClientExtRetransmissions | 1.3.6.1.2.1.67.2.2.1.1.4.1.7 | Counter32 | read-only | The number of RADIUS Accounting-Request packets retransmitted to this RADIUS accounting server. Retransmissions include retries where the Identifier and Acct-Delay have been updated, as well as those in which they remain the same. This counter may experience a discontinuity when the RADIUS Accounting Client module within the managed entity is reinitialized, as indicated by the current value of radiusAccClientCounterDiscontinuity. |
| C32 radiusAccClientExtResponses | 1.3.6.1.2.1.67.2.2.1.1.4.1.8 | Counter32 | read-only | The number of RADIUS packets received on the accounting port from this server. This counter may experience a discontinuity when the RADIUS Accounting Client module within the managed entity is reinitialized, as indicated by the current value of radiusAccClientCounterDiscontinuity. |
| C32 radiusAccClientExtMalformedResponses | 1.3.6.1.2.1.67.2.2.1.1.4.1.9 | Counter32 | read-only | The number of malformed RADIUS Accounting-Response packets received from this server. Malformed packets include packets with an invalid length. Bad authenticators and unknown types are not included as malformed accounting responses. This counter may experience a discontinuity when the RADIUS Accounting Client module within the managed entity is reinitialized, as indicated by the current value of radiusAccClientCounterDiscontinuity. |
| C32 radiusAccClientExtBadAuthenticators | 1.3.6.1.2.1.67.2.2.1.1.4.1.10 | Counter32 | read-only | The number of RADIUS Accounting-Response packets that contained invalid authenticators received from this server. This counter may experience a discontinuity when the RADIUS Accounting Client module within the managed entity is reinitialized, as indicated by the current value of radiusAccClientCounterDiscontinuity. |
| G32 radiusAccClientExtPendingRequests | 1.3.6.1.2.1.67.2.2.1.1.4.1.11 | Gauge32 | read-only | The number of RADIUS Accounting-Request packets sent to this server that have not yet timed out or received a response. This variable is incremented when an Accounting-Request is sent and decremented due to receipt of an Accounting-Response, a timeout, or a retransmission. This counter may experience a discontinuity when the RADIUS Accounting Client module within the managed entity is reinitialized, as indicated by the current value of radiusAccClientCounterDiscontinuity. |
| C32 radiusAccClientExtTimeouts | 1.3.6.1.2.1.67.2.2.1.1.4.1.12 | Counter32 | read-only | The number of accounting timeouts to this server. After a timeout, the client may retry to the same server, send to a different server, or give up. A retry to the same server is counted as a retransmit as well as a timeout. A send to a different server is counted as an Accounting-Request as well as a timeout. This counter may experience a discontinuity when the RADIUS Accounting Client module within the managed entity is reinitialized, as indicated by the current value of radiusAccClientCounterDiscontinuity. |
| C32 radiusAccClientExtUnknownTypes | 1.3.6.1.2.1.67.2.2.1.1.4.1.13 | Counter32 | read-only | The number of RADIUS packets of unknown type that were received from this server on the accounting port. This counter may experience a discontinuity when the RADIUS Accounting Client module within the managed entity is reinitialized, as indicated by the current value of radiusAccClientCounterDiscontinuity. |
| C32 radiusAccClientExtPacketsDropped | 1.3.6.1.2.1.67.2.2.1.1.4.1.14 | Counter32 | read-only | The number of RADIUS packets that were received from this server on the accounting port and dropped for some other reason. This counter may experience a discontinuity when the RADIUS Accounting Client module within the managed entity is reinitialized, as indicated by the current value of radiusAccClientCounterDiscontinuity. |
| TIK radiusAccClientCounterDiscontinuity | 1.3.6.1.2.1.67.2.2.1.1.4.1.15 | TimeTicks | read-only | The number of centiseconds since the last discontinuity in the RADIUS Accounting Client counters. A discontinuity may be the result of a reinitialization of the RADIUS Accounting Client module within the managed entity. |
| radiusAccClientMIBConformance | 1.3.6.1.2.1.67.2.2.2 | |||
| radiusAccClientMIBCompliances | 1.3.6.1.2.1.67.2.2.2.1 | |||
| radiusAccClientMIBCompliance | 1.3.6.1.2.1.67.2.2.2.1.1 | The compliance statement for accounting clients implementing the RADIUS Accounting Client MIB. Implementation of this module is for IPv4-only entities, or for backwards compatibility use with entities that support both IPv4 and IPv6. | ||
| radiusAccClientExtMIBCompliance | 1.3.6.1.2.1.67.2.2.2.1.2 | The compliance statement for accounting clients implementing the RADIUS Accounting Client IPv6 Extensions MIB. Implementation of this module is for entities that support IPv6, or support IPv4 and IPv6. | ||
| radiusAccClientMIBGroups | 1.3.6.1.2.1.67.2.2.2.2 | |||
| radiusAccClientMIBGroup | 1.3.6.1.2.1.67.2.2.2.2.1 | The basic collection of objects providing management of RADIUS Accounting Clients. | ||
| radiusAccClientExtMIBGroup | 1.3.6.1.2.1.67.2.2.2.2.2 | The basic collection of objects providing management of RADIUS Accounting Clients. |
RFC description
Defines managed objects for RADIUS Accounting Client implementations including server configuration, accounting request/response statistics, and counter objects as standardized in RFC 4670.
Start monitoring vendor-neutral, standards-based MIB, network access servers/routers/switches (RADIUS accounting client, RFC 4670) with a free 30-day trial of IPNetwork Monitor. Import MIBs, browse SNMP OIDs, create custom SNMP monitors, configure alerts, and monitor any SNMP-enabled network device from a single console.