RADIUS-ACC-CLIENT-MIB

MIB Reference — IPNetwork Monitor

All MIBsRADIUS-ACC-CLIENT-MIB

Organization: IETF RADIUS Extensions Working Group.

Last Updated: 2006-08-21

Category: RADIUS and AAA

Description:

Monitors RADIUS accounting client operations, tracking outgoing Accounting-Requests and incoming Accounting-Responses per configured server.

Imported Objects

From INET-ADDRESS-MIB

InetAddress
InetAddressType
InetPortNumber

From SNMP-FRAMEWORK-MIB

SnmpAdminString

From SNMPv2-CONF

MODULE-COMPLIANCE
OBJECT-GROUP

From SNMPv2-SMI

Counter32
Gauge32
Integer32
IpAddress
MODULE-IDENTITY
OBJECT-IDENTITY
OBJECT-TYPE
TimeTicks
mib-2

What Is RADIUS-ACC-CLIENT-MIB?

RADIUS-ACC-CLIENT-MIB (RFC 4670) is a vendor-neutral IETF standards-track module for entities implementing the client side of the RADIUS accounting protocol, commonly a network access server, router, or switch performing AAA. It exposes per-configured-server accounting traffic statistics: requests sent, responses received, retransmissions, malformed responses, and round-trip timing, along with client-wide identifiers and invalid-server-address counts. It is used to monitor the software/protocol health of the accounting client's relationship with its RADIUS servers — rising retransmissions or malformed responses, or a growing round-trip time, indicate a struggling or unreachable RADIUS accounting server, while invalid server address counts can flag misconfiguration. Administrators consulting the RADIUS-ACC-CLIENT-MIB OID list will find these counters organized under a single enterprise-registered subtree alongside the client-wide identifiers. It builds on the base RADIUS accounting protocol standard and is a companion to RADIUS authentication client MIBs used in the same AAA infrastructure. It is deployed on network access servers, routers, or switches wherever RADIUS accounting is used for usage tracking or billing.

IPNetwork Monitor allows you to monitor SNMP objects defined in RADIUS-ACC-CLIENT-MIB. Use the built-in SNMP Monitoring Browser to explore available variables, view their current values and descriptions, and select the objects you want to monitor. You can then create SNMP monitors, configure thresholds, and receive alerts when monitored values change.

What Can Be Monitored

  • accounting requests sent per server
  • accounting responses received
  • retransmissions
  • malformed responses
  • round-trip time to RADIUS server
  • invalid server address count

Supported Devices

  • vendor-neutral, standards-based MIB, not tied to a specific manufacturer
  • network access servers, routers, and switches performing RADIUS accounting

Monitoring Examples

An administrator would poll the radiusAccServerTable (radiusAccServerEntry, keyed by radiusAccServerIndex and radiusAccServerAddress) alongside radiusAccClientRequests, radiusAccClientRetransmissions, and radiusAccClientResponses to see whether accounting requests to a given server are being answered; a rising radiusAccClientRetransmissions or radiusAccClientMalformedResponses count combined with a growing radiusAccClientRoundTripTime points to a failing or overloaded RADIUS accounting server.

OIDs
OID symbolicOID numericTypeAccessDescription
radiusMIB1.3.6.1.2.1.67The OID assigned to RADIUS MIB work by the IANA.
radiusAccounting1.3.6.1.2.1.67.2
radiusAccClientMIB1.3.6.1.2.1.67.2.2The MIB module for entities implementing the client side of the Remote Authentication Dial-In User Service (RADIUS) accounting protocol. Copyright (C) The Internet Society (2006). This version of this MIB module is part of RFC 4670; see the RFC itself for full legal notices.
radiusAccClientMIBObjects1.3.6.1.2.1.67.2.2.1
radiusAccClient1.3.6.1.2.1.67.2.2.1.1
C32 radiusAccClientInvalidServerAddresses1.3.6.1.2.1.67.2.2.1.1.1Counter32read-onlyThe number of RADIUS Accounting-Response packets received from unknown addresses.
STR radiusAccClientIdentifier1.3.6.1.2.1.67.2.2.1.1.2SnmpAdminStringread-onlyThe NAS-Identifier of the RADIUS accounting client. This is not necessarily the same as sysName in MIB II.
radiusAccServerTable1.3.6.1.2.1.67.2.2.1.1.3not-accessibleThe (conceptual) table listing the RADIUS accounting servers with which the client shares a secret.
radiusAccServerEntry1.3.6.1.2.1.67.2.2.1.1.3.1not-accessibleAn entry (conceptual row) representing a RADIUS accounting server with which the client shares a secret.
I32 radiusAccServerIndex1.3.6.1.2.1.67.2.2.1.1.3.1.1Integer32not-accessibleA number uniquely identifying each RADIUS Accounting server with which this client communicates.
IP radiusAccServerAddress1.3.6.1.2.1.67.2.2.1.1.3.1.2IpAddressread-onlyThe IP address of the RADIUS accounting server referred to in this table entry.
I32 radiusAccClientServerPortNumber1.3.6.1.2.1.67.2.2.1.1.3.1.3Integer32read-onlyThe UDP port the client is using to send requests to this server.
TIK radiusAccClientRoundTripTime1.3.6.1.2.1.67.2.2.1.1.3.1.4TimeTicksread-onlyThe time interval between the most recent Accounting-Response and the Accounting-Request that matched it from this RADIUS accounting server.
C32 radiusAccClientRequests1.3.6.1.2.1.67.2.2.1.1.3.1.5Counter32read-onlyThe number of RADIUS Accounting-Request packets sent. This does not include retransmissions.
C32 radiusAccClientRetransmissions1.3.6.1.2.1.67.2.2.1.1.3.1.6Counter32read-onlyThe number of RADIUS Accounting-Request packets retransmitted to this RADIUS accounting server. Retransmissions include retries where the Identifier and Acct-Delay have been updated, as well as those in which they remain the same.
C32 radiusAccClientResponses1.3.6.1.2.1.67.2.2.1.1.3.1.7Counter32read-onlyThe number of RADIUS packets received on the accounting port from this server.
C32 radiusAccClientMalformedResponses1.3.6.1.2.1.67.2.2.1.1.3.1.8Counter32read-onlyThe number of malformed RADIUS Accounting-Response packets received from this server. Malformed packets include packets with an invalid length. Bad authenticators and unknown types are not included as malformed accounting responses.
C32 radiusAccClientBadAuthenticators1.3.6.1.2.1.67.2.2.1.1.3.1.9Counter32read-onlyThe number of RADIUS Accounting-Response packets that contained invalid authenticators received from this server.
G32 radiusAccClientPendingRequests1.3.6.1.2.1.67.2.2.1.1.3.1.10Gauge32read-onlyThe number of RADIUS Accounting-Request packets sent to this server that have not yet timed out or received a response. This variable is incremented when an Accounting-Request is sent and decremented due to receipt of an Accounting-Response, a timeout, or a retransmission.
C32 radiusAccClientTimeouts1.3.6.1.2.1.67.2.2.1.1.3.1.11Counter32read-onlyThe number of accounting timeouts to this server. After a timeout, the client may retry to the same server, send to a different server, or give up. A retry to the same server is counted as a retransmit as well as a timeout. A send to a different server is counted as an Accounting-Request as well as a timeout.
C32 radiusAccClientUnknownTypes1.3.6.1.2.1.67.2.2.1.1.3.1.12Counter32read-onlyThe number of RADIUS packets of unknown type that were received from this server on the accounting port.
C32 radiusAccClientPacketsDropped1.3.6.1.2.1.67.2.2.1.1.3.1.13Counter32read-onlyThe number of RADIUS packets that were received from this server on the accounting port and dropped for some other reason.
radiusAccServerExtTable1.3.6.1.2.1.67.2.2.1.1.4not-accessibleThe (conceptual) table listing the RADIUS accounting servers with which the client shares a secret.
radiusAccServerExtEntry1.3.6.1.2.1.67.2.2.1.1.4.1not-accessibleAn entry (conceptual row) representing a RADIUS accounting server with which the client shares a secret.
I32 radiusAccServerExtIndex1.3.6.1.2.1.67.2.2.1.1.4.1.1Integer32not-accessibleA number uniquely identifying each RADIUS Accounting server with which this client communicates.
IPt radiusAccServerInetAddressType1.3.6.1.2.1.67.2.2.1.1.4.1.2InetAddressTyperead-onlyThe type of address format used for the radiusAccServerInetAddress object.
IP radiusAccServerInetAddress1.3.6.1.2.1.67.2.2.1.1.4.1.3InetAddressread-onlyThe IP address of the RADIUS accounting server referred to in this table entry, using the version-neutral IP address format.
INE radiusAccClientServerInetPortNumber1.3.6.1.2.1.67.2.2.1.1.4.1.4InetPortNumberread-onlyThe UDP port the client is using to send requests to this accounting server. The value zero (0) is invalid.
TIK radiusAccClientExtRoundTripTime1.3.6.1.2.1.67.2.2.1.1.4.1.5TimeTicksread-onlyThe time interval between the most recent Accounting-Response and the Accounting-Request that matched it from this RADIUS accounting server.
C32 radiusAccClientExtRequests1.3.6.1.2.1.67.2.2.1.1.4.1.6Counter32read-onlyThe number of RADIUS Accounting-Request packets sent. This does not include retransmissions. This counter may experience a discontinuity when the RADIUS Accounting Client module within the managed entity is reinitialized, as indicated by the current value of radiusAccClientCounterDiscontinuity.
C32 radiusAccClientExtRetransmissions1.3.6.1.2.1.67.2.2.1.1.4.1.7Counter32read-onlyThe number of RADIUS Accounting-Request packets retransmitted to this RADIUS accounting server. Retransmissions include retries where the Identifier and Acct-Delay have been updated, as well as those in which they remain the same. This counter may experience a discontinuity when the RADIUS Accounting Client module within the managed entity is reinitialized, as indicated by the current value of radiusAccClientCounterDiscontinuity.
C32 radiusAccClientExtResponses1.3.6.1.2.1.67.2.2.1.1.4.1.8Counter32read-onlyThe number of RADIUS packets received on the accounting port from this server. This counter may experience a discontinuity when the RADIUS Accounting Client module within the managed entity is reinitialized, as indicated by the current value of radiusAccClientCounterDiscontinuity.
C32 radiusAccClientExtMalformedResponses1.3.6.1.2.1.67.2.2.1.1.4.1.9Counter32read-onlyThe number of malformed RADIUS Accounting-Response packets received from this server. Malformed packets include packets with an invalid length. Bad authenticators and unknown types are not included as malformed accounting responses. This counter may experience a discontinuity when the RADIUS Accounting Client module within the managed entity is reinitialized, as indicated by the current value of radiusAccClientCounterDiscontinuity.
C32 radiusAccClientExtBadAuthenticators1.3.6.1.2.1.67.2.2.1.1.4.1.10Counter32read-onlyThe number of RADIUS Accounting-Response packets that contained invalid authenticators received from this server. This counter may experience a discontinuity when the RADIUS Accounting Client module within the managed entity is reinitialized, as indicated by the current value of radiusAccClientCounterDiscontinuity.
G32 radiusAccClientExtPendingRequests1.3.6.1.2.1.67.2.2.1.1.4.1.11Gauge32read-onlyThe number of RADIUS Accounting-Request packets sent to this server that have not yet timed out or received a response. This variable is incremented when an Accounting-Request is sent and decremented due to receipt of an Accounting-Response, a timeout, or a retransmission. This counter may experience a discontinuity when the RADIUS Accounting Client module within the managed entity is reinitialized, as indicated by the current value of radiusAccClientCounterDiscontinuity.
C32 radiusAccClientExtTimeouts1.3.6.1.2.1.67.2.2.1.1.4.1.12Counter32read-onlyThe number of accounting timeouts to this server. After a timeout, the client may retry to the same server, send to a different server, or give up. A retry to the same server is counted as a retransmit as well as a timeout. A send to a different server is counted as an Accounting-Request as well as a timeout. This counter may experience a discontinuity when the RADIUS Accounting Client module within the managed entity is reinitialized, as indicated by the current value of radiusAccClientCounterDiscontinuity.
C32 radiusAccClientExtUnknownTypes1.3.6.1.2.1.67.2.2.1.1.4.1.13Counter32read-onlyThe number of RADIUS packets of unknown type that were received from this server on the accounting port. This counter may experience a discontinuity when the RADIUS Accounting Client module within the managed entity is reinitialized, as indicated by the current value of radiusAccClientCounterDiscontinuity.
C32 radiusAccClientExtPacketsDropped1.3.6.1.2.1.67.2.2.1.1.4.1.14Counter32read-onlyThe number of RADIUS packets that were received from this server on the accounting port and dropped for some other reason. This counter may experience a discontinuity when the RADIUS Accounting Client module within the managed entity is reinitialized, as indicated by the current value of radiusAccClientCounterDiscontinuity.
TIK radiusAccClientCounterDiscontinuity1.3.6.1.2.1.67.2.2.1.1.4.1.15TimeTicksread-onlyThe number of centiseconds since the last discontinuity in the RADIUS Accounting Client counters. A discontinuity may be the result of a reinitialization of the RADIUS Accounting Client module within the managed entity.
radiusAccClientMIBConformance1.3.6.1.2.1.67.2.2.2
radiusAccClientMIBCompliances1.3.6.1.2.1.67.2.2.2.1
radiusAccClientMIBCompliance1.3.6.1.2.1.67.2.2.2.1.1The compliance statement for accounting clients implementing the RADIUS Accounting Client MIB. Implementation of this module is for IPv4-only entities, or for backwards compatibility use with entities that support both IPv4 and IPv6.
radiusAccClientExtMIBCompliance1.3.6.1.2.1.67.2.2.2.1.2The compliance statement for accounting clients implementing the RADIUS Accounting Client IPv6 Extensions MIB. Implementation of this module is for entities that support IPv6, or support IPv4 and IPv6.
radiusAccClientMIBGroups1.3.6.1.2.1.67.2.2.2.2
radiusAccClientMIBGroup1.3.6.1.2.1.67.2.2.2.2.1The basic collection of objects providing management of RADIUS Accounting Clients.
radiusAccClientExtMIBGroup1.3.6.1.2.1.67.2.2.2.2.2The basic collection of objects providing management of RADIUS Accounting Clients.

RFC description

Defines managed objects for RADIUS Accounting Client implementations including server configuration, accounting request/response statistics, and counter objects as standardized in RFC 4670.

Start monitoring vendor-neutral, standards-based MIB, network access servers/routers/switches (RADIUS accounting client, RFC 4670) with a free 30-day trial of IPNetwork Monitor. Import MIBs, browse SNMP OIDs, create custom SNMP monitors, configure alerts, and monitor any SNMP-enabled network device from a single console.

Download RADIUS-ACC-CLIENT-MIB