RADIUS-ACC-CLIENT-MIB

All MIBs › RADIUS-ACC-CLIENT-MIB

Organization: IETF RADIUS Extensions Working Group.

Last Updated: 2006-08-21

Category: RADIUS and AAA

Description: Monitors RADIUS accounting client operations, tracking outgoing Accounting-Requests and incoming Accounting-Responses per configured server.

IPNetwork Monitor uses several OIDs from this MIB in network discovery and polling the applicable devices. Start monitoring RADIUS-ACC-CLIENT-MIB with a free 30-day trial of IPNetwork Monitor.

What Is RADIUS-ACC-CLIENT-MIB?

RADIUS-ACC-CLIENT-MIB (RFC 4670) is a vendor-neutral IETF standards-track module for entities implementing the client side of the RADIUS accounting protocol, commonly a network access server, router, or switch performing AAA. It exposes per-configured-server accounting traffic statistics: requests sent, responses received, retransmissions, malformed responses, and round-trip timing, along with client-wide identifiers and invalid-server-address counts. It is used to monitor the software/protocol health of the accounting client's relationship with its RADIUS servers — rising retransmissions or malformed responses, or a growing round-trip time, indicate a struggling or unreachable RADIUS accounting server, while invalid server address counts can flag misconfiguration. Administrators consulting the RADIUS-ACC-CLIENT-MIB OID list will find these counters organized under a single enterprise-registered subtree alongside the client-wide identifiers. It builds on the base RADIUS accounting protocol standard and is a companion to RADIUS authentication client MIBs used in the same AAA infrastructure. It is deployed on network access servers, routers, or switches wherever RADIUS accounting is used for usage tracking or billing.

IPNetwork Monitor allows you to monitor SNMP objects defined in RADIUS-ACC-CLIENT-MIB. Use the built-in SNMP Monitoring Browser to explore available variables, view their current values and descriptions, and select the objects you want to monitor. You can then create SNMP monitors, configure thresholds, and receive alerts when monitored values change.

Supported Devices

vendor-neutral, standards-based MIB, not tied to a specific manufacturer
network access servers, routers, and switches performing RADIUS accounting

Monitoring Examples

An administrator would poll the radiusAccServerTable (radiusAccServerEntry, keyed by radiusAccServerIndex and radiusAccServerAddress) alongside radiusAccClientRequests, radiusAccClientRetransmissions, and radiusAccClientResponses to see whether accounting requests to a given server are being answered; a rising radiusAccClientRetransmissions or radiusAccClientMalformedResponses count combined with a growing radiusAccClientRoundTripTime points to a failing or overloaded RADIUS accounting server.

What Can Be Monitored

accounting requests sent per server
accounting responses received
retransmissions
malformed responses
round-trip time to RADIUS server
invalid server address count

Imported Objects

From INET-ADDRESS-MIB

InetAddress
InetAddressType
InetPortNumber

From SNMP-FRAMEWORK-MIB

SnmpAdminString

From SNMPv2-CONF

MODULE-COMPLIANCE
OBJECT-GROUP

From SNMPv2-SMI

Counter32
Gauge32
Integer32
IpAddress
MODULE-IDENTITY
OBJECT-IDENTITY
OBJECT-TYPE
TimeTicks
mib-2

How to Use in IPNetwork Monitor

Example using radiusAccClientCounterDiscontinuity OID:

Select a device implementing RADIUS-ACC-CLIENT-MIB as the target host to create a monitor — the SNMP service should be up and running on it. Click New Monitor, then check SNMP Custom on the Favorites tab, click Next, and confirm the host. On the next page, click Select... to open the built-in SNMP MIB Browser and type radiusAccClientCounterDiscontinuity into the Find box to locate it in the OID tree, then select it and click OK. It reports how long, in centiseconds, since the RADIUS Accounting Client's counters last had a discontinuity (typically caused by a reinitialization). On the monitor's Main parameters page you can set the target's SNMP port (default 161), credentials, polling interval, and other settings — see the SNMP Monitor help for details. On the State conditions and Alerting tabs, configure when the monitor should change state and trigger an alert; since this is a TimeTicks-type OID, Value bounds is the most useful condition here — trigger an alert if the value is unexpectedly low, since that indicates the RADIUS accounting counters were recently reset — often the result of an unplanned restart. Click Finish to create the monitor; you can adjust any parameter later.

OIDs

OID symbolic	OID numeric	Type	Access	Description
radiusAccClient	1.3.6.1.2.1.67.2.2.1.1
C32 radiusAccClientBadAuthenticators	1.3.6.1.2.1.67.2.2.1.1.3.1.9	Counter32	read-only	The number of RADIUS Accounting-Response packets that contained invalid authenticators received from this server.
TIK radiusAccClientCounterDiscontinuityEx	1.3.6.1.2.1.67.2.2.1.1.4.1.15	TimeTicks	read-only	The number of centiseconds since the last discontinuity in the RADIUS Accounting Client counters. A discontinuity may be the result of a reinitialization of the RADIUS Accounting Client module within the managed entity.
C32 radiusAccClientExtBadAuthenticators	1.3.6.1.2.1.67.2.2.1.1.4.1.10	Counter32	read-only	The number of RADIUS Accounting-Response packets that contained invalid authenticators received from this server. This counter may experience a discontinuity when the RADIUS Accounting Client module within the managed entity is reinitialized, as indicated by the current value of radiusAccClientCounterDiscontinuity.
C32 radiusAccClientExtMalformedResponses	1.3.6.1.2.1.67.2.2.1.1.4.1.9	Counter32	read-only	The number of malformed RADIUS Accounting-Response packets received from this server. Malformed packets include packets with an invalid length. Bad authenticators and unknown types are not included as malformed accounting responses. This counter may experience a discontinuity when the RADIUS Accounting Client module within the managed entity is reinitialized, as indicated by the current value of radiusAccClientCounterDiscontinuity.
radiusAccClientExtMIBCompliance	1.3.6.1.2.1.67.2.2.2.1.2			The compliance statement for accounting clients implementing the RADIUS Accounting Client IPv6 Extensions MIB. Implementation of this module is for entities that support IPv6, or support IPv4 and IPv6.
radiusAccClientExtMIBGroup	1.3.6.1.2.1.67.2.2.2.2.2			The basic collection of objects providing management of RADIUS Accounting Clients.
C32 radiusAccClientExtPacketsDropped	1.3.6.1.2.1.67.2.2.1.1.4.1.14	Counter32	read-only	The number of RADIUS packets that were received from this server on the accounting port and dropped for some other reason. This counter may experience a discontinuity when the RADIUS Accounting Client module within the managed entity is reinitialized, as indicated by the current value of radiusAccClientCounterDiscontinuity.
G32 radiusAccClientExtPendingRequests	1.3.6.1.2.1.67.2.2.1.1.4.1.11	Gauge32	read-only	The number of RADIUS Accounting-Request packets sent to this server that have not yet timed out or received a response. This variable is incremented when an Accounting-Request is sent and decremented due to receipt of an Accounting-Response, a timeout, or a retransmission. This counter may experience a discontinuity when the RADIUS Accounting Client module within the managed entity is reinitialized, as indicated by the current value of radiusAccClientCounterDiscontinuity.
C32 radiusAccClientExtRequests	1.3.6.1.2.1.67.2.2.1.1.4.1.6	Counter32	read-only	The number of RADIUS Accounting-Request packets sent. This does not include retransmissions. This counter may experience a discontinuity when the RADIUS Accounting Client module within the managed entity is reinitialized, as indicated by the current value of radiusAccClientCounterDiscontinuity.
C32 radiusAccClientExtResponses	1.3.6.1.2.1.67.2.2.1.1.4.1.8	Counter32	read-only	The number of RADIUS packets received on the accounting port from this server. This counter may experience a discontinuity when the RADIUS Accounting Client module within the managed entity is reinitialized, as indicated by the current value of radiusAccClientCounterDiscontinuity.
C32 radiusAccClientExtRetransmissions	1.3.6.1.2.1.67.2.2.1.1.4.1.7	Counter32	read-only	The number of RADIUS Accounting-Request packets retransmitted to this RADIUS accounting server. Retransmissions include retries where the Identifier and Acct-Delay have been updated, as well as those in which they remain the same. This counter may experience a discontinuity when the RADIUS Accounting Client module within the managed entity is reinitialized, as indicated by the current value of radiusAccClientCounterDiscontinuity.
TIK radiusAccClientExtRoundTripTime	1.3.6.1.2.1.67.2.2.1.1.4.1.5	TimeTicks	read-only	The time interval between the most recent Accounting-Response and the Accounting-Request that matched it from this RADIUS accounting server.
C32 radiusAccClientExtTimeouts	1.3.6.1.2.1.67.2.2.1.1.4.1.12	Counter32	read-only	The number of accounting timeouts to this server. After a timeout, the client may retry to the same server, send to a different server, or give up. A retry to the same server is counted as a retransmit as well as a timeout. A send to a different server is counted as an Accounting-Request as well as a timeout. This counter may experience a discontinuity when the RADIUS Accounting Client module within the managed entity is reinitialized, as indicated by the current value of radiusAccClientCounterDiscontinuity.
C32 radiusAccClientExtUnknownTypes	1.3.6.1.2.1.67.2.2.1.1.4.1.13	Counter32	read-only	The number of RADIUS packets of unknown type that were received from this server on the accounting port. This counter may experience a discontinuity when the RADIUS Accounting Client module within the managed entity is reinitialized, as indicated by the current value of radiusAccClientCounterDiscontinuity.
STR radiusAccClientIdentifier	1.3.6.1.2.1.67.2.2.1.1.2	SnmpAdminString	read-only	The NAS-Identifier of the RADIUS accounting client. This is not necessarily the same as sysName in MIB II.
C32 radiusAccClientInvalidServerAddresses	1.3.6.1.2.1.67.2.2.1.1.1	Counter32	read-only	The number of RADIUS Accounting-Response packets received from unknown addresses.
C32 radiusAccClientMalformedResponses	1.3.6.1.2.1.67.2.2.1.1.3.1.8	Counter32	read-only	The number of malformed RADIUS Accounting-Response packets received from this server. Malformed packets include packets with an invalid length. Bad authenticators and unknown types are not included as malformed accounting responses.
radiusAccClientMIB	1.3.6.1.2.1.67.2.2			The MIB module for entities implementing the client side of the Remote Authentication Dial-In User Service (RADIUS) accounting protocol. Copyright (C) The Internet Society (2006). This version of this MIB module is part of RFC 4670; see the RFC itself for full legal notices.
radiusAccClientMIBCompliance	1.3.6.1.2.1.67.2.2.2.1.1			The compliance statement for accounting clients implementing the RADIUS Accounting Client MIB. Implementation of this module is for IPv4-only entities, or for backwards compatibility use with entities that support both IPv4 and IPv6.
radiusAccClientMIBCompliances	1.3.6.1.2.1.67.2.2.2.1
radiusAccClientMIBConformance	1.3.6.1.2.1.67.2.2.2
radiusAccClientMIBGroup	1.3.6.1.2.1.67.2.2.2.2.1			The basic collection of objects providing management of RADIUS Accounting Clients.
radiusAccClientMIBGroups	1.3.6.1.2.1.67.2.2.2.2
radiusAccClientMIBObjects	1.3.6.1.2.1.67.2.2.1
C32 radiusAccClientPacketsDropped	1.3.6.1.2.1.67.2.2.1.1.3.1.13	Counter32	read-only	The number of RADIUS packets that were received from this server on the accounting port and dropped for some other reason.
G32 radiusAccClientPendingRequests	1.3.6.1.2.1.67.2.2.1.1.3.1.10	Gauge32	read-only	The number of RADIUS Accounting-Request packets sent to this server that have not yet timed out or received a response. This variable is incremented when an Accounting-Request is sent and decremented due to receipt of an Accounting-Response, a timeout, or a retransmission.
C32 radiusAccClientRequests	1.3.6.1.2.1.67.2.2.1.1.3.1.5	Counter32	read-only	The number of RADIUS Accounting-Request packets sent. This does not include retransmissions.
C32 radiusAccClientResponses	1.3.6.1.2.1.67.2.2.1.1.3.1.7	Counter32	read-only	The number of RADIUS packets received on the accounting port from this server.
C32 radiusAccClientRetransmissions	1.3.6.1.2.1.67.2.2.1.1.3.1.6	Counter32	read-only	The number of RADIUS Accounting-Request packets retransmitted to this RADIUS accounting server. Retransmissions include retries where the Identifier and Acct-Delay have been updated, as well as those in which they remain the same.
TIK radiusAccClientRoundTripTime	1.3.6.1.2.1.67.2.2.1.1.3.1.4	TimeTicks	read-only	The time interval between the most recent Accounting-Response and the Accounting-Request that matched it from this RADIUS accounting server.
INE radiusAccClientServerInetPortNumber	1.3.6.1.2.1.67.2.2.1.1.4.1.4	InetPortNumber	read-only	The UDP port the client is using to send requests to this accounting server. The value zero (0) is invalid.
I32 radiusAccClientServerPortNumber	1.3.6.1.2.1.67.2.2.1.1.3.1.3	Integer32	read-only	The UDP port the client is using to send requests to this server.
C32 radiusAccClientTimeouts	1.3.6.1.2.1.67.2.2.1.1.3.1.11	Counter32	read-only	The number of accounting timeouts to this server. After a timeout, the client may retry to the same server, send to a different server, or give up. A retry to the same server is counted as a retransmit as well as a timeout. A send to a different server is counted as an Accounting-Request as well as a timeout.
C32 radiusAccClientUnknownTypes	1.3.6.1.2.1.67.2.2.1.1.3.1.12	Counter32	read-only	The number of RADIUS packets of unknown type that were received from this server on the accounting port.
radiusAccounting	1.3.6.1.2.1.67.2
IP radiusAccServerAddress	1.3.6.1.2.1.67.2.2.1.1.3.1.2	IpAddress	read-only	The IP address of the RADIUS accounting server referred to in this table entry.
radiusAccServerEntry	1.3.6.1.2.1.67.2.2.1.1.3.1		not-accessible	An entry (conceptual row) representing a RADIUS accounting server with which the client shares a secret.
radiusAccServerExtEntry	1.3.6.1.2.1.67.2.2.1.1.4.1		not-accessible	An entry (conceptual row) representing a RADIUS accounting server with which the client shares a secret.
I32 radiusAccServerExtIndex	1.3.6.1.2.1.67.2.2.1.1.4.1.1	Integer32	not-accessible	A number uniquely identifying each RADIUS Accounting server with which this client communicates.
radiusAccServerExtTable	1.3.6.1.2.1.67.2.2.1.1.4		not-accessible	The (conceptual) table listing the RADIUS accounting servers with which the client shares a secret.
I32 radiusAccServerIndex	1.3.6.1.2.1.67.2.2.1.1.3.1.1	Integer32	not-accessible	A number uniquely identifying each RADIUS Accounting server with which this client communicates.
IP radiusAccServerInetAddress	1.3.6.1.2.1.67.2.2.1.1.4.1.3	InetAddress	read-only	The IP address of the RADIUS accounting server referred to in this table entry, using the version-neutral IP address format.
IPt radiusAccServerInetAddressType	1.3.6.1.2.1.67.2.2.1.1.4.1.2	InetAddressType	read-only	The type of address format used for the radiusAccServerInetAddress object.
radiusAccServerTable	1.3.6.1.2.1.67.2.2.1.1.3		not-accessible	The (conceptual) table listing the RADIUS accounting servers with which the client shares a secret.
radiusMIB	1.3.6.1.2.1.67			The OID assigned to RADIUS MIB work by the IANA.

RFC description

Defines managed objects for RADIUS Accounting Client implementations including server configuration, accounting request/response statistics, and counter objects as standardized in RFC 4670.

Start monitoring vendor-neutral, standards-based MIB, network access servers/routers/switches (RADIUS accounting client, RFC 4670) with a free 30-day trial of IPNetwork Monitor. Import MIBs, browse SNMP OIDs, create custom SNMP monitors, configure alerts, and monitor any SNMP-enabled network device from a single console.

Download RADIUS-ACC-CLIENT-MIB