RADIUS-ACC-SERVER-MIB

All MIBs › RADIUS-ACC-SERVER-MIB

Organization: IETF RADIUS Extensions Working Group.

Last Updated: 2006-08-21

Category: RADIUS and AAA

Description: Monitors RADIUS accounting server operations, tracking Accounting-Request and Accounting-Response statistics.

IPNetwork Monitor uses several OIDs from this MIB in network discovery and polling the applicable devices. Start monitoring RADIUS-ACC-SERVER-MIB with a free 30-day trial of IPNetwork Monitor.

What Is RADIUS-ACC-SERVER-MIB?

RADIUS-ACC-SERVER-MIB, standardized in RFC 4671, defines management objects for the server side of the RADIUS accounting protocol, used to track Accounting-Request and Accounting-Response message activity on a RADIUS accounting server. It exposes identity and uptime information for the server along with detailed request/response counters covering total, invalid, duplicate, malformed, and dropped accounting messages. This MIB is used to monitor the software/service status of the RADIUS accounting server, with radiusAccServUpTime and radiusAccServResetTime indicating service availability and radiusAccServTotalInvalidRequests, radiusAccServTotalBadAuthenticators, and radiusAccServTotalPacketsDropped revealing malformed or malicious accounting traffic and potential shared-secret misconfiguration between NAS clients and the server. It is a vendor-neutral IETF standards MIB and has no dependency beyond standard SNMP framework MIBs, serving as the accounting-side counterpart to the RADIUS Authentication Server MIB. It is typically deployed on any AAA server infrastructure that processes RADIUS accounting for network access, VPN, or Wi-Fi authentication, per the RADIUS-ACC-SERVER-MIB RFC (RFC 4671) it implements.

IPNetwork Monitor allows you to monitor SNMP objects defined in RADIUS-ACC-SERVER-MIB. Use the built-in SNMP Monitoring Browser to explore available variables, view their current values and descriptions, and select the objects you want to monitor. You can then create SNMP monitors, configure thresholds, and receive alerts when monitored values change.

Supported Devices

vendor-neutral, standards-based MIB, not tied to a specific manufacturer; applicable to any RADIUS accounting server (AAA server)

Monitoring Examples

An administrator would poll radiusAccServTotalRequests and radiusAccServTotalResponses to confirm the accounting server is actively processing traffic, then check radiusAccServTotalBadAuthenticators and radiusAccServTotalMalformedRequests to detect a NAS client sending accounting packets with a mismatched shared secret. A rising radiusAccServTotalPacketsDropped or radiusAccServTotalNoRecords count alongside a recent radiusAccServResetTime would indicate the accounting service was recently restarted and is currently failing to log some accounting records.

What Can Be Monitored

server uptime and reset time
total accounting requests/responses
invalid/duplicate/malformed request counts
bad authenticator (shared secret mismatch) count
dropped packets and missing records count

Imported Objects

From INET-ADDRESS-MIB

InetAddress
InetAddressType

From SNMP-FRAMEWORK-MIB

SnmpAdminString

From SNMPv2-CONF

MODULE-COMPLIANCE
OBJECT-GROUP

From SNMPv2-SMI

Counter32
Integer32
IpAddress
MODULE-IDENTITY
OBJECT-IDENTITY
OBJECT-TYPE
TimeTicks
mib-2

How to Use in IPNetwork Monitor

Example using radiusAccServTotalRequests OID:

Select a device implementing RADIUS-ACC-SERVER-MIB as the target host to create a monitor — the SNMP service should be up and running on it. Click New Monitor, then check SNMP Custom on the Favorites tab, click Next, and confirm the host. On the next page, click Select... to open the built-in SNMP MIB Browser and type radiusAccServTotalRequests into the Find box to locate it in the OID tree, then select it and click OK. The number of packets received on the accounting port. On the monitor's Main parameters page you can set the target's SNMP port (default 161), credentials, polling interval, and other settings — see the SNMP Monitor help for details. On the State conditions and Alerting tabs, configure when the monitor should change state and trigger an alert; since this is a Counter32-type OID, Value bounds is the most useful condition here — trigger an alert if the counter increases sharply between polls relative to its normal baseline (in packets), since an unexpected spike often reflects a real change in traffic or activity. Click Finish to create the monitor; you can adjust any parameter later.

OIDs

OID symbolic	OID numeric	Type	Access	Description
radiusMIB	1.3.6.1.2.1.67			The OID assigned to RADIUS MIB work by the IANA.
radiusAccounting	1.3.6.1.2.1.67.2
radiusAccServMIB	1.3.6.1.2.1.67.2.1			The MIB module for entities implementing the server side of the Remote Authentication Dial-In User Service (RADIUS) accounting protocol. Copyright (C) The Internet Society (2006). This version of this MIB module is part of RFC 4671; see the RFC itself for full legal notices.
radiusAccServMIBObjects	1.3.6.1.2.1.67.2.1.1
radiusAccServ	1.3.6.1.2.1.67.2.1.1.1
STR radiusAccServIdent	1.3.6.1.2.1.67.2.1.1.1.1	SnmpAdminString	read-only	The implementation identification string for the RADIUS accounting server software in use on the system, for example, 'FNS-2.1'.
TIK radiusAccServUpTime	1.3.6.1.2.1.67.2.1.1.1.2	TimeTicks	read-only	If the server has a persistent state (e.g., a process), this value will be the time elapsed (in hundredths of a second) since the server process was started. For software without persistent state, this value will be zero.
TIK radiusAccServResetTime	1.3.6.1.2.1.67.2.1.1.1.3	TimeTicks	read-only	If the server has a persistent state (e.g., a process) and supports a 'reset' operation (e.g., can be told to re-read configuration files), this value will be the time elapsed (in hundredths of a second) since the server was 'reset.' For software that does not have persistence or does not support a 'reset' operation, this value will be zero.
INT radiusAccServConfigReset	1.3.6.1.2.1.67.2.1.1.1.4	INTEGER	read-write	Status/action object to reinitialize any persistent server state. When set to reset(2), any persistent server state (such as a process) is reinitialized as if the server had just been started. This value will never be returned by a read operation. When read, one of the following values will be returned: other(1) - server in some unknown state; initializing(3) - server (re)initializing; running(4) - server currently running.
C32 radiusAccServTotalRequestsEx	1.3.6.1.2.1.67.2.1.1.1.5	Counter32	read-only	The number of packets received on the accounting port.
C32 radiusAccServTotalInvalidRequests	1.3.6.1.2.1.67.2.1.1.1.6	Counter32	read-only	The number of RADIUS Accounting-Request packets received from unknown addresses.
C32 radiusAccServTotalDupRequests	1.3.6.1.2.1.67.2.1.1.1.7	Counter32	read-only	The number of duplicate RADIUS Accounting-Request packets received.
C32 radiusAccServTotalResponses	1.3.6.1.2.1.67.2.1.1.1.8	Counter32	read-only	The number of RADIUS Accounting-Response packets sent.
C32 radiusAccServTotalMalformedRequests	1.3.6.1.2.1.67.2.1.1.1.9	Counter32	read-only	The number of malformed RADIUS Accounting-Request packets received. Bad authenticators or unknown types are not included as malformed Access-Requests.
C32 radiusAccServTotalBadAuthenticators	1.3.6.1.2.1.67.2.1.1.1.10	Counter32	read-only	The number of RADIUS Accounting-Request packets that contained an invalid authenticator.
C32 radiusAccServTotalPacketsDropped	1.3.6.1.2.1.67.2.1.1.1.11	Counter32	read-only	The number of incoming packets silently discarded for a reason other than malformed, bad authenticators, or unknown types.
C32 radiusAccServTotalNoRecords	1.3.6.1.2.1.67.2.1.1.1.12	Counter32	read-only	The number of RADIUS Accounting-Request packets that were received and responded to but not recorded.
C32 radiusAccServTotalUnknownTypes	1.3.6.1.2.1.67.2.1.1.1.13	Counter32	read-only	The number of RADIUS packets of unknown type that were received.
radiusAccClientTable	1.3.6.1.2.1.67.2.1.1.1.14		not-accessible	The (conceptual) table listing the RADIUS accounting clients with which the server shares a secret.
radiusAccClientEntry	1.3.6.1.2.1.67.2.1.1.1.14.1		not-accessible	An entry (conceptual row) representing a RADIUS accounting client with which the server shares a secret.
I32 radiusAccClientIndex	1.3.6.1.2.1.67.2.1.1.1.14.1.1	Integer32	not-accessible	A number uniquely identifying each RADIUS accounting client with which this server communicates.
IP radiusAccClientAddress	1.3.6.1.2.1.67.2.1.1.1.14.1.2	IpAddress	read-only	The NAS-IP-Address of the RADIUS accounting client referred to in this table entry.
STR radiusAccClientID	1.3.6.1.2.1.67.2.1.1.1.14.1.3	SnmpAdminString	read-only	The NAS-Identifier of the RADIUS accounting client referred to in this table entry. This is not necessarily the same as sysName in MIB II.
C32 radiusAccServPacketsDropped	1.3.6.1.2.1.67.2.1.1.1.14.1.4	Counter32	read-only	The number of incoming packets received from this client and silently discarded for a reason other than malformed, bad authenticators, or unknown types.
C32 radiusAccServRequests	1.3.6.1.2.1.67.2.1.1.1.14.1.5	Counter32	read-only	The number of packets received from this client on the accounting port.
C32 radiusAccServDupRequests	1.3.6.1.2.1.67.2.1.1.1.14.1.6	Counter32	read-only	The number of duplicate RADIUS Accounting-Request packets received from this client.
C32 radiusAccServResponses	1.3.6.1.2.1.67.2.1.1.1.14.1.7	Counter32	read-only	The number of RADIUS Accounting-Response packets sent to this client.
C32 radiusAccServBadAuthenticators	1.3.6.1.2.1.67.2.1.1.1.14.1.8	Counter32	read-only	The number of RADIUS Accounting-Request packets that contained invalid authenticators received from this client.
C32 radiusAccServMalformedRequests	1.3.6.1.2.1.67.2.1.1.1.14.1.9	Counter32	read-only	The number of malformed RADIUS Accounting-Request packets that were received from this client. Bad authenticators and unknown types are not included as malformed Accounting-Requests.
C32 radiusAccServNoRecords	1.3.6.1.2.1.67.2.1.1.1.14.1.10	Counter32	read-only	The number of RADIUS Accounting-Request packets that were received and responded to but not recorded.
C32 radiusAccServUnknownTypes	1.3.6.1.2.1.67.2.1.1.1.14.1.11	Counter32	read-only	The number of RADIUS packets of unknown type that were received from this client.
radiusAccClientExtTable	1.3.6.1.2.1.67.2.1.1.1.15		not-accessible	The (conceptual) table listing the RADIUS accounting clients with which the server shares a secret.
radiusAccClientExtEntry	1.3.6.1.2.1.67.2.1.1.1.15.1		not-accessible	An entry (conceptual row) representing a RADIUS accounting client with which the server shares a secret.
I32 radiusAccClientExtIndex	1.3.6.1.2.1.67.2.1.1.1.15.1.1	Integer32	not-accessible	A number uniquely identifying each RADIUS accounting client with which this server communicates.
IPt radiusAccClientInetAddressType	1.3.6.1.2.1.67.2.1.1.1.15.1.2	InetAddressType	read-only	The type of address format used for the radiusAccClientInetAddress object.
IP radiusAccClientInetAddress	1.3.6.1.2.1.67.2.1.1.1.15.1.3	InetAddress	read-only	The IP address of the RADIUS accounting client referred to in this table entry, using the IPv6 address format.
STR radiusAccClientExtID	1.3.6.1.2.1.67.2.1.1.1.15.1.4	SnmpAdminString	read-only	The NAS-Identifier of the RADIUS accounting client referred to in this table entry. This is not necessarily the same as sysName in MIB II.
C32 radiusAccServExtPacketsDropped	1.3.6.1.2.1.67.2.1.1.1.15.1.5	Counter32	read-only	The number of incoming packets received from this client and silently discarded for a reason other than malformed, bad authenticators, or unknown types. This counter may experience a discontinuity when the RADIUS Accounting Server module within the managed entity is reinitialized, as indicated by the current value of radiusAccServerCounterDiscontinuity.
C32 radiusAccServExtRequests	1.3.6.1.2.1.67.2.1.1.1.15.1.6	Counter32	read-only	The number of packets received from this client on the accounting port. This counter may experience a discontinuity when the RADIUS Accounting Server module within the managed entity is reinitialized, as indicated by the current value of radiusAccServerCounterDiscontinuity.
C32 radiusAccServExtDupRequests	1.3.6.1.2.1.67.2.1.1.1.15.1.7	Counter32	read-only	The number of duplicate RADIUS Accounting-Request packets received from this client. This counter may experience a discontinuity when the RADIUS Accounting Server module within the managed entity is reinitialized, as indicated by the current value of radiusAccServerCounterDiscontinuity.
C32 radiusAccServExtResponses	1.3.6.1.2.1.67.2.1.1.1.15.1.8	Counter32	read-only	The number of RADIUS Accounting-Response packets sent to this client. This counter may experience a discontinuity when the RADIUS Accounting Server module within the managed entity is reinitialized, as indicated by the current value of radiusAccServerCounterDiscontinuity.
C32 radiusAccServExtBadAuthenticators	1.3.6.1.2.1.67.2.1.1.1.15.1.9	Counter32	read-only	The number of RADIUS Accounting-Request packets that contained invalid authenticators received from this client. This counter may experience a discontinuity when the RADIUS Accounting Server module within the managed entity is reinitialized, as indicated by the current value of radiusAccServerCounterDiscontinuity.
C32 radiusAccServExtMalformedRequests	1.3.6.1.2.1.67.2.1.1.1.15.1.10	Counter32	read-only	The number of malformed RADIUS Accounting-Request packets that were received from this client. Bad authenticators and unknown types are not included as malformed Accounting-Requests. This counter may experience a discontinuity when the RADIUS Accounting Server module within the managed entity is reinitialized, as indicated by the current value of radiusAccServerCounterDiscontinuity.
C32 radiusAccServExtNoRecords	1.3.6.1.2.1.67.2.1.1.1.15.1.11	Counter32	read-only	The number of RADIUS Accounting-Request packets that were received and responded to but not recorded. This counter may experience a discontinuity when the RADIUS Accounting Server module within the managed entity is reinitialized, as indicated by the current value of radiusAccServerCounterDiscontinuity.
C32 radiusAccServExtUnknownTypes	1.3.6.1.2.1.67.2.1.1.1.15.1.12	Counter32	read-only	The number of RADIUS packets of unknown type that were received from this client. This counter may experience a discontinuity when the RADIUS Accounting Server module within the managed entity is reinitialized, as indicated by the current value of radiusAccServerCounterDiscontinuity.
TIK radiusAccServerCounterDiscontinuity	1.3.6.1.2.1.67.2.1.1.1.15.1.13	TimeTicks	read-only	The number of centiseconds since the last discontinuity in the RADIUS Accounting Server counters. A discontinuity may be the result of a reinitialization of the RADIUS Accounting Server module within the managed entity.
radiusAccServMIBConformance	1.3.6.1.2.1.67.2.1.2
radiusAccServMIBCompliances	1.3.6.1.2.1.67.2.1.2.1
radiusAccServMIBCompliance	1.3.6.1.2.1.67.2.1.2.1.1			The compliance statement for accounting servers implementing the RADIUS Accounting Server MIB. Implementation of this module is for IPv4-only entities, or for backwards compatibility use with entities that support both IPv4 and IPv6.
radiusAccServExtMIBCompliance	1.3.6.1.2.1.67.2.1.2.1.2			The compliance statement for accounting servers implementing the RADIUS Accounting Server IPv6 Extensions MIB. Implementation of this module is for entities that support IPv6, or support IPv4 and IPv6.
radiusAccServMIBGroups	1.3.6.1.2.1.67.2.1.2.2
radiusAccServMIBGroup	1.3.6.1.2.1.67.2.1.2.2.1			The collection of objects providing management of a RADIUS Accounting Server.
radiusAccServExtMIBGroup	1.3.6.1.2.1.67.2.1.2.2.2			The collection of objects providing management of a RADIUS Accounting Server.

RFC description

Manages RADIUS accounting server operations including counters, statistics, and accounting protocol parameters.

Start monitoring vendor-neutral, standards-based MIB, RADIUS accounting server / AAA server (RFC 4671) with a free 30-day trial of IPNetwork Monitor. Import MIBs, browse SNMP OIDs, create custom SNMP monitors, configure alerts, and monitor any SNMP-enabled network device from a single console.

Download RADIUS-ACC-SERVER-MIB