RADLAN-RADIUSSRV

All MIBs › RADLAN-RADIUSSRV

Organization: Radlan Computer Communications Ltd.

Last Updated: 2015-06-21

Category: RADIUS and AAA, Vendor: RADLAN/Cisco SB

Description: Configures the embedded RADIUS server for local authentication on Radlan switches.

Start monitoring vendor-neutral, standards-based MIB, any SNMPv3-capable network device (SNMP engine identity/boot/clock status) with a free 30-day trial of IPNetwork Monitor. Import MIBs, browse SNMP OIDs, create custom SNMP monitors, configure alerts, and monitor any SNMP-enabled network device from a single console.

What Is RADLAN-RADIUSSRV?

RADLAN-RADIUSSRV is a private MIB from Radlan (whose switch software has been licensed/embedded by numerous switch vendors) for configuring and monitoring an embedded local RADIUS server used for authentication, authorization, and accounting on the switch. It exposes server-level configuration (enable state, authentication/accounting UDP ports, default shared key and its MD5 form) and defines dedicated trap objects for accounting events, authentication failures, and authentication successes. It also organizes clients/users into RADIUS server groups with per-group VLAN assignment. Its monitoring value is software/service status focused: administrators can confirm the embedded RADIUS service is enabled and correctly ported, and use the trap objects to be alerted in near-real time to authentication failures that might indicate misconfigured clients or a credential-guessing attempt. It depends on general RADIUS protocol conventions (RFC 2865/2866) reimplemented locally rather than delegating to an external RADIUS server MIB, and sits in Radlan's private enterprise OID branch reused across many switch vendors. It is deployed on Radlan-based (often white-label) managed switches offering local 802.1X/RADIUS authentication without a separate RADIUS server. Engineers can download the RADLAN-RADIUSSRV file directly to load it into their MIB browser.

IPNetwork Monitor allows you to monitor SNMP objects defined in RADLAN-RADIUSSRV. Use the built-in SNMP Monitoring Browser to explore available variables, view their current values and descriptions, and select the objects you want to monitor. You can then create SNMP monitors, configure thresholds, and receive alerts when monitored values change.

Supported Devices

Radlan-based (OEM/white-label) managed Ethernet switches

Monitoring Examples

An operator would check rlRadiusServEnable and rlRadiusServAuthPort/rlRadiusServAcctPort to confirm the embedded RADIUS service is running on the expected ports, then monitor for rlRadiusServTrapAuthFailure notifications to catch repeated failed login attempts against a specific client. Reviewing rlRadiusServGroupTable/rlRadiusServGroupEntry, indexed by rlRadiusServGroupName, would let the administrator confirm that a given user group is mapped to the correct rlRadiusServGroupVLAN, catching a misassignment that would place authenticated users on the wrong VLAN.

What Can Be Monitored

embedded RADIUS server enable state
authentication/accounting port configuration
authentication success/failure traps
accounting event traps
RADIUS group-to-VLAN mapping

Imported Objects

From INET-ADDRESS-MIB

InetAddress
InetAddressIPv6
InetAddressType

From Q-BRIDGE-MIB

VlanId

From RADLAN-MIB

rlAAAEap	OBJECT-IDENTITY
rlRadius	OBJECT-IDENTITY
rnd	OBJECT-IDENTITY

From SNMPv2-SMI

Counter32
IpAddress
MODULE-IDENTITY
OBJECT-TYPE
Unsigned32

From SNMPv2-TC

DateAndTime
DisplayString
MacAddress
RowStatus
TEXTUAL-CONVENTION
TimeStamp
TruthValue

OIDs

OID symbolic	OID numeric	Type	Access	Description
rlRadiusServ	1.3.6.1.4.1.89.226			The private MIB module definition for Authentication, Authorization and Accounting in Radlan devices.
T/F rlRadiusServEnable	1.3.6.1.4.1.89.226.1	TruthValue	read-write	Specifies whether Radius Server enabled on the switch.
INT rlRadiusServAcctPort	1.3.6.1.4.1.89.226.2	INTEGER	read-write	To define the accounting UDP port used for accounting requests.
INT rlRadiusServAuthPort	1.3.6.1.4.1.89.226.3	INTEGER	read-write	To define the authentication UDP port used for authentication requests.
STR rlRadiusServDefaultKey	1.3.6.1.4.1.89.226.4	DisplayString	read-write	Default Secret key to be shared with this all Radius Clients server.
STR rlRadiusServDefaultKeyMD5	1.3.6.1.4.1.89.226.5	DisplayString	read-only	Default Secret key MD5.
T/F rlRadiusServTrapAcct	1.3.6.1.4.1.89.226.6	TruthValue	read-write	To enable sending accounting traps.
T/F rlRadiusServTrapAuthFailure	1.3.6.1.4.1.89.226.7	TruthValue	read-write	To enable sending traps when an authentication failed and Access-Reject is sent.
T/F rlRadiusServTrapAuthSuccess	1.3.6.1.4.1.89.226.8	TruthValue	read-write	To enable sending traps when a user is successfully authorized.
rlRadiusServGroupTable	1.3.6.1.4.1.89.226.9		not-accessible	The (conceptual) table listing the RADIUS server group entry.
rlRadiusServGroupEntry	1.3.6.1.4.1.89.226.9.1		not-accessible	The (conceptual) table listing the RADIUS server group entry.
STR rlRadiusServGroupName	1.3.6.1.4.1.89.226.9.1.1	DisplayString	read-write	To define Radius Server Group Name
INT rlRadiusServGroupVLAN	1.3.6.1.4.1.89.226.9.1.2	INTEGER	read-write	To define Radius Assigned VLAN
STR rlRadiusServGroupVLANName	1.3.6.1.4.1.89.226.9.1.3	DisplayString	read-write	To define Radius Assigned VLAN name
STR rlRadiusServGroupACL1	1.3.6.1.4.1.89.226.9.1.4	DisplayString	read-write	To define first Radius Assigned ACL
STR rlRadiusServGroupACL2	1.3.6.1.4.1.89.226.9.1.5	DisplayString	read-write	To define second Radius Assigned ACL
INT rlRadiusServGroupPrvLevel	1.3.6.1.4.1.89.226.9.1.6	INTEGER	read-write	To define the user privilege level
STR rlRadiusServGroupTimeRangeName	1.3.6.1.4.1.89.226.9.1.7	DisplayString	read-write	To define the time user can connect
ROW rlRadiusServGroupStatus	1.3.6.1.4.1.89.226.9.1.8	RowStatus	read-write
rlRadiusServUserTable	1.3.6.1.4.1.89.226.10		not-accessible	The (conceptual) table listing the RADIUS server user entry.
rlRadiusServUserEntry	1.3.6.1.4.1.89.226.10.1		not-accessible	The (conceptual) table listing the RADIUS server User entry.
STR rlRadiusServUserName	1.3.6.1.4.1.89.226.10.1.1	DisplayString	read-write	To define Radius Server User Name
STR rlRadiusServUserPassword	1.3.6.1.4.1.89.226.10.1.2	DisplayString	read-write	Plain text Radius Server User Password
STR rlRadiusServUserPasswordMD5	1.3.6.1.4.1.89.226.10.1.3	DisplayString	read-only	The MD5 of the rlRadiusServUserPassword
STR rlRadiusServUserGroupName	1.3.6.1.4.1.89.226.10.1.4	DisplayString	read-write	Assigned Radius Server Group Name to specific user
ROW rlRadiusServUserStatus	1.3.6.1.4.1.89.226.10.1.5	RowStatus	read-write
rlRadiusServClientInetTable	1.3.6.1.4.1.89.226.11		not-accessible	The (conceptual) table listing the RADIUS server group entry.
rlRadiusServClientInetEntry	1.3.6.1.4.1.89.226.11.1		not-accessible	The (conceptual) table listing the RADIUS Client entry.
IPt rlRadiusServClientInetAddressType	1.3.6.1.4.1.89.226.11.1.1	InetAddressType	read-write	The Inet address type of RADIUS client reffered to in this table entry .IPv6Z type is not supported.
IP rlRadiusServClientInetAddress	1.3.6.1.4.1.89.226.11.1.2	InetAddress	read-write	The Inet address of the RADIUS client referred to in this table entry.
STR rlRadiusServClientInetKey	1.3.6.1.4.1.89.226.11.1.3	DisplayString	read-write	Secret key to be shared with this RADIUS client.
STR rlRadiusServClientInetKeyMD5	1.3.6.1.4.1.89.226.11.1.4	DisplayString	read-only	The MD5 of the rlRadiusServClientInetKey
ROW rlRadiusServClientInetStatus	1.3.6.1.4.1.89.226.11.1.5	RowStatus	read-write
T/F rlRadiusServClearAccounting	1.3.6.1.4.1.89.226.12	TruthValue	read-write	etting this object to TRUE clears the Radius Accounting cache.
T/F rlRadiusServClearRejectedUsers	1.3.6.1.4.1.89.226.13	TruthValue	read-write	etting this object to TRUE clears the Radius Rejected Users cache.
T/F rlRadiusServClearStatistics	1.3.6.1.4.1.89.226.14	TruthValue	read-write	Setting this object to TRUE clears the Radius server counters.
STR rlRadiusServClearUsersOfGivenGroup	1.3.6.1.4.1.89.226.15	DisplayString	read-write	Clears users of specified Group. 0 string signes to clear all users.
rlRadiusServClearClientStatisticsTable	1.3.6.1.4.1.89.226.16		not-accessible	Action MIB to clear radius server statistics per client.
rlRadiusServClearClientStatisticsEntry	1.3.6.1.4.1.89.226.16.1		not-accessible	The row definition for this table.
INT rlRadiusServClearClientStatisticsIndex	1.3.6.1.4.1.89.226.16.1.1	INTEGER	read-only	Index in the table. Already 1.
IPt rlRadiusServClearClientStatisticsInetAddressType	1.3.6.1.4.1.89.226.16.1.2	InetAddressType	read-write	Clear statistics Inet address type parameter.
IP rlRadiusServClearClientStatisticsInetAddress	1.3.6.1.4.1.89.226.16.1.3	InetAddress	read-write	Clear statistics Inet address parameter.
rlRadiusServRejectedTable	1.3.6.1.4.1.89.226.17		not-accessible	The (conceptual) table listing the RADIUS server rejected user entry.
rlRadiusServRejectedEntry	1.3.6.1.4.1.89.226.17.1		not-accessible	The (conceptual) table listing the RADIUS Rejected user entry.
U32 rlRadiusServRejectedIndex	1.3.6.1.4.1.89.226.17.1.1	Unsigned32	not-accessible	Rejected User Index
STR rlRadiusServRejectedUserName	1.3.6.1.4.1.89.226.17.1.2	DisplayString	read-only	Rejected User Name. In case of dateTimeChanged and reboot event contains 0.
RLR rlRadiusServRejectedUserType	1.3.6.1.4.1.89.226.17.1.3	RlRadiusServUserType	read-only	Contains type of service.
RLR rlRadiusServRejectedEvent	1.3.6.1.4.1.89.226.17.1.4	RlRadiusServRejectedEventType	read-only	Contains type of event.
STR rlRadiusServRejectedDateTime	1.3.6.1.4.1.89.226.17.1.5	DisplayString	read-only	Date of rejected event.
STR rlRadiusServRejectedUpdatedDateTime	1.3.6.1.4.1.89.226.17.1.6	DisplayString	read-only	In case of dateTimeChanged event contains New assigned Date and Time. Otherwise contains 0.
IPt rlRadiusServRejectedNASInetAddressType	1.3.6.1.4.1.89.226.17.1.7	InetAddressType	read-only	Rejected user NAS Inet address type. In case of dateTimeChange and reboot event contains 0.
IP rlRadiusServRejectedNASInetAddress	1.3.6.1.4.1.89.226.17.1.8	InetAddress	read-only	Rejected user NAS Inet address. In case of dateTimeChanged and reboot event contains 0.
INT rlRadiusServRejectedNASPort	1.3.6.1.4.1.89.226.17.1.9	INTEGER	read-only	Rejected user NAS port. In case of dateTimeChanged and reboot event contains 0.
STR rlRadiusServRejectedUserAddress	1.3.6.1.4.1.89.226.17.1.10	DisplayString	read-only	Rejected user Inet address type. In case of 1x user contains mac address string, in case of login contains inet address.
RLR rlRadiusServRejectedReason	1.3.6.1.4.1.89.226.17.1.11	RlRadiusServRejectedReasonType	read-only	Rejected user reason.
rlRadiusServAcctLogTable	1.3.6.1.4.1.89.226.18		not-accessible	The (conceptual) table listing the RADIUS server accounting log entry.
rlRadiusServAcctLogEntry	1.3.6.1.4.1.89.226.18.1		not-accessible	The (conceptual) table listing the RADIUS server accounting log entry.
U32 rlRadiusServAcctLogIndex	1.3.6.1.4.1.89.226.18.1.1	Unsigned32	not-accessible	Accounting Log Index
STR rlRadiusServAcctLogUserName	1.3.6.1.4.1.89.226.18.1.2	DisplayString	read-only	Accounting Log User Name. In case of dateTimeChanged and reboot event contains 0.
RLR rlRadiusServAcctLogUserAuth	1.3.6.1.4.1.89.226.18.1.3	RlRadiusServAcctLogUserAuthType	read-only	Contains type of authenticator.
RLR rlRadiusServAcctLogEvent	1.3.6.1.4.1.89.226.18.1.4	RlRadiusServAcctLogEventType	read-only	Contains type of event.
STR rlRadiusServAcctLogDateTime	1.3.6.1.4.1.89.226.18.1.5	DisplayString	read-only	Date of accounting event.
STR rlRadiusServAcctLogUpdatedDateTime	1.3.6.1.4.1.89.226.18.1.6	DisplayString	read-only	In case of dateTimeChanged event contains New assigned Date and Time. Otherwise contains 0.
U32 rlRadiusServAcctLogSessionDuration	1.3.6.1.4.1.89.226.18.1.7	Unsigned32	read-only	Contains duration of user session in seconds. In case of dateTimeChanged and reboot event contains 0.
IPt rlRadiusServAcctLogNASInetAddressType	1.3.6.1.4.1.89.226.18.1.8	InetAddressType	read-only	Accounting log user NAS Inet address type. In case of dateTimeChanged and reboot event contains 0.
IP rlRadiusServAcctLogNASInetAddress	1.3.6.1.4.1.89.226.18.1.9	InetAddress	read-only	Accounting log user NAS Inet address. In case of dateTimeChanged and reboot event contains 0.
INT rlRadiusServAcctLogNASPort	1.3.6.1.4.1.89.226.18.1.10	INTEGER	read-only	Accounting log user NAS port. In case of dateTimeChanged and reboot event contains 0.
STR rlRadiusServAcctLogUserAddress	1.3.6.1.4.1.89.226.18.1.11	DisplayString	read-only	Accounting log user address. In case of 1x user contains mac address string, in case of login contains inet address.
RLR rlRadiusServAcctLogTerminationReason	1.3.6.1.4.1.89.226.18.1.12	RlRadiusServAcctLogTerminationReasonType	read-only	User Session termination reason.

RFC description

Radlan RADIUS server authentication, authorization, and accounting (AAA) configuration and management MIB for Radlan switches.

Start monitoring Radlan-based, OEM/white-label managed Ethernet switches (embedded local RADIUS server) with a free 30-day trial of IPNetwork Monitor. Import MIBs, browse SNMP OIDs, create custom SNMP monitors, configure alerts, and monitor any SNMP-enabled network device from a single console.

Download RADLAN-RADIUSSRV

What Is RADLAN-RADIUSSRV?

Supported Devices

Monitoring Examples

What Can Be Monitored

This MIB depends on

Related MIBs

RFC description