RAISECOM-USER-MANAGEMENT-MIB

All MIBs › RAISECOM-USER-MANAGEMENT-MIB

Organization: RAISECOM TECH, Ltd.

Last Updated: 2007-07-20

Description: MIB for user authentication and access control on Raisecom network switches, supporting local, RADIUS, and TACACS+ login methods

Start monitoring vendor-neutral, standards-based MIB, any SNMPv3-capable network device (SNMP engine identity/boot/clock status) with a free 30-day trial of IPNetwork Monitor. Import MIBs, browse SNMP OIDs, create custom SNMP monitors, configure alerts, and monitor any SNMP-enabled network device from a single console.

What Is RAISECOM-USER-MANAGEMENT-MIB?

RAISECOM-USER-MANAGEMENT-MIB is a Raisecom vendor MIB that manages user authentication and access-control configuration on Raisecom network switches, supporting local user accounts as well as centralized RADIUS and TACACS+ login methods. It exposes objects for defining local users and their privilege levels, and for configuring which authentication method(s) and servers (RADIUS/TACACS+) the switch uses for login validation. This is primarily a management-plane security/configuration MIB rather than a hardware-health MIB: it audits which authentication method is active, confirms local user accounts and access levels are as expected, and verifies remote AAA server settings are correctly configured, matters that determine whether administrative access to the device is properly secured. It depends on the switch correctly reaching configured external RADIUS/TACACS+ servers, paralleling concepts in the IETF RADIUS and TACACS+ client models though implemented as a Raisecom private extension. It is typically deployed on Raisecom carrier/access switches where centralized AAA manages administrative login across a fleet of devices. Network engineers evaluating or troubleshooting this functionality can download the RAISECOM-USER-MANAGEMENT-MIB file directly to load it into their MIB browser.

IPNetwork Monitor allows you to monitor SNMP objects defined in RAISECOM-USER-MANAGEMENT-MIB. Use the built-in SNMP Monitoring Browser to explore available variables, view their current values and descriptions, and select the objects you want to monitor. You can then create SNMP monitors, configure thresholds, and receive alerts when monitored values change.

Supported Devices

Raisecom carrier/access Ethernet switch

Monitoring Examples

No specific object or table names were captured for this MIB in the available data, so a fully concrete polling example isn't possible; in general, an administrator would use this MIB's user/authentication-method objects to confirm the switch authenticates logins against the correct RADIUS or TACACS+ server rather than unexpectedly falling back to local accounts, which would indicate a lost connection to the central AAA server. Falling back to local-only authentication across many devices at once is often the first symptom of an AAA server outage.

What Can Be Monitored

configured authentication method (local/RADIUS/TACACS+)
local user accounts and privilege levels
RADIUS/TACACS+ server configuration

Imported Objects

From RAISECOM-COMMON-MANAGEMENT-MIB

raisecomCommonManagement

MODULE-IDENTITY

From SNMPv2-SMI

Integer32
IpAddress
MODULE-IDENTITY
NOTIFICATION-TYPE
OBJECT-TYPE
Unsigned32

From SNMPv2-TC

RowStatus
TruthValue

From SWITCH-TC

DateAndTime
EnableVar

OIDs

OID symbolic	OID numeric	Type	Access	Description
raisecomUserManageGroup	1.3.6.1.4.1.8886.1.2.2			The MIB module defining objects for user management functions
INT raisecomUserLogMethod	1.3.6.1.4.1.8886.1.2.2.1	INTEGER	read-write	stand for the method for user to log in system. local for log on user to user information from local system; local-radius for get user information on local system and then from radius server; radius-local for first get user on radius server and then from local system; radius-local server-no-response for first get user on radius server and then from local system, when there is no response from radius server; tacacs+ for get user information only from tacacs+ server; local-tacacs+ for first get user information on local system and then from on tacacs+ server; tacacs+_local for first get user information on tacacs+ server and then from local system; tacacs+_local server-no-response for first get user information on tacacs+ server and then from local system when there is no response from tacacs+ server;
IP raisecomUserRadiusServerAddress	1.3.6.1.4.1.8886.1.2.2.2	IpAddress	read-write	The IP Address of Radius server to store user information.
OCT raisecomUserRadiusAuthKey	1.3.6.1.4.1.8886.1.2.2.3	OCTET STRING	read-write	The shared secret text string used between the authenticator and a RADIUS server.
INT raisecomEnableLogMethod	1.3.6.1.4.1.8886.1.2.2.4	INTEGER	read-write	stand for the method for user to enable in system. local for log on user to user information from local system; local-radius for get user information on local system and then from radius server; radius-local for first get user on radius server and then from local system; radius-local server-no-response for first get user on radius server and then from local system, when there is no response from radius server; tacacs+ for get user information only from tacacs+ server; local-tacacs+ for first get user information on local system and then from on tacacs+ server; tacacs+_local for first get user information on tacacs+ server and then from local system; tacacs+_local server-no-response for first get user information on tacacs+ server and then from local system when there is noresponse from tacacs+ server;
raisecomUserTable	1.3.6.1.4.1.8886.1.2.2.5		not-accessible	User manage table
raisecomUserEntry	1.3.6.1.4.1.8886.1.2.2.5.1		not-accessible	An entry in the raisecomUserTable.
IP raisecomUserServerIP	1.3.6.1.4.1.8886.1.2.2.5.1.1	IpAddress	not-accessible	The server ip address user belongs to. local user's server ip is 0.0.0.0.
OCT raisecomUsername	1.3.6.1.4.1.8886.1.2.2.5.1.2	OCTET STRING	not-accessible	The name a user login the device with.
INT raisecomUserPriority	1.3.6.1.4.1.8886.1.2.2.5.1.3	INTEGER	read-create	the priority of system user.
INT raisecomUserStatus	1.3.6.1.4.1.8886.1.2.2.5.1.4	INTEGER	read-only	The status of a user.
INT raisecomUserTerminalType	1.3.6.1.4.1.8886.1.2.2.5.1.5	INTEGER	read-only	Connection type that the user is logon. the bit 0 stand for console the bit 1 stand for telnet 1 the bit 2 stand for telnet 2 the bit 3 stand for telnet 3 the bit 4 stand for telnet 4 the bit 5 stand for telnet 5 Eg. a user abc login system on console and on telent 5 then the value is 0100001b
OCT raisecomUserPassword	1.3.6.1.4.1.8886.1.2.2.5.1.6	OCTET STRING	read-create	The password of system user.
OCT raisecomUserOldPassword	1.3.6.1.4.1.8886.1.2.2.5.1.7	OCTET STRING	read-create	The old password of system user.
ROW raisecomUserEntryRowStatus	1.3.6.1.4.1.8886.1.2.2.5.1.8	RowStatus	read-create	The status of this table entry.
OCT raisecomEnableLogPassword	1.3.6.1.4.1.8886.1.2.2.6	OCTET STRING	read-write	The password for enable log.
OCT raisecomEnableLogOldPassword	1.3.6.1.4.1.8886.1.2.2.7	OCTET STRING	read-write	The old password for enable log.
IP raisecomUserTacacsPlusServerAddress	1.3.6.1.4.1.8886.1.2.2.8	IpAddress	read-write	IP address of Tacacs+ Server.
OCT raisecomUserTacacsPlusServerAuthKey	1.3.6.1.4.1.8886.1.2.2.9	OCTET STRING	read-write	This object specifies the name of share key tacacs+ server uses.
U32 raisecomUserTacacsPlusResultSendPkts	1.3.6.1.4.1.8886.1.2.2.10	Unsigned32	read-only	This object indicates the number of packets which Tacacs+ client sent to Tacacs+ server.
U32 raisecomUserTacacsPlusResultReceivePkts	1.3.6.1.4.1.8886.1.2.2.11	Unsigned32	read-only	This object indicates the number of packets which Tacacs+ client received from Tacacs+ server.
U32 raisecomUserTacacsPlusResultErrorPkts	1.3.6.1.4.1.8886.1.2.2.12	Unsigned32	read-only	This object indicates the number of error packets which Tacacs+ client received from Tacacs+ server.
U32 raisecomUserRadiusServerPort	1.3.6.1.4.1.8886.1.2.2.13	Unsigned32	read-write	The Port of Radius server to store user information.
T/F raisecomUserTacacsPlusClearStatistics	1.3.6.1.4.1.8886.1.2.2.14	TruthValue	read-write	The purpose of this object is to clear all the packet statistics. Set the value to true(1) means clear current packet statistics and begin the next recalculation.
raisecomUserCmdCtrlTable	1.3.6.1.4.1.8886.1.2.2.15		not-accessible	User command control table
raisecomUserCmdCtrlEntry	1.3.6.1.4.1.8886.1.2.2.15.1		not-accessible	An entry in the raisecomUserCmdCtrlTable.
INT raisecomUserCmdCtrIndex	1.3.6.1.4.1.8886.1.2.2.15.1.1	INTEGER	not-accessible	User command control config index, range 1 to 15
INT raisecomUserCmdCtrType	1.3.6.1.4.1.8886.1.2.2.15.1.2	INTEGER	read-create	User command control config type, add a command or remove a command for special user could excute
OCT raisecomUserCmdCtrFirstKey	1.3.6.1.4.1.8886.1.2.2.15.1.3	OCTET STRING	read-create	The first key word in a command
OCT raisecomUserCmdCtrSecondKey	1.3.6.1.4.1.8886.1.2.2.15.1.4	OCTET STRING	read-create	The second key word in a command
ROW raisecomUserCmdCtrlEntryRowStatus	1.3.6.1.4.1.8886.1.2.2.15.1.5	RowStatus	read-create	Rowstatus for raisecomUserCmdCtrlEntryRowStatus
IP raisecomUserRadiusServerBackupAddress	1.3.6.1.4.1.8886.1.2.2.16	IpAddress	read-write	Backup IP Address of Radius server to store user information.
U32 raisecomUserRadiusServerBackupPort	1.3.6.1.4.1.8886.1.2.2.17	Unsigned32	read-write	Backup Port of Radius server to store user information.
IP raisecomUserTacacsPlusServerBackupAddress	1.3.6.1.4.1.8886.1.2.2.18	IpAddress	read-write	Backup IP Address of tacacs plus server to store user information.

RFC description

Manages user authentication methods including RADIUS, TACACS+, and local user configuration on Raisecom devices.

Start monitoring Raisecom carrier/access Ethernet switch (user authentication/AAA) with a free 30-day trial of IPNetwork Monitor. Import MIBs, browse SNMP OIDs, create custom SNMP monitors, configure alerts, and monitor any SNMP-enabled network device from a single console.

Download RAISECOM-USER-MANAGEMENT-MIB

What Is RAISECOM-USER-MANAGEMENT-MIB?

Supported Devices

Monitoring Examples

What Can Be Monitored

This MIB depends on

Related MIBs

RFC description