RBN-RADIUS-MIB

All MIBs › RBN-RADIUS-MIB

Organization: RedBack Networks, Inc.

Last Updated: 2005-03-29

Category: RADIUS and AAA, Vendor: Ericsson

Description: Manages RADIUS server configuration, authentication statistics, and accounting session data on Redback SmartEdge BRAS.

Start monitoring vendor-neutral, standards-based MIB, any SNMPv3-capable network device (SNMP engine identity/boot/clock status) with a free 30-day trial of IPNetwork Monitor. Import MIBs, browse SNMP OIDs, create custom SNMP monitors, configure alerts, and monitor any SNMP-enabled network device from a single console.

What Is RBN-RADIUS-MIB?

RBN-RADIUS-MIB is a RedBack Networks, Inc. (later Ericsson SmartEdge) proprietary MIB supplementing the standard RADIUS-AUTH-CLIENT-MIB (RFC 2618) and RADIUS-ACC-CLIENT-MIB (RFC 2620) with additional Redback-specific objects and notifications. Its objects cover authentication packet/server timeout, deadtime, retry count, strip-domain flag, an auth-server table (state, last-change time, counter-reset time, send-error count), matching accounting-side objects and table, client port, context, and a reason object — all scoped per SNMP context (community/contextName). As a status/configuration MIB it lets an administrator confirm per-context RADIUS server health and tuning on a RedBack (Ericsson SmartEdge) system. It is deployed on RedBack Networks (Ericsson SmartEdge) subscriber-management platforms. Engineers can download the RBN-RADIUS-MIB file directly to load it into their MIB browser.

IPNetwork Monitor allows you to monitor SNMP objects defined in RBN-RADIUS-MIB. Use the built-in SNMP Monitoring Browser to explore available variables, view their current values and descriptions, and select the objects you want to monitor. You can then create SNMP monitors, configure thresholds, and receive alerts when monitored values change.

Supported Devices

RedBack Networks (Ericsson SmartEdge) subscriber-management platforms

Monitoring Examples

An administrator checks rbnRadiusAuthSrvState and rbnRadiusAuthSrvSendErrors to diagnose a failing RADIUS authentication server on a RedBack (Ericsson SmartEdge) system.

What Can Be Monitored

per-context RADIUS authentication/accounting server health

Imported Objects

From RADIUS-ACC-CLIENT-MIB

radiusAccClientServerPortNumber	OBJECT-TYPE
radiusAccServerAddress	OBJECT-TYPE
radiusAccServerEntry	OBJECT-TYPE

From RADIUS-AUTH-CLIENT-MIB

radiusAuthClientServerPortNumber	OBJECT-TYPE
radiusAuthServerAddress	OBJECT-TYPE
radiusAuthServerEntry	OBJECT-TYPE

From RBN-SMI

rbnMgmt

OBJECT-IDENTITY

From SNMP-FRAMEWORK-MIB

SnmpAdminString

From SNMPv2-CONF

MODULE-COMPLIANCE
NOTIFICATION-GROUP
OBJECT-GROUP

From SNMPv2-SMI

Counter32
MODULE-IDENTITY
NOTIFICATION-TYPE
OBJECT-TYPE
Unsigned32

From SNMPv2-TC

TEXTUAL-CONVENTION
TimeStamp
TruthValue

How to Use in IPNetwork Monitor

Example using rbnRadiusAuthSrvSendErrors OID:

Select a RedBack Networks (Ericsson SmartEdge) subscriber-management platform (RADIUS auth/accounting server health) as the target host to create a monitor — the SNMP service should be up and running on it. Click New Monitor, then check SNMP Custom on the Favorites tab, click Next, and confirm the host. On the next page, click Select... to open the built-in SNMP MIB Browser and type rbnRadiusAuthSrvSendErrors into the Find box to locate it in the OID tree, selecting the specific row/instance you want to monitor since this is a table column, then select it and click OK. The number of packets destined to this RADIUS server which could not be transmitted due to an error. On the monitor's Main parameters page you can set the target's SNMP port (default 161), credentials, polling interval, and other settings — see the SNMP Monitor help for details. On the State conditions and Alerting tabs, configure when the monitor should change state and trigger an alert; since this is a Counter32-type OID, Value bounds is the most useful condition here — trigger an alert if the counter increases between polls, since a rising count of errors, failures, or discards often points to a real underlying problem. Click Finish to create the monitor; you can adjust any parameter later.

OIDs

OID symbolic	OID numeric	Type	Access	Description
rbnRadiusMib	1.3.6.1.4.1.2352.2.32			This Redback MIB supplements the standard Remote Access Dialin User Service (RADIUS) MIBs, namely: RADIUS-AUTH-CLIENT-MIB (RFC 2618) RADIUS-ACC-CLIENT-MIB (RFC 2620) This module defines additional objects and notifications for managing the RADIUS authentication and accounting servers in use by the Redback system. All mib objects defined in this module are viewed within the context identified in the SNMP protocol (i.e. the community string in v1/v2c or the contextName in v3).
rbnRadiusMIBNotifications	1.3.6.1.4.1.2352.2.32.0
NTF rbnRadiusAuthStateChange	1.3.6.1.4.1.2352.2.32.0.1			This notification signifies that a RADIUS authorization server has transitioned to 'up' or 'down'. Note: if rbnRadiusAuthSrvState's value is 'down' and rbnRadiusReason's value is 'packetTimeout', then rbnRadiusUsername's value will be a username. For all other cases, rbnRadiusUsername's value will be a zero-length string.
NTF rbnRadiusAcctStateChange	1.3.6.1.4.1.2352.2.32.0.2			This notification signifies that a RADIUS accounting server has transitioned to 'up' or 'down'. Note: if rbnRadiusAcctSrvState's value is 'down' and rbnRadiusReason's value is 'packetTimeout', then rbnRadiusUsername's value will be a username. For all other cases, rbnRadiusUsername's value will be a zero-length string.
rbnRadiusMIBObjects	1.3.6.1.4.1.2352.2.32.1
rbnRadiusAuthObjects	1.3.6.1.4.1.2352.2.32.1.1
U32 rbnRadiusAuthPktTimeout	1.3.6.1.4.1.2352.2.32.1.1.1	Unsigned32	read-write	The maximum amount of time to wait for a response from a RADIUS authorization server before assuming the packet was lost.
U32 rbnRadiusAuthSrvTimeout	1.3.6.1.4.1.2352.2.32.1.1.2	Unsigned32	read-write	The maximum amount of time to wait for any response from a RADIUS authorization server before assuming the server is unreachable. A value of '0' indicates that there is no timeout value. In this case a server is considered to be unreachable when no response is received within the rbnRadiusAuthPktTimeout window.
U32 rbnRadiusAuthDeadtime	1.3.6.1.4.1.2352.2.32.1.1.3	Unsigned32	read-write	After a RADIUS authorization server has been transitioned to 'down' it will be assumed to be unreachable for this interval. After that point the system may start sending requests to the server again. A value of '0' indicates the system may start sending requests to the server immediately.
U32 rbnRadiusAuthTries	1.3.6.1.4.1.2352.2.32.1.1.4	Unsigned32	read-write	The number of times the system will attempt to transmit an authorization request to a RADIUS server. If multiple RADIUS authorization servers have been configured retransmissions will cycle through the other servers before being retransmitted to the server that originally failed to respond.
rbnRadiusAuthSrvTable	1.3.6.1.4.1.2352.2.32.1.1.5		not-accessible	This table augments the radiusAuthServerTable. All entries that exist in that table will have a corresponding entry in this table.
rbnRadiusAuthSrvEntry	1.3.6.1.4.1.2352.2.32.1.1.5.1		not-accessible	A Redback proprietary extension to the radiusAuthServerEntry.
RBN rbnRadiusAuthSrvState	1.3.6.1.4.1.2352.2.32.1.1.5.1.1	RbnRadiusServerState	read-only	The current state of the RADIUS server.
TIM rbnRadiusAuthSrvLastChange	1.3.6.1.4.1.2352.2.32.1.1.5.1.2	TimeStamp	read-only	The value of sysUpTime when this server last changed state. If rbnRadiusAuthSrvState is 'unknown' this is effectively the value of sysUpTime when this server was initially configured.
TIM rbnRadiusAuthSrvCounterResetTime	1.3.6.1.4.1.2352.2.32.1.1.5.1.3	TimeStamp	read-only	The value of sysUpTime on the most recent occasion when any of the counters for this RADIUS server experienced a discontinuity. Note: this includes counters in this table as well as those in radiusAuthServerTable.
C32 rbnRadiusAuthSrvSendErrorsEx	1.3.6.1.4.1.2352.2.32.1.1.5.1.4	Counter32	read-only	The number of packets destined to this RADIUS server which could not be transmitted due to an error. Discontinuities in the value of this counter are indicated by the value of rbnRadiusAuthSrvCounterResetTime.
T/F rbnRadiusAuthStripDomain	1.3.6.1.4.1.2352.2.32.1.1.6	TruthValue	read-write	If this object is false, the entire username, including the domain name is sent to the RADIUS server. If true, the domain portion of a structured username is stripped before relaying a request to a RADIUS server.
rbnRadiusAcctObjects	1.3.6.1.4.1.2352.2.32.1.2
U32 rbnRadiusAcctPktTimeout	1.3.6.1.4.1.2352.2.32.1.2.1	Unsigned32	read-write	The maximum amount of time to wait for a response from a RADIUS accounting server before assuming the packet was lost. Note: if the system is using a RADIUS server for both authorization and accounting, this object's value will be ignored for that server. Instead the rbnRadiusAuthPktTimeout value will be used for all requests going to that server.
U32 rbnRadiusAcctSrvTimeout	1.3.6.1.4.1.2352.2.32.1.2.2	Unsigned32	read-write	The maximum amount of time to wait for any response from a RADIUS accounting server before assuming the server is unreachable. A value of '0' indicates that there is no timeout value. In this case a server is considered to be unreachable when no response is received within the rbnRadiusAcctPktTimeout window. Note: if the system is using a RADIUS server for both authorization and accounting, this object's value will be ignored for that server. Instead the rbnRadiusAuthSrvTimeout value will be used for that server.
U32 rbnRadiusAcctDeadtime	1.3.6.1.4.1.2352.2.32.1.2.3	Unsigned32	read-write	After a RADIUS accounting server has been transitioned to 'down' it will be assumed to be unreachable for this interval. After that point the system may start sending accounting records to the server again. A value of '0' indicates the system may start sending records to the server immediately. Note: if the system is using a RADIUS server for both authorization and accounting, this object's value will be ignored for that server. Instead the rbnRadiusAuthDeadtime value will be used for that server.
U32 rbnRadiusAcctTries	1.3.6.1.4.1.2352.2.32.1.2.4	Unsigned32	read-write	The number of times the system will attempt to transmit an accounting record to a RADIUS server. If multiple RADIUS accounting servers have been configured retransmissions will cycle through the other servers before being retransmitted to the server that originally failed to respond. Note: if the system is using a RADIUS server for both authorization and accounting, this object's value will be ignored for that server. Instead the rbnRadiusAuthTries value will be used for that server.
rbnRadiusAcctSrvTable	1.3.6.1.4.1.2352.2.32.1.2.5		not-accessible	This table augments the radiusAccServerTable. All entries that exist in that table will have a corresponding entry in this table.
rbnRadiusAcctSrvEntry	1.3.6.1.4.1.2352.2.32.1.2.5.1		not-accessible	A Redback proprietary extension to the radiusAccServerEntry.
RBN rbnRadiusAcctSrvState	1.3.6.1.4.1.2352.2.32.1.2.5.1.1	RbnRadiusServerState	read-only	The current state of the RADIUS server.
TIM rbnRadiusAcctSrvLastChange	1.3.6.1.4.1.2352.2.32.1.2.5.1.2	TimeStamp	read-only	The value of sysUpTime when this server last changed state. If rbnRadiusAcctSrvState is 'unknown' this is effectively the value of sysUpTime when this server was initially configured.
TIM rbnRadiusAcctSrvCounterResetTime	1.3.6.1.4.1.2352.2.32.1.2.5.1.3	TimeStamp	read-only	The value of sysUpTime on the most recent occasion when any of the counters for this RADIUS server experienced a discontinuity. Note: this includes counters in this table as well as those in radiusAccServerTable.
C32 rbnRadiusAcctSrvSendErrors	1.3.6.1.4.1.2352.2.32.1.2.5.1.4	Counter32	read-only	The number of packets destined to this RADIUS server which could not be transmitted due to an error. Discontinuities in the value of this counter are indicated by the value of rbnRadiusAcctSrvCounterResetTime.
T/F rbnRadiusAcctStripDomain	1.3.6.1.4.1.2352.2.32.1.2.6	TruthValue	read-write	If this object is false, the entire username, including the domain name is sent to the RADIUS server. If true, the domain portion of a structured username is stripped before relaying a request to a RADIUS server.
rbnRadiusNotifyObjects	1.3.6.1.4.1.2352.2.32.1.3
U32 rbnRadiusClientPort	1.3.6.1.4.1.2352.2.32.1.3.1	Unsigned32	accessible-for-notify	A system may be configured to use a range of source TCP/IP ports when sending requests to a RADIUS server. When a server transitions to 'up' or 'down' and a state-change notification is generated, an instance of this object is included to indicate which source port was being used when the server changed state.
STR rbnRadiusContext	1.3.6.1.4.1.2352.2.32.1.3.2	SnmpAdminString	accessible-for-notify	The name of the context in which this server is configured.
RBN rbnRadiusReason	1.3.6.1.4.1.2352.2.32.1.3.3	RbnRadiusServerReason	accessible-for-notify	The reason for the server's last state change.
STR rbnRadiusUsername	1.3.6.1.4.1.2352.2.32.1.3.4	SnmpAdminString	accessible-for-notify	The name of the user the system was trying to authenticate or send accouting information for when the RADIUS server transitioned to 'down'. Note: the 'username' is only valid when transitioning due to a packet-level timeout. When transitioning due to any other reason the value for this object will be a zero-length string.
rbnRadiusMIBConformance	1.3.6.1.4.1.2352.2.32.2
rbnRadiusCompliances	1.3.6.1.4.1.2352.2.32.2.1
rbnRadiusCompliance	1.3.6.1.4.1.2352.2.32.2.1.1			The compliance statement for SNMP entities which implement the Redback RADIUS MIB.
rbnRadiusCompliance2	1.3.6.1.4.1.2352.2.32.2.1.2			The compliance statement for SNMP entities which implement the Redback RADIUS MIB.
rbnRadiusGroups	1.3.6.1.4.1.2352.2.32.2.2
rbnRadiusAuthGroup	1.3.6.1.4.1.2352.2.32.2.2.1			The collection of objects used to manage RADIUS authentication servers.
rbnRadiusAcctGroup	1.3.6.1.4.1.2352.2.32.2.2.2			The collection of objects used to manage RADIUS accounting servers.
rbnRadiusNotifyGroup	1.3.6.1.4.1.2352.2.32.2.2.3			The collection of objects used only in notifications.
rbnRadiusAuthNotifyGroup	1.3.6.1.4.1.2352.2.32.2.2.4			Notification for tracking the status of RADIUS authentication servers.
rbnRadiusAcctNotifyGroup	1.3.6.1.4.1.2352.2.32.2.2.5			Notification for tracking the status of RADIUS accounting servers.
rbnRadiusAuthGroup2	1.3.6.1.4.1.2352.2.32.2.2.6			The collection of objects used to manage RADIUS authentication servers.
rbnRadiusAcctGroup2	1.3.6.1.4.1.2352.2.32.2.2.7			The collection of objects used to manage RADIUS accounting servers.

RFC description

Redback Networks (RBN) vendor-private MIB for RADIUS authentication server statistics and configuration management.

Start monitoring RedBack Networks (Ericsson SmartEdge) subscriber-management platform (RADIUS auth/accounting server health) with a free 30-day trial of IPNetwork Monitor. Import MIBs, browse SNMP OIDs, create custom SNMP monitors, configure alerts, and monitor any SNMP-enabled network device from a single console.

Download RBN-RADIUS-MIB