RBN-TACACS-MIB

All MIBs › RBN-TACACS-MIB

Organization: RedBack Networks, Inc.

Last Updated: 2004-03-01

Category: Protocol: TACACS, Vendor: Ericsson

Description: Manages TACACS+ server configuration, authentication, and accounting statistics on Redback SmartEdge BRAS platforms.

Start monitoring vendor-neutral, standards-based MIB, any SNMPv3-capable network device (SNMP engine identity/boot/clock status) with a free 30-day trial of IPNetwork Monitor. Import MIBs, browse SNMP OIDs, create custom SNMP monitors, configure alerts, and monitor any SNMP-enabled network device from a single console.

What Is RBN-TACACS-MIB?

RBN-TACACS-MIB is a Redback Networks (later Ericsson SmartEdge) enterprise MIB for managing TACACS+ authentication server configuration and monitoring server reachability/accounting on SmartEdge BRAS platforms. It exposes a TACACS+ server table with address, port, and per-server state, along with accounting-related objects and a notification for server state changes. Its monitoring emphasis is on software/service status -- rbnTacacsServerState and rbnTacacsServerReason indicate whether a configured TACACS+ authentication server is currently reachable/responding, which is critical since a failed TACACS+ server can block administrative or subscriber authentication. It is a Redback-proprietary MIB but conceptually models the standard TACACS+ protocol without stating a formal MIB dependency. It is typically deployed on Redback/Ericsson SmartEdge BRAS platforms in broadband access networks that authenticate administrative or PPP subscriber sessions via TACACS+. Engineers can download the RBN-TACACS-MIB file directly to load it into their MIB browser.

IPNetwork Monitor allows you to monitor SNMP objects defined in RBN-TACACS-MIB. Use the built-in SNMP Monitoring Browser to explore available variables, view their current values and descriptions, and select the objects you want to monitor. You can then create SNMP monitors, configure thresholds, and receive alerts when monitored values change.

Supported Devices

Redback Networks/Ericsson SmartEdge BRAS

Monitoring Examples

An administrator would poll a table indexed by rbnTacacsServerIndex to check rbnTacacsServerAddressType/rbnTacacsServerAddress/rbnTacacsServerPort and rbnTacacsServerState/rbnTacacsServerReason, confirming each configured TACACS+ server is reachable and identifying the reason if a server is marked down. The rbnTacacsMIBNotifications group would fire a notification carrying rbnTacacsServerMsg when a TACACS+ server's state changes, alerting operators before authentication failures start affecting logins.

What Can Be Monitored

TACACS+ server address/port
TACACS+ server reachability state
TACACS+ server down reason
TACACS+ accounting activity
TACACS+ server state-change notifications

Imported Objects

From INET-ADDRESS-MIB

InetAddress
InetAddressType

From RBN-SMI

rbnMgmt

OBJECT-IDENTITY

From SNMP-FRAMEWORK-MIB

SnmpAdminString

From SNMPv2-CONF

MODULE-COMPLIANCE
NOTIFICATION-GROUP
OBJECT-GROUP

From SNMPv2-SMI

MODULE-IDENTITY
NOTIFICATION-TYPE
OBJECT-TYPE
Unsigned32

From SNMPv2-TC

TEXTUAL-CONVENTION

OIDs

OID symbolic	OID numeric	Type	Access	Description
rbnTacacsMib	1.3.6.1.4.1.2352.2.33			This Redback MIB defines a notification for the state of the TACACS+ server.
rbnTacacsMIBNotifications	1.3.6.1.4.1.2352.2.33.0
NTF rbnTacacsStateChange	1.3.6.1.4.1.2352.2.33.0.1			This notification signifies that a TACACS+ authorization server has transitioned to 'up' or 'down'. Note: if rbnTacacsState's value is 'down' and rbnTacacsReason's value is 'packetTimeout', then rbnTacacsUserName's value will be a username. For all other cases, rbnTacacsUserName's value will be a zero-length string. If rbnTacacsServerReason is 'serverError', then rbnTacacsServerMsg may contain a string from the server, otherwise the value is a zero-length string.
rbnTacacsMIBObjects	1.3.6.1.4.1.2352.2.33.1
rbnTacacsObjects	1.3.6.1.4.1.2352.2.33.1.1
rbnTacacsAcctObjects	1.3.6.1.4.1.2352.2.33.1.2
rbnTacacsNotifyObjects	1.3.6.1.4.1.2352.2.33.1.3
STR rbnTacacsContext	1.3.6.1.4.1.2352.2.33.1.3.1	SnmpAdminString	accessible-for-notify	The name of the context in which this server is configured.
U32 rbnTacacsServerIndex	1.3.6.1.4.1.2352.2.33.1.3.2	Unsigned32	accessible-for-notify	A unique index value assigned to each TACACS server
IPt rbnTacacsServerAddressType	1.3.6.1.4.1.2352.2.33.1.3.3	InetAddressType	accessible-for-notify	The type of address contained in rbnTacacsServerAddress.
IP rbnTacacsServerAddress	1.3.6.1.4.1.2352.2.33.1.3.4	InetAddress	accessible-for-notify	The TACACS+ server address.
U32 rbnTacacsServerPort	1.3.6.1.4.1.2352.2.33.1.3.5	Unsigned32	accessible-for-notify	The TCP port number.
RBN rbnTacacsServerState	1.3.6.1.4.1.2352.2.33.1.3.6	RbnTacacsState	accessible-for-notify	The current state of the TACACS+ server.
RBN rbnTacacsServerReason	1.3.6.1.4.1.2352.2.33.1.3.7	RbnTacacsReason	accessible-for-notify	The reason for the server's last state change.
STR rbnTacacsUserName	1.3.6.1.4.1.2352.2.33.1.3.8	SnmpAdminString	accessible-for-notify	The name of the user the system was trying to authenticate or send accouting information for when the TACACS+ server transitioned to 'down'. Note: the 'username' is only valid when transitioning due to a packet-level timeout. When transitioning due to any other reason the value for this object will be a zero-length string.
STR rbnTacacsServerMsg	1.3.6.1.4.1.2352.2.33.1.3.9	SnmpAdminString	accessible-for-notify	A text string optionally provided by the TACACS+ server when rbnTacacsServerReason is 'serverError'. In all other cases this is a zero-length string.
rbnTacacsMIBConformance	1.3.6.1.4.1.2352.2.33.2
rbnTacacsCompliances	1.3.6.1.4.1.2352.2.33.2.1
rbnTacacsCompliance	1.3.6.1.4.1.2352.2.33.2.1.1			The compliance statement for SNMP entities which implement the Redback TACACS+ MIB.
rbnTacacsGroups	1.3.6.1.4.1.2352.2.33.2.2
rbnTacacsNotifyObjectsGroup	1.3.6.1.4.1.2352.2.33.2.2.2			The collection of objects used only in notifications.
rbnTacacsNotifyGroup	1.3.6.1.4.1.2352.2.33.2.2.3			Notification for tracking the status of TACACS+ servers.

RFC description

Monitors TACACS+ authentication server state transitions and availability for RedBack Networks platforms.

Start monitoring Redback Networks/Ericsson SmartEdge BRAS (TACACS+ authentication server reachability) with a free 30-day trial of IPNetwork Monitor. Import MIBs, browse SNMP OIDs, create custom SNMP monitors, configure alerts, and monitor any SNMP-enabled network device from a single console.

Download RBN-TACACS-MIB

What Is RBN-TACACS-MIB?

Supported Devices

Monitoring Examples

What Can Be Monitored

This MIB depends on

Related MIBs

RFC description