All MIBs › RC-TACACS-MIB
Organization: Bay Networks, Rapid-City Group
Last Updated: 2008-04-07
Category: Nortel Enterprise Data, Protocol: TACACS
Description:
Manages TACACS+ server configuration and authentication accounting on Bay Networks Rapid-City series switches.
Imported Objects
From INET-ADDRESS-MIB
| InetAddress | |
| InetAddressType | |
| InetPortNumber |
From RAPID-CITY
| rcTacacs | OBJECT-IDENTITY |
From SNMPv2-SMI
| Integer32 | |
| MODULE-IDENTITY | |
| OBJECT-TYPE |
From SNMPv2-TC
| RowStatus | |
| TEXTUAL-CONVENTION | |
| TruthValue |
What Is RC-TACACS-MIB?
RC-TACACS-MIB is a Bay Networks/Nortel enterprise MIB for the Rapid-City switch family, covering TACACS+ authentication, authorization, and accounting (AAA) client configuration. It exposes global TACACS+ enable state, server-table entries (address/type per server), accounting and authentication mode settings, and NNCLI command-authorization configuration including which privilege levels require authorization. From a monitoring standpoint it is primarily a software/service-status MIB for the switch's AAA subsystem -- tracking rcTacacsGlobalLastUserName/Address to see the most recent authentication attempt and confirming server reachability/configuration is intact, which matters for detecting authentication outages that could lock administrators out of device management. It has no dependency on external standard MIBs, being a self-contained Nortel enterprise TACACS+ client implementation. It is deployed on Rapid-City/Ethernet Routing Switch devices in enterprise networks that centralize administrative authentication through TACACS+ servers. Engineers can download the RC-TACACS-MIB file directly to load it into their MIB browser.
IPNetwork Monitor allows you to monitor SNMP objects defined in RC-TACACS-MIB. Use the built-in SNMP Monitoring Browser to explore available variables, view their current values and descriptions, and select the objects you want to monitor. You can then create SNMP monitors, configure thresholds, and receive alerts when monitored values change.
What Can Be Monitored
- TACACS+ server configuration
- last authenticated user/address
- authentication and accounting mode status
- command authorization privilege levels
Supported Devices
- Bay Networks/Nortel Rapid-City series switch
Monitoring Examples
An administrator would check rcTacacsServerTable (rcTacacsServerEntry) for rcTacacsServerAddress and rcTacacsServerAddressType to confirm the configured TACACS+ servers are correct, and monitor rcTacacsGlobalLastUserName/rcTacacsGlobalLastAddress to audit the most recent login attempt against the switch. If rcTacacsGlobalEnable is set but authentication requests are failing, it would suggest a TACACS+ server reachability problem, which is critical since it affects administrative access to the device itself. rcTacacsNncliCommandAuthorizationLevels confirms which CLI privilege levels are subject to command authorization checks.
OIDs
| OID symbolic | OID numeric | Type | Access | Description |
|---|---|---|---|---|
| rcTacacsMib | 1.3.6.1.4.1.2272.1.65.0 | Enterprise MIB for TACACS | ||
| rcTacacsGlobal | 1.3.6.1.4.1.2272.1.65.1 | |||
| T/F rcTacacsGlobalEnable | 1.3.6.1.4.1.2272.1.65.1.1 | TruthValue | read-write | Enable/disable this feature. |
| OCT rcTacacsGlobalLastUserName | 1.3.6.1.4.1.2272.1.65.1.2 | OCTET STRING | read-only | The last user for which authentication was attempted using TACACS+. |
| IPt rcTacacsGlobalLastAddressType | 1.3.6.1.4.1.2272.1.65.1.3 | InetAddressType | read-only | The type of address for the TACACS+ server that was most recently accessed |
| IP rcTacacsGlobalLastAddress | 1.3.6.1.4.1.2272.1.65.1.4 | InetAddress | read-only | The address of the TACACS+ server that was most recently accessed |
| BIT rcTacacsAccounting | 1.3.6.1.4.1.2272.1.65.1.5 | Bits | read-write | Determines which application will be accounted by tacacs+. |
| BIT rcTacacsAuthentication | 1.3.6.1.4.1.2272.1.65.1.6 | Bits | read-write | Determines which application will be authenticated by tacacs+. |
| T/F rcTacacsNncliCommandAuthorizationEnabled | 1.3.6.1.4.1.2272.1.65.1.7 | TruthValue | read-write | This object controls whether TACACS+ will be used for authorization of individual NNCLI commands. |
| BIT rcTacacsNncliCommandAuthorizationLevels | 1.3.6.1.4.1.2272.1.65.1.8 | Bits | read-write | This object controls which NNCLI command privilege levels will be authorized by TACACS+. |
| rcTacacsServerTable | 1.3.6.1.4.1.2272.1.65.2 | not-accessible | The (conceptual) table listing the TACACS+ servers with which the client shares a secret. | |
| rcTacacsServerEntry | 1.3.6.1.4.1.2272.1.65.2.1 | not-accessible | An entry (conceptual row) representing a TACACS+ server with which the client shares a secret. | |
| IPt rcTacacsServerAddressType | 1.3.6.1.4.1.2272.1.65.2.1.1 | InetAddressType | not-accessible | Specifies the type of IP address used on the Tacacs+ server. |
| IP rcTacacsServerAddress | 1.3.6.1.4.1.2272.1.65.2.1.2 | InetAddress | not-accessible | The IP address of the TACACS+ server referred to in this table entry. |
| INE rcTacacsServerPortNumber | 1.3.6.1.4.1.2272.1.65.2.1.3 | InetPortNumber | read-create | The TCP port on which the client establishes a connection to the server. A value of 0 indicates that the system specified default value is used. |
| INT rcTacacsServerConnectionType | 1.3.6.1.4.1.2272.1.65.2.1.4 | INTEGER | read-create | Specifies TCP connection type between device and TACACS+ server. Either a single open connection between a device and server (SingleConnection), or open/close connection per communication session (PerSessionConnection). |
| INT rcTacacsServerConnectionStatus | 1.3.6.1.4.1.2272.1.65.2.1.5 | INTEGER | read-only | Specifies status TCP connection type between device and TACACS+ server. |
| I32 rcTacacsServerTimeout | 1.3.6.1.4.1.2272.1.65.2.1.6 | Integer32 | read-create | The maximum time (in seconds) to wait for this TACACS+ server to reply. |
| OCT rcTacacsServerKey | 1.3.6.1.4.1.2272.1.65.2.1.7 | OCTET STRING | read-create | Secret key to be shared with this TACACS+ server. If the key length is zero that indicates no encryption is being used. |
| T/F rcTacacsServerSourceIpInterfaceEnabled | 1.3.6.1.4.1.2272.1.65.2.1.8 | TruthValue | read-create | Specifies whether source address specification is enabled. |
| IPt rcTacacsServerSourceIpInterfaceType | 1.3.6.1.4.1.2272.1.65.2.1.9 | InetAddressType | read-create | Specifies the type of IP address used on the interface that connects to the Tacacs+ server. If this value is unknown(0), then a system-wide default value will be used. |
| IP rcTacacsServerSourceIpInterface | 1.3.6.1.4.1.2272.1.65.2.1.10 | InetAddress | read-create | IP address of the interface to use with this server. |
| I32 rcTacacsServerPriority | 1.3.6.1.4.1.2272.1.65.2.1.11 | Integer32 | read-create | Determines the order in which the TACACS+ servers will be used, when 1 is the highest priority. If more than one server share the same priority - they will be used in lexicographic order (the order of entries in this table). |
| ROW rcTacacsServerRowStatus | 1.3.6.1.4.1.2272.1.65.2.1.12 | RowStatus | read-create | The row status variable, can be set to destroy or createAndGo. |
RFC description
Rapid-City TACACS+ MIB from Bay Networks/Nortel Networks for managing TACACS+ authentication servers, including server configuration and authentication tracking.
Start monitoring Bay Networks/Nortel Rapid-City series switch (TACACS+ AAA client configuration) with a free 30-day trial of IPNetwork Monitor. Import MIBs, browse SNMP OIDs, create custom SNMP monitors, configure alerts, and monitor any SNMP-enabled network device from a single console.