Unisphere-Data-AAA-MIB

All MIBs › Unisphere-Data-AAA-MIB

Organization: Unisphere Networks, Inc.

Last Updated: 2002-08-02

Category: Juniper Unisphere ERX Routing

Description: Manages Unisphere ERX router AAA authentication, authorization, and accounting configuration.

Start monitoring vendor-neutral, standards-based MIB, any SNMPv3-capable network device (SNMP engine identity/boot/clock status) with a free 30-day trial of IPNetwork Monitor. Import MIBs, browse SNMP OIDs, create custom SNMP monitors, configure alerts, and monitor any SNMP-enabled network device from a single console.

What Is Unisphere-Data-AAA-MIB?

Unisphere-Data-AAA-MIB is an enterprise MIB from Unisphere Networks (later Juniper's ERX product line) covering Authentication, Authorization, and Accounting (AAA) configuration for their edge routing switches. It exposes objects for BRAS license assignment and licensed user counts, domain and realm delimiter parsing rules, subscriber limits, and a domain assignment table mapping subscriber domain names to routers, loopback addresses, and row status. Its monitoring value is centered on software/service-level status -- specifically how many subscriber licenses are in use versus assigned (usdAaaAssignBrasLicensedUsers vs. usdAaaAssignBrasLicense) and whether domain-based routing/authentication policies are correctly provisioned -- functioning as a subscriber-management and licensing health MIB rather than hardware sensor telemetry. As an AAA-focused MIB it conceptually complements standard RADIUS/AAA MIBs and interacts with the broader Unisphere-Data enterprise MIB tree for router identity. It is typically deployed in broadband/BRAS access environments where ERX routers authenticate and authorize large numbers of subscriber sessions. Engineers can download the Unisphere-Data-AAA-MIB file directly to load it into their MIB browser.

IPNetwork Monitor allows you to monitor SNMP objects defined in Unisphere-Data-AAA-MIB. Use the built-in SNMP Monitoring Browser to explore available variables, view their current values and descriptions, and select the objects you want to monitor. You can then create SNMP monitors, configure thresholds, and receive alerts when monitored values change.

Supported Devices

Unisphere/Juniper ERX broadband routers (BRAS)

Monitoring Examples

An administrator would poll usdAaaAssignBrasLicensedUsers against usdAaaAssignBrasLicense to check whether the router is approaching its licensed subscriber capacity, and would inspect usdAaaAssignDomainTable (via usdAaaAssignDomainEntry) to confirm a given usdAaaAssignDomainName correctly maps to its usdAaaAssignDomainRouterName and usdAaaAssignDomainLoopback. A domain entry with an unexpected usdAaaAssignDomainRowStatus (e.g. notReady) would indicate an incomplete AAA domain provisioning that could block subscriber logins.

What Can Be Monitored

BRAS license count vs. usage
subscriber limit
domain delimiter configuration
domain-to-router mapping
domain row provisioning status
realm delimiter parsing order

Imported Objects

From SNMPv2-CONF

MODULE-COMPLIANCE
OBJECT-GROUP

From SNMPv2-SMI

Counter32
Gauge32
Integer32
IpAddress
MODULE-IDENTITY
OBJECT-TYPE
Unsigned32

From SNMPv2-TC

DisplayString
RowStatus
TEXTUAL-CONVENTION
TruthValue

From Unisphere-Data-MIBs

usDataMibs

MODULE-IDENTITY

From Unisphere-Data-TC

UsdName

How to Use in IPNetwork Monitor

Example using usdAaaIncomingInitiateRequests OID:

Select a Unisphere/Juniper ERX broadband router (BRAS) (subscriber license/domain-assignment status) as the target host to create a monitor — the SNMP service should be up and running on it. Click New Monitor, then check SNMP Custom on the Favorites tab, click Next, and confirm the host. On the next page, click Select... to open the built-in SNMP MIB Browser and type usdAaaIncomingInitiateRequests into the Find box to locate it in the OID tree, then select it and click OK. The number of AAA incoming initiate requests. On the monitor's Main parameters page you can set the target's SNMP port (default 161), credentials, polling interval, and other settings — see the SNMP Monitor help for details. On the State conditions and Alerting tabs, configure when the monitor should change state and trigger an alert; since this is a Counter32-type OID, Value bounds is the most useful condition here — trigger an alert if the counter increases sharply between polls relative to its normal baseline, since an unexpected spike often reflects a real change in traffic or activity. Click Finish to create the monitor; you can adjust any parameter later.

OIDs

OID symbolic	OID numeric	Type	Access	Description
usdAaaMIB	1.3.6.1.4.1.4874.2.2.20			The Authentication, Authorization and Accounting (AAA) MIB for the Unisphere Networks enterprise.
usdAaaObjects	1.3.6.1.4.1.4874.2.2.20.1
usdAaaAssignment	1.3.6.1.4.1.4874.2.2.20.1.1
usdAaaAssignGeneral	1.3.6.1.4.1.4874.2.2.20.1.1.1
STR usdAaaAssignBrasLicense	1.3.6.1.4.1.4874.2.2.20.1.1.1.1	DisplayString	read-write	The license string that determines the system-wide maximum number of remote user connections allowed. A zero-length string (no license) prohibits remote user connections.
I32 usdAaaAssignBrasLicensedUsers	1.3.6.1.4.1.4874.2.2.20.1.1.1.2	Integer32	read-only	The system-wide maximum number of remote user connections allowed by the currently configured license string.
STR usdAaaAssignDomainDelimiters	1.3.6.1.4.1.4874.2.2.20.1.1.1.3	DisplayString	read-write	The list of delimiters used to separate the user's name from the user's domain in the username field. The default is '@'.
STR usdAaaAssignRealmDelimiters	1.3.6.1.4.1.4874.2.2.20.1.1.1.4	DisplayString	read-write	The list of delimiters used to separate the user's name from the user's realm in the username field. The realm is treated like the domain in the ERX. The default is none.
INT usdAaaAssignDomainParseOrder	1.3.6.1.4.1.4874.2.2.20.1.1.1.5	INTEGER	read-write	The order in which the user's name is parsed: either search for domain first or realm first in the form (realm/user@domain.com). The default is domain first.
I32 usdAaaAssignSubscriberLimit	1.3.6.1.4.1.4874.2.2.20.1.1.1.6	Integer32	read-write	The maximum number of subscribers permitted in this VR context. The value '0' means no limit.
usdAaaAssignDomain	1.3.6.1.4.1.4874.2.2.20.1.1.2
usdAaaAssignDomainTable	1.3.6.1.4.1.4874.2.2.20.1.1.2.1		not-accessible	The entries in this table specify the assignment of a remote access user to a virtual router, based on the user's domain.
usdAaaAssignDomainEntry	1.3.6.1.4.1.4874.2.2.20.1.1.2.1.1		not-accessible	A specification of the virtual router to which users on a specified domain should be assigned.
USD usdAaaAssignDomainName	1.3.6.1.4.1.4874.2.2.20.1.1.2.1.1.1	UsdAaaDomainName	read-only	The domain name uniquely identifying this entry.
ROW usdAaaAssignDomainRowStatus	1.3.6.1.4.1.4874.2.2.20.1.1.2.1.1.2	RowStatus	read-create	Controls creation/deletion of entries in this table. Only the values 'createAndGo' and 'destroy' may be SET.
USD usdAaaAssignDomainRouterName	1.3.6.1.4.1.4874.2.2.20.1.1.2.1.1.3	UsdName	read-create	The name of the virtual router to which remote access users within this domain are assigned.
I32 usdAaaAssignDomainLoopback	1.3.6.1.4.1.4874.2.2.20.1.1.2.1.1.4	Integer32	read-create	The number of the loopback interface, associated with the specified virtual router, whose IP address is used as the source address when transmitting IP packets on unnumbered remote access user links. For example, if the associated loopback interface for this domain/router was configured via the console as 'loopback 2', this object would contain the integer value 2. A value of -1 indicates the loopback interface is unspecified.
T/F usdAaaAssignDomainIpHint	1.3.6.1.4.1.4874.2.2.20.1.1.2.1.1.5	TruthValue	read-create	Enables/disables the IP hint feature, which causes the system to allocate an IP address before going to RADIUS for authentication.
INT usdAaaAssignDomainAtmServiceLevel	1.3.6.1.4.1.4874.2.2.20.1.1.2.1.1.6	INTEGER	read-create	The Service category for this circuit: ubr Unspecified bit rate (best effort). ubrPcr Unspecified Bit Rate with Peak Cell Rate limit. nrtVbr Non-realtime Variable Bit Rate. cbr Constant bit rate. Set the service level in combination of the traffic attributes PCR/SCR/MBS in the following matrix for successfull configurations. ServiceLevel PCR SCR MBS ------------------------------------------ ubr omit omit omit ubrPcr must omit omit nrtVbr must must must cbr must omit omit
I32 usdAaaAssignDomainAtmPcr	1.3.6.1.4.1.4874.2.2.20.1.1.2.1.1.7	Integer32	read-create	Peak Cell Rate, in kilobits per second (kbps), of this circuit. This parameter is only required when usdAaaAssignDomainAtmServiceLevel is configured to have one of the following values: ubrPcr nrtVbr cbr
I32 usdAaaAssignDomainAtmScr	1.3.6.1.4.1.4874.2.2.20.1.1.2.1.1.8	Integer32	read-create	Sustained Cell Rate, in kilobits per second (kbps), of this circuit. This parameter is only required when usdAaaAssignDomainAtmServiceLevel is configured to have one of the following values: nrtVbr
I32 usdAaaAssignDomainAtmMbs	1.3.6.1.4.1.4874.2.2.20.1.1.2.1.1.9	Integer32	read-create	Maximum Burst Size, in cells, of this circuit. This parameter is only required when usdAaaAssugbDomainAtmServiceLevel is configured to have one of the following values: nrtVbr
STR usdAaaAssignDomainOverrideUserName	1.3.6.1.4.1.4874.2.2.20.1.1.2.1.1.10	DisplayString	read-create	The override user name associated with this entry. This object is used to override the username of the remote client.
OCT usdAaaAssignDomainOverridePassword	1.3.6.1.4.1.4874.2.2.20.1.1.2.1.1.11	OCTET STRING	read-create	The override password for the user name defined by usdAaaAssignDomainOverrideUserName. This object is used to override the password part of the username/password pair of the remote client. This value returns a string length of 0 on reads for security reasons.
T/F usdAaaAssignDomainStripDomain	1.3.6.1.4.1.4874.2.2.20.1.1.2.1.1.12	TruthValue	read-create	Enables/disables the domain name stripping feature, which causes the system to strip the domain name before sending the access-request to RADIUS for authentication.
usdAaaAssignDomainTunnelTable	1.3.6.1.4.1.4874.2.2.20.1.1.2.2		not-accessible	The entries in this table specify the tunnels associated with a domain.
usdAaaAssignDomainTunnelEntry	1.3.6.1.4.1.4874.2.2.20.1.1.2.2.1		not-accessible	A specification of the tunnels associated with a domain.
USD usdAaaAssignDomainTunnelName	1.3.6.1.4.1.4874.2.2.20.1.1.2.2.1.1	UsdAaaDomainName	read-only	The domain name associated with this entry.
INT usdAaaAssignDomainTunnelTag	1.3.6.1.4.1.4874.2.2.20.1.1.2.2.1.2	INTEGER	read-only	The tunnel tag value associated with this entry.
INT usdAaaAssignDomainTunnelPreference	1.3.6.1.4.1.4874.2.2.20.1.1.2.2.1.3	INTEGER	read-create	The tunnel's preference value associated with this entry. The value 0 is the highest preference.
INT usdAaaAssignDomainTunnelType	1.3.6.1.4.1.4874.2.2.20.1.1.2.2.1.4	INTEGER	read-create	The tunnel type associated with this entry. Attempts to set this object to tunnelUnknown(2) will fail (wrongValue).
INT usdAaaAssignDomainTunnelMedium	1.3.6.1.4.1.4874.2.2.20.1.1.2.2.1.5	INTEGER	read-create	The tunnel medium associated with this entry. The medium dictates the format of the tunnel address. Attempts to set this object to tunnelMediumUnknown(2) will fail (wrongValue).
STR usdAaaAssignDomainTunnelAddress	1.3.6.1.4.1.4874.2.2.20.1.1.2.2.1.6	DisplayString	read-create	The tunnel server address associated with this entry. The usdAaaAssignDomainTunnelMedium object defines the format of the address. MEDIUM EXAMPLE FORMAT tunnelMedium_IPv4 xyz.xyz.xyz.xyz
STR usdAaaAssignDomainTunnelPassword	1.3.6.1.4.1.4874.2.2.20.1.1.2.2.1.7	DisplayString	read-create	The tunnel password associated with this entry. The object returns a null length string on reads due to security concerns.
STR usdAaaAssignDomainTunnelId	1.3.6.1.4.1.4874.2.2.20.1.1.2.2.1.8	DisplayString	read-create	The tunnel identifier associated with this entry. The tunnel identifier is used to distinguish between multiple tunnels to the same usdAaaAssignDomainTunnelAddress.
STR usdAaaAssignDomainTunnelHostName	1.3.6.1.4.1.4874.2.2.20.1.1.2.2.1.9	DisplayString	read-create	The tunnel client hostname associated with this entry. This object is analogous to the RADIUS attribute Tunnel-Client-Auth-ID. When a tunnel is established with a peer, this object can be used to distinguish groups of tunnels.
ROW usdAaaAssignDomainTunnelRowStatus	1.3.6.1.4.1.4874.2.2.20.1.1.2.2.1.10	RowStatus	read-create	Controls creation/deletion of entries in this table. Only the values 'createAndGo' and 'destroy' may be SET.
STR usdAaaAssignDomainTunnelServerName	1.3.6.1.4.1.4874.2.2.20.1.1.2.2.1.11	DisplayString	read-create	The tunnel server hostname associated with this entry. This object is analogous to the RADIUS attribute Tunnel-Server-Auth-ID. When a tunnel is established with a peer, this object can be used to distinguish groups of tunnels.
STR usdAaaAssignDomainTunnelClientAddress	1.3.6.1.4.1.4874.2.2.20.1.1.2.2.1.12	DisplayString	read-create	The tunnel client address associated with this entry. The usdAaaAssignDomainTunnelMedium object defines the format of the address. MEDIUM EXAMPLE FORMAT tunnelMedium_IPv4 xyz.xyz.xyz.xyz
usdAaaAuthentication	1.3.6.1.4.1.4874.2.2.20.1.2
usdAaaAuthGeneral	1.3.6.1.4.1.4874.2.2.20.1.2.1
OCT usdAaaAuthMethods	1.3.6.1.4.1.4874.2.2.20.1.2.1.1	OCTET STRING	read-write	The set of authentication protocols configured on this system. Each octet in this object contains one of the values defined in the UsdAaaAuthenticationMethods TEXTUAL-CONVENTION. The system will sequence through each octet of this object starting at octet 1 and attempt to use the corresponding authentication protocol defined by UsdAaaAuthenticationMethods. Note that if the octet is set to: protocolNone(4) Then authentication does not take place. If an authentication protocol is configured and attempts to reach the authentication server fail, the system will move to the next octet in this object and retry the authentication in the form dictated by the corresponding authentication protocoltype. The process of sequencing thru each octet will stop if the authentication server is successfully contacted, or there are no more configured octets in this object.
usdAaaAccounting	1.3.6.1.4.1.4874.2.2.20.1.3
usdAaaAcctGeneral	1.3.6.1.4.1.4874.2.2.20.1.3.1
I32 usdAaaAcctInterval	1.3.6.1.4.1.4874.2.2.20.1.3.1.1	Integer32	read-write	The interval that must elapse between generation of accounting reports, ranging from 10 minutes to 18 hours, or disabled if set to zero.
USD usdAaaAcctDupServerRouterName	1.3.6.1.4.1.4874.2.2.20.1.3.1.2	UsdName	read-write	The name of another router on this system to which accounting reports should be sent, in addition to or instead of sending accounting reports to the accounting service (if any) configured on the current router (i.e., the router context within which this object instance exists). A zero-length name disables this mechanism.
OCT usdAaaAcctMethods	1.3.6.1.4.1.4874.2.2.20.1.3.1.3	OCTET STRING	read-write	The set of accounting protocols configured on this system. Each octet in this object contains one of the values defined in the UsdAaaAccountingMethods TEXTUAL CONVENTION. The system will sequence through each octet of this object starting at octet 1 and attempt to use the corresponding accounting protocol defined by UsdAaaAccountingMethods. Note that if the octet is set to: protocolNone(4) Then accounting is disabled. If an accounting protocol is configured and reports are not successfully generated, the system will move to the next octet in this object and repeat the attempt to generate an accounting report in the form dictated by the corresponding accounting protocol type. The process of sequencing thru each octet will stop if accounting reports are either successfully generated, or there are no more configured octets in this object.
T/F usdAaaAcctSendStopOnAaaDeny	1.3.6.1.4.1.4874.2.2.20.1.3.1.4	TruthValue	read-write	Enables/disables the accounting stop message sent to the accounting server when authentication server grants access, but AAA denies access.
T/F usdAaaAcctSendStopOnAaaReject	1.3.6.1.4.1.4874.2.2.20.1.3.1.5	TruthValue	read-write	Enables/disables the accounting stop message sent to the accounting server when authentication server denies access.
usdAaaAddress	1.3.6.1.4.1.4874.2.2.20.1.4
usdAaaAddrGeneral	1.3.6.1.4.1.4874.2.2.20.1.4.1
INT usdAaaAddrPoolDefault	1.3.6.1.4.1.4874.2.2.20.1.4.1.1	INTEGER	read-write	Identifies the default source of IP address allocation for remote access links: none No address source is specified. Using this setting allows the remote PPP subscriber (client) to set it's own address. local Use the local address pool named 'default'. dhcp Use DHCP service.
T/F usdAaaDupAddrCheck	1.3.6.1.4.1.4874.2.2.20.1.4.1.2	TruthValue	read-write	Enables/disables the duplicate IP address checking which causes the system to check the route table for the PPP user's dynamic IP address is provided to PPP (from AAA).
usdAaaAddrNameServer	1.3.6.1.4.1.4874.2.2.20.1.4.2
usdAaaAddrDns	1.3.6.1.4.1.4874.2.2.20.1.4.2.1
IP usdAaaAddrDnsPrimary	1.3.6.1.4.1.4874.2.2.20.1.4.2.1.1	IpAddress	read-write	The IP address of the primary DNS server to be used by remote access clients. A value of 0.0.0.0 indicates no server is configured.
IP usdAaaAddrDnsSecondary	1.3.6.1.4.1.4874.2.2.20.1.4.2.1.2	IpAddress	read-write	The IP address of the secondary DNS server to be used by remote access clients. A value of 0.0.0.0 indicates no server is configured.
usdAaaAddrWins	1.3.6.1.4.1.4874.2.2.20.1.4.2.2
IP usdAaaAddrWinsPrimary	1.3.6.1.4.1.4874.2.2.20.1.4.2.2.1	IpAddress	read-write	The IP address of the primary WINS server to be used by remote access clients. A value of 0.0.0.0 indicates no server is configured.
IP usdAaaAddrWinsSecondary	1.3.6.1.4.1.4874.2.2.20.1.4.2.2.2	IpAddress	read-write	The IP address of the secondary WINS server to be used by remote access clients. A value of 0.0.0.0 indicates no server is configured.
usdAaaStatistics	1.3.6.1.4.1.4874.2.2.20.1.5
C32 usdAaaIncomingInitiateRequestsEx	1.3.6.1.4.1.4874.2.2.20.1.5.1	Counter32	read-only	The number of AAA incoming initiate requests
C32 usdAaaIncomingTerminateRequests	1.3.6.1.4.1.4874.2.2.20.1.5.2	Counter32	read-only	The number of AAA incomining termination requests
C32 usdAaaOutgoingTunnelGrantResponses	1.3.6.1.4.1.4874.2.2.20.1.5.3	Counter32	read-only	The number of AAA outgoing tunnel grant responses
C32 usdAaaOutgoingGrantResponses	1.3.6.1.4.1.4874.2.2.20.1.5.4	Counter32	read-only	The number of AAA outgoing grant responses
C32 usdAaaOutgoingDenyResponses	1.3.6.1.4.1.4874.2.2.20.1.5.5	Counter32	read-only	The number of AAA outgoing deny responses
C32 usdAaaOutgoingErrorResponses	1.3.6.1.4.1.4874.2.2.20.1.5.6	Counter32	read-only	The number of AAA outgoing error responses
C32 usdAaaOutgoingAuthRequests	1.3.6.1.4.1.4874.2.2.20.1.5.7	Counter32	read-only	The number of AAA outgoing authentication requests
C32 usdAaaIncomingAuthResponses	1.3.6.1.4.1.4874.2.2.20.1.5.8	Counter32	read-only	The number of AAA incoming authentication responses
C32 usdAaaOutgoingReAuthRequests	1.3.6.1.4.1.4874.2.2.20.1.5.9	Counter32	read-only	The number of AAA outgoing re-authentication requests
C32 usdAaaIncomingReAuthResponses	1.3.6.1.4.1.4874.2.2.20.1.5.10	Counter32	read-only	The number of AAA incoming re-authentication responses
C32 usdAaaOutgoingAcctRequests	1.3.6.1.4.1.4874.2.2.20.1.5.11	Counter32	read-only	The number of AAA outgoing accounting requests
C32 usdAaaIncomingAcctResponses	1.3.6.1.4.1.4874.2.2.20.1.5.12	Counter32	read-only	The number of AAA incoming accounting responses
C32 usdAaaOutgoingDupAcctRequests	1.3.6.1.4.1.4874.2.2.20.1.5.13	Counter32	read-only	The number of AAA outgoing duplicate accounting requests
C32 usdAaaIncomingDupAcctResponses	1.3.6.1.4.1.4874.2.2.20.1.5.14	Counter32	read-only	The number of AAA incoing duplication accounting responses
C32 usdAaaOutgoingAddrRequests	1.3.6.1.4.1.4874.2.2.20.1.5.15	Counter32	read-only	The number of AAA outgoing address requests
C32 usdAaaIncomingAddrResponses	1.3.6.1.4.1.4874.2.2.20.1.5.16	Counter32	read-only	The number of AAA incoming address responses
usdAaaTimeout	1.3.6.1.4.1.4874.2.2.20.1.6
usdAaaTimeoutGeneral	1.3.6.1.4.1.4874.2.2.20.1.6.1
I32 usdAaaIdleTimeout	1.3.6.1.4.1.4874.2.2.20.1.6.1.1	Integer32	read-write	The maximum number of seconds that a user session can be idle before system disconnects the user, ranging from 300 to 7200 seconds, 0 disables idle timeout.
I32 usdAaaSessionTimeout	1.3.6.1.4.1.4874.2.2.20.1.6.1.2	Integer32	read-write	The maximum number of seconds that a user session can be established before system disconnects the user, ranging from 60 to 604800 seconds, 0 disables session timeout.
usdAaaTunnel	1.3.6.1.4.1.4874.2.2.20.1.7
usdAaaTunnelGeneral	1.3.6.1.4.1.4874.2.2.20.1.7.1
STR usdAaaTunnelClientName	1.3.6.1.4.1.4874.2.2.20.1.7.1.1	DisplayString	read-write	The default tunnel client hostname associated with this virtual router. This object is used when no tunnel client name (client auth ID) is supplied in the authentication response.
STR usdAaaTunnelPassword	1.3.6.1.4.1.4874.2.2.20.1.7.1.2	DisplayString	read-write	The default tunnel password associated with this virtual router. This object is used when no tunnel password is supplied in the authentication response. The object returns a null length string on reads due to security concerns.
INT usdAaaTunnelNasPortMethod	1.3.6.1.4.1.4874.2.2.20.1.7.1.3	INTEGER	read-write	The default tunnel NAS-port method associated with this virtual router. This object is used to specify the LAC's NAS-port method. This provides limit compatiability to Cisco LNS for the NAS-port method AVP.
T/F usdAaaTunnelIgnoreNasPort	1.3.6.1.4.1.4874.2.2.20.1.7.1.4	TruthValue	read-write	Enables/disables the use of the NAS-port value that is passed in from the tunnel application.
T/F usdAaaTunnelIgnoreNasPortType	1.3.6.1.4.1.4874.2.2.20.1.7.1.5	TruthValue	read-write	Enables/disables the use of the NAS-port-type value that is passed in from the tunnel application.
INT usdAaaTunnelAssignmentIdFormat	1.3.6.1.4.1.4874.2.2.20.1.7.1.6	INTEGER	read-write	The tunnel assignment ID format for distinguishing tunnel definitions. This object is used to specify the tunnel assigment ID format passed to the LAC. The value assignmentId(0) indicates that the original tunnel assignment ID value is to be used; clientServerId(1) indicates that the concatenated value from client-auth-name, server-auth-name, and assignment-id is to be used.
usdAaaSubscribers	1.3.6.1.4.1.4874.2.2.20.1.8
I32 usdAaaSubscriberMaxCount	1.3.6.1.4.1.4874.2.2.20.1.8.1	Integer32	read-only	The configuration setting for the maximum number of subscribers. There is a grace number of subscribers above this limit, which when reached will cause authentication requests to be denied.
G32 usdAaaSubscriberPeakCount	1.3.6.1.4.1.4874.2.2.20.1.8.2	Gauge32	read-only	The peak number of subscribers. The peak count includes successfully authenticated subscribers as well as those subscribers in the process of being authenticated.
G32 usdAaaSubscriberCount	1.3.6.1.4.1.4874.2.2.20.1.8.3	Gauge32	read-only	The current number of subscribers. The subscriber count includes successfully authenticated subscribers as well as those subscribers in the process of being authenticated.
usdAaaSubscriberTable	1.3.6.1.4.1.4874.2.2.20.1.8.4		not-accessible	The entries in this table represent subscribers by subscriber handle value.
usdAaaSubscriberEntry	1.3.6.1.4.1.4874.2.2.20.1.8.4.1		not-accessible	A specification of subscribers by subscriber handle.
U32 usdAaaSubscriberHandle	1.3.6.1.4.1.4874.2.2.20.1.8.4.1.1	Unsigned32	not-accessible	The subscriber handle associated with this subscriber. A subscriber handle is a monotomically increasing integer.
STR usdAaaSubscriberUserName	1.3.6.1.4.1.4874.2.2.20.1.8.4.1.2	DisplayString	read-only	The RADIUS userName associated with this subscriber.
USD usdAaaSubscriberRouterName	1.3.6.1.4.1.4874.2.2.20.1.8.4.1.3	UsdName	read-only	The virtual router assigned to this subscriber.
U32 usdAaaSubscriberRouterIndex	1.3.6.1.4.1.4874.2.2.20.1.8.4.1.4	Unsigned32	read-only	The router index that identifies the virtual router associated with this subscriber. The value of this object can be used to index the router in the usdRouterTable.
STR usdAaaSubscriberLoginTime	1.3.6.1.4.1.4874.2.2.20.1.8.4.1.5	DisplayString	read-only	The time this subscriber logged in to RADIUS server.
IP usdAaaSubscriberIpAddress	1.3.6.1.4.1.4874.2.2.20.1.8.4.1.6	IpAddress	read-only	The client IP Address assigned to this subscriber.
IP usdAaaSubscriberIpAddressMask	1.3.6.1.4.1.4874.2.2.20.1.8.4.1.7	IpAddress	read-only	The client IP Address Mask assigned to this subscriber.
ADR usdAaaSubscriberAddrAssignType	1.3.6.1.4.1.4874.2.2.20.1.8.4.1.8	UsdAddressAssignType	read-only	The address assignment type for this subscriber.
STR usdAaaSubscriberInterfaceId	1.3.6.1.4.1.4874.2.2.20.1.8.4.1.9	DisplayString	read-only	A text string describing the local interface associated with this subscriber. Types/formats/examples for this string include: ATM Virtual Circuit atm /:. 'atm 3/0:0.100' Ethernet { fastEthernet \| gigabitEthernet } / 'fastEthernet 3/0' 'gigabitEthernet 3/0' Ethernet VLAN { fastEthernet \| gigabitEthernet } /: 'fastEthernet 3/0:1000' 'gigabitEthernet 3/0:1000' Channelized Serial serial /:[/]* 'serial 3/0:4' (T1/E1) 'serial 3/0:2/4' (T3/E3) 'serial 3/0:2/1/1/4' (OC3/OC12 - channelized DS3) 'serial 3/0:2/1/1/1/4' (OC3/OC12 - virtual tributaries) L2TP/L2F over IP ip::::: :: 'ip:10.10.0.1:20.20.0.2:1234:5678:9abc:def0:6789abcd' (Note: tunnelIDs, sessionIDs, and callSerialNumber are in hexadecimal.) Other formats may be supported over time.
USD usdAaaSubscriberState	1.3.6.1.4.1.4874.2.2.20.1.8.4.1.10	UsdSubscriberState	read-only	The state of this subscriber.
USD usdAaaSubscriberClientType	1.3.6.1.4.1.4874.2.2.20.1.8.4.1.11	UsdSubscriberClientType	read-only	The client type for this subscriber. Certain client types (e.g., 'other') might be suppressed from representation in this table.
STR usdAaaSubscriberIngressPolicyName	1.3.6.1.4.1.4874.2.2.20.1.8.4.1.12	DisplayString	read-only	The Ingress Policy Name associated with this subscriber.
STR usdAaaSubscriberEgressPolicyName	1.3.6.1.4.1.4874.2.2.20.1.8.4.1.13	DisplayString	read-only	The Egress Policy Name associated with this subscriber.
STR usdAaaSubscriberQosProfileName	1.3.6.1.4.1.4874.2.2.20.1.8.4.1.14	DisplayString	read-only	The QoS Profile Name associated with this subscriber.
ROW usdAaaSubscriberRowStatus	1.3.6.1.4.1.4874.2.2.20.1.8.4.1.15	RowStatus	read-write	Controls the deletion of the subscriber from this table. Deletion of the subscriber is analogous to logging the subscriber out of the network. Note: only 'destroy' is supported for SNMP SET operations.
usdAaaSubscriberRouterSummaryTable	1.3.6.1.4.1.4874.2.2.20.1.8.5		not-accessible	The entries in this table report number of subscribers per router.
usdAaaSubscriberRouterSummaryEntry	1.3.6.1.4.1.4874.2.2.20.1.8.5.1		not-accessible	A specification of subscribers for a router.
U32 usdAaaSubscriberRouterSummaryRouterIndex	1.3.6.1.4.1.4874.2.2.20.1.8.5.1.1	Unsigned32	not-accessible	The router index of the virtual router. The value of this object can be used to retrieve additional information in the router mib.
G32 usdAaaSubscriberRouterSummaryCount	1.3.6.1.4.1.4874.2.2.20.1.8.5.1.2	Gauge32	read-only	The number of subscribers on this router.
usdAaaSubscriberRouterTable	1.3.6.1.4.1.4874.2.2.20.1.8.6		not-accessible	The entries in this table sort subscribers by router ID.
usdAaaSubscriberRouterEntry	1.3.6.1.4.1.4874.2.2.20.1.8.6.1		not-accessible	A specification of subscribers by router ID.
U32 usdAaaSubscriberRouterRouterIndex	1.3.6.1.4.1.4874.2.2.20.1.8.6.1.1	Unsigned32	not-accessible	The router index of the virtual router. The value of this object can be used to retrieve additional information in the router MIB.
U32 usdAaaSubscriberRouterHandle	1.3.6.1.4.1.4874.2.2.20.1.8.6.1.2	Unsigned32	not-accessible	The subscriber handle associated with this subscriber. A subscriber handle is a monotonically increasing integer.
ROW usdAaaSubscriberRouterRowStatus	1.3.6.1.4.1.4874.2.2.20.1.8.6.1.3	RowStatus	read-only	Always has value 'active'.
USD usdAaaSubscriberLocationType	1.3.6.1.4.1.4874.2.2.20.1.8.7	UsdSubscriberLocationType	read-only	Describes the interpretation of UsdSubscriberLocationValue object values into platform-dependent interface location components, e.g., 'slot.port'.
usdAaaSubscriberLocationSummaryTable	1.3.6.1.4.1.4874.2.2.20.1.8.8		not-accessible	The entries in this table report number of subscribers per interface location.
usdAaaSubscriberLocationSummaryEntry	1.3.6.1.4.1.4874.2.2.20.1.8.8.1		not-accessible	A specification of subscribers on an interface location.
USD usdAaaSubscriberLocationSummaryLocationIndex	1.3.6.1.4.1.4874.2.2.20.1.8.8.1.1	UsdSubscriberLocationValue	not-accessible	The value of a platform interface location.
G32 usdAaaSubscriberLocationSummaryCount	1.3.6.1.4.1.4874.2.2.20.1.8.8.1.2	Gauge32	read-only	The number of subscribers associated with this interface location.
usdAaaSubscriberLocationTable	1.3.6.1.4.1.4874.2.2.20.1.8.9		not-accessible	The entries in this table sort subscribers by interface location.
usdAaaSubscriberLocationEntry	1.3.6.1.4.1.4874.2.2.20.1.8.9.1		not-accessible	An association of a subscriber to an interface location.
USD usdAaaSubscriberLocationLocationIndex	1.3.6.1.4.1.4874.2.2.20.1.8.9.1.1	UsdSubscriberLocationValue	not-accessible	The value of a platform interface location.
U32 usdAaaSubscriberLocationHandle	1.3.6.1.4.1.4874.2.2.20.1.8.9.1.2	Unsigned32	not-accessible	The subscriber handle associated with this subscriber. A subscriber handle is a monotonically increasing integer.
ROW usdAaaSubscriberLocationRowStatus	1.3.6.1.4.1.4874.2.2.20.1.8.9.1.3	RowStatus	read-only	Always has value 'active'.
G32 usdAaaSubscriberPseudoPeakCount	1.3.6.1.4.1.4874.2.2.20.1.8.10	Gauge32	read-only	The peak number of pseudo-subscribers. The peak count includes successfully authenticated pseudo-subscribers as well as those pseudo-subscribers in the process of being authenticated. Pseudo-subscribers are those whose identities are locally configured on a dynamic link (e.g. an ATM subinterface) via the (imprecisely named) Unisphere-Data-SUBSCRIBER-MIB. Some links (e.g. IPoA) provide no link protocol with which to query the identity of a remote user. In such a case, a locally configured pseudo-subscriber can be used to conduct AAA authentication-based configuration of the dynamic link when it becomes active. Pseudo-subscribers are understood to be intended more for dynamic configuration than for actually identifying the remote user. Consequently, the pseudo-subscribers are not reflected in any of the subscriber tables defined in this MIB.
G32 usdAaaSubscriberPseudoCount	1.3.6.1.4.1.4874.2.2.20.1.8.11	Gauge32	read-only	The current number of pseudo-subscribers. The pseudo-subscriber count includes successfully authenticated subscribers as well as those subscribers in the process of being authenticated. Pseudo-subscribers are those whose identities are locally configured on a dynamic link (e.g. an ATM subinterface) via the (imprecisely named) Unisphere-Data-SUBSCRIBER-MIB. Some links (e.g. IPoA) provide no link protocol with which to query the identity of a remote user. In such a case, a locally configured pseudo-subscriber can be used to conduct AAA authentication-based configuration of the dynamic link when it becomes active. Pseudo-subscribers are understood to be intended more for dynamic configuration than for actually identifying the remote user. Consequently, the pseudo-subscribers are not reflected in any of the subscriber tables defined in this MIB.
usdAaaCapabilities	1.3.6.1.4.1.4874.2.2.20.1.9
T/F usdAaaAccountingCapability	1.3.6.1.4.1.4874.2.2.20.1.9.1	TruthValue	read-only	Indicates whether this system supports AAA Accounting. The value true(1) indicate that it does, false(2) indicates that it does not.
T/F usdAaaAddressAssignmentCapability	1.3.6.1.4.1.4874.2.2.20.1.9.2	TruthValue	read-only	Indicates whether this system supports AAA address assignment. The value true(1) indicates that it does, false(2) indicates that it does not.
T/F usdAaaBrasCapability	1.3.6.1.4.1.4874.2.2.20.1.9.3	TruthValue	read-only	Indicates whether this system supports AAA BRAS functionality. The value true(1) indicates that it does, false(2) indicates that it does not.
T/F usdAaaTunnelingCapability	1.3.6.1.4.1.4874.2.2.20.1.9.4	TruthValue	read-only	Indicates whether this system supports AAA tunneling. The value true(1) indicates that it does, false(2) indicates that it does not.
usdAaaMIBConformance	1.3.6.1.4.1.4874.2.2.20.4
usdAaaMIBCompliances	1.3.6.1.4.1.4874.2.2.20.4.1
usdAaaCompliance	1.3.6.1.4.1.4874.2.2.20.4.1.1			Obsolete compliance statement for systems supporting AAA. This statement became obsolete when new objects were added.
usdAaaCompliance2	1.3.6.1.4.1.4874.2.2.20.4.1.2			Obsolete compliance statement for systems supporting AAA. This statement became obsolete when new objects were added and new groupings were defined.
usdAaaCompliance3	1.3.6.1.4.1.4874.2.2.20.4.1.3			Obsolete compliance statement for systems supporting AAA. This statement became obsolete when the usdAaaAssignDomainStripDomain object was added to the B-RAS group.
usdAaaCompliance4	1.3.6.1.4.1.4874.2.2.20.4.1.4			Obsolete compliance statement for systems supporting AAA. This statement became obsolete when new assignment delimiter objects were added to the B-RAS group.
usdAaaCompliance5	1.3.6.1.4.1.4874.2.2.20.4.1.5			Obsolete compliance statement for systems supporting AAA. This statement became obsolete when the subscriber and capabilities groups were added.
usdAaaCompliance6	1.3.6.1.4.1.4874.2.2.20.4.1.6			Obsolete compliance statement for systems supporting AAA. This statement became obsolete when support was added for subscriber information by interface location.
usdAaaCompliance7	1.3.6.1.4.1.4874.2.2.20.4.1.7			Obsolete compliance statement for systems supporting AAA. This statement became obsolete when several new objects were added.
usdAaaCompliance8	1.3.6.1.4.1.4874.2.2.20.4.1.8			The compliance statement for systems supporting AAA.
usdAaaMIBGroups	1.3.6.1.4.1.4874.2.2.20.4.2
usdAaaGroup	1.3.6.1.4.1.4874.2.2.20.4.2.1			Obsolete collection of objects providing management of AAA functionality in a Unisphere product. This group became obsolete when new objects were added.
usdAaaGroup2	1.3.6.1.4.1.4874.2.2.20.4.2.2			Obsolete collection of objects providing management of AAA functionality in a Unisphere product. This group became obsolete when new objects were added and new groupings were defined.
usdAaaBasicGroup	1.3.6.1.4.1.4874.2.2.20.4.2.3			The basic collection of objects providing management of AAA functionality in a Unisphere product.
usdAaaBrasGroup	1.3.6.1.4.1.4874.2.2.20.4.2.4			Obsolete collection of objects providing management of AAA B-RAS functionality in a Unisphere product. This group became obsolete when the usdAaaAssignDomainStripDomain object was added.
usdAaaTunnelGroup	1.3.6.1.4.1.4874.2.2.20.4.2.5			The collection of objects providing management of AAA tunneling functionality in a Unisphere product.
usdAaaAuthenticationGroup	1.3.6.1.4.1.4874.2.2.20.4.2.6			The collection of objects providing management of AAA authentication functionality in a Unisphere product.
usdAaaAccountingGroup	1.3.6.1.4.1.4874.2.2.20.4.2.7			Obsolete collection of objects providing management of AAA accounting functionality in a Unisphere product. This group became obsolete when the usdAaaAcctSendStopOnAaaDeny object was added.
usdAaaAddressGroup	1.3.6.1.4.1.4874.2.2.20.4.2.8			The collection of objects providing management of AAA address assignment functionality in a Unisphere product.
usdAaaBrasGroup2	1.3.6.1.4.1.4874.2.2.20.4.2.9			Obsolete collection of objects providing management of AAA B-RAS functionality in a Unisphere product. This group became obsolete when new assignment delimiter objects were added.
usdAaaBrasGroup3	1.3.6.1.4.1.4874.2.2.20.4.2.10			Obsolete collection of objects providing management of AAA B-RAS functionality in a Unisphere product. This group became obsolete when new objects were added.
usdAaaSubscriberGroup	1.3.6.1.4.1.4874.2.2.20.4.2.11			Obsolete collection of objects providing management of AAA B-RAS Subscriber functionality in a Unisphere product. This group became obsolete when support was added for monitoring subscriber information by interface location.
usdAaaCapabilitiesGroup	1.3.6.1.4.1.4874.2.2.20.4.2.12			The collection of objects providing management of AAA Capabilities functionality in a Unisphere product.
usdAaaSubscriberGroup2	1.3.6.1.4.1.4874.2.2.20.4.2.13			Obsolete collection of objects providing management of AAA B-RAS Subscriber functionality in a Unisphere product. This group became obsolete when the pseudo-subscriber meters were added.
usdAaaAccountingGroup2	1.3.6.1.4.1.4874.2.2.20.4.2.14			The collection of objects providing management of AAA accounting functionality in a Unisphere product.
usdAaaBrasGroup4	1.3.6.1.4.1.4874.2.2.20.4.2.15			The collection of objects providing management of AAA B-RAS functionality in a Unisphere product.
usdAaaSubscriberGroup3	1.3.6.1.4.1.4874.2.2.20.4.2.16			The collection of objects providing management of AAA B-RAS Subscriber functionality in a Unisphere product.

RFC description

Manages Authentication, Authorization, and Accounting (AAA) settings and subscriber policies on Unisphere platforms.

Start monitoring Unisphere/Juniper ERX broadband routers (BRAS) (subscriber license/domain-assignment status) with a free 30-day trial of IPNetwork Monitor. Import MIBs, browse SNMP OIDs, create custom SNMP monitors, configure alerts, and monitor any SNMP-enabled network device from a single console.

Download Unisphere-Data-AAA-MIB