WLSX-AUTH-MIB

All MIBs › WLSX-AUTH-MIB

Organization: Aruba Wireless Networks

Last Updated: 2006-11-27

Category: Aruba Wireless Networking

Description: Manages Aruba wireless controller 802.1X and MAC-based client authentication state and policy enforcement.

Start monitoring vendor-neutral, standards-based MIB, any SNMPv3-capable network device (SNMP engine identity/boot/clock status) with a free 30-day trial of IPNetwork Monitor. Import MIBs, browse SNMP OIDs, create custom SNMP monitors, configure alerts, and monitor any SNMP-enabled network device from a single console.

What Is WLSX-AUTH-MIB?

WLSX-AUTH-MIB is an Aruba Wireless Networks (later HPE Aruba) proprietary MIB reporting authentication-server status on Aruba wireless controllers. Its authentication-server table records server name, type, address, port, retry count, timeout, admin/in-service state, usage count, successful/failed authentications, timeouts, average response time, outstanding requests, and uptime, alongside a captive-portal server table (host, port, page, protocol) and an LDAP-server-state table. As a configuration/status MIB it lets an administrator watch an authentication server's failure count and average response time to catch a degrading RADIUS/LDAP server before it causes widespread client login failures. It is deployed on Aruba (HPE Aruba) wireless controllers. Engineers can download the WLSX-AUTH-MIB file directly to load it into their MIB browser.

IPNetwork Monitor allows you to monitor SNMP objects defined in WLSX-AUTH-MIB. Use the built-in SNMP Monitoring Browser to explore available variables, view their current values and descriptions, and select the objects you want to monitor. You can then create SNMP monitors, configure thresholds, and receive alerts when monitored values change.

Supported Devices

Aruba (HPE Aruba) wireless controllers

Monitoring Examples

An administrator monitors authServerFailedAuths and authServerAvgResponseTime to catch a degrading RADIUS server before it starts causing widespread wireless client authentication failures.

What Can Be Monitored

authentication server health, response time, and failure counts

Imported Objects

From ARUBA-MIB

wlsxEnterpriseMibModules

OBJECT-IDENTITY

From ARUBA-TC

ArubaAuthServerType
ArubaAuthenticationMethods
ArubaEnableValue
ArubaEncryptionMethods
ArubaHashAlgorithms

From SNMPv2-CONF

OBJECT-GROUP

From SNMPv2-SMI

Counter32
Integer32
IpAddress
MODULE-IDENTITY
NOTIFICATION-TYPE
OBJECT-TYPE
snmpModules

From SNMPv2-TC

DisplayString
MacAddress
PhysAddress
RowStatus
StorageType
TAddress
TDomain
TEXTUAL-CONVENTION
TestAndIncr
TimeInterval
TruthValue

How to Use in IPNetwork Monitor

Example using authServerUsageCount OID:

Select an Aruba (HPE Aruba) wireless controller (auth-server failure-count/response-time status) as the target host to create a monitor — the SNMP service should be up and running on it. Click New Monitor, then check SNMP Custom on the Favorites tab, click Next, and confirm the host. On the next page, click Select... to open the built-in SNMP MIB Browser and type authServerUsageCount into the Find box to locate it in the OID tree, selecting the specific row/instance you want to monitor since this is a table column, then select it and click OK. The number of times this server was queried. On the monitor's Main parameters page you can set the target's SNMP port (default 161), credentials, polling interval, and other settings — see the SNMP Monitor help for details. On the State conditions and Alerting tabs, configure when the monitor should change state and trigger an alert; since this is a Counter32-type OID, Value bounds is the most useful condition here — trigger an alert if the counter increases sharply between polls relative to its normal baseline, since an unexpected spike often reflects a real change in traffic or activity. Click Finish to create the monitor; you can adjust any parameter later.

OIDs

OID symbolic	OID numeric	Type	Access	Description
wlsxAuthMIB	1.3.6.1.4.1.14823.2.2.1.8			This MIB module defines MIB objects which provide information about the authentication servers known to an Aruba controller.
wlsxAuthenticationServerGroup	1.3.6.1.4.1.14823.2.2.1.8.1
wlsxAuthenticationServerTable	1.3.6.1.4.1.14823.2.2.1.8.1.1		not-accessible	This Table lists all the authentication servers currently configured in the controller. Servers are identified by name.
wlsxAuthenticationServerEntry	1.3.6.1.4.1.14823.2.2.1.8.1.1.1		not-accessible	Server entry
STR authServerName	1.3.6.1.4.1.14823.2.2.1.8.1.1.1.1	DisplayString	not-accessible	The name of the authentication server.
ARU authServerType	1.3.6.1.4.1.14823.2.2.1.8.1.1.1.2	ArubaAuthServerType	read-only	The type of the authentication server.
STR authServerAddress	1.3.6.1.4.1.14823.2.2.1.8.1.1.1.3	DisplayString	read-create	The IP address of the authentication server.
I32 authServerPort	1.3.6.1.4.1.14823.2.2.1.8.1.1.1.4	Integer32	read-create	The transport layer port of the authentication server.
I32 authServerRetryCount	1.3.6.1.4.1.14823.2.2.1.8.1.1.1.5	Integer32	read-create	The configured retry count.
I32 authServerTimeOutValue	1.3.6.1.4.1.14823.2.2.1.8.1.1.1.6	Integer32	read-create	The configured timeout value.
ARU authServerState	1.3.6.1.4.1.14823.2.2.1.8.1.1.1.7	ArubaEnableValue	read-only	The state of the authentication server.
T/F authServerInservice	1.3.6.1.4.1.14823.2.2.1.8.1.1.1.8	TruthValue	read-only	An indication of whether or not the authentication server is in service.
C32 authServerUsageCountEx	1.3.6.1.4.1.14823.2.2.1.8.1.1.1.9	Counter32	read-only	The number of times this server was queried.
C32 authServerSuccessfullAuths	1.3.6.1.4.1.14823.2.2.1.8.1.1.1.10	Counter32	read-only	The number of times this server responded with success.
C32 authServerFailedAuths	1.3.6.1.4.1.14823.2.2.1.8.1.1.1.11	Counter32	read-only	The number of times this server responded with failure.
C32 authServerTimeouts	1.3.6.1.4.1.14823.2.2.1.8.1.1.1.12	Counter32	read-only	The number of times this communication with this server timed out.
I32 authServerAvgResponseTime	1.3.6.1.4.1.14823.2.2.1.8.1.1.1.13	Integer32	read-only	The average response time of the server in milliseconds.
I32 authServerOutStandingRequests	1.3.6.1.4.1.14823.2.2.1.8.1.1.1.14	Integer32	read-only	The number of requests currently outstanding to this server.
I32 authServerUptime	1.3.6.1.4.1.14823.2.2.1.8.1.1.1.15	Integer32	read-only	The time since the server went into service with the controller.
wlsxPortalServerTable	1.3.6.1.4.1.14823.2.2.1.8.1.2		not-accessible	This table lists configured captive portal servers.
wlsxPortalServerEntry	1.3.6.1.4.1.14823.2.2.1.8.1.2.1		not-accessible	Portal Server Entry
STR portalServerIndex	1.3.6.1.4.1.14823.2.2.1.8.1.2.1.1	DisplayString	not-accessible
STR portalServerHost	1.3.6.1.4.1.14823.2.2.1.8.1.2.1.2	DisplayString	read-only	The IP address of the portal server.
I32 portalServerPort	1.3.6.1.4.1.14823.2.2.1.8.1.2.1.3	Integer32	read-only	The transport layer port of the portal server.
STR portalServerPage	1.3.6.1.4.1.14823.2.2.1.8.1.2.1.4	DisplayString	read-only	The portal server URL
STR portalServerProtocol	1.3.6.1.4.1.14823.2.2.1.8.1.2.1.5	DisplayString	read-only	The portal server protocol (e.g. HTTP or HTTPS)
wlsxLdapServerStateTable	1.3.6.1.4.1.14823.2.2.1.8.1.5		not-accessible
wlsxLdapServerStateEntry	1.3.6.1.4.1.14823.2.2.1.8.1.5.1		not-accessible	LDAP Server Entry
T/F ldapInitDone	1.3.6.1.4.1.14823.2.2.1.8.1.5.1.1	TruthValue	read-only	Indicates whether the controller is initialized with the server.
INT ldapAdminBound	1.3.6.1.4.1.14823.2.2.1.8.1.5.1.2	INTEGER	read-only	Indicates whether the controller is bound to the server.
C32 ldapReBindCount	1.3.6.1.4.1.14823.2.2.1.8.1.5.1.3	Counter32	read-only	The number of times that the controller re-bound with the server.
wlsxAuthenticationInfoGroup	1.3.6.1.4.1.14823.2.2.1.8.2
wlsxAuthenticationGroup	1.3.6.1.4.1.14823.2.2.1.8.3

RFC description

Cisco WLAN Services (WLSx) authentication MIB. Manages authentication and access control for wireless LAN services.

Start monitoring Aruba (HPE Aruba) wireless controllers (auth-server failure-count/response-time status) with a free 30-day trial of IPNetwork Monitor. Import MIBs, browse SNMP OIDs, create custom SNMP monitors, configure alerts, and monitor any SNMP-enabled network device from a single console.

Download WLSX-AUTH-MIB