WWP-LEOS-RADIUS-CLIENT-MIB

All MIBs › WWP-LEOS-RADIUS-CLIENT-MIB

Organization: Ciena, Inc

Last Updated: 2012-04-26

Category: Ciena LEOS Carrier Ethernet

Description: Manages Ciena LEOS RADIUS authentication client server configuration and access-request statistics.

Start monitoring vendor-neutral, standards-based MIB, any SNMPv3-capable network device (SNMP engine identity/boot/clock status) with a free 30-day trial of IPNetwork Monitor. Import MIBs, browse SNMP OIDs, create custom SNMP monitors, configure alerts, and monitor any SNMP-enabled network device from a single console.

What Is WWP-LEOS-RADIUS-CLIENT-MIB?

WWP-LEOS-RADIUS-CLIENT-MIB is a World Wide Packets (Ciena) vendor MIB for the LEOS platform covering the switch's RADIUS client, used to authenticate administrative logins against a centralized AAA server. It exposes configuration data such as RADIUS server address, shared secret reference, and retry/timeout parameters, along with statistics on access-request, access-accept, and access-reject counts. Its monitoring value is mainly around software/service status of the authentication subsystem: an operator can confirm the RADIUS client is successfully reaching its configured server and detect authentication failures or a server becoming unresponsive, which would otherwise silently lock out administrative access. It depends conceptually on the RADIUS protocol (RFC 2865) though it is not a direct MIB-to-MIB dependency. It is typically deployed on Ciena/WWP LEOS Ethernet switches in service-provider networks that centralize administrative authentication. Engineers can download the WWP-LEOS-RADIUS-CLIENT-MIB file directly to load it into their MIB browser.

IPNetwork Monitor allows you to monitor SNMP objects defined in WWP-LEOS-RADIUS-CLIENT-MIB. Use the built-in SNMP Monitoring Browser to explore available variables, view their current values and descriptions, and select the objects you want to monitor. You can then create SNMP monitors, configure thresholds, and receive alerts when monitored values change.

Supported Devices

Ciena/WWP LEOS-based Ethernet switches
metro Ethernet access/aggregation devices

Monitoring Examples

An administrator would poll the RADIUS server statistics objects (access-request sent, access-accept/reject received, timeout count) to confirm the configured RADIUS server is responding; a rising timeout counter with no corresponding accept/reject responses would reveal the RADIUS server is unreachable or misconfigured, prompting a fallback to local authentication. No sample objects were listed in the source excerpt, so specific table/object names are inferred from the stated RADIUS server configuration and monitoring purpose rather than taken verbatim from the MIB.

What Can Be Monitored

RADIUS server address
access-request/accept/reject counts
RADIUS request timeout count
authentication retry configuration

Imported Objects

From INET-ADDRESS-MIB

InetAddress
InetAddressType

From SNMPv2-SMI

Counter32
Gauge32
Integer32
IpAddress
MODULE-IDENTITY
OBJECT-TYPE
TimeTicks

From SNMPv2-TC

DisplayString
RowStatus
TEXTUAL-CONVENTION
TruthValue

From WWP-SMI

wwpModulesLeos

OBJECT-IDENTITY

OIDs

OID symbolic	OID numeric	Type	Access	Description
wwpLeosRadiusClientMIB	1.3.6.1.4.1.6141.2.60.20			The MIB module for the WWP Radius Server specific configuration and monitoring information.
wwpLeosRadiusClientMIBObjects	1.3.6.1.4.1.6141.2.60.20.1
wwpLeosRadiusClient	1.3.6.1.4.1.6141.2.60.20.1.1
INT wwpLeosRadiusAdminState	1.3.6.1.4.1.6141.2.60.20.1.1.1	INTEGER	read-write	Setting this object will administratively enable/disable radius client on the device.
INT wwpLeosRadiusOperState	1.3.6.1.4.1.6141.2.60.20.1.1.2	INTEGER	read-only	This object returns the operational state of radius client.
I32 wwpLeosRadiusClientTimeout	1.3.6.1.4.1.6141.2.60.20.1.1.3	Integer32	read-write	This is the time in seconds between retransmissions to the RADIUS server.
I32 wwpLeosRadiusClientRetries	1.3.6.1.4.1.6141.2.60.20.1.1.4	Integer32	read-write	Indicates the number of times the RADIUS server should be tried before giving up on the server.
STR wwpLeosRadiusClientAuthKey	1.3.6.1.4.1.6141.2.60.20.1.1.5	RadiusString	read-write	The Auth Key to be used for Radius Servers. Retrieving the value of this object via SNMP will return an empty string for security reasons.
wwpLeosRadiusClientServerTable	1.3.6.1.4.1.6141.2.60.20.1.1.6		not-accessible	Lists the possible RADIUS servers. While creating entry following mib objects must be specified wwpLeosRadiusClientServerStatus, wwpLeosRadiusClientServerAddr. SNMP multiple set operation must be used to create entry.
wwpLeosRadiusClientServerEntry	1.3.6.1.4.1.6141.2.60.20.1.1.6.1		not-accessible	Radius server entry.
I32 wwpLeosRadiusClientServerIndex	1.3.6.1.4.1.6141.2.60.20.1.1.6.1.1	Integer32	not-accessible	Specifies the index of this table.
STR wwpLeosRadiusClientServerAddr	1.3.6.1.4.1.6141.2.60.20.1.1.6.1.2	DisplayString	read-write	Host name or ip address of the RADIUS server.
IP wwpLeosRadiusClientServerResolvedAddr	1.3.6.1.4.1.6141.2.60.20.1.1.6.1.3	IpAddress	read-only	When wwpLeosRadiusClientServerAddr represents: Host name : The resolved address will either be Ipv4 address or Ipv6 address. Ipv4 address : The resolved address will be the same Ipv4 address. Ipv6 address : The resolved address will be the same Ipv6 address. When the resolved address represents: Ipv4 address : wwpLeosRadiusClientServerResolvedAddr will represent the resolved Ipv4 address. wwpLeosRadiusClientServerResolvedInetAddr used in conjunction with wwpLeosRadiusClientServerResolvedInetAddrType will represent the same Ipv4 address. Ipv6 address : wwpLeosRadiusClientServerResolvedAddr will represent 0.0.0.0. wwpLeosRadiusClientServerResolvedInetAddr used in conjunction with wwpLeosRadiusClientServerResolvedInetAddrType will represent the Ipv6 address.
I32 wwpLeosRadiusClientServerPriority	1.3.6.1.4.1.6141.2.60.20.1.1.6.1.4	Integer32	read-write	Specifies the priority of radius servers configured on the device.
I32 wwpLeosRadiusClientServerAuthPort	1.3.6.1.4.1.6141.2.60.20.1.1.6.1.5	Integer32	read-write	The destination UDP port number to which RADIUS messages should be sent. The RADIUS server will not be used for authentication if this port number is 0.
TIK wwpLeosRadiusClientServerRoundTripTime	1.3.6.1.4.1.6141.2.60.20.1.1.6.1.6	TimeTicks	read-only	The time interval (in hundredths of a second) between the most recent Access-Reply/Access-Challenge and the Access-Request that matched it from this RADIUS authentication server.
C32 wwpLeosRadiusClientServerAccessRequests	1.3.6.1.4.1.6141.2.60.20.1.1.6.1.7	Counter32	read-only	The number of RADIUS Access-Request packets sent to this server. This does not include retransmissions.
C32 wwpLeosRadiusClientServerAccessRetransmissions	1.3.6.1.4.1.6141.2.60.20.1.1.6.1.8	Counter32	read-only	The number of RADIUS Access-Request packets retransmitted to this RADIUS authentication server.
C32 wwpLeosRadiusClientServerAccessAccepts	1.3.6.1.4.1.6141.2.60.20.1.1.6.1.9	Counter32	read-only	The number of RADIUS Access-Accept packets (valid or invalid) received from this server.
C32 wwpLeosRadiusClientServerAccessRejects	1.3.6.1.4.1.6141.2.60.20.1.1.6.1.10	Counter32	read-only	The number of RADIUS Access-Reject packets (valid or invalid) received from this server.
C32 wwpLeosRadiusClientServerAccessChallenges	1.3.6.1.4.1.6141.2.60.20.1.1.6.1.11	Counter32	read-only	The number of RADIUS Access-Challenge packets (valid or invalid) received from this server.
C32 wwpLeosRadiusClientServerMalformedAccessResponses	1.3.6.1.4.1.6141.2.60.20.1.1.6.1.12	Counter32	read-only	The number of malformed RADIUS Access-Response packets received from this server. Malformed packets include packets with an invalid length. Bad authenticators or Signature attributes or unknown types are not included as malformed access responses.
C32 wwpLeosRadiusClientServerBadAuthenticators	1.3.6.1.4.1.6141.2.60.20.1.1.6.1.13	Counter32	read-only	The number of RADIUS Access-Response packets containing invalid authenticators or Signature attributes received from this server.
G32 wwpLeosRadiusClientServerPendingRequests	1.3.6.1.4.1.6141.2.60.20.1.1.6.1.14	Gauge32	read-only	The number of RADIUS Access-Request packets destined for this server that have not yet timed out or received a response. This variable is incremented when an Access-Request is sent and decremented due to receipt of an Access-Accept, Access-Reject or Access-Challenge, a timeout or retransmission.
C32 wwpLeosRadiusClientServerTimeouts	1.3.6.1.4.1.6141.2.60.20.1.1.6.1.15	Counter32	read-only	The number of authentication timeouts to this server. After a timeout the client may retry to the same server, send to a different server, or give up. A retry to the same server is counted as a retransmit as well as a timeout. A send to a different server is counted as a Request as well as a timeout.
C32 wwpLeosRadiusClientServerUnknownTypes	1.3.6.1.4.1.6141.2.60.20.1.1.6.1.16	Counter32	read-only	The number of RADIUS packets of unknown type which were received from this server on the authentication port.
C32 wwpLeosRadiusClientServerPacketsDropped	1.3.6.1.4.1.6141.2.60.20.1.1.6.1.17	Counter32	read-only	The number of RADIUS packets of which were received from this server on the authentication port and dropped for some other reason.
ROW wwpLeosRadiusClientServerStatus	1.3.6.1.4.1.6141.2.60.20.1.1.6.1.18	RowStatus	read-create	To create a row in this table, a manager must set this object to createAndGo(4). While creating entry the following mib objects must be specified wwpLeosRadiusClientServerStatus, wwpLeosRadiusClientServerAddr. SNMP multiple set operation must be used to create entry. To disable a radius server, the operator can set wwpLeosRadiusClientServerStatus object to 'notInService' state.
INT wwpLeosRadiusClientServerApplication	1.3.6.1.4.1.6141.2.60.20.1.1.6.1.19	INTEGER	read-create	This object specifies how the radius server should be used for authentication. Whether this radius server should be used for userLogin authentication or dot1x authentication or both is decided by the value of this mib object.
IPt wwpLeosRadiusClientServerResolvedInetAddrType	1.3.6.1.4.1.6141.2.60.20.1.1.6.1.20	InetAddressType	read-only	Specifies the resolved IP address type. This OID is used in conjunction with wwpLeosRadiusClientServerInetAddrress. When set to : ipv4 : wwpLeosRadiusClientServerInetAddress should be compliant with InetAddressIPv4 ipv6 : wwpLeosRadiusClientServerInetAddress should be compliant with InetAddressIPv6
IP wwpLeosRadiusClientServerResolvedInetAddress	1.3.6.1.4.1.6141.2.60.20.1.1.6.1.21	InetAddress	read-only	Specifies the resolved IP address if wwpLeosRadiusClientServerAddr is set to host name. If wwpLeosRadiusClientServerAddr is set to ip address then wwpLeosRadiusClientServerResolvedInetAddress will contain same information as wwpLeosRadiusClientServerAddr. This OID should be used in conjuction with wwpLeosNtpServerResolvedInetAddrType.
T/F wwpLeosRadiusClientAuthKeyUnset	1.3.6.1.4.1.6141.2.60.20.1.1.7	TruthValue	read-write	Setting this object to true will cause the value of wwpLeosRadiusClientAuthKey to be cleared. Reading this object always return a value of false.
T/F wwpLeosRadiusClientAuthSecretUnset	1.3.6.1.4.1.6141.2.60.20.1.1.8	TruthValue	read-write	Setting this object to true will cause the value of wwpLeosRadiusClientAuthSecret to be cleared. Reading this object always return a value of false.
INT wwpLeosRadiusClientSearchType	1.3.6.1.4.1.6141.2.60.20.1.1.10	INTEGER	read-write	This object sets the search type of the radius client.
wwpLeosRadiusClientMIBNotificationPrefix	1.3.6.1.4.1.6141.2.60.20.2
wwpLeosRadiusClientMIBNotifications	1.3.6.1.4.1.6141.2.60.20.2.0
wwpLeosRadiusClientMIBConformance	1.3.6.1.4.1.6141.2.60.20.3
wwpLeosRadiusClientMIBCompliances	1.3.6.1.4.1.6141.2.60.20.3.1
wwpLeosRadiusClientMIBGroups	1.3.6.1.4.1.6141.2.60.20.3.2

RFC description

Ciena RADIUS client configuration and monitoring for authentication and server management on optical transport systems.

Start monitoring Ciena/WWP LEOS-based Ethernet switches, metro Ethernet access/aggregation devices (RADIUS-client request/accept/reject counter status) with a free 30-day trial of IPNetwork Monitor. Import MIBs, browse SNMP OIDs, create custom SNMP monitors, configure alerts, and monitor any SNMP-enabled network device from a single console.

Download WWP-LEOS-RADIUS-CLIENT-MIB

What Is WWP-LEOS-RADIUS-CLIENT-MIB?

Supported Devices

Monitoring Examples

What Can Be Monitored

This MIB depends on

Related MIBs

RFC description