WWP-LEOS-TACACS-CLIENT-MIB

MIB Reference — IPNetwork Monitor

All MIBsWWP-LEOS-TACACS-CLIENT-MIB

Organization: Ciena, Inc

Last Updated: 2012-04-05

Category: Ciena LEOS Carrier Ethernet

Description:

Manages Ciena LEOS TACACS+ client server configuration, authentication statistics, and authorization settings.

Imported Objects

From INET-ADDRESS-MIB

InetAddress
InetAddressType

From SNMPv2-SMI

Counter32
Gauge32
Integer32
IpAddress
MODULE-IDENTITY
OBJECT-TYPE

From SNMPv2-TC

DisplayString
RowStatus
TEXTUAL-CONVENTION
TruthValue

From WWP-SMI

wwpModulesLeosOBJECT-IDENTITY

What Is WWP-LEOS-TACACS-CLIENT-MIB?

WWP-LEOS-TACACS-CLIENT-MIB is a Ciena LEOS (formerly World Wide Packets) proprietary MIB managing the device's TACACS+ client configuration for centralized authentication, authorization, and accounting, including server configuration and related statistics. It exposes configuration data (TACACS+ server addresses, shared secret/key references, timeout and retry settings) alongside operational statistics such as authentication request/response counts and failures. Its monitoring value is security/software-status focused — tracking authentication success/failure counters and server reachability confirms that centralized login control is functioning, and a rise in failed authentication attempts or an unreachable TACACS+ server is an operationally significant fault. It is built around the TACACS+ protocol (an IETF-adjacent, Cisco-originated but widely implemented AAA protocol) rather than an IETF-standardized MIB. It is deployed on Ciena LEOS Metro Ethernet devices in environments requiring centralized AAA for device management access. Engineers can download the WWP-LEOS-TACACS-CLIENT-MIB file directly to load it into their MIB browser.

IPNetwork Monitor allows you to monitor SNMP objects defined in WWP-LEOS-TACACS-CLIENT-MIB. Use the built-in SNMP Monitoring Browser to explore available variables, view their current values and descriptions, and select the objects you want to monitor. You can then create SNMP monitors, configure thresholds, and receive alerts when monitored values change.

What Can Be Monitored

  • TACACS+ server configuration
  • authentication request/failure statistics
  • server timeout and retry settings

Supported Devices

  • Ciena LEOS / World Wide Packets Metro Ethernet device

Monitoring Examples

No sample object names were supplied; based on the description, the relevant objects would be a TACACS+ server configuration table (server address, port, timeout) and an authentication statistics object (requests, successes, failures) per server. An admin would poll the failure counter per configured TACACS+ server to detect a spike in authentication failures, which could indicate a misconfigured shared secret or an outage of the AAA server itself.

OIDs
OID symbolicOID numericTypeAccessDescription
wwpLeosTacacsClientMIB1.3.6.1.4.1.6141.2.60.402The MIB module for the WWP Tacacs Server specific configuration and monitoring information.
wwpLeosTacacsClientMIBObjects1.3.6.1.4.1.6141.2.60.402.1
wwpLeosTacacsClient1.3.6.1.4.1.6141.2.60.402.1.1
INT wwpLeosTacacsAdminState1.3.6.1.4.1.6141.2.60.402.1.1.1INTEGERread-writeSetting this object will administratively enable/disable tacacs client on the device.
INT wwpLeosTacacsOperState1.3.6.1.4.1.6141.2.60.402.1.1.2INTEGERread-onlyThis object returns the operational state of tacacs client.
I32 wwpLeosTacacsClientTimeout1.3.6.1.4.1.6141.2.60.402.1.1.3Integer32read-writeThis is the time in seconds between retransmissions to the TACACS server.
I32 wwpLeosTacacsClientRetries1.3.6.1.4.1.6141.2.60.402.1.1.4Integer32read-writeIndicates the number of times the TACACS server should be tried before giving up on the server.
I32 wwpLeosTacacsClientPrivilegeLevelRW1.3.6.1.4.1.6141.2.60.402.1.1.5Integer32read-writeIndicates the privilege level used for mapping a range of TACACS privilege levels to LE-OS R-W user privilege level. A privilege level returned by a server will be compared to wwpLeosTacacsClientPrivilegeLevelDiag. If the server privilege level is less than wwpLeosTacacsClientPrivilegeLevelDiag and greater than or equal to the wwpLeosTacacsClientPrivilegeLevelRW, the LE-OS privilege level is super-user.
I32 wwpLeosTacacsClientPrivilegeLevelAdmin1.3.6.1.4.1.6141.2.60.402.1.1.6Integer32read-writeIndicates the privilege level used for mapping a range of TACACS privilege levels to LE-OS TCE Admin user privilege level. A privilege level returned by a server will be compared to wwpLeosTacacsClientPrivilegeLevelRW. If the server privilege level is less than wwpLeosTacacsClientPrivilegeLevelRW and greater than or equal to the wwpLeosTacacsClientPrivilegeLevelAdmin, the LE-OS privilege level is Admin. Not supported on all platforms
I32 wwpLeosTacacsClientPrivilegeLevelDiag1.3.6.1.4.1.6141.2.60.402.1.1.7Integer32read-writeIndicates the privilege level used for mapping a range of TACACS privilege levels to LE-OS Diagnostic user privilege level. A privilege level returned by a server will be compared to this value. If server privilege level is greater than or equal to the wwpLeosTacacsClientPrivilegeLevelDiag, the LE-OS privilege level is diag.
STR wwpLeosTacacsClientAuthKey1.3.6.1.4.1.6141.2.60.402.1.1.8TacacsStringread-writeThe Auth Key to be used for Tacacs Servers. Retrieving the value of this object via SNMP will return an empty string for security reasons.
INT wwpLeosTacacsAuthenticationAdminState1.3.6.1.4.1.6141.2.60.402.1.1.9INTEGERread-writeSetting this object will administratively enable/disable tacacs authentication on the device.
INT wwpLeosTacacsAuthorizationAdminState1.3.6.1.4.1.6141.2.60.402.1.1.10INTEGERread-writeSetting this object will administratively enable/disable tacacs authorization on the device.
INT wwpLeosTacacsAccountingAdminState1.3.6.1.4.1.6141.2.60.402.1.1.11INTEGERread-writeSetting this object will administratively enable/disable tacacs accounting on the device.
INT wwpLeosTacacsSyslogAdminState1.3.6.1.4.1.6141.2.60.402.1.1.12INTEGERread-writeSetting this object will administratively enable/disable tacacs syslog messages on the device.
wwpLeosTacacsClientServerTable1.3.6.1.4.1.6141.2.60.402.1.1.13not-accessibleLists the possible TACACS servers. While creating entry following mib objects must be specified wwpLeosTacacsClientServerStatus, wwpLeosTacacsClientServerAddr. SNMP multiple set operation must be used to create entry.
wwpLeosTacacsClientServerEntry1.3.6.1.4.1.6141.2.60.402.1.1.13.1not-accessibleTacacs server entry.
I32 wwpLeosTacacsClientServerIndex1.3.6.1.4.1.6141.2.60.402.1.1.13.1.1Integer32not-accessibleSpecifies the index of this table.
STR wwpLeosTacacsClientServerAddr1.3.6.1.4.1.6141.2.60.402.1.1.13.1.2DisplayStringread-writeHost name or ip address of the TACACS server.
IP wwpLeosTacacsClientServerResolvedAddr1.3.6.1.4.1.6141.2.60.402.1.1.13.1.3IpAddressread-onlyWhen wwpLeosTacacsClientServerAddr represents: Host name : The resolved address will either be Ipv4 address or Ipv6 address. Ipv4 address : The resolved address will be the same Ipv4 address. Ipv6 address : The resolved address will be the same Ipv6 address. When the resolved address represents: Ipv4 address : wwpLeosTacacsClientServerResolvedAddr will represent the resolved Ipv4 address. wwpLeosTacacsClientServerResolvedInetAddr used in conjunction with wwpLeosTacacsClientServerResolvedInetAddrType will represent the same Ipv4 address. Ipv6 address : wwpLeosTacacsClientServerResolvedAddr will represent 0.0.0.0. wwpLeosTacacsClientServerResolvedInetAddr used in conjunction with wwpLeosTacacsClientServerResolvedInetAddrType will represent the Ipv6 address.
I32 wwpLeosTacacsClientServerPriority1.3.6.1.4.1.6141.2.60.402.1.1.13.1.4Integer32read-writeSpecifies the priority of tacacs servers configured on the device. This is the order in which the servers will accessed
I32 wwpLeosTacacsClientServerAuthPort1.3.6.1.4.1.6141.2.60.402.1.1.13.1.5Integer32read-writeThe destination TCP port number to which TACACS messages should be sent. The TACACS server will not be used for authentication if this port number is 0.
C32 wwpLeosTacacsClientServerAccessRequests1.3.6.1.4.1.6141.2.60.402.1.1.13.1.6Counter32read-onlyThe number of TACACS Access-Request packets sent to this server from the global TACACS client. This does not include retransmissions.
C32 wwpLeosTacacsClientServerAccessRetransmissions1.3.6.1.4.1.6141.2.60.402.1.1.13.1.7Counter32read-onlyThe number of TACACS Access-Retransmission packets retransmitted to this TACACS authentication server from the global TACACS client.
C32 wwpLeosTacacsClientServerAccessAccepts1.3.6.1.4.1.6141.2.60.402.1.1.13.1.8Counter32read-onlyThe number of TACACS Access-Accept packets (valid or invalid) received from this server by the global TACACS client.
C32 wwpLeosTacacsClientServerAccessRejects1.3.6.1.4.1.6141.2.60.402.1.1.13.1.9Counter32read-onlyThe number of TACACS Access-Reject packets (valid or invalid) received from this server by the global TACACS client.
C32 wwpLeosTacacsClientServerMalformedAccessResponses1.3.6.1.4.1.6141.2.60.402.1.1.13.1.10Counter32read-onlyThe number of malformed TACACS Access-Response packets received from this server by the global TACACS client. Malformed packets include packets with an invalid length. Bad authenticators or Signature attributes or unknown types are not included as malformed access responses.
C32 wwpLeosTacacsClientServerBadAuthenticators1.3.6.1.4.1.6141.2.60.402.1.1.13.1.11Counter32read-onlyThe number of TACACS Access-BadAuthenticator packets containing invalid authenticators or Signature attributes received from this server by the global TACACS client.
G32 wwpLeosTacacsClientServerPendingRequests1.3.6.1.4.1.6141.2.60.402.1.1.13.1.12Gauge32read-onlyThe number of TACACS Access-PendingRequest packets destined for this server from the global TACACS client that have not yet timed out or received a response. This variable is incremented when an Access-Request is sent and decremented due to receipt of an Access-Accept, Access-Reject or Access-Challenge, a timeout or retransmission.
C32 wwpLeosTacacsClientServerTimeouts1.3.6.1.4.1.6141.2.60.402.1.1.13.1.13Counter32read-onlyThe number of authentication timeouts to this server on behalf of the global TACACS client. After a timeout the client may retry to the same server, send to a different server, or give up. A retry to the same server is counted as a retransmit as well as a timeout. A send to a different server is counted as a Request as well as a timeout.
C32 wwpLeosTacacsClientServerUnknownTypes1.3.6.1.4.1.6141.2.60.402.1.1.13.1.14Counter32read-onlyThe number of TACACS packets of unknown type which were received from this server on the authentication port by the global TACACS client.
C32 wwpLeosTacacsClientServerBadHeaderSequence1.3.6.1.4.1.6141.2.60.402.1.1.13.1.15Counter32read-onlyThe number of TACACS packets of which were received from this server on the authentication port by the global TACACS client and dropped for some other reason by the client.
ROW wwpLeosTacacsClientServerStatus1.3.6.1.4.1.6141.2.60.402.1.1.13.1.16RowStatusread-createTo create a row in this table, a manager must set this object to either createAndGo(4). While creating entry following mib objects must be specified wwpLeosTacacsClientServerStatus, wwpLeosTacacsClientServerAddr. SNMP multiple set operation must be used to create entry. To disable a tacacs server, the operator can set wwpLeosTacacsClientServerStatus object to 'notInService' state.
INT wwpLeosTacacsClientServerApplication1.3.6.1.4.1.6141.2.60.402.1.1.13.1.17INTEGERread-createThis object specifies how the tacacs server should be used for authentication. Whether this tacacs server should be used for userLogin authentication or dot1x authentication or both is decided by the value of this mib object. Dot1x not supported on all platforms
T/F wwpLeosTacacsClientServerClearStatistics1.3.6.1.4.1.6141.2.60.402.1.1.13.1.18TruthValueread-writeThis object clears the statistics for a server
C32 wwpLeosTacacsClientGlobalAuthorizationAccessRequests1.3.6.1.4.1.6141.2.60.402.1.1.13.1.19Counter32read-onlyThe number of TACACS Access-Request packets sent to this server. This does not include retransmissions.
C32 wwpLeosTacacsClientGlobalAuthorizationAccessRetransmissions1.3.6.1.4.1.6141.2.60.402.1.1.13.1.20Counter32read-onlyThe number of TACACS Access-Request packets retransmitted to this TACACS authentication server.
C32 wwpLeosTacacsClientGlobalAuthorizationAccessAccepts1.3.6.1.4.1.6141.2.60.402.1.1.13.1.21Counter32read-onlyThe number of TACACS Access-Accept packets (valid or invalid) received from this server.
C32 wwpLeosTacacsClientGlobalAuthorizationAccessRejects1.3.6.1.4.1.6141.2.60.402.1.1.13.1.22Counter32read-onlyThe number of TACACS Access-Reject packets (valid or invalid) received from this server.
C32 wwpLeosTacacsClientGlobalAuthorizationMalformedAccessResponses1.3.6.1.4.1.6141.2.60.402.1.1.13.1.23Counter32read-onlyThe number of malformed TACACS Access-Response packets received from this server. Malformed packets include packets with an invalid length. Bad authenticators or signature attributes or unknown types are not included as malformed access responses.
C32 wwpLeosTacacsClientGlobalAuthorizationBadAuthenticators1.3.6.1.4.1.6141.2.60.402.1.1.13.1.24Counter32read-onlyThe number of TACACS Access-Response packets containing invalid authenticators or signature attributes received from this server.
C32 wwpLeosTacacsClientGlobalAuthorizationTimeouts1.3.6.1.4.1.6141.2.60.402.1.1.13.1.25Counter32read-onlyThe number of authentication timeouts to this server. After a timeout the client may retry sending to the same server, send to a different server, or give up. A retry to the same server is counted as a retransmit as well as a timeout. A send to a different server is counted as a request as well as a timeout.
C32 wwpLeosTacacsClientGlobalAuthorizationUnknownTypes1.3.6.1.4.1.6141.2.60.402.1.1.13.1.26Counter32read-onlyThe number of TACACS packets of unknown type which were received from this server on the authentication port.
C32 wwpLeosTacacsClientGlobalAuthorizationBadHeaderSequence1.3.6.1.4.1.6141.2.60.402.1.1.13.1.27Counter32read-onlyThe number of TACACS packets which were received from this server on the authentication port and dropped for some other reason.
C32 wwpLeosTacacsClientGlobalAccountingAccessRequests1.3.6.1.4.1.6141.2.60.402.1.1.13.1.28Counter32read-onlyThe number of TACACS Access-Request packets sent to this server. This does not include retransmissions.
C32 wwpLeosTacacsClientGlobalAccountingAccessRetransmissions1.3.6.1.4.1.6141.2.60.402.1.1.13.1.29Counter32read-onlyThe number of TACACS Access-Request packets retransmitted to this TACACS authentication server.
C32 wwpLeosTacacsClientGlobalAccountingAccessAccepts1.3.6.1.4.1.6141.2.60.402.1.1.13.1.30Counter32read-onlyThe number of TACACS Access-Accept packets (valid or invalid) received from this server.
C32 wwpLeosTacacsClientGlobalAccountingAccessRejects1.3.6.1.4.1.6141.2.60.402.1.1.13.1.31Counter32read-onlyThe number of TACACS Access-Reject packets (valid or invalid) received from this server.
C32 wwpLeosTacacsClientGlobalAccountingMalformedAccessResponses1.3.6.1.4.1.6141.2.60.402.1.1.13.1.32Counter32read-onlyThe number of malformed TACACS Access-Response packets received from this server. Malformed packets include packets with an invalid length. Bad authenticators or signature attributes or unknown types are not included as malformed access responses.
C32 wwpLeosTacacsClientGlobalAccountingBadAuthenticators1.3.6.1.4.1.6141.2.60.402.1.1.13.1.33Counter32read-onlyThe number of TACACS Access-Response packets containing invalid authenticators or signature attributes received from this server.
C32 wwpLeosTacacsClientGlobalAccountingTimeouts1.3.6.1.4.1.6141.2.60.402.1.1.13.1.34Counter32read-onlyThe number of authentication timeouts to this server. After a timeout the client may retry sending to the same server, send to a different server, or give up. A retry to the same server is counted as a retransmit as well as a timeout. A send to a different server is counted as a request as well as a timeout.
C32 wwpLeosTacacsClientGlobalAccountingUnknownTypes1.3.6.1.4.1.6141.2.60.402.1.1.13.1.35Counter32read-onlyThe number of TACACS packets of unknown type which were received from this server on the authentication port.
C32 wwpLeosTacacsClientGlobalAccountingBadHeaderSequence1.3.6.1.4.1.6141.2.60.402.1.1.13.1.36Counter32read-onlyThe number of TACACS packets which were received from this server on the authentication port and dropped for some other reason.
IPt wwpLeosTacacsClientServerResolvedInetAddrType1.3.6.1.4.1.6141.2.60.402.1.1.13.1.37InetAddressTyperead-onlySpecifies the resolved IP address type . Used in conjunction with wwpLeosTacacsClientServerResolvedInetAddr. When set to : ipv4 : wwpLeosTacacsClientServerResolvedInetAddr should be compliant with InetAddressIPv4 ipv6 : wwpLeosTacacsClientServerResolvedInetAddr should be compliant with InetAddressIPv6
IP wwpLeosTacacsClientServerResolvedInetAddr1.3.6.1.4.1.6141.2.60.402.1.1.13.1.38InetAddressread-onlySpecifies the resolved IP address if wwpLeosTacacsClientServerAddr is set to host name. If wwpLeosTacacsClientServerAddr is set to ip address then wwpLeosTacacsClientServerResolvedInetAddress will contain same information as wwpLeosTacacsClientServerAddr. This OID should be used in conjuction with wwpLeosTacacsClientServerResolvedInetAddrType.
wwpLeosTacacsClientAuthenticationServerTable1.3.6.1.4.1.6141.2.60.402.1.1.14not-accessibleLists the possible TACACS servers. While creating entry following mib objects must be specified wwpLeosTacacsClientAuthenticationServerStatus, wwpLeosTacacsClientAuthenticationServerAddr. SNMP multiple set operation must be used to create entry.
wwpLeosTacacsClientAuthenticationServerEntry1.3.6.1.4.1.6141.2.60.402.1.1.14.1not-accessibleTacacs server entry.
I32 wwpLeosTacacsClientAuthenticationServerIndex1.3.6.1.4.1.6141.2.60.402.1.1.14.1.1Integer32not-accessibleSpecifies the index of this table.
STR wwpLeosTacacsClientAuthenticationServerAddr1.3.6.1.4.1.6141.2.60.402.1.1.14.1.2DisplayStringread-writeHost name or ip address of the TACACS server.
IP wwpLeosTacacsClientAuthenticationServerResolvedAddr1.3.6.1.4.1.6141.2.60.402.1.1.14.1.3IpAddressread-onlyWhen wwpLeosTacacsClientAuthenticationServerAddr represents: Host name : The resolved address will either be Ipv4 address or Ipv6 address. Ipv4 address : The resolved address will be the same Ipv4 address. Ipv6 address : The resolved address will be the same Ipv6 address. When the resolved address represents: Ipv4 address : wwpLeosTacacsClientAuthenticationServerResolvedAddr will represent the resolved Ipv4 address. wwpLeosTacacsClientAuthenticationServerResolvedInetAddr used in conjunction with wwpLeosTacacsClientAuthenticationServerResolvedInetAddrType will represent the same Ipv4 address. Ipv6 address : wwpLeosTacacsClientAuthenticationServerResolvedAddr will represent 0.0.0.0. wwpLeosTacacsClientAuthenticationServerResolvedInetAddr used in conjunction with wwpLeosTacacsClientAuthenticationServerResolvedInetAddrType will represent the Ipv6 address.
I32 wwpLeosTacacsClientAuthenticationServerPriority1.3.6.1.4.1.6141.2.60.402.1.1.14.1.4Integer32read-writeSpecifies the priority of tacacs servers configured on the device. This is the order in which the servers will accessed
I32 wwpLeosTacacsClientAuthenticationServerAuthPort1.3.6.1.4.1.6141.2.60.402.1.1.14.1.5Integer32read-writeThe destination TCP port number to which TACACS messages should be sent. The TACACS server will not be used for authentication if this port number is 0.
C32 wwpLeosTacacsClientAuthenticationServerAccessRequests1.3.6.1.4.1.6141.2.60.402.1.1.14.1.6Counter32read-onlyThe number of TACACS Access-Request packets sent to this server. This does not include retransmissions.
C32 wwpLeosTacacsClientAuthenticationServerAccessRetransmissions1.3.6.1.4.1.6141.2.60.402.1.1.14.1.7Counter32read-onlyThe number of TACACS Access-Request packets retransmitted to this TACACS authentication server.
C32 wwpLeosTacacsClientAuthenticationServerAccessAccepts1.3.6.1.4.1.6141.2.60.402.1.1.14.1.8Counter32read-onlyThe number of TACACS Access-Accept packets (valid or invalid) received from this server.
C32 wwpLeosTacacsClientAuthenticationServerAccessRejects1.3.6.1.4.1.6141.2.60.402.1.1.14.1.9Counter32read-onlyThe number of TACACS Access-Reject packets (valid or invalid) received from this server.
C32 wwpLeosTacacsClientAuthenticationServerMalformedAccessResponses1.3.6.1.4.1.6141.2.60.402.1.1.14.1.10Counter32read-onlyThe number of malformed TACACS Access-Response packets received from this server. Malformed packets include packets with an invalid length. Bad authenticators or Signature attributes or unknown types are not included as malformed access responses.
C32 wwpLeosTacacsClientAuthenticationServerBadAuthenticators1.3.6.1.4.1.6141.2.60.402.1.1.14.1.11Counter32read-onlyThe number of TACACS Access-Response packets containing invalid authenticators or Signature attributes received from this server.
G32 wwpLeosTacacsClientAuthenticationServerPendingRequests1.3.6.1.4.1.6141.2.60.402.1.1.14.1.12Gauge32read-onlyThe number of TACACS Access-Request packets destined for this server that have not yet timed out or received a response. This variable is incremented when an Access-Request is sent and decremented due to receipt of an Access-Accept, Access-Reject or Access-Challenge, a timeout or retransmission.
C32 wwpLeosTacacsClientAuthenticationServerTimeouts1.3.6.1.4.1.6141.2.60.402.1.1.14.1.13Counter32read-onlyThe number of authentication timeouts to this server. After a timeout the client may retry to the same server, send to a different server, or give up. A retry to the same server is counted as a retransmit as well as a timeout. A send to a different server is counted as a Request as well as a timeout.
C32 wwpLeosTacacsClientAuthenticationServerUnknownTypes1.3.6.1.4.1.6141.2.60.402.1.1.14.1.14Counter32read-onlyThe number of TACACS packets of unknown type which were received from this server on the authentication port.
C32 wwpLeosTacacsClientAuthenticationServerBadHeaderSequence1.3.6.1.4.1.6141.2.60.402.1.1.14.1.15Counter32read-onlyThe number of TACACS packets of which were received from this server on the authentication port and dropped for some other reason.
ROW wwpLeosTacacsClientAuthenticationServerStatus1.3.6.1.4.1.6141.2.60.402.1.1.14.1.16RowStatusread-createTo create a row in this table, a manager must set this object to either createAndGo(4). While creating entry following mib objects must be specified wwpLeosTacacsClientAuthenticationServerStatus, wwpLeosTacacsClientAuthenticationServerAddr. SNMP multiple set operation must be used to create entry. To disable a tacacs server, the operator can set wwpLeosTacacsClientAuthenticationServerStatus object to 'notInService' state.
INT wwpLeosTacacsClientAuthenticationServerApplication1.3.6.1.4.1.6141.2.60.402.1.1.14.1.17INTEGERread-createThis object specifies how the tacacs server should be used for authentication. Whether this tacacs server should be used for userLogin authentication or dot1x authentication or both is decided by the value of this mib object. Dot1x not supported on all platforms
T/F wwpLeosTacacsClientAuthenticationServerClearStatistics1.3.6.1.4.1.6141.2.60.402.1.1.14.1.18TruthValueread-writeThis object clears the statistics for a server
IPt wwpLeosTacacsClientAuthenticationServerResolvedInetAddrType1.3.6.1.4.1.6141.2.60.402.1.1.14.1.19InetAddressTyperead-onlySpecifies the resolved IP address type. Used in conjunction with wwpLeosTacacsClientAuthenticationServerResolvedInetAddr. When set to : ipv4 : wwpLeosTacacsClientAuthenticationServerResolvedInetAddr should be compliant with InetAddressIPv4 ipv6 : wwpLeosTacacsClientAuthenticationServerResolvedInetAddr should be compliant with InetAddressIPv6
IP wwpLeosTacacsClientAuthenticationServerResolvedInetAddr1.3.6.1.4.1.6141.2.60.402.1.1.14.1.20InetAddressread-onlySpecifies the resolved IP address if wwpLeosTacacsClientAuthenticationServerAddr is set to host name. If wwpLeosTacacsClientAuthenticationServerAddr is set to ip address then wwpLeosTacacsClientAuthenticationServerResolvedInetAddr will contain the same information as wwpLeosTacacsClientAuthenticationServerAddr. This OID should be used in conjuction with wwpLeosTacacsClientAuthenticationServerResolvedInetAddrType.
wwpLeosTacacsClientAuthorizationServerTable1.3.6.1.4.1.6141.2.60.402.1.1.15not-accessibleLists the possible TACACS servers. While creating entry following mib objects must be specified wwpLeosTacacsClientAuthorizationServerStatus, wwpLeosTacacsClientAuthorizationServerAddr. SNMP multiple set operation must be used to create entry.
wwpLeosTacacsClientAuthorizationServerEntry1.3.6.1.4.1.6141.2.60.402.1.1.15.1not-accessibleTacacs server entry.
I32 wwpLeosTacacsClientAuthorizationServerIndex1.3.6.1.4.1.6141.2.60.402.1.1.15.1.1Integer32not-accessibleSpecifies the index of this table.
STR wwpLeosTacacsClientAuthorizationServerAddr1.3.6.1.4.1.6141.2.60.402.1.1.15.1.2DisplayStringread-writeHost name or ip address of the TACACS server.
IP wwpLeosTacacsClientAuthorizationServerResolvedAddr1.3.6.1.4.1.6141.2.60.402.1.1.15.1.3IpAddressread-onlyWhen wwpLeosTacacsClientAuthorizationServerAddr represents: Host name : The resolved address will either be Ipv4 address or Ipv6 address. Ipv4 address : The resolved address will be the same Ipv4 address. Ipv6 address : The resolved address will be the same Ipv6 address. When the resolved address represents: Ipv4 address : wwpLeosTacacsClientAuthorizationServerResolvedAddr will represent the resolved Ipv4 address. wwpLeosTacacsClientAuthorizationServerResolvedInetAddr used in conjunction with wwpLeosTacacsClientAuthorizationServerResolvedInetAddrType will represent the same Ipv4 address. Ipv6 address : wwpLeosTacacsClientAuthorizationServerResolvedAddr will represent 0.0.0.0. wwpLeosTacacsClientAuthorizationServerResolvedInetAddr used in conjunction with wwpLeosTacacsClientAuthorizationServerResolvedInetAddrType will represent the Ipv6 address.
I32 wwpLeosTacacsClientAuthorizationServerPriority1.3.6.1.4.1.6141.2.60.402.1.1.15.1.4Integer32read-writeSpecifies the priority of tacacs servers configured on the device. This is the order in which the servers will accessed
I32 wwpLeosTacacsClientAuthorizationServerAuthPort1.3.6.1.4.1.6141.2.60.402.1.1.15.1.5Integer32read-writeThe destination TCP port number to which TACACS messages should be sent. The TACACS server will not be used for authentication if this port number is 0.
C32 wwpLeosTacacsClientAuthorizationServerAccessRequests1.3.6.1.4.1.6141.2.60.402.1.1.15.1.6Counter32read-onlyThe number of TACACS Access-Request packets sent to this server. This does not include retransmissions.
C32 wwpLeosTacacsClientAuthorizationServerAccessRetransmissions1.3.6.1.4.1.6141.2.60.402.1.1.15.1.7Counter32read-onlyThe number of TACACS Access-Request packets retransmitted to this TACACS authentication server.
C32 wwpLeosTacacsClientAuthorizationServerAccessAccepts1.3.6.1.4.1.6141.2.60.402.1.1.15.1.8Counter32read-onlyThe number of TACACS Access-Accept packets (valid or invalid) received from this server.
C32 wwpLeosTacacsClientAuthorizationServerAccessRejects1.3.6.1.4.1.6141.2.60.402.1.1.15.1.9Counter32read-onlyThe number of TACACS Access-Reject packets (valid or invalid) received from this server.
C32 wwpLeosTacacsClientAuthorizationServerMalformedAccessResponses1.3.6.1.4.1.6141.2.60.402.1.1.15.1.10Counter32read-onlyThe number of malformed TACACS Access-Response packets received from this server. Malformed packets include packets with an invalid length. Bad authenticators or Signature attributes or unknown types are not included as malformed access responses.
C32 wwpLeosTacacsClientAuthorizationServerBadAuthenticators1.3.6.1.4.1.6141.2.60.402.1.1.15.1.11Counter32read-onlyThe number of TACACS Access-Response packets containing invalid authenticators or Signature attributes received from this server.
G32 wwpLeosTacacsClientAuthorizationServerPendingRequests1.3.6.1.4.1.6141.2.60.402.1.1.15.1.12Gauge32read-onlyThe number of TACACS Access-Request packets destined for this server that have not yet timed out or received a response. This variable is incremented when an Access-Request is sent and decremented due to receipt of an Access-Accept, Access-Reject or Access-Challenge, a timeout or retransmission.
C32 wwpLeosTacacsClientAuthorizationServerTimeouts1.3.6.1.4.1.6141.2.60.402.1.1.15.1.13Counter32read-onlyThe number of authentication timeouts to this server. After a timeout the client may retry to the same server, send to a different server, or give up. A retry to the same server is counted as a retransmit as well as a timeout. A send to a different server is counted as a Request as well as a timeout.
C32 wwpLeosTacacsClientAuthorizationServerUnknownTypes1.3.6.1.4.1.6141.2.60.402.1.1.15.1.14Counter32read-onlyThe number of TACACS packets of unknown type which were received from this server on the authentication port.
C32 wwpLeosTacacsClientAuthorizationServerBadHeaderSequence1.3.6.1.4.1.6141.2.60.402.1.1.15.1.15Counter32read-onlyThe number of TACACS packets of which were received from this server on the authentication port and dropped for some other reason.
ROW wwpLeosTacacsClientAuthorizationServerStatus1.3.6.1.4.1.6141.2.60.402.1.1.15.1.16RowStatusread-createTo create a row in this table, a manager must set this object to either createAndGo(4). While creating entry following mib objects must be specified wwpLeosTacacsClientAuthorizationServerStatus, wwpLeosTacacsClientAuthorizationServerAddr. SNMP multiple set operation must be used to create entry. To disable a tacacs server, the operator can set wwpLeosTacacsClientAuthorizationServerStatus object to 'notInService' state.
INT wwpLeosTacacsClientAuthorizationServerApplication1.3.6.1.4.1.6141.2.60.402.1.1.15.1.17INTEGERread-createThis object specifies how the tacacs server should be used for authentication. Whether this tacacs server should be used for userLogin authentication or dot1x authentication or both is decided by the value of this mib object. Dot1x not supported on all platforms
T/F wwpLeosTacacsClientAuthorizationServerClearStatistics1.3.6.1.4.1.6141.2.60.402.1.1.15.1.18TruthValueread-writeThis object clears the statistics for a server
IPt wwpLeosTacacsClientAuthorizationServerResolvedInetAddrType1.3.6.1.4.1.6141.2.60.402.1.1.15.1.19InetAddressTyperead-onlySpecifies the resolved IP address type. Used in conjunction with wwpLeosTacacsClientAuthorizationServerResolvedInetAddr. When set to : ipv4 : wwpLeosTacacsClientAuthorizationServerResolvedInetAddr should be compliant with InetAddressIPv4 ipv6 : wwpLeosTacacsClientAuthorizationServerResolvedInetAddr should be compliant with InetAddressIPv6.
IP wwpLeosTacacsClientAuthorizationServerResolvedInetAddr1.3.6.1.4.1.6141.2.60.402.1.1.15.1.20InetAddressread-onlySpecifies the resolved IP address if wwpLeosTacacsClientAuthorizationServerAddr is set to host name. If wwpLeosTacacsClientAuthorizationServerAddr is set to ip address then wwpLeosTacacsClientAuthorizationServerResolvedInetAddr will contain same information as wwpLeosTacacsClientAuthorizationServerAddr. This OID is used in conjunction with wwpLeosTacacsClientAuthorizationServerResolvedInetAddr.
wwpLeosTacacsClientAccountingServerTable1.3.6.1.4.1.6141.2.60.402.1.1.16not-accessibleLists the possible TACACS servers. While creating entry following mib objects must be specified wwpLeosTacacsClientAccountingServerStatus, wwpLeosTacacsClientAccountingServerAddr. SNMP multiple set operation must be used to create entry.
wwpLeosTacacsClientAccountingServerEntry1.3.6.1.4.1.6141.2.60.402.1.1.16.1not-accessibleTacacs server entry.
I32 wwpLeosTacacsClientAccountingServerIndex1.3.6.1.4.1.6141.2.60.402.1.1.16.1.1Integer32not-accessibleSpecifies the index of this table.
STR wwpLeosTacacsClientAccountingServerAddr1.3.6.1.4.1.6141.2.60.402.1.1.16.1.2DisplayStringread-writeHost name or ip address of the TACACS server.
IP wwpLeosTacacsClientAccountingServerResolvedAddr1.3.6.1.4.1.6141.2.60.402.1.1.16.1.3IpAddressread-onlyWhen wwpLeosTacacsClientAccountingServerAddr represents: Host name : The resolved address will either be Ipv4 address or Ipv6 address. Ipv4 address : The resolved address will be the same Ipv4 address. Ipv6 address : The resolved address will be the same Ipv6 address. When the resolved address represents: Ipv4 address : wwpLeosTacacsClientAccountingServerResolvedAddr will represent the resolved Ipv4 address. wwpLeosTacacsClientAccountingServerResolvedInetAddr used in conjunction with wwpLeosTacacsClientAccountingServerResolvedInetAddrType will represent the same Ipv4 address. Ipv6 address : wwpLeosTacacsClientAccountingServerResolvedAddr will represent 0.0.0.0. wwpLeosTacacsClientAccountingServerResolvedInetAddr used in conjunction with wwpLeosTacacsClientAccountingServerResolvedInetAddrType will represent the Ipv6 address.
I32 wwpLeosTacacsClientAccountingServerPriority1.3.6.1.4.1.6141.2.60.402.1.1.16.1.4Integer32read-writeSpecifies the priority of tacacs servers configured on the device. This is the order in which the servers will accessed
I32 wwpLeosTacacsClientAccountingServerAuthPort1.3.6.1.4.1.6141.2.60.402.1.1.16.1.5Integer32read-writeThe destination TCP port number to which TACACS messages should be sent. The TACACS server will not be used for authentication if this port number is 0.
C32 wwpLeosTacacsClientAccountingServerAccessRequests1.3.6.1.4.1.6141.2.60.402.1.1.16.1.6Counter32read-onlyThe number of TACACS Access-Request packets sent to this server. This does not include retransmissions.
C32 wwpLeosTacacsClientAccountingServerAccessRetransmissions1.3.6.1.4.1.6141.2.60.402.1.1.16.1.7Counter32read-onlyThe number of TACACS Access-Request packets retransmitted to this TACACS authentication server.
C32 wwpLeosTacacsClientAccountingServerAccessAccepts1.3.6.1.4.1.6141.2.60.402.1.1.16.1.8Counter32read-onlyThe number of TACACS Access-Accept packets (valid or invalid) received from this server.
C32 wwpLeosTacacsClientAccountingServerAccessRejects1.3.6.1.4.1.6141.2.60.402.1.1.16.1.9Counter32read-onlyThe number of TACACS Access-Reject packets (valid or invalid) received from this server.
C32 wwpLeosTacacsClientAccountingServerMalformedAccessResponses1.3.6.1.4.1.6141.2.60.402.1.1.16.1.10Counter32read-onlyThe number of malformed TACACS Access-Response packets received from this server. Malformed packets include packets with an invalid length. Bad authenticators or Signature attributes or unknown types are not included as malformed access responses.
C32 wwpLeosTacacsClientAccountingServerBadAuthenticators1.3.6.1.4.1.6141.2.60.402.1.1.16.1.11Counter32read-onlyThe number of TACACS Access-Response packets containing invalid authenticators or Signature attributes received from this server.
G32 wwpLeosTacacsClientAccountingServerPendingRequests1.3.6.1.4.1.6141.2.60.402.1.1.16.1.12Gauge32read-onlyThe number of TACACS Access-Request packets destined for this server that have not yet timed out or received a response. This variable is incremented when an Access-Request is sent and decremented due to receipt of an Access-Accept, Access-Reject or Access-Challenge, a timeout or retransmission.
C32 wwpLeosTacacsClientAccountingServerTimeouts1.3.6.1.4.1.6141.2.60.402.1.1.16.1.13Counter32read-onlyThe number of authentication timeouts to this server. After a timeout the client may retry to the same server, send to a different server, or give up. A retry to the same server is counted as a retransmit as well as a timeout. A send to a different server is counted as a Request as well as a timeout.
C32 wwpLeosTacacsClientAccountingServerUnknownTypes1.3.6.1.4.1.6141.2.60.402.1.1.16.1.14Counter32read-onlyThe number of TACACS packets of unknown type which were received from this server on the authentication port.
C32 wwpLeosTacacsClientAccountingServerBadHeaderSequence1.3.6.1.4.1.6141.2.60.402.1.1.16.1.15Counter32read-onlyThe number of TACACS packets of which were received from this server on the authentication port and dropped for some other reason.
ROW wwpLeosTacacsClientAccountingServerStatus1.3.6.1.4.1.6141.2.60.402.1.1.16.1.16RowStatusread-createTo create a row in this table, a manager must set this object to either createAndGo(4). While creating entry following mib objects must be specified wwpLeosTacacsClientAccountingServerStatus, wwpLeosTacacsClientAccountingServerAddr. SNMP multiple set operation must be used to create entry. To disable a tacacs server, the operator can set wwpLeosTacacsClientAccountingServerStatus object to 'notInService' state.
INT wwpLeosTacacsClientAccountingServerApplication1.3.6.1.4.1.6141.2.60.402.1.1.16.1.17INTEGERread-createThis object specifies how the tacacs server should be used for authentication. Whether this tacacs server should be used for userLogin authentication or dot1x authentication or both is decided by the value of this mib object. Dot1x not supported on all platforms
T/F wwpLeosTacacsClientAccountingServerClearStatistics1.3.6.1.4.1.6141.2.60.402.1.1.16.1.18TruthValueread-writeThis object clears the statistics for a server
IPt wwpLeosTacacsClientAccountingServerResolvedInetAddrType1.3.6.1.4.1.6141.2.60.402.1.1.16.1.19InetAddressTyperead-onlySpecifies the resolved IP address type. Used in conjunction with wwpLeosTacacsClientAccountingServerResolvedInetAddr. When set to : ipv4 : wwpLeosTacacsClientAccountingServerResolvedInetAddr should be compliant with InetAddressIPv4 ipv6 : wwpLeosTacacsClientAccountingServerResolvedInetAddr should be compliant with InetAddressIPv6.
IP wwpLeosTacacsClientAccountingServerResolvedInetAddr1.3.6.1.4.1.6141.2.60.402.1.1.16.1.20InetAddressread-onlySpecifies the resolved IP address if wwpLeosTacacsClientAccountingServerAddr is set to host name. If wwpLeosTacacsClientAccountingServerAddr is set to ip address then wwpLeosTacacsClientAccountingServerResolvedInetAddr will contain the same information as wwpLeosTacacsClientAccountingServerAddr. This OID is used in conjunction with wwpLeosTacacsClientAccountingServerResolvedInetAddrType.
INT wwpLeosTacacsClientAccountingSession1.3.6.1.4.1.6141.2.60.402.1.1.20INTEGERread-writeSetting this object will turn on session logon/logoff logging with tacacs.
INT wwpLeosTacacsClientAccountingCommand1.3.6.1.4.1.6141.2.60.402.1.1.21INTEGERread-writeSetting this object will turn on command start/stop logging.
INT wwpLeosTacacsClientGlobalServers1.3.6.1.4.1.6141.2.60.402.1.1.22INTEGERread-writeSetting this object will turn off global servers.
INT wwpLeosTacacsClientSearchMethod1.3.6.1.4.1.6141.2.60.402.1.1.23INTEGERread-writeSetting this object will set the search method.
I32 wwpLeosTacacsClientKeyMinLen1.3.6.1.4.1.6141.2.60.402.1.1.24Integer32read-writeSetting this object will set the minimum length for TACACS secret key
wwpLeosTacacsClientMIBNotificationPrefix1.3.6.1.4.1.6141.2.60.402.2
wwpLeosTacacsClientMIBNotifications1.3.6.1.4.1.6141.2.60.402.2.0
wwpLeosTacacsClientMIBConformance1.3.6.1.4.1.6141.2.60.402.3
wwpLeosTacacsClientMIBCompliances1.3.6.1.4.1.6141.2.60.402.3.1
wwpLeosTacacsClientMIBGroups1.3.6.1.4.1.6141.2.60.402.3.2

RFC description

Manages WWP TACACS server configuration and authentication server monitoring.

Start monitoring Ciena LEOS / World Wide Packets Metro Ethernet device (TACACS+ authentication request/failure counter status) with a free 30-day trial of IPNetwork Monitor. Import MIBs, browse SNMP OIDs, create custom SNMP monitors, configure alerts, and monitor any SNMP-enabled network device from a single console.

Download WWP-LEOS-TACACS-CLIENT-MIB