All MIBs › WWP-LEOS-TACACS-CLIENT-MIB
Organization: Ciena, Inc
Last Updated: 2012-04-05
Category: Ciena LEOS Carrier Ethernet
Description:
Manages Ciena LEOS TACACS+ client server configuration, authentication statistics, and authorization settings.
Imported Objects
From INET-ADDRESS-MIB
| InetAddress | |
| InetAddressType |
From SNMPv2-SMI
| Counter32 | |
| Gauge32 | |
| Integer32 | |
| IpAddress | |
| MODULE-IDENTITY | |
| OBJECT-TYPE |
From SNMPv2-TC
| DisplayString | |
| RowStatus | |
| TEXTUAL-CONVENTION | |
| TruthValue |
From WWP-SMI
| wwpModulesLeos | OBJECT-IDENTITY |
What Is WWP-LEOS-TACACS-CLIENT-MIB?
WWP-LEOS-TACACS-CLIENT-MIB is a Ciena LEOS (formerly World Wide Packets) proprietary MIB managing the device's TACACS+ client configuration for centralized authentication, authorization, and accounting, including server configuration and related statistics. It exposes configuration data (TACACS+ server addresses, shared secret/key references, timeout and retry settings) alongside operational statistics such as authentication request/response counts and failures. Its monitoring value is security/software-status focused — tracking authentication success/failure counters and server reachability confirms that centralized login control is functioning, and a rise in failed authentication attempts or an unreachable TACACS+ server is an operationally significant fault. It is built around the TACACS+ protocol (an IETF-adjacent, Cisco-originated but widely implemented AAA protocol) rather than an IETF-standardized MIB. It is deployed on Ciena LEOS Metro Ethernet devices in environments requiring centralized AAA for device management access. Engineers can download the WWP-LEOS-TACACS-CLIENT-MIB file directly to load it into their MIB browser.
IPNetwork Monitor allows you to monitor SNMP objects defined in WWP-LEOS-TACACS-CLIENT-MIB. Use the built-in SNMP Monitoring Browser to explore available variables, view their current values and descriptions, and select the objects you want to monitor. You can then create SNMP monitors, configure thresholds, and receive alerts when monitored values change.
What Can Be Monitored
- TACACS+ server configuration
- authentication request/failure statistics
- server timeout and retry settings
Supported Devices
- Ciena LEOS / World Wide Packets Metro Ethernet device
Monitoring Examples
No sample object names were supplied; based on the description, the relevant objects would be a TACACS+ server configuration table (server address, port, timeout) and an authentication statistics object (requests, successes, failures) per server. An admin would poll the failure counter per configured TACACS+ server to detect a spike in authentication failures, which could indicate a misconfigured shared secret or an outage of the AAA server itself.
OIDs
| OID symbolic | OID numeric | Type | Access | Description |
|---|---|---|---|---|
| wwpLeosTacacsClientMIB | 1.3.6.1.4.1.6141.2.60.402 | The MIB module for the WWP Tacacs Server specific configuration and monitoring information. | ||
| wwpLeosTacacsClientMIBObjects | 1.3.6.1.4.1.6141.2.60.402.1 | |||
| wwpLeosTacacsClient | 1.3.6.1.4.1.6141.2.60.402.1.1 | |||
| INT wwpLeosTacacsAdminState | 1.3.6.1.4.1.6141.2.60.402.1.1.1 | INTEGER | read-write | Setting this object will administratively enable/disable tacacs client on the device. |
| INT wwpLeosTacacsOperState | 1.3.6.1.4.1.6141.2.60.402.1.1.2 | INTEGER | read-only | This object returns the operational state of tacacs client. |
| I32 wwpLeosTacacsClientTimeout | 1.3.6.1.4.1.6141.2.60.402.1.1.3 | Integer32 | read-write | This is the time in seconds between retransmissions to the TACACS server. |
| I32 wwpLeosTacacsClientRetries | 1.3.6.1.4.1.6141.2.60.402.1.1.4 | Integer32 | read-write | Indicates the number of times the TACACS server should be tried before giving up on the server. |
| I32 wwpLeosTacacsClientPrivilegeLevelRW | 1.3.6.1.4.1.6141.2.60.402.1.1.5 | Integer32 | read-write | Indicates the privilege level used for mapping a range of TACACS privilege levels to LE-OS R-W user privilege level. A privilege level returned by a server will be compared to wwpLeosTacacsClientPrivilegeLevelDiag. If the server privilege level is less than wwpLeosTacacsClientPrivilegeLevelDiag and greater than or equal to the wwpLeosTacacsClientPrivilegeLevelRW, the LE-OS privilege level is super-user. |
| I32 wwpLeosTacacsClientPrivilegeLevelAdmin | 1.3.6.1.4.1.6141.2.60.402.1.1.6 | Integer32 | read-write | Indicates the privilege level used for mapping a range of TACACS privilege levels to LE-OS TCE Admin user privilege level. A privilege level returned by a server will be compared to wwpLeosTacacsClientPrivilegeLevelRW. If the server privilege level is less than wwpLeosTacacsClientPrivilegeLevelRW and greater than or equal to the wwpLeosTacacsClientPrivilegeLevelAdmin, the LE-OS privilege level is Admin. Not supported on all platforms |
| I32 wwpLeosTacacsClientPrivilegeLevelDiag | 1.3.6.1.4.1.6141.2.60.402.1.1.7 | Integer32 | read-write | Indicates the privilege level used for mapping a range of TACACS privilege levels to LE-OS Diagnostic user privilege level. A privilege level returned by a server will be compared to this value. If server privilege level is greater than or equal to the wwpLeosTacacsClientPrivilegeLevelDiag, the LE-OS privilege level is diag. |
| STR wwpLeosTacacsClientAuthKey | 1.3.6.1.4.1.6141.2.60.402.1.1.8 | TacacsString | read-write | The Auth Key to be used for Tacacs Servers. Retrieving the value of this object via SNMP will return an empty string for security reasons. |
| INT wwpLeosTacacsAuthenticationAdminState | 1.3.6.1.4.1.6141.2.60.402.1.1.9 | INTEGER | read-write | Setting this object will administratively enable/disable tacacs authentication on the device. |
| INT wwpLeosTacacsAuthorizationAdminState | 1.3.6.1.4.1.6141.2.60.402.1.1.10 | INTEGER | read-write | Setting this object will administratively enable/disable tacacs authorization on the device. |
| INT wwpLeosTacacsAccountingAdminState | 1.3.6.1.4.1.6141.2.60.402.1.1.11 | INTEGER | read-write | Setting this object will administratively enable/disable tacacs accounting on the device. |
| INT wwpLeosTacacsSyslogAdminState | 1.3.6.1.4.1.6141.2.60.402.1.1.12 | INTEGER | read-write | Setting this object will administratively enable/disable tacacs syslog messages on the device. |
| wwpLeosTacacsClientServerTable | 1.3.6.1.4.1.6141.2.60.402.1.1.13 | not-accessible | Lists the possible TACACS servers. While creating entry following mib objects must be specified wwpLeosTacacsClientServerStatus, wwpLeosTacacsClientServerAddr. SNMP multiple set operation must be used to create entry. | |
| wwpLeosTacacsClientServerEntry | 1.3.6.1.4.1.6141.2.60.402.1.1.13.1 | not-accessible | Tacacs server entry. | |
| I32 wwpLeosTacacsClientServerIndex | 1.3.6.1.4.1.6141.2.60.402.1.1.13.1.1 | Integer32 | not-accessible | Specifies the index of this table. |
| STR wwpLeosTacacsClientServerAddr | 1.3.6.1.4.1.6141.2.60.402.1.1.13.1.2 | DisplayString | read-write | Host name or ip address of the TACACS server. |
| IP wwpLeosTacacsClientServerResolvedAddr | 1.3.6.1.4.1.6141.2.60.402.1.1.13.1.3 | IpAddress | read-only | When wwpLeosTacacsClientServerAddr represents: Host name : The resolved address will either be Ipv4 address or Ipv6 address. Ipv4 address : The resolved address will be the same Ipv4 address. Ipv6 address : The resolved address will be the same Ipv6 address. When the resolved address represents: Ipv4 address : wwpLeosTacacsClientServerResolvedAddr will represent the resolved Ipv4 address. wwpLeosTacacsClientServerResolvedInetAddr used in conjunction with wwpLeosTacacsClientServerResolvedInetAddrType will represent the same Ipv4 address. Ipv6 address : wwpLeosTacacsClientServerResolvedAddr will represent 0.0.0.0. wwpLeosTacacsClientServerResolvedInetAddr used in conjunction with wwpLeosTacacsClientServerResolvedInetAddrType will represent the Ipv6 address. |
| I32 wwpLeosTacacsClientServerPriority | 1.3.6.1.4.1.6141.2.60.402.1.1.13.1.4 | Integer32 | read-write | Specifies the priority of tacacs servers configured on the device. This is the order in which the servers will accessed |
| I32 wwpLeosTacacsClientServerAuthPort | 1.3.6.1.4.1.6141.2.60.402.1.1.13.1.5 | Integer32 | read-write | The destination TCP port number to which TACACS messages should be sent. The TACACS server will not be used for authentication if this port number is 0. |
| C32 wwpLeosTacacsClientServerAccessRequests | 1.3.6.1.4.1.6141.2.60.402.1.1.13.1.6 | Counter32 | read-only | The number of TACACS Access-Request packets sent to this server from the global TACACS client. This does not include retransmissions. |
| C32 wwpLeosTacacsClientServerAccessRetransmissions | 1.3.6.1.4.1.6141.2.60.402.1.1.13.1.7 | Counter32 | read-only | The number of TACACS Access-Retransmission packets retransmitted to this TACACS authentication server from the global TACACS client. |
| C32 wwpLeosTacacsClientServerAccessAccepts | 1.3.6.1.4.1.6141.2.60.402.1.1.13.1.8 | Counter32 | read-only | The number of TACACS Access-Accept packets (valid or invalid) received from this server by the global TACACS client. |
| C32 wwpLeosTacacsClientServerAccessRejects | 1.3.6.1.4.1.6141.2.60.402.1.1.13.1.9 | Counter32 | read-only | The number of TACACS Access-Reject packets (valid or invalid) received from this server by the global TACACS client. |
| C32 wwpLeosTacacsClientServerMalformedAccessResponses | 1.3.6.1.4.1.6141.2.60.402.1.1.13.1.10 | Counter32 | read-only | The number of malformed TACACS Access-Response packets received from this server by the global TACACS client. Malformed packets include packets with an invalid length. Bad authenticators or Signature attributes or unknown types are not included as malformed access responses. |
| C32 wwpLeosTacacsClientServerBadAuthenticators | 1.3.6.1.4.1.6141.2.60.402.1.1.13.1.11 | Counter32 | read-only | The number of TACACS Access-BadAuthenticator packets containing invalid authenticators or Signature attributes received from this server by the global TACACS client. |
| G32 wwpLeosTacacsClientServerPendingRequests | 1.3.6.1.4.1.6141.2.60.402.1.1.13.1.12 | Gauge32 | read-only | The number of TACACS Access-PendingRequest packets destined for this server from the global TACACS client that have not yet timed out or received a response. This variable is incremented when an Access-Request is sent and decremented due to receipt of an Access-Accept, Access-Reject or Access-Challenge, a timeout or retransmission. |
| C32 wwpLeosTacacsClientServerTimeouts | 1.3.6.1.4.1.6141.2.60.402.1.1.13.1.13 | Counter32 | read-only | The number of authentication timeouts to this server on behalf of the global TACACS client. After a timeout the client may retry to the same server, send to a different server, or give up. A retry to the same server is counted as a retransmit as well as a timeout. A send to a different server is counted as a Request as well as a timeout. |
| C32 wwpLeosTacacsClientServerUnknownTypes | 1.3.6.1.4.1.6141.2.60.402.1.1.13.1.14 | Counter32 | read-only | The number of TACACS packets of unknown type which were received from this server on the authentication port by the global TACACS client. |
| C32 wwpLeosTacacsClientServerBadHeaderSequence | 1.3.6.1.4.1.6141.2.60.402.1.1.13.1.15 | Counter32 | read-only | The number of TACACS packets of which were received from this server on the authentication port by the global TACACS client and dropped for some other reason by the client. |
| ROW wwpLeosTacacsClientServerStatus | 1.3.6.1.4.1.6141.2.60.402.1.1.13.1.16 | RowStatus | read-create | To create a row in this table, a manager must set this object to either createAndGo(4). While creating entry following mib objects must be specified wwpLeosTacacsClientServerStatus, wwpLeosTacacsClientServerAddr. SNMP multiple set operation must be used to create entry. To disable a tacacs server, the operator can set wwpLeosTacacsClientServerStatus object to 'notInService' state. |
| INT wwpLeosTacacsClientServerApplication | 1.3.6.1.4.1.6141.2.60.402.1.1.13.1.17 | INTEGER | read-create | This object specifies how the tacacs server should be used for authentication. Whether this tacacs server should be used for userLogin authentication or dot1x authentication or both is decided by the value of this mib object. Dot1x not supported on all platforms |
| T/F wwpLeosTacacsClientServerClearStatistics | 1.3.6.1.4.1.6141.2.60.402.1.1.13.1.18 | TruthValue | read-write | This object clears the statistics for a server |
| C32 wwpLeosTacacsClientGlobalAuthorizationAccessRequests | 1.3.6.1.4.1.6141.2.60.402.1.1.13.1.19 | Counter32 | read-only | The number of TACACS Access-Request packets sent to this server. This does not include retransmissions. |
| C32 wwpLeosTacacsClientGlobalAuthorizationAccessRetransmissions | 1.3.6.1.4.1.6141.2.60.402.1.1.13.1.20 | Counter32 | read-only | The number of TACACS Access-Request packets retransmitted to this TACACS authentication server. |
| C32 wwpLeosTacacsClientGlobalAuthorizationAccessAccepts | 1.3.6.1.4.1.6141.2.60.402.1.1.13.1.21 | Counter32 | read-only | The number of TACACS Access-Accept packets (valid or invalid) received from this server. |
| C32 wwpLeosTacacsClientGlobalAuthorizationAccessRejects | 1.3.6.1.4.1.6141.2.60.402.1.1.13.1.22 | Counter32 | read-only | The number of TACACS Access-Reject packets (valid or invalid) received from this server. |
| C32 wwpLeosTacacsClientGlobalAuthorizationMalformedAccessResponses | 1.3.6.1.4.1.6141.2.60.402.1.1.13.1.23 | Counter32 | read-only | The number of malformed TACACS Access-Response packets received from this server. Malformed packets include packets with an invalid length. Bad authenticators or signature attributes or unknown types are not included as malformed access responses. |
| C32 wwpLeosTacacsClientGlobalAuthorizationBadAuthenticators | 1.3.6.1.4.1.6141.2.60.402.1.1.13.1.24 | Counter32 | read-only | The number of TACACS Access-Response packets containing invalid authenticators or signature attributes received from this server. |
| C32 wwpLeosTacacsClientGlobalAuthorizationTimeouts | 1.3.6.1.4.1.6141.2.60.402.1.1.13.1.25 | Counter32 | read-only | The number of authentication timeouts to this server. After a timeout the client may retry sending to the same server, send to a different server, or give up. A retry to the same server is counted as a retransmit as well as a timeout. A send to a different server is counted as a request as well as a timeout. |
| C32 wwpLeosTacacsClientGlobalAuthorizationUnknownTypes | 1.3.6.1.4.1.6141.2.60.402.1.1.13.1.26 | Counter32 | read-only | The number of TACACS packets of unknown type which were received from this server on the authentication port. |
| C32 wwpLeosTacacsClientGlobalAuthorizationBadHeaderSequence | 1.3.6.1.4.1.6141.2.60.402.1.1.13.1.27 | Counter32 | read-only | The number of TACACS packets which were received from this server on the authentication port and dropped for some other reason. |
| C32 wwpLeosTacacsClientGlobalAccountingAccessRequests | 1.3.6.1.4.1.6141.2.60.402.1.1.13.1.28 | Counter32 | read-only | The number of TACACS Access-Request packets sent to this server. This does not include retransmissions. |
| C32 wwpLeosTacacsClientGlobalAccountingAccessRetransmissions | 1.3.6.1.4.1.6141.2.60.402.1.1.13.1.29 | Counter32 | read-only | The number of TACACS Access-Request packets retransmitted to this TACACS authentication server. |
| C32 wwpLeosTacacsClientGlobalAccountingAccessAccepts | 1.3.6.1.4.1.6141.2.60.402.1.1.13.1.30 | Counter32 | read-only | The number of TACACS Access-Accept packets (valid or invalid) received from this server. |
| C32 wwpLeosTacacsClientGlobalAccountingAccessRejects | 1.3.6.1.4.1.6141.2.60.402.1.1.13.1.31 | Counter32 | read-only | The number of TACACS Access-Reject packets (valid or invalid) received from this server. |
| C32 wwpLeosTacacsClientGlobalAccountingMalformedAccessResponses | 1.3.6.1.4.1.6141.2.60.402.1.1.13.1.32 | Counter32 | read-only | The number of malformed TACACS Access-Response packets received from this server. Malformed packets include packets with an invalid length. Bad authenticators or signature attributes or unknown types are not included as malformed access responses. |
| C32 wwpLeosTacacsClientGlobalAccountingBadAuthenticators | 1.3.6.1.4.1.6141.2.60.402.1.1.13.1.33 | Counter32 | read-only | The number of TACACS Access-Response packets containing invalid authenticators or signature attributes received from this server. |
| C32 wwpLeosTacacsClientGlobalAccountingTimeouts | 1.3.6.1.4.1.6141.2.60.402.1.1.13.1.34 | Counter32 | read-only | The number of authentication timeouts to this server. After a timeout the client may retry sending to the same server, send to a different server, or give up. A retry to the same server is counted as a retransmit as well as a timeout. A send to a different server is counted as a request as well as a timeout. |
| C32 wwpLeosTacacsClientGlobalAccountingUnknownTypes | 1.3.6.1.4.1.6141.2.60.402.1.1.13.1.35 | Counter32 | read-only | The number of TACACS packets of unknown type which were received from this server on the authentication port. |
| C32 wwpLeosTacacsClientGlobalAccountingBadHeaderSequence | 1.3.6.1.4.1.6141.2.60.402.1.1.13.1.36 | Counter32 | read-only | The number of TACACS packets which were received from this server on the authentication port and dropped for some other reason. |
| IPt wwpLeosTacacsClientServerResolvedInetAddrType | 1.3.6.1.4.1.6141.2.60.402.1.1.13.1.37 | InetAddressType | read-only | Specifies the resolved IP address type . Used in conjunction with wwpLeosTacacsClientServerResolvedInetAddr. When set to : ipv4 : wwpLeosTacacsClientServerResolvedInetAddr should be compliant with InetAddressIPv4 ipv6 : wwpLeosTacacsClientServerResolvedInetAddr should be compliant with InetAddressIPv6 |
| IP wwpLeosTacacsClientServerResolvedInetAddr | 1.3.6.1.4.1.6141.2.60.402.1.1.13.1.38 | InetAddress | read-only | Specifies the resolved IP address if wwpLeosTacacsClientServerAddr is set to host name. If wwpLeosTacacsClientServerAddr is set to ip address then wwpLeosTacacsClientServerResolvedInetAddress will contain same information as wwpLeosTacacsClientServerAddr. This OID should be used in conjuction with wwpLeosTacacsClientServerResolvedInetAddrType. |
| wwpLeosTacacsClientAuthenticationServerTable | 1.3.6.1.4.1.6141.2.60.402.1.1.14 | not-accessible | Lists the possible TACACS servers. While creating entry following mib objects must be specified wwpLeosTacacsClientAuthenticationServerStatus, wwpLeosTacacsClientAuthenticationServerAddr. SNMP multiple set operation must be used to create entry. | |
| wwpLeosTacacsClientAuthenticationServerEntry | 1.3.6.1.4.1.6141.2.60.402.1.1.14.1 | not-accessible | Tacacs server entry. | |
| I32 wwpLeosTacacsClientAuthenticationServerIndex | 1.3.6.1.4.1.6141.2.60.402.1.1.14.1.1 | Integer32 | not-accessible | Specifies the index of this table. |
| STR wwpLeosTacacsClientAuthenticationServerAddr | 1.3.6.1.4.1.6141.2.60.402.1.1.14.1.2 | DisplayString | read-write | Host name or ip address of the TACACS server. |
| IP wwpLeosTacacsClientAuthenticationServerResolvedAddr | 1.3.6.1.4.1.6141.2.60.402.1.1.14.1.3 | IpAddress | read-only | When wwpLeosTacacsClientAuthenticationServerAddr represents: Host name : The resolved address will either be Ipv4 address or Ipv6 address. Ipv4 address : The resolved address will be the same Ipv4 address. Ipv6 address : The resolved address will be the same Ipv6 address. When the resolved address represents: Ipv4 address : wwpLeosTacacsClientAuthenticationServerResolvedAddr will represent the resolved Ipv4 address. wwpLeosTacacsClientAuthenticationServerResolvedInetAddr used in conjunction with wwpLeosTacacsClientAuthenticationServerResolvedInetAddrType will represent the same Ipv4 address. Ipv6 address : wwpLeosTacacsClientAuthenticationServerResolvedAddr will represent 0.0.0.0. wwpLeosTacacsClientAuthenticationServerResolvedInetAddr used in conjunction with wwpLeosTacacsClientAuthenticationServerResolvedInetAddrType will represent the Ipv6 address. |
| I32 wwpLeosTacacsClientAuthenticationServerPriority | 1.3.6.1.4.1.6141.2.60.402.1.1.14.1.4 | Integer32 | read-write | Specifies the priority of tacacs servers configured on the device. This is the order in which the servers will accessed |
| I32 wwpLeosTacacsClientAuthenticationServerAuthPort | 1.3.6.1.4.1.6141.2.60.402.1.1.14.1.5 | Integer32 | read-write | The destination TCP port number to which TACACS messages should be sent. The TACACS server will not be used for authentication if this port number is 0. |
| C32 wwpLeosTacacsClientAuthenticationServerAccessRequests | 1.3.6.1.4.1.6141.2.60.402.1.1.14.1.6 | Counter32 | read-only | The number of TACACS Access-Request packets sent to this server. This does not include retransmissions. |
| C32 wwpLeosTacacsClientAuthenticationServerAccessRetransmissions | 1.3.6.1.4.1.6141.2.60.402.1.1.14.1.7 | Counter32 | read-only | The number of TACACS Access-Request packets retransmitted to this TACACS authentication server. |
| C32 wwpLeosTacacsClientAuthenticationServerAccessAccepts | 1.3.6.1.4.1.6141.2.60.402.1.1.14.1.8 | Counter32 | read-only | The number of TACACS Access-Accept packets (valid or invalid) received from this server. |
| C32 wwpLeosTacacsClientAuthenticationServerAccessRejects | 1.3.6.1.4.1.6141.2.60.402.1.1.14.1.9 | Counter32 | read-only | The number of TACACS Access-Reject packets (valid or invalid) received from this server. |
| C32 wwpLeosTacacsClientAuthenticationServerMalformedAccessResponses | 1.3.6.1.4.1.6141.2.60.402.1.1.14.1.10 | Counter32 | read-only | The number of malformed TACACS Access-Response packets received from this server. Malformed packets include packets with an invalid length. Bad authenticators or Signature attributes or unknown types are not included as malformed access responses. |
| C32 wwpLeosTacacsClientAuthenticationServerBadAuthenticators | 1.3.6.1.4.1.6141.2.60.402.1.1.14.1.11 | Counter32 | read-only | The number of TACACS Access-Response packets containing invalid authenticators or Signature attributes received from this server. |
| G32 wwpLeosTacacsClientAuthenticationServerPendingRequests | 1.3.6.1.4.1.6141.2.60.402.1.1.14.1.12 | Gauge32 | read-only | The number of TACACS Access-Request packets destined for this server that have not yet timed out or received a response. This variable is incremented when an Access-Request is sent and decremented due to receipt of an Access-Accept, Access-Reject or Access-Challenge, a timeout or retransmission. |
| C32 wwpLeosTacacsClientAuthenticationServerTimeouts | 1.3.6.1.4.1.6141.2.60.402.1.1.14.1.13 | Counter32 | read-only | The number of authentication timeouts to this server. After a timeout the client may retry to the same server, send to a different server, or give up. A retry to the same server is counted as a retransmit as well as a timeout. A send to a different server is counted as a Request as well as a timeout. |
| C32 wwpLeosTacacsClientAuthenticationServerUnknownTypes | 1.3.6.1.4.1.6141.2.60.402.1.1.14.1.14 | Counter32 | read-only | The number of TACACS packets of unknown type which were received from this server on the authentication port. |
| C32 wwpLeosTacacsClientAuthenticationServerBadHeaderSequence | 1.3.6.1.4.1.6141.2.60.402.1.1.14.1.15 | Counter32 | read-only | The number of TACACS packets of which were received from this server on the authentication port and dropped for some other reason. |
| ROW wwpLeosTacacsClientAuthenticationServerStatus | 1.3.6.1.4.1.6141.2.60.402.1.1.14.1.16 | RowStatus | read-create | To create a row in this table, a manager must set this object to either createAndGo(4). While creating entry following mib objects must be specified wwpLeosTacacsClientAuthenticationServerStatus, wwpLeosTacacsClientAuthenticationServerAddr. SNMP multiple set operation must be used to create entry. To disable a tacacs server, the operator can set wwpLeosTacacsClientAuthenticationServerStatus object to 'notInService' state. |
| INT wwpLeosTacacsClientAuthenticationServerApplication | 1.3.6.1.4.1.6141.2.60.402.1.1.14.1.17 | INTEGER | read-create | This object specifies how the tacacs server should be used for authentication. Whether this tacacs server should be used for userLogin authentication or dot1x authentication or both is decided by the value of this mib object. Dot1x not supported on all platforms |
| T/F wwpLeosTacacsClientAuthenticationServerClearStatistics | 1.3.6.1.4.1.6141.2.60.402.1.1.14.1.18 | TruthValue | read-write | This object clears the statistics for a server |
| IPt wwpLeosTacacsClientAuthenticationServerResolvedInetAddrType | 1.3.6.1.4.1.6141.2.60.402.1.1.14.1.19 | InetAddressType | read-only | Specifies the resolved IP address type. Used in conjunction with wwpLeosTacacsClientAuthenticationServerResolvedInetAddr. When set to : ipv4 : wwpLeosTacacsClientAuthenticationServerResolvedInetAddr should be compliant with InetAddressIPv4 ipv6 : wwpLeosTacacsClientAuthenticationServerResolvedInetAddr should be compliant with InetAddressIPv6 |
| IP wwpLeosTacacsClientAuthenticationServerResolvedInetAddr | 1.3.6.1.4.1.6141.2.60.402.1.1.14.1.20 | InetAddress | read-only | Specifies the resolved IP address if wwpLeosTacacsClientAuthenticationServerAddr is set to host name. If wwpLeosTacacsClientAuthenticationServerAddr is set to ip address then wwpLeosTacacsClientAuthenticationServerResolvedInetAddr will contain the same information as wwpLeosTacacsClientAuthenticationServerAddr. This OID should be used in conjuction with wwpLeosTacacsClientAuthenticationServerResolvedInetAddrType. |
| wwpLeosTacacsClientAuthorizationServerTable | 1.3.6.1.4.1.6141.2.60.402.1.1.15 | not-accessible | Lists the possible TACACS servers. While creating entry following mib objects must be specified wwpLeosTacacsClientAuthorizationServerStatus, wwpLeosTacacsClientAuthorizationServerAddr. SNMP multiple set operation must be used to create entry. | |
| wwpLeosTacacsClientAuthorizationServerEntry | 1.3.6.1.4.1.6141.2.60.402.1.1.15.1 | not-accessible | Tacacs server entry. | |
| I32 wwpLeosTacacsClientAuthorizationServerIndex | 1.3.6.1.4.1.6141.2.60.402.1.1.15.1.1 | Integer32 | not-accessible | Specifies the index of this table. |
| STR wwpLeosTacacsClientAuthorizationServerAddr | 1.3.6.1.4.1.6141.2.60.402.1.1.15.1.2 | DisplayString | read-write | Host name or ip address of the TACACS server. |
| IP wwpLeosTacacsClientAuthorizationServerResolvedAddr | 1.3.6.1.4.1.6141.2.60.402.1.1.15.1.3 | IpAddress | read-only | When wwpLeosTacacsClientAuthorizationServerAddr represents: Host name : The resolved address will either be Ipv4 address or Ipv6 address. Ipv4 address : The resolved address will be the same Ipv4 address. Ipv6 address : The resolved address will be the same Ipv6 address. When the resolved address represents: Ipv4 address : wwpLeosTacacsClientAuthorizationServerResolvedAddr will represent the resolved Ipv4 address. wwpLeosTacacsClientAuthorizationServerResolvedInetAddr used in conjunction with wwpLeosTacacsClientAuthorizationServerResolvedInetAddrType will represent the same Ipv4 address. Ipv6 address : wwpLeosTacacsClientAuthorizationServerResolvedAddr will represent 0.0.0.0. wwpLeosTacacsClientAuthorizationServerResolvedInetAddr used in conjunction with wwpLeosTacacsClientAuthorizationServerResolvedInetAddrType will represent the Ipv6 address. |
| I32 wwpLeosTacacsClientAuthorizationServerPriority | 1.3.6.1.4.1.6141.2.60.402.1.1.15.1.4 | Integer32 | read-write | Specifies the priority of tacacs servers configured on the device. This is the order in which the servers will accessed |
| I32 wwpLeosTacacsClientAuthorizationServerAuthPort | 1.3.6.1.4.1.6141.2.60.402.1.1.15.1.5 | Integer32 | read-write | The destination TCP port number to which TACACS messages should be sent. The TACACS server will not be used for authentication if this port number is 0. |
| C32 wwpLeosTacacsClientAuthorizationServerAccessRequests | 1.3.6.1.4.1.6141.2.60.402.1.1.15.1.6 | Counter32 | read-only | The number of TACACS Access-Request packets sent to this server. This does not include retransmissions. |
| C32 wwpLeosTacacsClientAuthorizationServerAccessRetransmissions | 1.3.6.1.4.1.6141.2.60.402.1.1.15.1.7 | Counter32 | read-only | The number of TACACS Access-Request packets retransmitted to this TACACS authentication server. |
| C32 wwpLeosTacacsClientAuthorizationServerAccessAccepts | 1.3.6.1.4.1.6141.2.60.402.1.1.15.1.8 | Counter32 | read-only | The number of TACACS Access-Accept packets (valid or invalid) received from this server. |
| C32 wwpLeosTacacsClientAuthorizationServerAccessRejects | 1.3.6.1.4.1.6141.2.60.402.1.1.15.1.9 | Counter32 | read-only | The number of TACACS Access-Reject packets (valid or invalid) received from this server. |
| C32 wwpLeosTacacsClientAuthorizationServerMalformedAccessResponses | 1.3.6.1.4.1.6141.2.60.402.1.1.15.1.10 | Counter32 | read-only | The number of malformed TACACS Access-Response packets received from this server. Malformed packets include packets with an invalid length. Bad authenticators or Signature attributes or unknown types are not included as malformed access responses. |
| C32 wwpLeosTacacsClientAuthorizationServerBadAuthenticators | 1.3.6.1.4.1.6141.2.60.402.1.1.15.1.11 | Counter32 | read-only | The number of TACACS Access-Response packets containing invalid authenticators or Signature attributes received from this server. |
| G32 wwpLeosTacacsClientAuthorizationServerPendingRequests | 1.3.6.1.4.1.6141.2.60.402.1.1.15.1.12 | Gauge32 | read-only | The number of TACACS Access-Request packets destined for this server that have not yet timed out or received a response. This variable is incremented when an Access-Request is sent and decremented due to receipt of an Access-Accept, Access-Reject or Access-Challenge, a timeout or retransmission. |
| C32 wwpLeosTacacsClientAuthorizationServerTimeouts | 1.3.6.1.4.1.6141.2.60.402.1.1.15.1.13 | Counter32 | read-only | The number of authentication timeouts to this server. After a timeout the client may retry to the same server, send to a different server, or give up. A retry to the same server is counted as a retransmit as well as a timeout. A send to a different server is counted as a Request as well as a timeout. |
| C32 wwpLeosTacacsClientAuthorizationServerUnknownTypes | 1.3.6.1.4.1.6141.2.60.402.1.1.15.1.14 | Counter32 | read-only | The number of TACACS packets of unknown type which were received from this server on the authentication port. |
| C32 wwpLeosTacacsClientAuthorizationServerBadHeaderSequence | 1.3.6.1.4.1.6141.2.60.402.1.1.15.1.15 | Counter32 | read-only | The number of TACACS packets of which were received from this server on the authentication port and dropped for some other reason. |
| ROW wwpLeosTacacsClientAuthorizationServerStatus | 1.3.6.1.4.1.6141.2.60.402.1.1.15.1.16 | RowStatus | read-create | To create a row in this table, a manager must set this object to either createAndGo(4). While creating entry following mib objects must be specified wwpLeosTacacsClientAuthorizationServerStatus, wwpLeosTacacsClientAuthorizationServerAddr. SNMP multiple set operation must be used to create entry. To disable a tacacs server, the operator can set wwpLeosTacacsClientAuthorizationServerStatus object to 'notInService' state. |
| INT wwpLeosTacacsClientAuthorizationServerApplication | 1.3.6.1.4.1.6141.2.60.402.1.1.15.1.17 | INTEGER | read-create | This object specifies how the tacacs server should be used for authentication. Whether this tacacs server should be used for userLogin authentication or dot1x authentication or both is decided by the value of this mib object. Dot1x not supported on all platforms |
| T/F wwpLeosTacacsClientAuthorizationServerClearStatistics | 1.3.6.1.4.1.6141.2.60.402.1.1.15.1.18 | TruthValue | read-write | This object clears the statistics for a server |
| IPt wwpLeosTacacsClientAuthorizationServerResolvedInetAddrType | 1.3.6.1.4.1.6141.2.60.402.1.1.15.1.19 | InetAddressType | read-only | Specifies the resolved IP address type. Used in conjunction with wwpLeosTacacsClientAuthorizationServerResolvedInetAddr. When set to : ipv4 : wwpLeosTacacsClientAuthorizationServerResolvedInetAddr should be compliant with InetAddressIPv4 ipv6 : wwpLeosTacacsClientAuthorizationServerResolvedInetAddr should be compliant with InetAddressIPv6. |
| IP wwpLeosTacacsClientAuthorizationServerResolvedInetAddr | 1.3.6.1.4.1.6141.2.60.402.1.1.15.1.20 | InetAddress | read-only | Specifies the resolved IP address if wwpLeosTacacsClientAuthorizationServerAddr is set to host name. If wwpLeosTacacsClientAuthorizationServerAddr is set to ip address then wwpLeosTacacsClientAuthorizationServerResolvedInetAddr will contain same information as wwpLeosTacacsClientAuthorizationServerAddr. This OID is used in conjunction with wwpLeosTacacsClientAuthorizationServerResolvedInetAddr. |
| wwpLeosTacacsClientAccountingServerTable | 1.3.6.1.4.1.6141.2.60.402.1.1.16 | not-accessible | Lists the possible TACACS servers. While creating entry following mib objects must be specified wwpLeosTacacsClientAccountingServerStatus, wwpLeosTacacsClientAccountingServerAddr. SNMP multiple set operation must be used to create entry. | |
| wwpLeosTacacsClientAccountingServerEntry | 1.3.6.1.4.1.6141.2.60.402.1.1.16.1 | not-accessible | Tacacs server entry. | |
| I32 wwpLeosTacacsClientAccountingServerIndex | 1.3.6.1.4.1.6141.2.60.402.1.1.16.1.1 | Integer32 | not-accessible | Specifies the index of this table. |
| STR wwpLeosTacacsClientAccountingServerAddr | 1.3.6.1.4.1.6141.2.60.402.1.1.16.1.2 | DisplayString | read-write | Host name or ip address of the TACACS server. |
| IP wwpLeosTacacsClientAccountingServerResolvedAddr | 1.3.6.1.4.1.6141.2.60.402.1.1.16.1.3 | IpAddress | read-only | When wwpLeosTacacsClientAccountingServerAddr represents: Host name : The resolved address will either be Ipv4 address or Ipv6 address. Ipv4 address : The resolved address will be the same Ipv4 address. Ipv6 address : The resolved address will be the same Ipv6 address. When the resolved address represents: Ipv4 address : wwpLeosTacacsClientAccountingServerResolvedAddr will represent the resolved Ipv4 address. wwpLeosTacacsClientAccountingServerResolvedInetAddr used in conjunction with wwpLeosTacacsClientAccountingServerResolvedInetAddrType will represent the same Ipv4 address. Ipv6 address : wwpLeosTacacsClientAccountingServerResolvedAddr will represent 0.0.0.0. wwpLeosTacacsClientAccountingServerResolvedInetAddr used in conjunction with wwpLeosTacacsClientAccountingServerResolvedInetAddrType will represent the Ipv6 address. |
| I32 wwpLeosTacacsClientAccountingServerPriority | 1.3.6.1.4.1.6141.2.60.402.1.1.16.1.4 | Integer32 | read-write | Specifies the priority of tacacs servers configured on the device. This is the order in which the servers will accessed |
| I32 wwpLeosTacacsClientAccountingServerAuthPort | 1.3.6.1.4.1.6141.2.60.402.1.1.16.1.5 | Integer32 | read-write | The destination TCP port number to which TACACS messages should be sent. The TACACS server will not be used for authentication if this port number is 0. |
| C32 wwpLeosTacacsClientAccountingServerAccessRequests | 1.3.6.1.4.1.6141.2.60.402.1.1.16.1.6 | Counter32 | read-only | The number of TACACS Access-Request packets sent to this server. This does not include retransmissions. |
| C32 wwpLeosTacacsClientAccountingServerAccessRetransmissions | 1.3.6.1.4.1.6141.2.60.402.1.1.16.1.7 | Counter32 | read-only | The number of TACACS Access-Request packets retransmitted to this TACACS authentication server. |
| C32 wwpLeosTacacsClientAccountingServerAccessAccepts | 1.3.6.1.4.1.6141.2.60.402.1.1.16.1.8 | Counter32 | read-only | The number of TACACS Access-Accept packets (valid or invalid) received from this server. |
| C32 wwpLeosTacacsClientAccountingServerAccessRejects | 1.3.6.1.4.1.6141.2.60.402.1.1.16.1.9 | Counter32 | read-only | The number of TACACS Access-Reject packets (valid or invalid) received from this server. |
| C32 wwpLeosTacacsClientAccountingServerMalformedAccessResponses | 1.3.6.1.4.1.6141.2.60.402.1.1.16.1.10 | Counter32 | read-only | The number of malformed TACACS Access-Response packets received from this server. Malformed packets include packets with an invalid length. Bad authenticators or Signature attributes or unknown types are not included as malformed access responses. |
| C32 wwpLeosTacacsClientAccountingServerBadAuthenticators | 1.3.6.1.4.1.6141.2.60.402.1.1.16.1.11 | Counter32 | read-only | The number of TACACS Access-Response packets containing invalid authenticators or Signature attributes received from this server. |
| G32 wwpLeosTacacsClientAccountingServerPendingRequests | 1.3.6.1.4.1.6141.2.60.402.1.1.16.1.12 | Gauge32 | read-only | The number of TACACS Access-Request packets destined for this server that have not yet timed out or received a response. This variable is incremented when an Access-Request is sent and decremented due to receipt of an Access-Accept, Access-Reject or Access-Challenge, a timeout or retransmission. |
| C32 wwpLeosTacacsClientAccountingServerTimeouts | 1.3.6.1.4.1.6141.2.60.402.1.1.16.1.13 | Counter32 | read-only | The number of authentication timeouts to this server. After a timeout the client may retry to the same server, send to a different server, or give up. A retry to the same server is counted as a retransmit as well as a timeout. A send to a different server is counted as a Request as well as a timeout. |
| C32 wwpLeosTacacsClientAccountingServerUnknownTypes | 1.3.6.1.4.1.6141.2.60.402.1.1.16.1.14 | Counter32 | read-only | The number of TACACS packets of unknown type which were received from this server on the authentication port. |
| C32 wwpLeosTacacsClientAccountingServerBadHeaderSequence | 1.3.6.1.4.1.6141.2.60.402.1.1.16.1.15 | Counter32 | read-only | The number of TACACS packets of which were received from this server on the authentication port and dropped for some other reason. |
| ROW wwpLeosTacacsClientAccountingServerStatus | 1.3.6.1.4.1.6141.2.60.402.1.1.16.1.16 | RowStatus | read-create | To create a row in this table, a manager must set this object to either createAndGo(4). While creating entry following mib objects must be specified wwpLeosTacacsClientAccountingServerStatus, wwpLeosTacacsClientAccountingServerAddr. SNMP multiple set operation must be used to create entry. To disable a tacacs server, the operator can set wwpLeosTacacsClientAccountingServerStatus object to 'notInService' state. |
| INT wwpLeosTacacsClientAccountingServerApplication | 1.3.6.1.4.1.6141.2.60.402.1.1.16.1.17 | INTEGER | read-create | This object specifies how the tacacs server should be used for authentication. Whether this tacacs server should be used for userLogin authentication or dot1x authentication or both is decided by the value of this mib object. Dot1x not supported on all platforms |
| T/F wwpLeosTacacsClientAccountingServerClearStatistics | 1.3.6.1.4.1.6141.2.60.402.1.1.16.1.18 | TruthValue | read-write | This object clears the statistics for a server |
| IPt wwpLeosTacacsClientAccountingServerResolvedInetAddrType | 1.3.6.1.4.1.6141.2.60.402.1.1.16.1.19 | InetAddressType | read-only | Specifies the resolved IP address type. Used in conjunction with wwpLeosTacacsClientAccountingServerResolvedInetAddr. When set to : ipv4 : wwpLeosTacacsClientAccountingServerResolvedInetAddr should be compliant with InetAddressIPv4 ipv6 : wwpLeosTacacsClientAccountingServerResolvedInetAddr should be compliant with InetAddressIPv6. |
| IP wwpLeosTacacsClientAccountingServerResolvedInetAddr | 1.3.6.1.4.1.6141.2.60.402.1.1.16.1.20 | InetAddress | read-only | Specifies the resolved IP address if wwpLeosTacacsClientAccountingServerAddr is set to host name. If wwpLeosTacacsClientAccountingServerAddr is set to ip address then wwpLeosTacacsClientAccountingServerResolvedInetAddr will contain the same information as wwpLeosTacacsClientAccountingServerAddr. This OID is used in conjunction with wwpLeosTacacsClientAccountingServerResolvedInetAddrType. |
| INT wwpLeosTacacsClientAccountingSession | 1.3.6.1.4.1.6141.2.60.402.1.1.20 | INTEGER | read-write | Setting this object will turn on session logon/logoff logging with tacacs. |
| INT wwpLeosTacacsClientAccountingCommand | 1.3.6.1.4.1.6141.2.60.402.1.1.21 | INTEGER | read-write | Setting this object will turn on command start/stop logging. |
| INT wwpLeosTacacsClientGlobalServers | 1.3.6.1.4.1.6141.2.60.402.1.1.22 | INTEGER | read-write | Setting this object will turn off global servers. |
| INT wwpLeosTacacsClientSearchMethod | 1.3.6.1.4.1.6141.2.60.402.1.1.23 | INTEGER | read-write | Setting this object will set the search method. |
| I32 wwpLeosTacacsClientKeyMinLen | 1.3.6.1.4.1.6141.2.60.402.1.1.24 | Integer32 | read-write | Setting this object will set the minimum length for TACACS secret key |
| wwpLeosTacacsClientMIBNotificationPrefix | 1.3.6.1.4.1.6141.2.60.402.2 | |||
| wwpLeosTacacsClientMIBNotifications | 1.3.6.1.4.1.6141.2.60.402.2.0 | |||
| wwpLeosTacacsClientMIBConformance | 1.3.6.1.4.1.6141.2.60.402.3 | |||
| wwpLeosTacacsClientMIBCompliances | 1.3.6.1.4.1.6141.2.60.402.3.1 | |||
| wwpLeosTacacsClientMIBGroups | 1.3.6.1.4.1.6141.2.60.402.3.2 |
RFC description
Manages WWP TACACS server configuration and authentication server monitoring.
Start monitoring Ciena LEOS / World Wide Packets Metro Ethernet device (TACACS+ authentication request/failure counter status) with a free 30-day trial of IPNetwork Monitor. Import MIBs, browse SNMP OIDs, create custom SNMP monitors, configure alerts, and monitor any SNMP-enabled network device from a single console.