WWP-RADIUS-CLIENT-MIB

All MIBs › WWP-RADIUS-CLIENT-MIB

Organization: World Wide Packets, Inc

Last Updated: 2001-04-03

Category: World Wide Packets Metro Ethernet

Description: Manages World Wide Packets RADIUS authentication client configuration, server list, and accounting statistics.

Start monitoring vendor-neutral, standards-based MIB, any SNMPv3-capable network device (SNMP engine identity/boot/clock status) with a free 30-day trial of IPNetwork Monitor. Import MIBs, browse SNMP OIDs, create custom SNMP monitors, configure alerts, and monitor any SNMP-enabled network device from a single console.

What Is WWP-RADIUS-CLIENT-MIB?

WWP-RADIUS-CLIENT-MIB is a World Wide Packets (Ciena) vendor MIB, the non-LEOS-branded counterpart to WWP-LEOS-RADIUS-CLIENT-MIB, covering the RADIUS client used to authenticate administrative access to WWP network devices. It exposes configuration data such as the RADIUS server list, shared-secret reference, and timeout/retry settings, plus statistics on access-request, access-accept, and access-reject counts. Its monitoring value centers on the software/authentication service status: an operator can confirm the configured RADIUS servers are responding to requests and spot rising reject or timeout counts that indicate a server outage or misconfigured shared secret before it locks administrators out. It depends conceptually on the RADIUS protocol (RFC 2865) as the underlying authentication mechanism it manages. It is typically deployed on World Wide Packets network devices in service-provider environments that centralize administrative login authentication. Engineers can download the WWP-RADIUS-CLIENT-MIB file directly to load it into their MIB browser.

IPNetwork Monitor allows you to monitor SNMP objects defined in WWP-RADIUS-CLIENT-MIB. Use the built-in SNMP Monitoring Browser to explore available variables, view their current values and descriptions, and select the objects you want to monitor. You can then create SNMP monitors, configure thresholds, and receive alerts when monitored values change.

Supported Devices

World Wide Packets network devices
Ciena Ethernet access/aggregation switches

Monitoring Examples

An administrator would poll the RADIUS server statistics objects for access-request, access-accept, and access-reject counters across the configured server list, and a spike in access-reject or a stall in access-accept responses would reveal an expired or mismatched shared secret between the device and RADIUS server. No sample objects were listed in the source excerpt, so specific table/object names are inferred from the stated RADIUS server configuration and monitoring purpose rather than taken verbatim from the MIB.

What Can Be Monitored

RADIUS server list
access-request/accept/reject counts
authentication timeout/retry configuration
RADIUS server reachability

Imported Objects

From SNMPv2-SMI

Counter32
Gauge32
Integer32
IpAddress
MODULE-IDENTITY
OBJECT-TYPE
TimeTicks

From SNMPv2-TC

DisplayString
RowStatus

From WWP-SMI

wwpModules

OBJECT-IDENTITY

How to Use in IPNetwork Monitor

Example using wwpRadiusClientAccessRequests OID:

Select a World Wide Packets network devices, Ciena Ethernet access/aggregation switch (RADIUS request/accept/reject counter status) as the target host to create a monitor — the SNMP service should be up and running on it. Click New Monitor, then check SNMP Custom on the Favorites tab, click Next, and confirm the host. On the next page, click Select... to open the built-in SNMP MIB Browser and type wwpRadiusClientAccessRequests into the Find box to locate it in the OID tree, selecting the specific row/instance you want to monitor since this is a table column, then select it and click OK. The number of RADIUS Access-Request packets sent to this server. On the monitor's Main parameters page you can set the target's SNMP port (default 161), credentials, polling interval, and other settings — see the SNMP Monitor help for details. On the State conditions and Alerting tabs, configure when the monitor should change state and trigger an alert; since this is a Counter32-type OID, Value bounds is the most useful condition here — trigger an alert if the counter increases sharply between polls relative to its normal baseline, since an unexpected spike often reflects a real change in traffic or activity. Click Finish to create the monitor; you can adjust any parameter later.

OIDs

OID symbolic	OID numeric	Type	Access	Description
wwpRadiusClientMIB	1.3.6.1.4.1.6141.2.11			The MIB module for the WWP Radius Server specific configuration and monitoring information.
wwpRadiusClientMIBObjects	1.3.6.1.4.1.6141.2.11.1
wwpRadiusClient	1.3.6.1.4.1.6141.2.11.1.1
I32 wwpRadiusClientTimeout	1.3.6.1.4.1.6141.2.11.1.1.1	Integer32	read-write	This is the time in seconds between retransmissions to the RADIUS server.
I32 wwpRadiusClientRetries	1.3.6.1.4.1.6141.2.11.1.1.2	Integer32	read-write	Indicates the number of times the RADIUS server should be tried before giving up on the server.
wwpRadiusServerTable	1.3.6.1.4.1.6141.2.11.1.1.3		not-accessible	Lists the possible RADIUS servers.
wwpRadiusServerEntry	1.3.6.1.4.1.6141.2.11.1.1.3.1		not-accessible	Radius server entry.
I32 wwpRadiusServerId	1.3.6.1.4.1.6141.2.11.1.1.3.1.1	Integer32	read-only	Index to the Radius Server Entry. The radius Servers are polled according to their ServerIds. If the ServerId 1 doesn't respond, then it tries for the next and hence on.
IP wwpRadiusServerIpAddr	1.3.6.1.4.1.6141.2.11.1.1.3.1.2	IpAddress	read-write	IP Address of the RADIUS server.
I32 wwpRadiusServerAuthPort	1.3.6.1.4.1.6141.2.11.1.1.3.1.3	Integer32	read-write	The destination UDP port number to which RADIUS messages should be sent. The RADIUS server will not be used for authentication if this port number is 0.
TIK wwpRadiusClientRoundTripTime	1.3.6.1.4.1.6141.2.11.1.1.3.1.4	TimeTicks	read-only	The time interval (in hundredths of a second) between the most recent Access-Reply/Access-Challenge and the Access-Request that matched it from this RADIUS authentication server.
C32 wwpRadiusClientAccessRequestsEx	1.3.6.1.4.1.6141.2.11.1.1.3.1.5	Counter32	read-only	The number of RADIUS Access-Request packets sent to this server. This does not include retransmissions.
C32 wwpRadiusClientAccessRetransmissions	1.3.6.1.4.1.6141.2.11.1.1.3.1.6	Counter32	read-only	The number of RADIUS Access-Request packets retransmitted to this RADIUS authentication server.
C32 wwpRadiusClientAccessAccepts	1.3.6.1.4.1.6141.2.11.1.1.3.1.7	Counter32	read-only	The number of RADIUS Access-Accept packets (valid or invalid) received from this server.
C32 wwpRadiusClientAccessRejects	1.3.6.1.4.1.6141.2.11.1.1.3.1.8	Counter32	read-only	The number of RADIUS Access-Reject packets (valid or invalid) received from this server.
C32 wwpRadiusClientAccessChallenges	1.3.6.1.4.1.6141.2.11.1.1.3.1.9	Counter32	read-only	The number of RADIUS Access-Challenge packets (valid or invalid) received from this server.
C32 wwpRadiusClientMalformedAccessResponses	1.3.6.1.4.1.6141.2.11.1.1.3.1.10	Counter32	read-only	The number of malformed RADIUS Access-Response packets received from this server. Malformed packets include packets with an invalid length. Bad authenticators or Signature attributes or unknown types are not included as malformed access responses.
C32 wwpRadiusClientBadAuthenticators	1.3.6.1.4.1.6141.2.11.1.1.3.1.11	Counter32	read-only	The number of RADIUS Access-Response packets containing invalid authenticators or Signature attributes received from this server.
G32 wwpRadiusClientPendingRequests	1.3.6.1.4.1.6141.2.11.1.1.3.1.12	Gauge32	read-only	The number of RADIUS Access-Request packets destined for this server that have not yet timed out or received a response. This variable is incremented when an Access-Request is sent and decremented due to receipt of an Acess-Accept, Access-Reject or Access-Challenge, a timeout or retransmission.
C32 wwpRadiusClientTimeouts	1.3.6.1.4.1.6141.2.11.1.1.3.1.13	Counter32	read-only	The number of authentication timeouts to this server. After a timeout the client may retry to the same server, send to a different server, or give up. A retry to the same server is counted as a retransmit as well as a timeout. A send to a different server is counted as a Request as well as a timeout.
C32 wwpRadiusClientUnknownTypes	1.3.6.1.4.1.6141.2.11.1.1.3.1.14	Counter32	read-only	The number of RADIUS packets of unknown type which were received from this server on the authentication port.
C32 wwpRadiusClientPacketsDropped	1.3.6.1.4.1.6141.2.11.1.1.3.1.15	Counter32	read-only	The number of RADIUS packets of which were received from this server on the authentication port and dropped for some other reason.
ROW wwpRadiusServerStatus	1.3.6.1.4.1.6141.2.11.1.1.3.1.16	RowStatus	read-create	To create a row in this table, a manager must set this object to either createAndGo(4). A row in the WwpRadiusServerEntry can't be set to active until wwpRadiusServerIpAddr has been set to valid value. To disable a Radius server , the operator can set this object to 'notInSerVice' state.
OCT wwpRadiusClientAuthKey	1.3.6.1.4.1.6141.2.11.1.1.4	OCTET STRING	read-write	The Auth Key to be used for Radius Servers. Retrieving the value of this object via SNMP will return an empty string for security reasons.
wwpRadiusClientMIBNotificationPrefix	1.3.6.1.4.1.6141.2.11.2
wwpRadiusClientMIBNotifications	1.3.6.1.4.1.6141.2.11.2.0
wwpRadiusClientMIBConformance	1.3.6.1.4.1.6141.2.11.3
wwpRadiusClientMIBCompliances	1.3.6.1.4.1.6141.2.11.3.1
wwpRadiusClientMIBGroups	1.3.6.1.4.1.6141.2.11.3.2

RFC description

Configures RADIUS authentication client on World Wide Packets devices including server timeouts and retries.

Start monitoring World Wide Packets network devices, Ciena Ethernet access/aggregation switches (RADIUS request/accept/reject counter status) with a free 30-day trial of IPNetwork Monitor. Import MIBs, browse SNMP OIDs, create custom SNMP monitors, configure alerts, and monitor any SNMP-enabled network device from a single console.

Download WWP-RADIUS-CLIENT-MIB