XEDIA-AUTHENTICATION-MIB

All MIBs › XEDIA-AUTHENTICATION-MIB

Organization: Xedia Corp.

Last Updated: 1998-04-14

Description: Xedia user authentication MIB managing dial-in user accounting, session logging, and authentication configuration for Xedia access devices

Start monitoring vendor-neutral, standards-based MIB, any SNMPv3-capable network device (SNMP engine identity/boot/clock status) with a free 30-day trial of IPNetwork Monitor. Import MIBs, browse SNMP OIDs, create custom SNMP monitors, configure alerts, and monitor any SNMP-enabled network device from a single console.

What Is XEDIA-AUTHENTICATION-MIB?

XEDIA-AUTHENTICATION-MIB is a Xedia Corporation vendor MIB for managing the user authentication mechanism on Xedia access/routing devices, covering dial-in user accounting and authentication configuration. It exposes configuration objects for authentication accounting log size and control, password authentication enable settings, and a set of operational queue objects tracking authentication and accounting request processing. From a software status standpoint it is particularly useful for spotting authentication subsystem problems: a growing gap between expected and enqueued/dequeued authentication requests, or a queue nearing its configured maximum, indicates the authentication service is falling behind or stuck, which would block dial-in users from logging in. It is a self-contained vendor extension focused on Xedia's own authentication process rather than depending on external AAA standards like RADIUS/TACACS+, though it likely interoperates with such backends operationally. It is deployed on Xedia access devices handling dial-in or remote-access user authentication. Engineers can download the XEDIA-AUTHENTICATION-MIB file directly to load it into their MIB browser.

IPNetwork Monitor allows you to monitor SNMP objects defined in XEDIA-AUTHENTICATION-MIB. Use the built-in SNMP Monitoring Browser to explore available variables, view their current values and descriptions, and select the objects you want to monitor. You can then create SNMP monitors, configure thresholds, and receive alerts when monitored values change.

Supported Devices

Xedia access/routing device

Monitoring Examples

An administrator would poll xauthOperAuthQCurr against xauthOperAuthQMax to see how close the authentication request queue is to capacity, and compare xauthOperAuthExpected, xauthOperAuthEnqueued, and xauthOperAuthDequeued to confirm requests are being processed without backlog. A persistently high xauthOperAuthQCurr near xauthOperAuthQMax, combined with xauthOperAuthEnqueued exceeding xauthOperAuthDequeued, would indicate the authentication service is overloaded or stalled. The xauthCfgUserActgSize and xauthCfgUserActgLogControl objects would be checked to confirm accounting log capacity and logging behavior are configured as expected.

What Can Be Monitored

authentication request queue depth vs. maximum
authentication requests expected/enqueued/dequeued
accounting queue depth vs. maximum
user accounting log size and control
password authentication enable status

Imported Objects

From SNMPv2-CONF

MODULE-COMPLIANCE
OBJECT-GROUP

From SNMPv2-SMI

Counter32
Gauge32
Integer32
MODULE-IDENTITY
OBJECT-TYPE
TimeTicks

From SNMPv2-TC

DisplayString
RowStatus

From XEDIA-REG

xediaMibs

OBJECT-IDENTITY

How to Use in IPNetwork Monitor

Example using xauthOperAuthEnqueued OID:

Select a Xedia access/routing device (authentication/accounting request-queue status) as the target host to create a monitor — the SNMP service should be up and running on it. Click New Monitor, then check SNMP Custom on the Favorites tab, click Next, and confirm the host. On the next page, click Select... to open the built-in SNMP MIB Browser and type xauthOperAuthEnqueued into the Find box to locate it in the OID tree, then select it and click OK. The number of requested posted to the Authentication queue. On the monitor's Main parameters page you can set the target's SNMP port (default 161), credentials, polling interval, and other settings — see the SNMP Monitor help for details. On the State conditions and Alerting tabs, configure when the monitor should change state and trigger an alert; since this is a Counter32-type OID, Value bounds is the most useful condition here — trigger an alert if the counter increases sharply between polls relative to its normal baseline, since an unexpected spike often reflects a real change in traffic or activity. Click Finish to create the monitor; you can adjust any parameter later.

OIDs

OID symbolic	OID numeric	Type	Access	Description
xediaAuthenticationMIB	1.3.6.1.4.1.838.3.17			This module defines objects for the management of the User Authentication mechanism in Xedia devices.
xAuthenticationObjects	1.3.6.1.4.1.838.3.17.1
xAuthConfigObjects	1.3.6.1.4.1.838.3.17.1.1
I32 xauthCfgUserActgSize	1.3.6.1.4.1.838.3.17.1.1.1	Integer32	read-write	The configured size of the user accounting list. Changes to this parameter require a node boot to take affect.
BIT xauthCfgUserActgLogControl	1.3.6.1.4.1.838.3.17.1.1.2	Bits	read-write	The preference determining which types of accounting messages will be recorded. The 'logStart' will record all user session 'start' messages. The 'logStop' will record all user session 'stop' messages. And 'logUpdate' will record any update messages that may be sent during a session.
BIT xauthCfgEnableUserPasswordAuth	1.3.6.1.4.1.838.3.17.1.1.3	Bits	read-write	The subsystems expected to perform username-password authentiation for dial-in users.
xAuthOperObjects	1.3.6.1.4.1.838.3.17.1.2
I32 xauthOperUserActgSize	1.3.6.1.4.1.838.3.17.1.2.1	Integer32	read-only	The operational size of the user accounting list.
G32 xauthOperUserActgIndexCurr	1.3.6.1.4.1.838.3.17.1.2.2	Gauge32	read-only	The current index of the accounting list. A zero is used to represent an empty list.
I32 xauthOperAuthQCurr	1.3.6.1.4.1.838.3.17.1.2.3	Integer32	read-only	The current number of elements in the Authentication queue.
G32 xauthOperAuthQMax	1.3.6.1.4.1.838.3.17.1.2.4	Gauge32	read-only	The maximum number of elements in the Authentication queue at one time.
I32 xauthOperAuthExpected	1.3.6.1.4.1.838.3.17.1.2.5	Integer32	read-only	The expected number of elements in the Authentication queue by monitoring the enqueue/dequeue operations.
C32 xauthOperAuthEnqueuedEx	1.3.6.1.4.1.838.3.17.1.2.6	Counter32	read-only	The number of requested posted to the Authentication queue.
C32 xauthOperAuthDequeued	1.3.6.1.4.1.838.3.17.1.2.7	Counter32	read-only	The number of requested removed from the Authentication queue.
I32 xauthOperActgQCurr	1.3.6.1.4.1.838.3.17.1.2.8	Integer32	read-only	The current number of elements in the Accounting queue.
G32 xauthOperActgQMax	1.3.6.1.4.1.838.3.17.1.2.9	Gauge32	read-only	The maximum number of elements in the Accounting queue at one time.
I32 xauthOperActgExpected	1.3.6.1.4.1.838.3.17.1.2.10	Integer32	read-only	The expected number of elements in the Accounting queue by monitoring the enqueue/dequeue operations.
C32 xauthOperActgEnqueued	1.3.6.1.4.1.838.3.17.1.2.11	Counter32	read-only	The number of requested posted to the Accounting queue.
C32 xauthOperActgDequeued	1.3.6.1.4.1.838.3.17.1.2.12	Counter32	read-only	The number of requested removed from the Accounting queue.
I32 xauthOperRespQCurr	1.3.6.1.4.1.838.3.17.1.2.13	Integer32	read-only	The current number of elements in the Response queue.
G32 xauthOperRespQMax	1.3.6.1.4.1.838.3.17.1.2.14	Gauge32	read-only	The maximum number of elements in the Response queue at one time.
I32 xauthOperRespExpected	1.3.6.1.4.1.838.3.17.1.2.15	Integer32	read-only	The expected number of elements in the Response queue by monitoring the enqueue/dequeue operations.
C32 xauthOperRespEnqueued	1.3.6.1.4.1.838.3.17.1.2.16	Counter32	read-only	The number of requested posted to the Response queue.
C32 xauthOperRespDequeued	1.3.6.1.4.1.838.3.17.1.2.17	Counter32	read-only	The number of requested removed from the Response queue.
I32 xauthOperDeleteListCurr	1.3.6.1.4.1.838.3.17.1.2.18	Integer32	read-only	The current number of elements in the Delete List.
G32 xauthOperDeleteListMax	1.3.6.1.4.1.838.3.17.1.2.19	Gauge32	read-only	The maximum number of elements in the Delete List at one time.
I32 xauthOperDeleteExpected	1.3.6.1.4.1.838.3.17.1.2.20	Integer32	read-only	The expected number of elements in the Delete list by monitoring the enqueue/dequeue operations.
C32 xauthOperDeleteEnqueued	1.3.6.1.4.1.838.3.17.1.2.21	Counter32	read-only	The number of requested posted to the Delete list.
C32 xauthOperDeleteDequeued	1.3.6.1.4.1.838.3.17.1.2.22	Counter32	read-only	The number of requested removed from the Delete list.
C32 xauthOperAuthReqTotal	1.3.6.1.4.1.838.3.17.1.2.23	Counter32	read-only	The count of total authentication requests.
C32 xauthOperAuthReqPass	1.3.6.1.4.1.838.3.17.1.2.24	Counter32	read-only	The count of authentication requests that were authenticated.
C32 xauthOperAuthReqFail	1.3.6.1.4.1.838.3.17.1.2.25	Counter32	read-only	The count of total authentication requests that were not authenticated due to timeouts, or rejects.
C32 xauthOperActgReqTotal	1.3.6.1.4.1.838.3.17.1.2.26	Counter32	read-only	The count of total authentication requests.
C32 xauthOperActgResponse	1.3.6.1.4.1.838.3.17.1.2.27	Counter32	read-only	The count of successful accounting responses.
C32 xauthOperActgFail	1.3.6.1.4.1.838.3.17.1.2.28	Counter32	read-only	The count of accounting responses that were not successful.
C32 xauthOperBadRequests	1.3.6.1.4.1.838.3.17.1.2.29	Counter32	read-only	The count of invalid requests from calling applications.
xAuthUsers	1.3.6.1.4.1.838.3.17.1.3
xAuthUserStats	1.3.6.1.4.1.838.3.17.1.3.1
I32 xauthUserUserCount	1.3.6.1.4.1.838.3.17.1.3.1.1	Integer32	read-only	The current number of user entries defined.
xAuthUserTable	1.3.6.1.4.1.838.3.17.1.3.2		not-accessible	The Authentication User table. Remote dial-in clients can be authenticated: locally using an internal database, or externally using a Radius server server. Clients are defined internally in this table. This table can have a special '' entry that defines the default user authentication method and default client group name. The table lookup is always done first. If the client's name is not found a 'default' entry defines an alternative authentication methanism. If the 'default' entry is not defined, and the client is not found in the table, the client is denied access to the network, i.e. IPsec security associations will not be created. If the client's name is found in the table, the xauthUserAuthenProtocol defines which authenication mechanism is to be used. Specific users CAN be excluded by specifying 'always reject' in the authentication protocol. The 'default' user can be set to 'always accept' to allow ALL undefined users to be automatically authenticated. For 'internal authentication', whether through a specific entry, or the default entry, the requested password must match the configured password. ' Remote client example: xauthUserName = xyz@company.com, xauthUserPassword = abc, xauthUserClientGroup = Engineering, xauthUserAuthenProtocol = internalAuthentication.
xAuthUserEntry	1.3.6.1.4.1.838.3.17.1.3.2.1		not-accessible	An entry containing information applicable to a particular User.
STR xauthUserName	1.3.6.1.4.1.838.3.17.1.3.2.1.1	DisplayString	not-accessible	The name of the remote client (like a user name). The name may be of the form User-Name or User-Name@company.com.
STR xauthUserPassword	1.3.6.1.4.1.838.3.17.1.3.2.1.2	DisplayString	read-create	The client's password, an ASCII string. The password is used during 'internal authentication' by comparing it to the password specified by the user.
STR xauthUserClientGroup	1.3.6.1.4.1.838.3.17.1.3.2.1.3	DisplayString	read-create	The client group name in clientGroupTable. For IPSec client connections, this object identifies the IPSec client group tunnel or transport with which the client will be associated.
INT xauthUserAuthenProtocol	1.3.6.1.4.1.838.3.17.1.3.2.1.4	INTEGER	read-create	Defines the method of authentication. Either individual users, or the entry can accomodate various methods of authentication. The 'always reject' will prohibit the corresponding user (specific or default) from ever being authenticated. The use of 'always accept' will always authenticate the corresponding user, regardless of which password was used. 'Internal Authentication' performs password validation for a specific user. 'Radius Authentication' attempts to use a configured Radius server to determine whether or not a user is authenticated.
ROW xauthUserRowStatus	1.3.6.1.4.1.838.3.17.1.3.2.1.5	RowStatus	read-create	This object allows entries to be created and deleted in this table.
xAuthUserActgTable	1.3.6.1.4.1.838.3.17.1.3.3		not-accessible
xAuthUserActgEntry	1.3.6.1.4.1.838.3.17.1.3.3.1		not-accessible	An entry containing additional management information
I32 xauthUserActgIndex	1.3.6.1.4.1.838.3.17.1.3.3.1.1	Integer32	not-accessible	The numeric index into the circular list which represents the tunnel entries in the order inwhich they were created. The list is of a limited length, as configured by the object 'xauthCfgUserActgSize', and the list wraps with the oldest entries being replaced with the newest entries.
STR xauthUserActgName	1.3.6.1.4.1.838.3.17.1.3.3.1.2	DisplayString	read-only	The username associated with the particular accounting record.
INT xauthUserActgRecordType	1.3.6.1.4.1.838.3.17.1.3.3.1.3	INTEGER	read-only	The record type of the recorded accounting entry. The start/stop messages mark the beginning and ending of a user session. The update messages are periodic statistics update messages that MAY be used by some of the internal application. These update messages are optional.
STR xauthUserActgTunnelInfo	1.3.6.1.4.1.838.3.17.1.3.3.1.4	DisplayString	read-only	The additional tunnel and interface information associated with the particular accounting record.
STR xauthUserActgSessionID	1.3.6.1.4.1.838.3.17.1.3.3.1.5	DisplayString	read-only	The unique identification string of the session.
TIK xauthUserActgStartTime	1.3.6.1.4.1.838.3.17.1.3.3.1.6	TimeTicks	read-only	The value of sysUpTime (rounded to the full second value) at the creation of the session.
TIK xauthUserActgEndTime	1.3.6.1.4.1.838.3.17.1.3.3.1.7	TimeTicks	read-only	The value of sysUpTime (rounded to the full second value) at the termination of the session.
C32 xauthUserActgSessionTime	1.3.6.1.4.1.838.3.17.1.3.3.1.8	Counter32	read-only	The number of seconds representing the duration of the session.
C32 xauthUserActgRxBytes	1.3.6.1.4.1.838.3.17.1.3.3.1.9	Counter32	read-only	The number of bytes received during the particular session.
C32 xauthUserActgTxBytes	1.3.6.1.4.1.838.3.17.1.3.3.1.10	Counter32	read-only	The number of bytes transmitted during the particular session.
C32 xauthUserActgRxPkts	1.3.6.1.4.1.838.3.17.1.3.3.1.11	Counter32	read-only	The number of packets received during the particular session.
C32 xauthUserActgTxPkts	1.3.6.1.4.1.838.3.17.1.3.3.1.12	Counter32	read-only	The number of packets transmitted during the particular session.
xAuthDebugUserObjects	1.3.6.1.4.1.838.3.17.1.4
STR xauthDebugUserName	1.3.6.1.4.1.838.3.17.1.4.1	DisplayString	read-write	The user name identifying which user is being debugged.
xAuthDebugUserTable	1.3.6.1.4.1.838.3.17.1.4.2		not-accessible	The Authentication Debug User table.
xAuthDebugUserEntry	1.3.6.1.4.1.838.3.17.1.4.2.1		not-accessible	An entry containing debug information applicable to a particular User.
I32 xauthDebugUserIndex	1.3.6.1.4.1.838.3.17.1.4.2.1.1	Integer32	not-accessible	The index into the display table of debug information.
STR xauthDebugUserRequest	1.3.6.1.4.1.838.3.17.1.4.2.1.2	DisplayString	read-only	Debug information related to the last request of the user currently being debugged.
STR xauthDebugUserResponse	1.3.6.1.4.1.838.3.17.1.4.2.1.3	DisplayString	read-only	Debug information related to the last response of the user currently being debugged.
STR xauthDebugUserAppRequest	1.3.6.1.4.1.838.3.17.1.4.2.1.4	DisplayString	read-only	Debug information related to the application's view of the request (prior to it being issued) of the user currently being debugged.
xAuthenticationConformance	1.3.6.1.4.1.838.3.17.2
xauthCompliances	1.3.6.1.4.1.838.3.17.2.1
xauthCompliance	1.3.6.1.4.1.838.3.17.2.1.1			The compliance statement for all agents that support this MIB. A compliant agent implements all objects defined in this MIB.
xauthGroups	1.3.6.1.4.1.838.3.17.2.2
xauthAllGroup	1.3.6.1.4.1.838.3.17.2.2.1			The set of all accessible objects in this MIB.

RFC description

Xedia vendor-private MIB for authentication method configuration and statistics on Xedia access routers.

Start monitoring Xedia access/routing device (authentication/accounting request-queue status) with a free 30-day trial of IPNetwork Monitor. Import MIBs, browse SNMP OIDs, create custom SNMP monitors, configure alerts, and monitor any SNMP-enabled network device from a single console.

Download XEDIA-AUTHENTICATION-MIB