XEDIA-RADIUS-MIB

All MIBs › XEDIA-RADIUS-MIB

Organization: Xedia Corp.

Last Updated: 1998-04-14

Category: Xedia Enterprise Networking

Description: Monitors Xedia Corp. RADIUS authentication and accounting server interactions, response times, and failures.

Start monitoring vendor-neutral, standards-based MIB, any SNMPv3-capable network device (SNMP engine identity/boot/clock status) with a free 30-day trial of IPNetwork Monitor. Import MIBs, browse SNMP OIDs, create custom SNMP monitors, configure alerts, and monitor any SNMP-enabled network device from a single console.

What Is XEDIA-RADIUS-MIB?

XEDIA-RADIUS-MIB is a Xedia Corporation vendor extension covering management of RADIUS client functionality on Xedia devices, supplementing the proposed IETF RADIUS drafts of the time. It exposes both administrative configuration objects (admin auth/accounting status, NAS ID/IP, background timer, max outstanding requests) and parallel operational objects reporting the actual runtime auth/accounting status and general errors. Its monitoring focus is squarely on RADIUS service software status: comparing administrative settings against operational status reveals whether authentication or accounting is actually running, and the general-error counter flags requests that are failing. The module explicitly states it adds to what is defined in the proposed RADIUS drafts rather than being a standalone protocol implementation. It is deployed on Xedia WAN access routers that authenticate dial-in or PPP sessions against a centralized RADIUS server. Engineers can download the XEDIA-RADIUS-MIB file directly to load it into their MIB browser.

IPNetwork Monitor allows you to monitor SNMP objects defined in XEDIA-RADIUS-MIB. Use the built-in SNMP Monitoring Browser to explore available variables, view their current values and descriptions, and select the objects you want to monitor. You can then create SNMP monitors, configure thresholds, and receive alerts when monitored values change.

Supported Devices

Xedia WAN access router

Monitoring Examples

An operator would compare xradiuscAdminAuthStatus/xradiuscAdminActgStatus against xradiuscOperAuthStatus/xradiuscOperActgStatus to detect a service that is administratively enabled but not actually operating, and monitor xradiuscOperGenErrors alongside xradiuscOperNasIP to identify a RADIUS server that has become unreachable or is rejecting requests.

What Can Be Monitored

RADIUS admin/operational authentication status
RADIUS admin/operational accounting status
NAS ID/IP configuration
outstanding request limit
RADIUS general error count

Imported Objects

From RADIUS-ACC-CLIENT-MIB

radiusAccServerEntry

OBJECT-TYPE

From RADIUS-AUTH-CLIENT-MIB

radiusAuthServerEntry

OBJECT-TYPE

From SNMPv2-CONF

MODULE-COMPLIANCE
OBJECT-GROUP

From SNMPv2-SMI

Counter32
Gauge32
Integer32
IpAddress
MODULE-IDENTITY
OBJECT-TYPE
TimeTicks

From SNMPv2-TC

DisplayString
RowStatus

From XEDIA-REG

xediaMibs

OBJECT-IDENTITY

How to Use in IPNetwork Monitor

Example using xradiuscOperGenErrors OID:

Select a Xedia WAN access router (RADIUS admin-vs-operational auth/accounting status) as the target host to create a monitor — the SNMP service should be up and running on it. Click New Monitor, then check SNMP Custom on the Favorites tab, click Next, and confirm the host. On the next page, click Select... to open the built-in SNMP MIB Browser and type xradiuscOperGenErrors into the Find box to locate it in the OID tree, then select it and click OK. The number of general errors encounted by the Radius Client Task. On the monitor's Main parameters page you can set the target's SNMP port (default 161), credentials, polling interval, and other settings — see the SNMP Monitor help for details. On the State conditions and Alerting tabs, configure when the monitor should change state and trigger an alert; since this is a Counter32-type OID, Value bounds is the most useful condition here — trigger an alert if the counter increases between polls, since a rising count of errors, failures, or discards often points to a real underlying problem. Click Finish to create the monitor; you can adjust any parameter later.

OIDs

OID symbolic	OID numeric	Type	Access	Description
xediaRadiusMIB	1.3.6.1.4.1.838.3.16			This module defines additional objects for management of Radius in Xedia devices, above and beyond what is defined in the proposed drafts.
xRadiusObjects	1.3.6.1.4.1.838.3.16.1
xRadiuscObjects	1.3.6.1.4.1.838.3.16.1.1
xRadiuscGlobal	1.3.6.1.4.1.838.3.16.1.1.1
xRadiuscGlobalCfg	1.3.6.1.4.1.838.3.16.1.1.1.1
INT xradiuscAdminAuthStatus	1.3.6.1.4.1.838.3.16.1.1.1.1.1	INTEGER	read-write	The administrative status of Radius Authentication in the router. Changing this parameter may require a node boot to take affect.
INT xradiuscAdminActgStatus	1.3.6.1.4.1.838.3.16.1.1.1.1.2	INTEGER	read-write	The administrative status of Radius Accounting in the router. Changing this parameter may require a node boot to take affect.
STR xradiuscDebugCmd	1.3.6.1.4.1.838.3.16.1.1.1.1.3	DisplayString	read-write	The control for dumping in/out radius packets, and error/trace messages to the console. Although the summary of commands is displayed when read, command modifications must be done one at a time.
STR xradiuscNasId	1.3.6.1.4.1.838.3.16.1.1.1.1.4	DisplayString	read-write	The NAS ID assigned to this node.
IP xradiuscNasIP	1.3.6.1.4.1.838.3.16.1.1.1.1.5	IpAddress	read-write	The NAS IP Address assigned to this node.
INT xradiuscBackgroundTimer	1.3.6.1.4.1.838.3.16.1.1.1.1.6	INTEGER	read-write	The number of seconds inwhich the background task will perform cleanup.
INT xradiuscMaxOutstanding	1.3.6.1.4.1.838.3.16.1.1.1.1.7	INTEGER	read-write	The maximum number of outstanding resquests.
xRadiuscGlobalStat	1.3.6.1.4.1.838.3.16.1.1.1.2
INT xradiuscOperAuthStatus	1.3.6.1.4.1.838.3.16.1.1.1.2.1	INTEGER	read-only	The ccurrent operational state of Radius Authentication on the router.
INT xradiuscOperActgStatus	1.3.6.1.4.1.838.3.16.1.1.1.2.2	INTEGER	read-only	The ccurrent operational state of Radius Accounting on the router.
STR xradiuscOperNasId	1.3.6.1.4.1.838.3.16.1.1.1.2.3	DisplayString	read-only	The NAS ID assigned to this node.
IP xradiuscOperNasIP	1.3.6.1.4.1.838.3.16.1.1.1.2.4	IpAddress	read-only	The NAS IP Address currently being used.
C32 xradiuscOperGenErrorsEx	1.3.6.1.4.1.838.3.16.1.1.1.2.5	Counter32	read-only	The number of general errors encounted by the Radius Client Task.
I32 xradiuscOperAuthQCurr	1.3.6.1.4.1.838.3.16.1.1.1.2.6	Integer32	read-only	The current number of elements in the Authentication queue.
G32 xradiuscOperAuthQMax	1.3.6.1.4.1.838.3.16.1.1.1.2.7	Gauge32	read-only	The maximum number of elements in the Authentication queue at one time.
I32 xradiuscOperAuthExpected	1.3.6.1.4.1.838.3.16.1.1.1.2.8	Integer32	read-only	The expected number of elements in the Authentication queue by monitoring the enqueue/dequeue operations.
C32 xradiuscOperAuthEnqueued	1.3.6.1.4.1.838.3.16.1.1.1.2.9	Counter32	read-only	The number of requested posted to the Authentication queue.
C32 xradiuscOperAuthDequeued	1.3.6.1.4.1.838.3.16.1.1.1.2.10	Counter32	read-only	The number of requested removed from the Authentication queue.
I32 xradiuscOperActgQCurr	1.3.6.1.4.1.838.3.16.1.1.1.2.11	Integer32	read-only	The current number of elements in the Accounting queue.
G32 xradiuscOperActgQMax	1.3.6.1.4.1.838.3.16.1.1.1.2.12	Gauge32	read-only	The maximum number of elements in the Accounting queue at one time.
I32 xradiuscOperActgExpected	1.3.6.1.4.1.838.3.16.1.1.1.2.13	Integer32	read-only	The expected number of elements in the Accounting queue by monitoring the enqueue/dequeue operations.
C32 xradiuscOperActgEnqueued	1.3.6.1.4.1.838.3.16.1.1.1.2.14	Counter32	read-only	The number of requested posted to the Accounting queue.
C32 xradiuscOperActgDequeued	1.3.6.1.4.1.838.3.16.1.1.1.2.15	Counter32	read-only	The number of requested removed from the Accounting queue.
I32 xradiuscOperPendingListCurr	1.3.6.1.4.1.838.3.16.1.1.1.2.16	Integer32	read-only	The current number of Authentication and Accounting requests Pending.
G32 xradiuscOperPendingListMax	1.3.6.1.4.1.838.3.16.1.1.1.2.17	Gauge32	read-only	The maximum number of Authentication and Accounting requests Pending at one time.
I32 xradiuscOperPendingExpected	1.3.6.1.4.1.838.3.16.1.1.1.2.18	Integer32	read-only	The expected number of elements in the Pending list by monitoring the enqueue/dequeue operations.
C32 xradiuscOperPendingEnqueued	1.3.6.1.4.1.838.3.16.1.1.1.2.19	Counter32	read-only	The number of requested posted to the Pending list.
C32 xradiuscOperPendingDequeued	1.3.6.1.4.1.838.3.16.1.1.1.2.20	Counter32	read-only	The number of requested removed from the Pending list.
I32 xradiuscOperLastPktID	1.3.6.1.4.1.838.3.16.1.1.1.2.21	Integer32	read-only	The last Packet ID that was used.
I32 xradiuscOperNextPktID	1.3.6.1.4.1.838.3.16.1.1.1.2.22	Integer32	read-only	The next Packet ID that will most likely be used.
I32 xradiuscOperLastAuthIndex	1.3.6.1.4.1.838.3.16.1.1.1.2.23	Integer32	read-only	The index of the last authentication server used.
I32 xradiuscOperLastActgIndex	1.3.6.1.4.1.838.3.16.1.1.1.2.24	Integer32	read-only	The index of the last accounting server used.
xRadiuscAuthentication	1.3.6.1.4.1.838.3.16.1.1.2
xRadiuscAuthSvrTable	1.3.6.1.4.1.838.3.16.1.1.2.1		not-accessible	A list of Radius Client Authentication Server entries.
xRadiuscAuthSvrEntry	1.3.6.1.4.1.838.3.16.1.1.2.1.1		not-accessible	An entry containing additional management information applicable to a particular Radius Client Authentication Server.
IP xradiuscAuthSvrIpAddress	1.3.6.1.4.1.838.3.16.1.1.2.1.1.1	IpAddress	read-create	The IP Address of the specified Authentication Server. If this address is configured, it is used exclusively to communicate with this server.
STR xradiuscAuthSvrName	1.3.6.1.4.1.838.3.16.1.1.2.1.1.2	DisplayString	read-create	The name identifying the specified Authentication Server. If no IP Address is configured, then this name MAY be used during a DNS lookup.
INT xradiuscAuthSvrPort	1.3.6.1.4.1.838.3.16.1.1.2.1.1.3	INTEGER	read-create	The udp port number that the specified Authentication Server is listening for requests.
INT xradiuscAuthSvrTimeout	1.3.6.1.4.1.838.3.16.1.1.2.1.1.4	INTEGER	read-create	The number of seconds to wait for a response to a resquests.
INT xradiuscAuthSvrRetries	1.3.6.1.4.1.838.3.16.1.1.2.1.1.5	INTEGER	read-create	The number of times to resend the server a requests when no response has been received.
INT xradiuscAuthSvrPriority	1.3.6.1.4.1.838.3.16.1.1.2.1.1.6	INTEGER	read-create	The priority assigned to this server. Lowest priority servers are used first. In the case of multiple servers having the same priority, they will be used in a round- robin fashion when their priority is the highest of the available servers.
STR xradiuscAuthSvrSecretKey	1.3.6.1.4.1.838.3.16.1.1.2.1.1.7	DisplayString	read-create	The shared secret key associated with the specified server. It is used to 'hide' user passwords and authenticate requests and responses. When this object is read from a non-superuser, '--------' is returned in order to maintain security.
INT xradiuscAuthSvrVendorOffset	1.3.6.1.4.1.838.3.16.1.1.2.1.1.8	INTEGER	read-create	The offset used to assign Vendor Specific attribute IDs to the standard attribute number space. Setting this value to 0, forces the encoding of Vendor Specific attributes within the Vendor's number space, using the standard 'Vendor-Specific' attribute. Setting this to a non-zero value uses standard attribute encoding, with the Vendor Specific Base for the attributes beginning with this offset.
IP xradiuscAuthSvrOperIpAddress	1.3.6.1.4.1.838.3.16.1.1.2.1.1.9	IpAddress	read-only	The IP Address currently being used to communicate the specified Authentication server.
INT xradiuscAuthSvrOperState	1.3.6.1.4.1.838.3.16.1.1.2.1.1.10	INTEGER	read-only	The operational state of the specified Authentication server. The 'unknown' state will be set periodically to allow 'notResponding' servers to be retried after a period of time.
TIK xradiuscAuthSvrOperStateChange	1.3.6.1.4.1.838.3.16.1.1.2.1.1.11	TimeTicks	read-only	The value of sysUpTime when the Authentication server last changed state.
C32 xradiuscAuthSvrOperBadPktIds	1.3.6.1.4.1.838.3.16.1.1.2.1.1.12	Counter32	read-only	The count of unexpected Packet IDs received on this port.
C32 xradiuscAuthSvrOperRxErrors	1.3.6.1.4.1.838.3.16.1.1.2.1.1.13	Counter32	read-only	The count of general Receive errors encountered by this server
C32 xradiuscAuthSvrOperTxErrors	1.3.6.1.4.1.838.3.16.1.1.2.1.1.14	Counter32	read-only	The count of general Transmit errors encountered by this server
ROW xradiuscAuthSvrRowStatus	1.3.6.1.4.1.838.3.16.1.1.2.1.1.15	RowStatus	read-create	This variable displays the status of the entry. Setting it to 'destroy' marks the entry as removed. Eventually, when no other applications depend on that particular resource, it will be completely removed from the table. Setting it to either 'create', or 'active' will add a row to the table.
xRadiuscAccounting	1.3.6.1.4.1.838.3.16.1.1.3
xRadiuscActgSvrTable	1.3.6.1.4.1.838.3.16.1.1.3.1		not-accessible	A list of Radius Client Accounting Server entries.
xRadiuscActgSvrEntry	1.3.6.1.4.1.838.3.16.1.1.3.1.1		not-accessible	An entry containing additional management information applicable to a particular Radius Client Accounting Server.
IP xradiuscActgSvrIpAddress	1.3.6.1.4.1.838.3.16.1.1.3.1.1.1	IpAddress	read-create	The IP Address of the specified Accounting Server. If this address is configured, it is used exclusively to communicate with this server.
STR xradiuscActgSvrName	1.3.6.1.4.1.838.3.16.1.1.3.1.1.2	DisplayString	read-create	The name identifying the specified Accounting Server. If no IP Address is configured, then this name MAY be used during a DNS lookup.
INT xradiuscActgSvrPort	1.3.6.1.4.1.838.3.16.1.1.3.1.1.3	INTEGER	read-create	The udp port number that the specified Accounting Server is listening for requests.
INT xradiuscActgSvrTimeout	1.3.6.1.4.1.838.3.16.1.1.3.1.1.4	INTEGER	read-create	The number of seconds to wait for a response to a resquests.
INT xradiuscActgSvrRetries	1.3.6.1.4.1.838.3.16.1.1.3.1.1.5	INTEGER	read-create	The number of times to resend the server a requests when no response has been received.
INT xradiuscActgSvrPriority	1.3.6.1.4.1.838.3.16.1.1.3.1.1.6	INTEGER	read-create	The priority assigned to this server. Lowest priority servers are used first. In the case of multiple servers having the same priority, they will be used in a round- robin fashion when their priority is the highest of the available servers.
STR xradiuscActgSvrSecretKey	1.3.6.1.4.1.838.3.16.1.1.3.1.1.7	DisplayString	read-create	The shared secret key associated with the specified server. It is used to authenticate requests and responses. When this object is read from a non-superuser, '--------' is returned in order to maintain security.
INT xradiuscActgSvrVendorOffset	1.3.6.1.4.1.838.3.16.1.1.3.1.1.8	INTEGER	read-create	The offset used to assign Vendor Specific attribute IDs to the standard attribute number space. Setting this value to 0, forces the encoding of Vendor Specific attributes within the Vendor's number space, using the standard 'Vendor-Specific' attribute. Setting this to a non-zero value uses standard attribute encoding, with the Vendor Specific Base for the attributes beginning with this offset.
IP xradiuscActgSvrOperIpAddress	1.3.6.1.4.1.838.3.16.1.1.3.1.1.9	IpAddress	read-only	The IP Address currently being used to communicate the specified Accounting server.
INT xradiuscActgSvrOperState	1.3.6.1.4.1.838.3.16.1.1.3.1.1.10	INTEGER	read-only	The operational state of the specified Accounting server. The 'unknown' state will be set periodically to allow 'notResponding' servers to be retried after a period of time.
TIK xradiuscActgSvrOperStateChange	1.3.6.1.4.1.838.3.16.1.1.3.1.1.11	TimeTicks	read-only	The value of sysUpTime when the Accounting server last changed state.
C32 xradiuscActgSvrOperBadPktIds	1.3.6.1.4.1.838.3.16.1.1.3.1.1.12	Counter32	read-only	The count of unexpected Packet IDs received on this port.
C32 xradiuscActgSvrOperRxErrors	1.3.6.1.4.1.838.3.16.1.1.3.1.1.13	Counter32	read-only	The count of general Receive errors encountered by this server
C32 xradiuscActgSvrOperTxErrors	1.3.6.1.4.1.838.3.16.1.1.3.1.1.14	Counter32	read-only	The count of general Transmit errors encountered by this server
ROW xradiuscActgSvrRowStatus	1.3.6.1.4.1.838.3.16.1.1.3.1.1.15	RowStatus	read-create	This variable displays the status of the entry. Setting it to 'destroy' marks the entry as removed. Eventually, when no other applications depend on that particular resource, it will be completely removed from the table. Setting it to either 'create', or 'active' will add a row to the table.
xRadiusConformance	1.3.6.1.4.1.838.3.16.2
xradiusCompliances	1.3.6.1.4.1.838.3.16.2.1
xradiusCompliance	1.3.6.1.4.1.838.3.16.2.1.1			The compliance statement for all agents that support this MIB. A compliant agent implements all objects defined in this MIB.
xradiusGroups	1.3.6.1.4.1.838.3.16.2.2
xradiusAllGroup	1.3.6.1.4.1.838.3.16.2.2.1			The set of all accessible objects in this MIB.

RFC description

Manages RADIUS authentication and accounting client configuration on Xedia routing devices.

Start monitoring Xedia WAN access router (RADIUS admin-vs-operational auth/accounting status) with a free 30-day trial of IPNetwork Monitor. Import MIBs, browse SNMP OIDs, create custom SNMP monitors, configure alerts, and monitor any SNMP-enabled network device from a single console.

Download XEDIA-RADIUS-MIB