XEDIA-RADIUS-MIB

MIB Reference — IPNetwork Monitor

All MIBsXEDIA-RADIUS-MIB

Organization: Xedia Corp.

Last Updated: 1998-04-14

Category: Xedia Enterprise Networking

Description:

Monitors Xedia Corp. RADIUS authentication and accounting server interactions, response times, and failures.

Imported Objects

From RADIUS-ACC-CLIENT-MIB

radiusAccServerEntryOBJECT-TYPE

From RADIUS-AUTH-CLIENT-MIB

radiusAuthServerEntryOBJECT-TYPE

From SNMPv2-CONF

MODULE-COMPLIANCE
OBJECT-GROUP

From SNMPv2-SMI

Counter32
Gauge32
Integer32
IpAddress
MODULE-IDENTITY
OBJECT-TYPE
TimeTicks

From SNMPv2-TC

DisplayString
RowStatus

From XEDIA-REG

xediaMibsOBJECT-IDENTITY

What Is XEDIA-RADIUS-MIB?

XEDIA-RADIUS-MIB is a Xedia Corporation vendor extension covering management of RADIUS client functionality on Xedia devices, supplementing the proposed IETF RADIUS drafts of the time. It exposes both administrative configuration objects (admin auth/accounting status, NAS ID/IP, background timer, max outstanding requests) and parallel operational objects reporting the actual runtime auth/accounting status and general errors. Its monitoring focus is squarely on RADIUS service software status: comparing administrative settings against operational status reveals whether authentication or accounting is actually running, and the general-error counter flags requests that are failing. The module explicitly states it adds to what is defined in the proposed RADIUS drafts rather than being a standalone protocol implementation. It is deployed on Xedia WAN access routers that authenticate dial-in or PPP sessions against a centralized RADIUS server. Engineers can download the XEDIA-RADIUS-MIB file directly to load it into their MIB browser.

IPNetwork Monitor allows you to monitor SNMP objects defined in XEDIA-RADIUS-MIB. Use the built-in SNMP Monitoring Browser to explore available variables, view their current values and descriptions, and select the objects you want to monitor. You can then create SNMP monitors, configure thresholds, and receive alerts when monitored values change.

What Can Be Monitored

  • RADIUS admin/operational authentication status
  • RADIUS admin/operational accounting status
  • NAS ID/IP configuration
  • outstanding request limit
  • RADIUS general error count

Supported Devices

  • Xedia WAN access router

Monitoring Examples

An operator would compare xradiuscAdminAuthStatus/xradiuscAdminActgStatus against xradiuscOperAuthStatus/xradiuscOperActgStatus to detect a service that is administratively enabled but not actually operating, and monitor xradiuscOperGenErrors alongside xradiuscOperNasIP to identify a RADIUS server that has become unreachable or is rejecting requests.

OIDs
OID symbolicOID numericTypeAccessDescription
xediaRadiusMIB1.3.6.1.4.1.838.3.16This module defines additional objects for management of Radius in Xedia devices, above and beyond what is defined in the proposed drafts.
xRadiusObjects1.3.6.1.4.1.838.3.16.1
xRadiuscObjects1.3.6.1.4.1.838.3.16.1.1
xRadiuscGlobal1.3.6.1.4.1.838.3.16.1.1.1
xRadiuscGlobalCfg1.3.6.1.4.1.838.3.16.1.1.1.1
INT xradiuscAdminAuthStatus1.3.6.1.4.1.838.3.16.1.1.1.1.1INTEGERread-writeThe administrative status of Radius Authentication in the router. Changing this parameter may require a node boot to take affect.
INT xradiuscAdminActgStatus1.3.6.1.4.1.838.3.16.1.1.1.1.2INTEGERread-writeThe administrative status of Radius Accounting in the router. Changing this parameter may require a node boot to take affect.
STR xradiuscDebugCmd1.3.6.1.4.1.838.3.16.1.1.1.1.3DisplayStringread-writeThe control for dumping in/out radius packets, and error/trace messages to the console. Although the summary of commands is displayed when read, command modifications must be done one at a time.
STR xradiuscNasId1.3.6.1.4.1.838.3.16.1.1.1.1.4DisplayStringread-writeThe NAS ID assigned to this node.
IP xradiuscNasIP1.3.6.1.4.1.838.3.16.1.1.1.1.5IpAddressread-writeThe NAS IP Address assigned to this node.
INT xradiuscBackgroundTimer1.3.6.1.4.1.838.3.16.1.1.1.1.6INTEGERread-writeThe number of seconds inwhich the background task will perform cleanup.
INT xradiuscMaxOutstanding1.3.6.1.4.1.838.3.16.1.1.1.1.7INTEGERread-writeThe maximum number of outstanding resquests.
xRadiuscGlobalStat1.3.6.1.4.1.838.3.16.1.1.1.2
INT xradiuscOperAuthStatus1.3.6.1.4.1.838.3.16.1.1.1.2.1INTEGERread-onlyThe ccurrent operational state of Radius Authentication on the router.
INT xradiuscOperActgStatus1.3.6.1.4.1.838.3.16.1.1.1.2.2INTEGERread-onlyThe ccurrent operational state of Radius Accounting on the router.
STR xradiuscOperNasId1.3.6.1.4.1.838.3.16.1.1.1.2.3DisplayStringread-onlyThe NAS ID assigned to this node.
IP xradiuscOperNasIP1.3.6.1.4.1.838.3.16.1.1.1.2.4IpAddressread-onlyThe NAS IP Address currently being used.
C32 xradiuscOperGenErrors1.3.6.1.4.1.838.3.16.1.1.1.2.5Counter32read-onlyThe number of general errors encounted by the Radius Client Task.
I32 xradiuscOperAuthQCurr1.3.6.1.4.1.838.3.16.1.1.1.2.6Integer32read-onlyThe current number of elements in the Authentication queue.
G32 xradiuscOperAuthQMax1.3.6.1.4.1.838.3.16.1.1.1.2.7Gauge32read-onlyThe maximum number of elements in the Authentication queue at one time.
I32 xradiuscOperAuthExpected1.3.6.1.4.1.838.3.16.1.1.1.2.8Integer32read-onlyThe expected number of elements in the Authentication queue by monitoring the enqueue/dequeue operations.
C32 xradiuscOperAuthEnqueued1.3.6.1.4.1.838.3.16.1.1.1.2.9Counter32read-onlyThe number of requested posted to the Authentication queue.
C32 xradiuscOperAuthDequeued1.3.6.1.4.1.838.3.16.1.1.1.2.10Counter32read-onlyThe number of requested removed from the Authentication queue.
I32 xradiuscOperActgQCurr1.3.6.1.4.1.838.3.16.1.1.1.2.11Integer32read-onlyThe current number of elements in the Accounting queue.
G32 xradiuscOperActgQMax1.3.6.1.4.1.838.3.16.1.1.1.2.12Gauge32read-onlyThe maximum number of elements in the Accounting queue at one time.
I32 xradiuscOperActgExpected1.3.6.1.4.1.838.3.16.1.1.1.2.13Integer32read-onlyThe expected number of elements in the Accounting queue by monitoring the enqueue/dequeue operations.
C32 xradiuscOperActgEnqueued1.3.6.1.4.1.838.3.16.1.1.1.2.14Counter32read-onlyThe number of requested posted to the Accounting queue.
C32 xradiuscOperActgDequeued1.3.6.1.4.1.838.3.16.1.1.1.2.15Counter32read-onlyThe number of requested removed from the Accounting queue.
I32 xradiuscOperPendingListCurr1.3.6.1.4.1.838.3.16.1.1.1.2.16Integer32read-onlyThe current number of Authentication and Accounting requests Pending.
G32 xradiuscOperPendingListMax1.3.6.1.4.1.838.3.16.1.1.1.2.17Gauge32read-onlyThe maximum number of Authentication and Accounting requests Pending at one time.
I32 xradiuscOperPendingExpected1.3.6.1.4.1.838.3.16.1.1.1.2.18Integer32read-onlyThe expected number of elements in the Pending list by monitoring the enqueue/dequeue operations.
C32 xradiuscOperPendingEnqueued1.3.6.1.4.1.838.3.16.1.1.1.2.19Counter32read-onlyThe number of requested posted to the Pending list.
C32 xradiuscOperPendingDequeued1.3.6.1.4.1.838.3.16.1.1.1.2.20Counter32read-onlyThe number of requested removed from the Pending list.
I32 xradiuscOperLastPktID1.3.6.1.4.1.838.3.16.1.1.1.2.21Integer32read-onlyThe last Packet ID that was used.
I32 xradiuscOperNextPktID1.3.6.1.4.1.838.3.16.1.1.1.2.22Integer32read-onlyThe next Packet ID that will most likely be used.
I32 xradiuscOperLastAuthIndex1.3.6.1.4.1.838.3.16.1.1.1.2.23Integer32read-onlyThe index of the last authentication server used.
I32 xradiuscOperLastActgIndex1.3.6.1.4.1.838.3.16.1.1.1.2.24Integer32read-onlyThe index of the last accounting server used.
xRadiuscAuthentication1.3.6.1.4.1.838.3.16.1.1.2
xRadiuscAuthSvrTable1.3.6.1.4.1.838.3.16.1.1.2.1not-accessibleA list of Radius Client Authentication Server entries.
xRadiuscAuthSvrEntry1.3.6.1.4.1.838.3.16.1.1.2.1.1not-accessibleAn entry containing additional management information applicable to a particular Radius Client Authentication Server.
IP xradiuscAuthSvrIpAddress1.3.6.1.4.1.838.3.16.1.1.2.1.1.1IpAddressread-createThe IP Address of the specified Authentication Server. If this address is configured, it is used exclusively to communicate with this server.
STR xradiuscAuthSvrName1.3.6.1.4.1.838.3.16.1.1.2.1.1.2DisplayStringread-createThe name identifying the specified Authentication Server. If no IP Address is configured, then this name MAY be used during a DNS lookup.
INT xradiuscAuthSvrPort1.3.6.1.4.1.838.3.16.1.1.2.1.1.3INTEGERread-createThe udp port number that the specified Authentication Server is listening for requests.
INT xradiuscAuthSvrTimeout1.3.6.1.4.1.838.3.16.1.1.2.1.1.4INTEGERread-createThe number of seconds to wait for a response to a resquests.
INT xradiuscAuthSvrRetries1.3.6.1.4.1.838.3.16.1.1.2.1.1.5INTEGERread-createThe number of times to resend the server a requests when no response has been received.
INT xradiuscAuthSvrPriority1.3.6.1.4.1.838.3.16.1.1.2.1.1.6INTEGERread-createThe priority assigned to this server. Lowest priority servers are used first. In the case of multiple servers having the same priority, they will be used in a round- robin fashion when their priority is the highest of the available servers.
STR xradiuscAuthSvrSecretKey1.3.6.1.4.1.838.3.16.1.1.2.1.1.7DisplayStringread-createThe shared secret key associated with the specified server. It is used to 'hide' user passwords and authenticate requests and responses. When this object is read from a non-superuser, '--------' is returned in order to maintain security.
INT xradiuscAuthSvrVendorOffset1.3.6.1.4.1.838.3.16.1.1.2.1.1.8INTEGERread-createThe offset used to assign Vendor Specific attribute IDs to the standard attribute number space. Setting this value to 0, forces the encoding of Vendor Specific attributes within the Vendor's number space, using the standard 'Vendor-Specific' attribute. Setting this to a non-zero value uses standard attribute encoding, with the Vendor Specific Base for the attributes beginning with this offset.
IP xradiuscAuthSvrOperIpAddress1.3.6.1.4.1.838.3.16.1.1.2.1.1.9IpAddressread-onlyThe IP Address currently being used to communicate the specified Authentication server.
INT xradiuscAuthSvrOperState1.3.6.1.4.1.838.3.16.1.1.2.1.1.10INTEGERread-onlyThe operational state of the specified Authentication server. The 'unknown' state will be set periodically to allow 'notResponding' servers to be retried after a period of time.
TIK xradiuscAuthSvrOperStateChange1.3.6.1.4.1.838.3.16.1.1.2.1.1.11TimeTicksread-onlyThe value of sysUpTime when the Authentication server last changed state.
C32 xradiuscAuthSvrOperBadPktIds1.3.6.1.4.1.838.3.16.1.1.2.1.1.12Counter32read-onlyThe count of unexpected Packet IDs received on this port.
C32 xradiuscAuthSvrOperRxErrors1.3.6.1.4.1.838.3.16.1.1.2.1.1.13Counter32read-onlyThe count of general Receive errors encountered by this server
C32 xradiuscAuthSvrOperTxErrors1.3.6.1.4.1.838.3.16.1.1.2.1.1.14Counter32read-onlyThe count of general Transmit errors encountered by this server
ROW xradiuscAuthSvrRowStatus1.3.6.1.4.1.838.3.16.1.1.2.1.1.15RowStatusread-createThis variable displays the status of the entry. Setting it to 'destroy' marks the entry as removed. Eventually, when no other applications depend on that particular resource, it will be completely removed from the table. Setting it to either 'create', or 'active' will add a row to the table.
xRadiuscAccounting1.3.6.1.4.1.838.3.16.1.1.3
xRadiuscActgSvrTable1.3.6.1.4.1.838.3.16.1.1.3.1not-accessibleA list of Radius Client Accounting Server entries.
xRadiuscActgSvrEntry1.3.6.1.4.1.838.3.16.1.1.3.1.1not-accessibleAn entry containing additional management information applicable to a particular Radius Client Accounting Server.
IP xradiuscActgSvrIpAddress1.3.6.1.4.1.838.3.16.1.1.3.1.1.1IpAddressread-createThe IP Address of the specified Accounting Server. If this address is configured, it is used exclusively to communicate with this server.
STR xradiuscActgSvrName1.3.6.1.4.1.838.3.16.1.1.3.1.1.2DisplayStringread-createThe name identifying the specified Accounting Server. If no IP Address is configured, then this name MAY be used during a DNS lookup.
INT xradiuscActgSvrPort1.3.6.1.4.1.838.3.16.1.1.3.1.1.3INTEGERread-createThe udp port number that the specified Accounting Server is listening for requests.
INT xradiuscActgSvrTimeout1.3.6.1.4.1.838.3.16.1.1.3.1.1.4INTEGERread-createThe number of seconds to wait for a response to a resquests.
INT xradiuscActgSvrRetries1.3.6.1.4.1.838.3.16.1.1.3.1.1.5INTEGERread-createThe number of times to resend the server a requests when no response has been received.
INT xradiuscActgSvrPriority1.3.6.1.4.1.838.3.16.1.1.3.1.1.6INTEGERread-createThe priority assigned to this server. Lowest priority servers are used first. In the case of multiple servers having the same priority, they will be used in a round- robin fashion when their priority is the highest of the available servers.
STR xradiuscActgSvrSecretKey1.3.6.1.4.1.838.3.16.1.1.3.1.1.7DisplayStringread-createThe shared secret key associated with the specified server. It is used to authenticate requests and responses. When this object is read from a non-superuser, '--------' is returned in order to maintain security.
INT xradiuscActgSvrVendorOffset1.3.6.1.4.1.838.3.16.1.1.3.1.1.8INTEGERread-createThe offset used to assign Vendor Specific attribute IDs to the standard attribute number space. Setting this value to 0, forces the encoding of Vendor Specific attributes within the Vendor's number space, using the standard 'Vendor-Specific' attribute. Setting this to a non-zero value uses standard attribute encoding, with the Vendor Specific Base for the attributes beginning with this offset.
IP xradiuscActgSvrOperIpAddress1.3.6.1.4.1.838.3.16.1.1.3.1.1.9IpAddressread-onlyThe IP Address currently being used to communicate the specified Accounting server.
INT xradiuscActgSvrOperState1.3.6.1.4.1.838.3.16.1.1.3.1.1.10INTEGERread-onlyThe operational state of the specified Accounting server. The 'unknown' state will be set periodically to allow 'notResponding' servers to be retried after a period of time.
TIK xradiuscActgSvrOperStateChange1.3.6.1.4.1.838.3.16.1.1.3.1.1.11TimeTicksread-onlyThe value of sysUpTime when the Accounting server last changed state.
C32 xradiuscActgSvrOperBadPktIds1.3.6.1.4.1.838.3.16.1.1.3.1.1.12Counter32read-onlyThe count of unexpected Packet IDs received on this port.
C32 xradiuscActgSvrOperRxErrors1.3.6.1.4.1.838.3.16.1.1.3.1.1.13Counter32read-onlyThe count of general Receive errors encountered by this server
C32 xradiuscActgSvrOperTxErrors1.3.6.1.4.1.838.3.16.1.1.3.1.1.14Counter32read-onlyThe count of general Transmit errors encountered by this server
ROW xradiuscActgSvrRowStatus1.3.6.1.4.1.838.3.16.1.1.3.1.1.15RowStatusread-createThis variable displays the status of the entry. Setting it to 'destroy' marks the entry as removed. Eventually, when no other applications depend on that particular resource, it will be completely removed from the table. Setting it to either 'create', or 'active' will add a row to the table.
xRadiusConformance1.3.6.1.4.1.838.3.16.2
xradiusCompliances1.3.6.1.4.1.838.3.16.2.1
xradiusCompliance1.3.6.1.4.1.838.3.16.2.1.1The compliance statement for all agents that support this MIB. A compliant agent implements all objects defined in this MIB.
xradiusGroups1.3.6.1.4.1.838.3.16.2.2
xradiusAllGroup1.3.6.1.4.1.838.3.16.2.2.1The set of all accessible objects in this MIB.

RFC description

Manages RADIUS authentication and accounting client configuration on Xedia routing devices.

Start monitoring Xedia WAN access router (RADIUS admin-vs-operational auth/accounting status) with a free 30-day trial of IPNetwork Monitor. Import MIBs, browse SNMP OIDs, create custom SNMP monitors, configure alerts, and monitor any SNMP-enabled network device from a single console.

Download XEDIA-RADIUS-MIB