ZYXEL-RADIUS-MIB

All MIBs › ZYXEL-RADIUS-MIB

Organization: Enterprise Solution ZyXEL

Last Updated: 2012-07-01

Category: ZyXEL Security and Access Control

Description: Manages ZyXEL RADIUS client configuration including server addresses, keys, timeouts, and authentication settings.

Start monitoring vendor-neutral, standards-based MIB, any SNMPv3-capable network device (SNMP engine identity/boot/clock status) with a free 30-day trial of IPNetwork Monitor. Import MIBs, browse SNMP OIDs, create custom SNMP monitors, configure alerts, and monitor any SNMP-enabled network device from a single console.

What Is ZYXEL-RADIUS-MIB?

This is a ZyXEL vendor-specific MIB for configuring RADIUS client settings used in authentication, authorization, and accounting (AAA) for network access control, such as 802.1X port authentication or administrative login. It exposes configuration objects for RADIUS server addresses, shared secret keys, timeout and retry parameters, and related authentication settings. Its monitoring value is primarily configuration verification and troubleshooting authentication failures: administrators confirm the correct RADIUS server IP and timeout values are configured, which helps diagnose why devices or users are failing to authenticate onto the network (e.g., a misconfigured server address or an overly short timeout causing false rejections). It typically works alongside 802.1X/port-security MIBs since RADIUS is the backend authentication service for those access-control mechanisms. It is typically deployed by network administrators managing centralized authentication for switches or wireless access in ZyXEL-based enterprise/SMB networks. Engineers can download the ZYXEL-RADIUS-MIB file directly to load it into their MIB browser.

IPNetwork Monitor allows you to monitor SNMP objects defined in ZYXEL-RADIUS-MIB. Use the built-in SNMP Monitoring Browser to explore available variables, view their current values and descriptions, and select the objects you want to monitor. You can then create SNMP monitors, configure thresholds, and receive alerts when monitored values change.

Supported Devices

ZyXEL switch

Monitoring Examples

An administrator checks the configured RADIUS server address and timeout objects on a ZyXEL switch after users report intermittent 802.1X authentication failures, to confirm the switch is pointing at the correct, reachable RADIUS server. If the configured timeout is too short relative to the RADIUS server's actual response time, authentication requests may be dropped as timeouts even though the server would have eventually responded. No sample objects were present in the source extract, so exact object names cannot be confirmed here.

What Can Be Monitored

RADIUS server address
shared secret configuration
authentication timeout/retry settings
RADIUS client enable state

Imported Objects

From SNMPv2-SMI

IpAddress
MODULE-IDENTITY
NOTIFICATION-TYPE
OBJECT-TYPE

From SNMPv2-TC

DisplayString

From ZYXEL-ES-SMI

esMgmt

OBJECT-IDENTITY

OIDs

OID symbolic	OID numeric	Type	Access	Description
zyxelRadius	1.3.6.1.4.1.890.1.15.3.71			The subtree for radius
zyxelRadiusServerSetup	1.3.6.1.4.1.890.1.15.3.71.1
zyxelRadiusAuthenticationServerSetup	1.3.6.1.4.1.890.1.15.3.71.1.1
INT zyRadiusAuthenticationServerMode	1.3.6.1.4.1.890.1.15.3.71.1.1.1	INTEGER	read-write	This field is valid only if you configure multiple RADIUS servers. Select indexPriority and the switch tries to authenticate with the first configured RADIU server, if the RADIUS server does not respond then this switch tries to authenticate with the second RADIUS server. Select roundRobin to alternate between the RADIUS servers that it sends authentication requests to.
INT zyRadiusAuthenticationServerTimeout	1.3.6.1.4.1.890.1.15.3.71.1.1.2	INTEGER	read-write	Specify the amount of time in seconds that the switch waits for an authentication request response from the RADIUS server. If you are using indexPriority for your authentication and you are using two RADIUS servers then the timeout value is divided between the two RADIUS servers. For example, if you set the timeout value to 30 seconds, then the Switch waits for a response from the first RADIUS server for 15 seconds and then tries the second RADIUS server.
zyxelRadiusAuthenticationServerTable	1.3.6.1.4.1.890.1.15.3.71.1.1.3		not-accessible	The table contains RADIUS authentication server configuration.
zyxelRadiusAuthenticationServerEntry	1.3.6.1.4.1.890.1.15.3.71.1.1.3.1		not-accessible	An entry contains RADIUS authentication server configuration.
INT zyRadiusAuthenticationServerIndex	1.3.6.1.4.1.890.1.15.3.71.1.1.3.1.1	INTEGER	not-accessible	An index that uniquely identifies a RADIUS authentication entry.
IP zyRadiusAuthenticationServerIpAddr	1.3.6.1.4.1.890.1.15.3.71.1.1.3.1.2	IpAddress	read-write	Enter IP address of an external RADIUS authentication server.
INT zyRadiusAuthenticationServerUdpPort	1.3.6.1.4.1.890.1.15.3.71.1.1.3.1.3	INTEGER	read-write	The default port of a RADIUS server for authentication is 1812. You need not change this value unless your netwrok administrator instructs you to do so.
STR zyRadiusAuthenticationServerSharedSecret	1.3.6.1.4.1.890.1.15.3.71.1.1.3.1.4	DisplayString	read-write	Specify a password as the key to be shared between the external RADIUS authentication server and the switch. This key is not sent over the network. This key must be the same on the external RADIUS authentication server and the switch.
zyxelRadiusAccountingServerSetup	1.3.6.1.4.1.890.1.15.3.71.1.2
INT zyRadiusAccountingServerTimeout	1.3.6.1.4.1.890.1.15.3.71.1.2.1	INTEGER	read-write	Specify the amount of time in seconds that the switch waits for an accounting request response from the RADIUS accounting server.
zyxelRadiusAccountingServerTable	1.3.6.1.4.1.890.1.15.3.71.1.2.2		not-accessible	The table contains RADIUS accounting server configuration.
zyxelRadiusAccountingServerEntry	1.3.6.1.4.1.890.1.15.3.71.1.2.2.1		not-accessible	An entry contains RADIUS accounting server configuration.
INT zyRadiusAccountingServerIndex	1.3.6.1.4.1.890.1.15.3.71.1.2.2.1.1	INTEGER	not-accessible	An index that uniquely identifies a RADIUS accounting entry.
IP zyRadiusAccountingServerIpAddr	1.3.6.1.4.1.890.1.15.3.71.1.2.2.1.2	IpAddress	read-write	Enter IP address of an external RADIUS accounting server.
INT zyRadiusAccountingServerUdpPort	1.3.6.1.4.1.890.1.15.3.71.1.2.2.1.3	INTEGER	read-write	The default port of a RADIUS accounting server for accounting is 1813. You need not change this value unless your network administator instructs you to do so.
STR zyRadiusAccountingServerSharedSecret	1.3.6.1.4.1.890.1.15.3.71.1.2.2.1.4	DisplayString	read-write	Specify a password as the key to be shared between the external RADIUS accounting server and the switch. This key is not sent over the network. This key must be the same on the external RADIUS accounting server and the switch
zyxelRadiusServerNotifications	1.3.6.1.4.1.890.1.15.3.71.2
NTF zyRadiusServerAuthenticationServerNotReachable	1.3.6.1.4.1.890.1.15.3.71.2.1			RADIUS authentication server is not reachable. Network element does not receive replies from RADIUS authentication server.
NTF zyRadiusServerAccountingServerNotReachable	1.3.6.1.4.1.890.1.15.3.71.2.2			RADIUS accounting server is not reachable. Network element does not receive replies from RADIUS accounting server.
NTF zyRadiusServerAuthenticationServerNotReachableRecovered	1.3.6.1.4.1.890.1.15.3.71.2.3			RADIUS authentication server is recovered to rechable.
NTF zyRadiusServerAccountingServerNotReachableRecovered	1.3.6.1.4.1.890.1.15.3.71.2.4			RADIUS accounting server is recovered to rechable.

RFC description

Configures RADIUS server settings for authentication including server selection mode and timeout parameters.

Start monitoring ZyXEL switch (RADIUS server-address/timeout/retry config status) with a free 30-day trial of IPNetwork Monitor. Import MIBs, browse SNMP OIDs, create custom SNMP monitors, configure alerts, and monitor any SNMP-enabled network device from a single console.

Download ZYXEL-RADIUS-MIB

What Is ZYXEL-RADIUS-MIB?

Supported Devices

Monitoring Examples

What Can Be Monitored

This MIB depends on

Related MIBs

RFC description