ZYXEL-TACACS-MIB

All MIBs › ZYXEL-TACACS-MIB

Organization: Enterprise Solution ZyXEL

Last Updated: 2012-07-01

Category: ZyXEL Security and Access Control

Description: Manages ZyXEL TACACS+ authentication server configuration for centralized switch access control.

Start monitoring vendor-neutral, standards-based MIB, any SNMPv3-capable network device (SNMP engine identity/boot/clock status) with a free 30-day trial of IPNetwork Monitor. Import MIBs, browse SNMP OIDs, create custom SNMP monitors, configure alerts, and monitor any SNMP-enabled network device from a single console.

What Is ZYXEL-TACACS-MIB?

ZYXEL-TACACS-MIB is a ZyXEL enterprise MIB for configuring TACACS+ authentication server settings used for centralized administrative access control on ZyXEL switches. It exposes configuration objects for defining TACACS+ server addresses, shared secrets, and related authentication parameters rather than hardware performance data. Its monitoring relevance is software/configuration-status oriented -- confirming TACACS+ servers are correctly configured so that centralized authentication is functioning -- rather than exposing temperature, CPU, or fan data. It depends conceptually on the standard AAA/TACACS+ protocol model, implemented here as a ZyXEL-specific configuration subtree. It is deployed on ZyXEL managed switches in enterprise networks that centralize administrative login authentication through a TACACS+ server. Engineers can download the ZYXEL-TACACS-MIB file directly to load it into their MIB browser.

IPNetwork Monitor allows you to monitor SNMP objects defined in ZYXEL-TACACS-MIB. Use the built-in SNMP Monitoring Browser to explore available variables, view their current values and descriptions, and select the objects you want to monitor. You can then create SNMP monitors, configure thresholds, and receive alerts when monitored values change.

Supported Devices

ZyXEL managed switch

Monitoring Examples

No sample_objects are provided for this MIB, so specific object names cannot be cited; one would expect scalar or table objects for TACACS+ server IP address, port, and shared-key configuration, plus perhaps a status indicator of server reachability. An admin would typically poll such objects to confirm the switch is pointed at the correct, reachable TACACS+ server before troubleshooting failed administrative logins. This remains a general characterization based on the module's stated subtree purpose.

What Can Be Monitored

TACACS+ server address configuration
authentication parameter configuration

Imported Objects

From SNMPv2-SMI

IpAddress
MODULE-IDENTITY
NOTIFICATION-TYPE
OBJECT-TYPE

From SNMPv2-TC

DisplayString

From ZYXEL-ES-SMI

esMgmt

OBJECT-IDENTITY

OIDs

OID symbolic	OID numeric	Type	Access	Description
zyxelTacacs	1.3.6.1.4.1.890.1.15.3.83			The subtree for tacacs
zyxelTacacsServerSetup	1.3.6.1.4.1.890.1.15.3.83.1
zyxelTacacsAuthenticationServerSetup	1.3.6.1.4.1.890.1.15.3.83.1.1
INT zyTacacsAuthenticationServerMode	1.3.6.1.4.1.890.1.15.3.83.1.1.1	INTEGER	read-write	This field only applies if you configure multiple TACACS+ servers. select indexPriority and the switch tries to authenticate with the first configured TACACS+ server, if the TACACS+ server does not respond then this switch tries to authenticate with the second TACACS+ server. Select roundRobin to alternate between the TACACS+ servers that it sends authentication requests to.
INT zyTacacsAuthenticationServerTimeout	1.3.6.1.4.1.890.1.15.3.83.1.1.2	INTEGER	read-write	Specify the amount of time in seconds that the switch waits for an authentication request response from the TACACS+ server.
zyxelTacacsAuthenticationServerTable	1.3.6.1.4.1.890.1.15.3.83.1.1.3		not-accessible	The table contains TACACS+ authentication server configuration.
zyxelTacacsAuthenticationServerEntry	1.3.6.1.4.1.890.1.15.3.83.1.1.3.1		not-accessible	An entry contains TACACS+ authentication server configuration.
INT zyTacacsAuthenticationServerIndex	1.3.6.1.4.1.890.1.15.3.83.1.1.3.1.1	INTEGER	not-accessible	The number representing a TACACS+ server entry
IP zyTacacsAuthenticationServerIpAddress	1.3.6.1.4.1.890.1.15.3.83.1.1.3.1.2	IpAddress	read-write	IP address of an external TACACS+ server
INT zyTacacsAuthenticationServerTcpPort	1.3.6.1.4.1.890.1.15.3.83.1.1.3.1.3	INTEGER	read-write	The default port of a TACACS+ server for authentication is 49. you need not change this value unless your netwrok administrator instructs you to do so.
STR zyTacacsAuthenticationServerSharedSecret	1.3.6.1.4.1.890.1.15.3.83.1.1.3.1.4	DisplayString	read-write	Specify a password as the key to be shared between the external TACACS+ server and the switch. This key is not sent over the network. This key must be the same on the external TACACS+ server and the switch.
zyxelTacacsAccountingServerSetup	1.3.6.1.4.1.890.1.15.3.83.1.2
INT zyTacacsAccountingServerTimeout	1.3.6.1.4.1.890.1.15.3.83.1.2.1	INTEGER	read-write	Specify the amount of time in seconds that the switch waits for an accounting request response from the TACACS+ accounting server.
zyxelTacacsAccountingServerTable	1.3.6.1.4.1.890.1.15.3.83.1.2.2		not-accessible	The table contains TACACS+ accounting server configuration.
zyxelTacacsAccountingServerEntry	1.3.6.1.4.1.890.1.15.3.83.1.2.2.1		not-accessible	An entry contains TACACS+ accounting server configuration.
INT zyTacacsAccountingServerIndex	1.3.6.1.4.1.890.1.15.3.83.1.2.2.1.1	INTEGER	not-accessible	The number representing a TACACS+ accounting server
IP zyTacacsAccountingServerIpAddress	1.3.6.1.4.1.890.1.15.3.83.1.2.2.1.2	IpAddress	read-write	IP address of an external TACACS+ accounting server.
INT zyTacacsAccountingServerTcpPort	1.3.6.1.4.1.890.1.15.3.83.1.2.2.1.3	INTEGER	read-write	The default port of a TACACS+ accounting server for accounting is 49. You need not change this value unless your network administator instructs you to do so.
STR zyTacacsAccountingServerSharedSecret	1.3.6.1.4.1.890.1.15.3.83.1.2.2.1.4	DisplayString	read-write	Specify a password as the key to be shared between the external TACACS+ accounting server and the switch. This key is not sent over the network. This key must be the same on the external TACACS+ accounting server and the switch
zyxelTacacsServerNotifications	1.3.6.1.4.1.890.1.15.3.83.2
NTF zyTacacsServerAuthenticationServerUnreachable	1.3.6.1.4.1.890.1.15.3.83.2.1			TACACS+ authentication server is not reachable.
NTF zyTacacsServerAccountingServerUnreachable	1.3.6.1.4.1.890.1.15.3.83.2.2			TACACS+ accounting server is not reachable.
NTF zyTacacsServerAuthenticationServerUnreachableRecovered	1.3.6.1.4.1.890.1.15.3.83.2.3			TACACS+ authentication server is recovered from unreachable.
NTF zyTacacsServerAccountingServerUnreachableRecovered	1.3.6.1.4.1.890.1.15.3.83.2.4			TACACS+ accounting server is recovered from unreachable.

RFC description

Configures and monitors TACACS+ authentication server settings including failover modes and timeouts.

Start monitoring ZyXEL managed switch (TACACS+ server-address/shared-secret config status) with a free 30-day trial of IPNetwork Monitor. Import MIBs, browse SNMP OIDs, create custom SNMP monitors, configure alerts, and monitor any SNMP-enabled network device from a single console.

Download ZYXEL-TACACS-MIB

What Is ZYXEL-TACACS-MIB?

Supported Devices

Monitoring Examples

What Can Be Monitored

This MIB depends on

Related MIBs

RFC description