diff options
Diffstat (limited to '')
| -rw-r--r-- | mibs/FREERADIUS-MGMT-MIB.mib | 38 | ||||
| -rw-r--r-- | mibs/FREERADIUS-NOTIFICATION-MIB.mib | 180 | ||||
| -rw-r--r-- | mibs/FREERADIUS-PRODUCT-RADIUSD-MIB.mib | 75 | ||||
| -rw-r--r-- | mibs/FREERADIUS-SMI.mib | 52 | ||||
| -rw-r--r-- | mibs/RADIUS-ACC-CLIENT-MIB.mib | 647 | ||||
| -rw-r--r-- | mibs/RADIUS-ACC-SERVER-MIB.mib | 732 | ||||
| -rw-r--r-- | mibs/RADIUS-AUTH-CLIENT-MIB.mib | 708 | ||||
| -rw-r--r-- | mibs/RADIUS-AUTH-SERVER-MIB.mib | 775 | ||||
| -rw-r--r-- | mibs/RADIUS-STAT-MIB.mib | 349 | ||||
| -rw-r--r-- | mibs/README | 7 |
10 files changed, 3563 insertions, 0 deletions
diff --git a/mibs/FREERADIUS-MGMT-MIB.mib b/mibs/FREERADIUS-MGMT-MIB.mib new file mode 100644 index 0000000..8cb4009 --- /dev/null +++ b/mibs/FREERADIUS-MGMT-MIB.mib @@ -0,0 +1,38 @@ +FREERADIUS-MGMT-MIB DEFINITIONS ::= BEGIN + +IMPORTS + MODULE-IDENTITY, + OBJECT-IDENTITY + FROM SNMPv2-SMI + freeRadiusMgmt + FROM FREERADIUS-SMI + SnmpAdminString + FROM SNMP-FRAMEWORK-MIB; + +freeradiusObjects MODULE-IDENTITY + LAST-UPDATED "200712170000Z" + ORGANIZATION "FreeRADIUS Project" + CONTACT-INFO + "FreeRADIUS Network Object Model Environment project + + see http://www.freeradius.org for contact persons of a particular + area or subproject of FREERADIUS. + + Administrative contact for MIB module: + + Alan DeKok + + email: aland@freeradius.org" + DESCRIPTION + "Generic objects used by notification MIBs" + ::= { freeRadiusMgmt 1 } + +radiusObject OBJECT-TYPE + SYNTAX SnmpAdminString + MAX-ACCESS accessible-for-notify + STATUS current + DESCRIPTION + "A generic object" + ::= { freeradiusObjects 1 } + +END diff --git a/mibs/FREERADIUS-NOTIFICATION-MIB.mib b/mibs/FREERADIUS-NOTIFICATION-MIB.mib new file mode 100644 index 0000000..3f8e0eb --- /dev/null +++ b/mibs/FREERADIUS-NOTIFICATION-MIB.mib @@ -0,0 +1,180 @@ +FREERADIUS-NOTIFICATION-MIB DEFINITIONS ::= BEGIN + IMPORTS + MODULE-IDENTITY, NOTIFICATION-TYPE + FROM SNMPv2-SMI + freeradiusObjects + FROM FREERADIUS-MGMT-MIB + freeRadius + FROM FREERADIUS-SMI + radiusAuthServerAddress,radiusAuthClientServerPortNumber + FROM RADIUS-AUTH-CLIENT-MIB + radiusAuthServIdent + FROM RADIUS-AUTH-SERVER-MIB + radiusd + FROM FREERADIUS-PRODUCT-RADIUSD-MIB; + +freeRadiusNotificationMib MODULE-IDENTITY + LAST-UPDATED "201012170000Z" + ORGANIZATION "FREERADIUS project" + CONTACT-INFO + "FreeRADIUS Network Object Model Environment project + + see http://www.freeradius.org for contact persons of a particular + area or subproject of FREERADIUS. + + Administrative contact for MIB module: + + Alan DeKok + + email: aland@freeradius.org" + DESCRIPTION + "FreeRADIUS Notification MIBs." + ::= { freeRadius 4 } + +serverGlobal OBJECT IDENTIFIER ::= { freeRadiusNotificationMib 1 } + +serverStart NOTIFICATION-TYPE + OBJECTS { radiusObject } + STATUS current + DESCRIPTION "Notification that the server has started" + ::= { serverGlobal 1 } + +serverStop NOTIFICATION-TYPE + OBJECTS { radiusObject } + STATUS current + DESCRIPTION "Notification that the server is stopping" + ::= { serverGlobal 2 } + +serverMaxRequests NOTIFICATION-TYPE + OBJECTS { radiusObject } + STATUS current + DESCRIPTION "Notification that the server has hit the max_requests limit" + ::= { serverGlobal 3 } + +serverSignal OBJECT IDENTIFIER ::= { serverGlobal 4 } + +signalHup NOTIFICATION-TYPE + OBJECTS { radiusObject } + STATUS current + DESCRIPTION "Notification that the server has received a HUP signal" + ::= { serverSignal 1 } + +signalTerm NOTIFICATION-TYPE + OBJECTS { radiusObject } + STATUS current + DESCRIPTION "Notification that the server has received a TERM signal" + ::= { serverSignal 2 } + +serverThread OBJECT IDENTIFIER ::= { serverGlobal 5 } + +threadStart NOTIFICATION-TYPE + OBJECTS { radiusObject } + STATUS current + DESCRIPTION "Notification that a thread has started" + ::= { serverThread 1 } + +threadStop NOTIFICATION-TYPE + OBJECTS { radiusObject } + STATUS current + DESCRIPTION "Notification that a thread has stopped" + ::= { serverThread 2 } + +threadUnresponsive NOTIFICATION-TYPE + OBJECTS { radiusObject } + STATUS current + DESCRIPTION "Notification that a child thread is unresponsive" + ::= { serverThread 3 } + +threadMaxThreads NOTIFICATION-TYPE + OBJECTS { radiusObject } + STATUS current + DESCRIPTION "Notification that the max_threads limit has been reached" + ::= { serverThread 4 } + +serverModules OBJECT IDENTIFIER ::= { freeRadiusNotificationMib 2 } + +serverModuleGeneric OBJECT IDENTIFIER ::= { serverModules 1 } + +serverModuleConnectionUp NOTIFICATION-TYPE + OBJECTS { radiusdModuleName, + radiusdModuleInstance } + STATUS current + DESCRIPTION "Notification that the module has opened a new connection" + ::= { serverModuleGeneric 1 } + +serverModuleConnectionDown NOTIFICATION-TYPE + OBJECTS { radiusdModuleName, + radiusdModuleInstance } + STATUS current + DESCRIPTION "Notification that the module has dropped a connection" + ::= { serverModuleGeneric 2 } + +serverModuleConnectionNone NOTIFICATION-TYPE + OBJECTS { radiusdModuleName, + radiusdModuleInstance } + STATUS current + DESCRIPTION "Notification that the module has no connections" + ::= { serverModuleGeneric 3 } + +serverModuleConnectionFail NOTIFICATION-TYPE + OBJECTS { radiusdModuleName, + radiusdModuleInstance } + STATUS current + DESCRIPTION "Notification that the module has failed to open a new connection" + ::= { serverModuleGeneric 4 } + +serverModuleHup NOTIFICATION-TYPE + OBJECTS { radiusdModuleName, + radiusdModuleInstance } + STATUS current + DESCRIPTION "Notification that the module has been HUP'd via radmin" + ::= { serverModuleGeneric 5 } + +homeServer OBJECT IDENTIFIER ::= { freeRadiusNotificationMib 3 } + +-- +-- For now, we only support IPv4 traps, and we support only UDP. +-- We can add IPv6 and TCP / TLS later. +-- +-- We also use the "authserver" fields for both authentication and accounting +-- servers. +-- +homeServerAlive NOTIFICATION-TYPE + OBJECTS { radiusAuthServerAddress, + radiusAuthClientServerPortNumber, + radiusAuthServIdent } + STATUS current + DESCRIPTION "Notification that a home server is alive" + ::= { homeServer 1 } + +homeServerZombie NOTIFICATION-TYPE + OBJECTS { radiusAuthServerAddress, + radiusAuthClientServerPortNumber, + radiusAuthServIdent } + STATUS current + DESCRIPTION "Notification that a home server is zombie" + ::= { homeServer 2 } + +homeServerDead NOTIFICATION-TYPE + OBJECTS { radiusAuthServerAddress, + radiusAuthClientServerPortNumber, + radiusAuthServIdent } + STATUS current + DESCRIPTION "Notification that a home server is dead" + ::= { homeServer 3 } + +homeServerPool OBJECT IDENTIFIER ::= { freeRadiusNotificationMib 4 } + +homeServerPoolNormal NOTIFICATION-TYPE + OBJECTS { radiusdConfigName } + STATUS current + DESCRIPTION "Notification that the pool is operating normally" + ::= { homeServerPool 1 } + +homeServerPoolFallback NOTIFICATION-TYPE + OBJECTS { radiusdConfigName } + STATUS current + DESCRIPTION "Notification that the pool is in fallback mode" + ::= { homeServerPool 2 } + +END diff --git a/mibs/FREERADIUS-PRODUCT-RADIUSD-MIB.mib b/mibs/FREERADIUS-PRODUCT-RADIUSD-MIB.mib new file mode 100644 index 0000000..daa08c2 --- /dev/null +++ b/mibs/FREERADIUS-PRODUCT-RADIUSD-MIB.mib @@ -0,0 +1,75 @@ +FREERADIUS-PRODUCT-RADIUSD-MIB DEFINITIONS ::= BEGIN + +IMPORTS + MODULE-IDENTITY, + OBJECT-IDENTITY + FROM SNMPv2-SMI + SnmpAdminString + FROM SNMP-FRAMEWORK-MIB + freeRadiusProducts + FROM FREERADIUS-SMI; + +freeradius MODULE-IDENTITY + LAST-UPDATED "200712170000Z" + ORGANIZATION "FreeRADIUS Project" + CONTACT-INFO + "FreeRADIUS Network Object Model Environment project + + see http://www.freeradius.org for contact persons of a particular + area or subproject of FREERADIUS. + + Administrative contact for MIB module: + + Alan DeKok + + email: aland@freeradius.org" + DESCRIPTION + "The product registrations for the FreeRADIUS SNMP subagent. + These registrations are guaranteed to be unique and are used + for SMUX registration by default (if not overridden manually)." + ::= { freeRadiusProducts 1 } + +radiusd OBJECT-IDENTITY + STATUS current + DESCRIPTION + "radiusd is the RADIUS protocol deamon of the FreeRADIUS + project." + ::= { freeradius 1 } + +radiusdConfig OBJECT-IDENTITY + STATUS current + DESCRIPTION + "Information about the server configuration" + ::= { radiusd 2 } + +radiusdConfigName OBJECT-TYPE + SYNTAX SnmpAdminString + MAX-ACCESS read-only + STATUS current + DESCRIPTION + "The name of a configuration item" + ::= { radiusdConfig 1 } + +radiusdModule OBJECT-IDENTITY + STATUS current + DESCRIPTION + "Information about modules associated with the server" + ::= { radiusd 3 } + +radiusdModuleName OBJECT-TYPE + SYNTAX SnmpAdminString + MAX-ACCESS read-only + STATUS current + DESCRIPTION + "The name the module (e.g. 'foo' for rlm_foo)" + ::= { radiusdModule 1 } + +radiusdModuleInstance OBJECT-TYPE + SYNTAX SnmpAdminString + MAX-ACCESS read-only + STATUS current + DESCRIPTION + "The instance name the module (e.g. 'sql2' for sql sql2 {...})" + ::= { radiusdModule 2 } + +END diff --git a/mibs/FREERADIUS-SMI.mib b/mibs/FREERADIUS-SMI.mib new file mode 100644 index 0000000..b4981ba --- /dev/null +++ b/mibs/FREERADIUS-SMI.mib @@ -0,0 +1,52 @@ +FREERADIUS-SMI DEFINITIONS ::= BEGIN + +IMPORTS + MODULE-IDENTITY, + OBJECT-IDENTITY, + enterprises + FROM SNMPv2-SMI; + +freeRadius MODULE-IDENTITY + LAST-UPDATED "200712170000Z" + ORGANIZATION "FREERADIUS project" + CONTACT-INFO + "FreeRADIUS Network Object Model Environment project + + see http://www.freeradius.org for contact persons of a particular + area or subproject of FREERADIUS. + + Administrative contact for MIB module: + + Alan DeKok + + email: aland@freeradius.org" + DESCRIPTION + "The Structure of FREERADIUS." + ::= { enterprises 11344 } -- assigned by IANA + +freeRadiusProducts OBJECT-IDENTITY + STATUS current + DESCRIPTION + "freeRadiusProducts is the root OBJECT IDENTIFIER from + which sysObjectID values are assigned." + ::= { freeRadius 1 } + +freeRadiusMgmt OBJECT-IDENTITY + STATUS current + DESCRIPTION + "freeRadiusMgmt defines the subtree for production FREERADIUS related + MIB registrations." + ::= { freeRadius 2 } + +freeRadiusTest OBJECT-IDENTITY + STATUS current + DESCRIPTION + "freeRadiusTest defines the subtree for testing FREERADIUS related + MIB registrations." + ::= { freeRadius 3 } + +-- 4 is the notification MIB + +-- more to come if necessary. + +END diff --git a/mibs/RADIUS-ACC-CLIENT-MIB.mib b/mibs/RADIUS-ACC-CLIENT-MIB.mib new file mode 100644 index 0000000..417a2d5 --- /dev/null +++ b/mibs/RADIUS-ACC-CLIENT-MIB.mib @@ -0,0 +1,647 @@ + RADIUS-ACC-CLIENT-MIB DEFINITIONS ::= BEGIN + + IMPORTS + MODULE-IDENTITY, OBJECT-TYPE, OBJECT-IDENTITY, + Counter32, Integer32, Gauge32, + IpAddress, TimeTicks, mib-2 FROM SNMPv2-SMI + SnmpAdminString FROM SNMP-FRAMEWORK-MIB + InetAddressType, InetAddress, + InetPortNumber FROM INET-ADDRESS-MIB + MODULE-COMPLIANCE, OBJECT-GROUP FROM SNMPv2-CONF; + + + radiusAccClientMIB MODULE-IDENTITY + LAST-UPDATED "200608210000Z" -- 21 August 2006 + ORGANIZATION "IETF RADIUS Extensions Working Group." + CONTACT-INFO + " Bernard Aboba + Microsoft + One Microsoft Way + Redmond, WA 98052 + US + Phone: +1 425 936 6605 + EMail: bernarda@microsoft.com" + DESCRIPTION + "The MIB module for entities implementing the client + side of the Remote Authentication Dial-In User Service + (RADIUS) accounting protocol. Copyright (C) The + Internet Society (2006). This version of this MIB + module is part of RFC 4670; see the RFC itself for + full legal notices." + REVISION "200608210000Z" -- 21 August 2006 + DESCRIPTION + "Revised version as published in RFC 4670. + This version obsoletes that of RFC 2620 by + deprecating the MIB table containing IPv4-only + address formats and defining a new table to add support + for version-neutral IP address formats. The remaining + MIB objects from RFC 2620 are carried forward into this + version." + REVISION "199906110000Z" -- 11 Jun 1999 + DESCRIPTION "Initial version as published in RFC 2620." + ::= { radiusAccounting 2 } + + radiusMIB OBJECT-IDENTITY + STATUS current + DESCRIPTION + "The OID assigned to RADIUS MIB work by the IANA." + ::= { mib-2 67 } + + radiusAccounting OBJECT IDENTIFIER ::= {radiusMIB 2} + + radiusAccClientMIBObjects OBJECT IDENTIFIER + ::= { radiusAccClientMIB 1 } + + radiusAccClient OBJECT IDENTIFIER + ::= { radiusAccClientMIBObjects 1 } + + radiusAccClientInvalidServerAddresses OBJECT-TYPE + SYNTAX Counter32 + UNITS "packets" + MAX-ACCESS read-only + STATUS current + DESCRIPTION + "The number of RADIUS Accounting-Response packets + received from unknown addresses." + ::= { radiusAccClient 1 } + radiusAccClientIdentifier OBJECT-TYPE + SYNTAX SnmpAdminString + MAX-ACCESS read-only + STATUS current + DESCRIPTION + "The NAS-Identifier of the RADIUS accounting client. + This is not necessarily the same as sysName in MIB + II." + REFERENCE "RFC 2865 section 5.32" + ::= { radiusAccClient 2 } + + radiusAccServerTable OBJECT-TYPE + SYNTAX SEQUENCE OF RadiusAccServerEntry + MAX-ACCESS not-accessible + STATUS deprecated + DESCRIPTION + "The (conceptual) table listing the RADIUS accounting + servers with which the client shares a secret." + ::= { radiusAccClient 3 } + + radiusAccServerEntry OBJECT-TYPE + SYNTAX RadiusAccServerEntry + MAX-ACCESS not-accessible + STATUS deprecated + DESCRIPTION + "An entry (conceptual row) representing a RADIUS + accounting server with which the client shares a + secret." + INDEX { radiusAccServerIndex } + ::= { radiusAccServerTable 1 } + + RadiusAccServerEntry ::= SEQUENCE { + radiusAccServerIndex Integer32, + radiusAccServerAddress IpAddress, + radiusAccClientServerPortNumber Integer32, + radiusAccClientRoundTripTime TimeTicks, + radiusAccClientRequests Counter32, + radiusAccClientRetransmissions Counter32, + radiusAccClientResponses Counter32, + radiusAccClientMalformedResponses Counter32, + radiusAccClientBadAuthenticators Counter32, + radiusAccClientPendingRequests Gauge32, + radiusAccClientTimeouts Counter32, + radiusAccClientUnknownTypes Counter32, + radiusAccClientPacketsDropped Counter32 + } + + radiusAccServerIndex OBJECT-TYPE + SYNTAX Integer32 (1..2147483647) + MAX-ACCESS not-accessible + STATUS deprecated + DESCRIPTION + "A number uniquely identifying each RADIUS + Accounting server with which this client + communicates." + ::= { radiusAccServerEntry 1 } + + radiusAccServerAddress OBJECT-TYPE + SYNTAX IpAddress + MAX-ACCESS read-only + STATUS deprecated + DESCRIPTION + "The IP address of the RADIUS accounting server + referred to in this table entry." + ::= { radiusAccServerEntry 2 } + + radiusAccClientServerPortNumber OBJECT-TYPE + SYNTAX Integer32 (0..65535) + MAX-ACCESS read-only + STATUS deprecated + DESCRIPTION + "The UDP port the client is using to send requests to + this server." + REFERENCE "RFC 2866 section 3" + ::= { radiusAccServerEntry 3 } + + radiusAccClientRoundTripTime OBJECT-TYPE + SYNTAX TimeTicks + MAX-ACCESS read-only + STATUS deprecated + DESCRIPTION + "The time interval between the most recent + Accounting-Response and the Accounting-Request that + matched it from this RADIUS accounting server." + REFERENCE "RFC 2866 section 2" + ::= { radiusAccServerEntry 4 } + + -- Request/Response statistics + -- + -- Requests = Responses + PendingRequests + ClientTimeouts + -- + -- Responses - MalformedResponses - BadAuthenticators - + -- UnknownTypes - PacketsDropped = Successfully received + + radiusAccClientRequests OBJECT-TYPE + SYNTAX Counter32 + UNITS "packets" + MAX-ACCESS read-only + STATUS deprecated + DESCRIPTION + "The number of RADIUS Accounting-Request packets + sent. This does not include retransmissions." + REFERENCE "RFC 2866 section 4.1" + ::= { radiusAccServerEntry 5 } + + radiusAccClientRetransmissions OBJECT-TYPE + SYNTAX Counter32 + UNITS "packets" + MAX-ACCESS read-only + STATUS deprecated + DESCRIPTION + "The number of RADIUS Accounting-Request packets + retransmitted to this RADIUS accounting server. + Retransmissions include retries where the + Identifier and Acct-Delay have been updated, as + well as those in which they remain the same." + REFERENCE "RFC 2866 section 2" + ::= { radiusAccServerEntry 6 } + + radiusAccClientResponses OBJECT-TYPE + SYNTAX Counter32 + UNITS "packets" + MAX-ACCESS read-only + STATUS deprecated + DESCRIPTION + "The number of RADIUS packets received on the + accounting port from this server." + REFERENCE "RFC 2866 section 4.2" + ::= { radiusAccServerEntry 7 } + + radiusAccClientMalformedResponses OBJECT-TYPE + SYNTAX Counter32 + UNITS "packets" + MAX-ACCESS read-only + STATUS deprecated + DESCRIPTION + "The number of malformed RADIUS Accounting-Response + packets received from this server. Malformed packets + include packets with an invalid length. Bad + authenticators and unknown types are not included as + malformed accounting responses." + REFERENCE "RFC 2866 section 3" + ::= { radiusAccServerEntry 8 } + + radiusAccClientBadAuthenticators OBJECT-TYPE + SYNTAX Counter32 + UNITS "packets" + MAX-ACCESS read-only + STATUS deprecated + DESCRIPTION + "The number of RADIUS Accounting-Response + packets that contained invalid authenticators + received from this server." + REFERENCE "RFC 2866 section 3" + ::= { radiusAccServerEntry 9 } + + radiusAccClientPendingRequests OBJECT-TYPE + SYNTAX Gauge32 + UNITS "packets" + MAX-ACCESS read-only + STATUS deprecated + DESCRIPTION + "The number of RADIUS Accounting-Request packets + sent to this server that have not yet timed out or + received a response. This variable is incremented + when an Accounting-Request is sent and decremented + due to receipt of an Accounting-Response, a timeout, + or a retransmission." + REFERENCE "RFC 2866 section 2" + ::= { radiusAccServerEntry 10 } + + radiusAccClientTimeouts OBJECT-TYPE + SYNTAX Counter32 + UNITS "timeouts" + MAX-ACCESS read-only + STATUS deprecated + DESCRIPTION + "The number of accounting timeouts to this server. + After a timeout, the client may retry to the same + server, send to a different server, or give up. + A retry to the same server is counted as a + retransmit as well as a timeout. A send to a different + server is counted as an Accounting-Request as well as + a timeout." + REFERENCE "RFC 2866 section 2" + ::= { radiusAccServerEntry 11 } + + radiusAccClientUnknownTypes OBJECT-TYPE + SYNTAX Counter32 + UNITS "packets" + MAX-ACCESS read-only + STATUS deprecated + DESCRIPTION + "The number of RADIUS packets of unknown type that + were received from this server on the accounting port." + REFERENCE "RFC 2866 section 4" + ::= { radiusAccServerEntry 12 } + + radiusAccClientPacketsDropped OBJECT-TYPE + SYNTAX Counter32 + UNITS "packets" + MAX-ACCESS read-only + STATUS deprecated + DESCRIPTION + "The number of RADIUS packets that were received from + this server on the accounting port and dropped for some + other reason." + ::= { radiusAccServerEntry 13 } + + + -- New MIB objects added in this revision + + radiusAccServerExtTable OBJECT-TYPE + SYNTAX SEQUENCE OF RadiusAccServerExtEntry + MAX-ACCESS not-accessible + STATUS current + DESCRIPTION + "The (conceptual) table listing the RADIUS accounting + servers with which the client shares a secret." + ::= { radiusAccClient 4 } + + radiusAccServerExtEntry OBJECT-TYPE + SYNTAX RadiusAccServerExtEntry + MAX-ACCESS not-accessible + STATUS current + DESCRIPTION + "An entry (conceptual row) representing a RADIUS + accounting server with which the client shares a + secret." + INDEX { radiusAccServerExtIndex } + ::= { radiusAccServerExtTable 1 } + + RadiusAccServerExtEntry ::= SEQUENCE { + radiusAccServerExtIndex Integer32, + radiusAccServerInetAddressType InetAddressType, + radiusAccServerInetAddress InetAddress, + radiusAccClientServerInetPortNumber InetPortNumber, + radiusAccClientExtRoundTripTime TimeTicks, + radiusAccClientExtRequests Counter32, + radiusAccClientExtRetransmissions Counter32, + radiusAccClientExtResponses Counter32, + radiusAccClientExtMalformedResponses Counter32, + radiusAccClientExtBadAuthenticators Counter32, + radiusAccClientExtPendingRequests Gauge32, + radiusAccClientExtTimeouts Counter32, + radiusAccClientExtUnknownTypes Counter32, + radiusAccClientExtPacketsDropped Counter32, + radiusAccClientCounterDiscontinuity TimeTicks + } + + radiusAccServerExtIndex OBJECT-TYPE + SYNTAX Integer32 (1..2147483647) + MAX-ACCESS not-accessible + STATUS current + DESCRIPTION + "A number uniquely identifying each RADIUS + Accounting server with which this client + communicates." + ::= { radiusAccServerExtEntry 1 } + + + radiusAccServerInetAddressType OBJECT-TYPE + SYNTAX InetAddressType + MAX-ACCESS read-only + STATUS current + DESCRIPTION + "The type of address format used for the + radiusAccServerInetAddress object." + ::= { radiusAccServerExtEntry 2 } + + + radiusAccServerInetAddress OBJECT-TYPE + SYNTAX InetAddress + MAX-ACCESS read-only + STATUS current + DESCRIPTION + "The IP address of the RADIUS accounting + server referred to in this table entry, using + the version-neutral IP address format." + ::= { radiusAccServerExtEntry 3 } + + radiusAccClientServerInetPortNumber OBJECT-TYPE + SYNTAX InetPortNumber ( 1..65535 ) + MAX-ACCESS read-only + STATUS current + DESCRIPTION + "The UDP port the client is using to send requests + to this accounting server. The value zero (0) is + invalid." + REFERENCE "RFC 2866 section 3" + ::= { radiusAccServerExtEntry 4 } + + + radiusAccClientExtRoundTripTime OBJECT-TYPE + SYNTAX TimeTicks + MAX-ACCESS read-only + STATUS current + DESCRIPTION + "The time interval between the most recent + Accounting-Response and the Accounting-Request that + matched it from this RADIUS accounting server." + REFERENCE "RFC 2866 section 2" + ::= { radiusAccServerExtEntry 5 } + + -- Request/Response statistics + -- + -- Requests = Responses + PendingRequests + ClientTimeouts + -- + -- Responses - MalformedResponses - BadAuthenticators - + -- UnknownTypes - PacketsDropped = Successfully received + + radiusAccClientExtRequests OBJECT-TYPE + SYNTAX Counter32 + UNITS "packets" + MAX-ACCESS read-only + STATUS current + DESCRIPTION + "The number of RADIUS Accounting-Request packets + sent. This does not include retransmissions. + This counter may experience a discontinuity when the + RADIUS Accounting Client module within the managed + entity is reinitialized, as indicated by the current + value of radiusAccClientCounterDiscontinuity." + REFERENCE "RFC 2866 section 4.1" + ::= { radiusAccServerExtEntry 6 } + + radiusAccClientExtRetransmissions OBJECT-TYPE + SYNTAX Counter32 + UNITS "packets" + MAX-ACCESS read-only + STATUS current + DESCRIPTION + "The number of RADIUS Accounting-Request packets + retransmitted to this RADIUS accounting server. + Retransmissions include retries where the + Identifier and Acct-Delay have been updated, as + well as those in which they remain the same. + This counter may experience a discontinuity when the + RADIUS Accounting Client module within the managed + entity is reinitialized, as indicated by the current + value of radiusAccClientCounterDiscontinuity." + REFERENCE "RFC 2866 section 2" + ::= { radiusAccServerExtEntry 7 } + + radiusAccClientExtResponses OBJECT-TYPE + SYNTAX Counter32 + UNITS "packets" + MAX-ACCESS read-only + STATUS current + DESCRIPTION + "The number of RADIUS packets received on the + accounting port from this server. This counter + may experience a discontinuity when the RADIUS + Accounting Client module within the managed entity is + reinitialized, as indicated by the current value of + radiusAccClientCounterDiscontinuity." + REFERENCE "RFC 2866 section 4.2" + ::= { radiusAccServerExtEntry 8 } + + radiusAccClientExtMalformedResponses OBJECT-TYPE + SYNTAX Counter32 + UNITS "packets" + MAX-ACCESS read-only + STATUS current + DESCRIPTION + "The number of malformed RADIUS Accounting-Response + packets received from this server. Malformed packets + include packets with an invalid length. Bad + authenticators and unknown types are not included as + malformed accounting responses. This counter may + experience a discontinuity when the RADIUS Accounting + Client module within the managed entity is + reinitialized, as indicated by the current + value of radiusAccClientCounterDiscontinuity." + REFERENCE "RFC 2866 section 3" + ::= { radiusAccServerExtEntry 9 } + + radiusAccClientExtBadAuthenticators OBJECT-TYPE + SYNTAX Counter32 + UNITS "packets" + MAX-ACCESS read-only + STATUS current + DESCRIPTION + "The number of RADIUS Accounting-Response + packets that contained invalid authenticators + received from this server. This counter may + experience a discontinuity when the RADIUS + Accounting Client module within the managed + entity is reinitialized, as indicated by the + current value of + radiusAccClientCounterDiscontinuity." + REFERENCE "RFC 2866 section 3" + ::= { radiusAccServerExtEntry 10 } + + radiusAccClientExtPendingRequests OBJECT-TYPE + SYNTAX Gauge32 + UNITS "packets" + MAX-ACCESS read-only + STATUS current + DESCRIPTION + "The number of RADIUS Accounting-Request packets + sent to this server that have not yet timed out or + received a response. This variable is incremented + when an Accounting-Request is sent and decremented + due to receipt of an Accounting-Response, a timeout, + or a retransmission. This counter may experience a + discontinuity when the RADIUS Accounting Client module + within the managed entity is reinitialized, as + indicated by the current value of + radiusAccClientCounterDiscontinuity." + REFERENCE "RFC 2866 section 2" + ::= { radiusAccServerExtEntry 11 } + + radiusAccClientExtTimeouts OBJECT-TYPE + SYNTAX Counter32 + UNITS "timeouts" + MAX-ACCESS read-only + STATUS current + DESCRIPTION + "The number of accounting timeouts to this server. + After a timeout, the client may retry to the same + server, send to a different server, or give up. + A retry to the same server is counted as a + retransmit as well as a timeout. A send to a different + server is counted as an Accounting-Request as well as + a timeout. This counter may experience a discontinuity + when the RADIUS Accounting Client module within the + managed entity is reinitialized, as indicated by the + current value of radiusAccClientCounterDiscontinuity." + REFERENCE "RFC 2866 section 2" + ::= { radiusAccServerExtEntry 12 } + + radiusAccClientExtUnknownTypes OBJECT-TYPE + SYNTAX Counter32 + UNITS "packets" + MAX-ACCESS read-only + STATUS current + DESCRIPTION + "The number of RADIUS packets of unknown type that + were received from this server on the accounting port. + This counter may experience a discontinuity when the + RADIUS Accounting Client module within the managed + entity is reinitialized, as indicated by the current + value of radiusAccClientCounterDiscontinuity." + REFERENCE "RFC 2866 section 4" + ::= { radiusAccServerExtEntry 13 } + + radiusAccClientExtPacketsDropped OBJECT-TYPE + SYNTAX Counter32 + UNITS "packets" + MAX-ACCESS read-only + STATUS current + DESCRIPTION + "The number of RADIUS packets that were received from + this server on the accounting port and dropped for some + other reason. This counter may experience a + discontinuity when the RADIUS Accounting Client module + within the managed entity is reinitialized, as indicated + by the current value of + radiusAccClientCounterDiscontinuity." + ::= { radiusAccServerExtEntry 14 } + + radiusAccClientCounterDiscontinuity OBJECT-TYPE + SYNTAX TimeTicks + UNITS "centiseconds" + MAX-ACCESS read-only + STATUS current + DESCRIPTION + "The number of centiseconds since the last + discontinuity in the RADIUS Accounting Client + counters. A discontinuity may be the result of a + reinitialization of the RADIUS Accounting Client + module within the managed entity." + ::= { radiusAccServerExtEntry 15 } + + + -- conformance information + + radiusAccClientMIBConformance OBJECT IDENTIFIER + ::= { radiusAccClientMIB 2 } + + radiusAccClientMIBCompliances OBJECT IDENTIFIER + ::= { radiusAccClientMIBConformance 1 } + + radiusAccClientMIBGroups OBJECT IDENTIFIER + ::= { radiusAccClientMIBConformance 2 } + + + -- units of conformance + + radiusAccClientMIBCompliance MODULE-COMPLIANCE + STATUS deprecated + DESCRIPTION + "The compliance statement for accounting clients + implementing the RADIUS Accounting Client MIB. + Implementation of this module is for IPv4-only + entities, or for backwards compatibility use with + entities that support both IPv4 and IPv6." + MODULE -- this module + MANDATORY-GROUPS { radiusAccClientMIBGroup } + + ::= { radiusAccClientMIBCompliances 1 } + + + radiusAccClientExtMIBCompliance MODULE-COMPLIANCE + STATUS current + DESCRIPTION + "The compliance statement for accounting + clients implementing the RADIUS Accounting + Client IPv6 Extensions MIB. Implementation of + this module is for entities that support IPv6, + or support IPv4 and IPv6." + MODULE -- this module + MANDATORY-GROUPS { radiusAccClientExtMIBGroup } + + OBJECT radiusAccServerInetAddressType + SYNTAX InetAddressType { ipv4(1), ipv6(2) } + DESCRIPTION + "An implementation is only required to support + IPv4 and globally unique IPv6 addresses." + + OBJECT radiusAccServerInetAddress + SYNTAX InetAddress ( SIZE (4|16) ) + DESCRIPTION + "An implementation is only required to support + IPv4 and globally unique IPv6 addresses." + + ::= { radiusAccClientMIBCompliances 2 } + + + -- units of conformance + + radiusAccClientMIBGroup OBJECT-GROUP + OBJECTS { radiusAccClientIdentifier, + radiusAccClientInvalidServerAddresses, + radiusAccServerAddress, + radiusAccClientServerPortNumber, + radiusAccClientRoundTripTime, + radiusAccClientRequests, + radiusAccClientRetransmissions, + radiusAccClientResponses, + radiusAccClientMalformedResponses, + radiusAccClientBadAuthenticators, + radiusAccClientPendingRequests, + radiusAccClientTimeouts, + radiusAccClientUnknownTypes, + radiusAccClientPacketsDropped + } + STATUS deprecated + DESCRIPTION + "The basic collection of objects providing management of + RADIUS Accounting Clients." + ::= { radiusAccClientMIBGroups 1 } + + + radiusAccClientExtMIBGroup OBJECT-GROUP + OBJECTS { radiusAccClientIdentifier, + radiusAccClientInvalidServerAddresses, + radiusAccServerInetAddressType, + radiusAccServerInetAddress, + radiusAccClientServerInetPortNumber, + radiusAccClientExtRoundTripTime, + radiusAccClientExtRequests, + radiusAccClientExtRetransmissions, + radiusAccClientExtResponses, + radiusAccClientExtMalformedResponses, + radiusAccClientExtBadAuthenticators, + radiusAccClientExtPendingRequests, + radiusAccClientExtTimeouts, + radiusAccClientExtUnknownTypes, + radiusAccClientExtPacketsDropped, + radiusAccClientCounterDiscontinuity + } + STATUS current + DESCRIPTION + "The basic collection of objects providing management of + RADIUS Accounting Clients." + ::= { radiusAccClientMIBGroups 2 } + + + END diff --git a/mibs/RADIUS-ACC-SERVER-MIB.mib b/mibs/RADIUS-ACC-SERVER-MIB.mib new file mode 100644 index 0000000..ca5516b --- /dev/null +++ b/mibs/RADIUS-ACC-SERVER-MIB.mib @@ -0,0 +1,732 @@ +RADIUS-ACC-SERVER-MIB DEFINITIONS ::= BEGIN + +IMPORTS + MODULE-IDENTITY, OBJECT-TYPE, OBJECT-IDENTITY, + Counter32, Integer32, + IpAddress, TimeTicks, mib-2 FROM SNMPv2-SMI + SnmpAdminString FROM SNMP-FRAMEWORK-MIB + InetAddressType, InetAddress FROM INET-ADDRESS-MIB + MODULE-COMPLIANCE, OBJECT-GROUP FROM SNMPv2-CONF; + +radiusAccServMIB MODULE-IDENTITY + LAST-UPDATED "200608210000Z" -- 21 August 2006 + ORGANIZATION "IETF RADIUS Extensions Working Group." + CONTACT-INFO + " Bernard Aboba + Microsoft + One Microsoft Way + Redmond, WA 98052 + US + + Phone: +1 425 936 6605 + EMail: bernarda@microsoft.com" + DESCRIPTION + "The MIB module for entities implementing the server + side of the Remote Authentication Dial-In User + Service (RADIUS) accounting protocol. Copyright (C) + The Internet Society (2006). This version of this + MIB module is part of RFC 4671; see the RFC itself + for full legal notices." + REVISION "200608210000Z" -- 21 August 2006 + DESCRIPTION + "Revised version as published in RFC 4671. This + version obsoletes that of RFC 2621 by deprecating + the MIB table containing IPv4-only address formats + and defining a new table to add support for version- + neutral IP address formats. The remaining MIB objects + from RFC 2621 are carried forward into this version." + REVISION "199906110000Z" -- 11 Jun 1999 + DESCRIPTION "Initial version as published in RFC 2621." + ::= { radiusAccounting 1 } + +radiusMIB OBJECT-IDENTITY + STATUS current + DESCRIPTION + "The OID assigned to RADIUS MIB work by the IANA." + ::= { mib-2 67 } + +radiusAccounting OBJECT IDENTIFIER ::= {radiusMIB 2} + +radiusAccServMIBObjects OBJECT IDENTIFIER + ::= { radiusAccServMIB 1 } + +radiusAccServ OBJECT IDENTIFIER + ::= { radiusAccServMIBObjects 1 } + +radiusAccServIdent OBJECT-TYPE + SYNTAX SnmpAdminString + MAX-ACCESS read-only + STATUS current + DESCRIPTION + "The implementation identification string for the + RADIUS accounting server software in use on the + system, for example, 'FNS-2.1'." + ::= {radiusAccServ 1} + +radiusAccServUpTime OBJECT-TYPE + SYNTAX TimeTicks + MAX-ACCESS read-only + STATUS current + DESCRIPTION + "If the server has a persistent state (e.g., a + process), this value will be the time elapsed (in + hundredths of a second) since the server process was + started. For software without persistent state, this + value will be zero." + ::= {radiusAccServ 2} + +radiusAccServResetTime OBJECT-TYPE + SYNTAX TimeTicks + MAX-ACCESS read-only + STATUS current + DESCRIPTION + "If the server has a persistent state (e.g., a process) + and supports a 'reset' operation (e.g., can be told to + re-read configuration files), this value will be the + time elapsed (in hundredths of a second) since the + server was 'reset.' For software that does not + have persistence or does not support a 'reset' + operation, this value will be zero." + ::= {radiusAccServ 3} + +radiusAccServConfigReset OBJECT-TYPE + SYNTAX INTEGER { other(1), + reset(2), + initializing(3), + running(4)} + MAX-ACCESS read-write + STATUS current + DESCRIPTION + "Status/action object to reinitialize any persistent + server state. When set to reset(2), any persistent + server state (such as a process) is reinitialized as + if the server had just been started. This value will + never be returned by a read operation. When read, + one of the following values will be returned: + other(1) - server in some unknown state; + initializing(3) - server (re)initializing; + running(4) - server currently running." + ::= {radiusAccServ 4} + +-- New Stats proposed by Dale E. Reed Jr (daler@iea.com) + +radiusAccServTotalRequests OBJECT-TYPE + SYNTAX Counter32 + UNITS "packets" + MAX-ACCESS read-only + STATUS current + DESCRIPTION + "The number of packets received on the + accounting port." + REFERENCE "RFC 2866 section 4.1" + ::= { radiusAccServ 5 } + +radiusAccServTotalInvalidRequests OBJECT-TYPE + SYNTAX Counter32 + UNITS "packets" + MAX-ACCESS read-only + STATUS current + DESCRIPTION + "The number of RADIUS Accounting-Request packets + received from unknown addresses." + REFERENCE "RFC 2866 sections 2, 4.1" + ::= { radiusAccServ 6 } + +radiusAccServTotalDupRequests OBJECT-TYPE + SYNTAX Counter32 + UNITS "packets" + MAX-ACCESS read-only + STATUS current + DESCRIPTION + "The number of duplicate RADIUS Accounting-Request + packets received." + REFERENCE "RFC 2866 section 4.1" + ::= { radiusAccServ 7 } + +radiusAccServTotalResponses OBJECT-TYPE + SYNTAX Counter32 + UNITS "packets" + MAX-ACCESS read-only + STATUS current + DESCRIPTION + "The number of RADIUS Accounting-Response packets + sent." + REFERENCE "RFC 2866 section 4.2" + ::= { radiusAccServ 8 } + +radiusAccServTotalMalformedRequests OBJECT-TYPE + SYNTAX Counter32 + UNITS "packets" + MAX-ACCESS read-only + STATUS current + DESCRIPTION + "The number of malformed RADIUS Accounting-Request + packets received. Bad authenticators or unknown + types are not included as malformed Access-Requests." + REFERENCE "RFC 2866 section 3" + ::= { radiusAccServ 9 } + +radiusAccServTotalBadAuthenticators OBJECT-TYPE + SYNTAX Counter32 + UNITS "packets" + MAX-ACCESS read-only + STATUS current + DESCRIPTION + "The number of RADIUS Accounting-Request packets + that contained an invalid authenticator." + REFERENCE "RFC 2866 section 3" + ::= { radiusAccServ 10 } + +radiusAccServTotalPacketsDropped OBJECT-TYPE + SYNTAX Counter32 + UNITS "packets" + MAX-ACCESS read-only + STATUS current + DESCRIPTION + "The number of incoming packets silently discarded + for a reason other than malformed, bad authenticators, + or unknown types." + REFERENCE "RFC 2866 section 3" + ::= { radiusAccServ 11 } + +radiusAccServTotalNoRecords OBJECT-TYPE + SYNTAX Counter32 + UNITS "packets" + MAX-ACCESS read-only + STATUS current + DESCRIPTION + "The number of RADIUS Accounting-Request packets + that were received and responded to but not + recorded." + ::= { radiusAccServ 12 } + +radiusAccServTotalUnknownTypes OBJECT-TYPE + SYNTAX Counter32 + UNITS "packets" + MAX-ACCESS read-only + STATUS current + DESCRIPTION + "The number of RADIUS packets of unknown type that + were received." + REFERENCE "RFC 2866 section 4" + ::= { radiusAccServ 13 } + +-- End of new + +radiusAccClientTable OBJECT-TYPE + SYNTAX SEQUENCE OF RadiusAccClientEntry + MAX-ACCESS not-accessible + STATUS deprecated + DESCRIPTION + "The (conceptual) table listing the RADIUS accounting + clients with which the server shares a secret." + ::= { radiusAccServ 14 } + +radiusAccClientEntry OBJECT-TYPE + SYNTAX RadiusAccClientEntry + MAX-ACCESS not-accessible + STATUS deprecated + DESCRIPTION + "An entry (conceptual row) representing a RADIUS + accounting client with which the server shares a + secret." + INDEX { radiusAccClientIndex } + ::= { radiusAccClientTable 1 } + +RadiusAccClientEntry ::= SEQUENCE { + radiusAccClientIndex Integer32, + radiusAccClientAddress IpAddress, + radiusAccClientID SnmpAdminString, + radiusAccServPacketsDropped Counter32, + radiusAccServRequests Counter32, + radiusAccServDupRequests Counter32, + radiusAccServResponses Counter32, + radiusAccServBadAuthenticators Counter32, + radiusAccServMalformedRequests Counter32, + radiusAccServNoRecords Counter32, + radiusAccServUnknownTypes Counter32 +} + +radiusAccClientIndex OBJECT-TYPE + SYNTAX Integer32 (1..2147483647) + MAX-ACCESS not-accessible + STATUS deprecated + DESCRIPTION + "A number uniquely identifying each RADIUS accounting + client with which this server communicates." + ::= { radiusAccClientEntry 1 } + +radiusAccClientAddress OBJECT-TYPE + SYNTAX IpAddress + MAX-ACCESS read-only + STATUS deprecated + DESCRIPTION + "The NAS-IP-Address of the RADIUS accounting client + referred to in this table entry." + ::= { radiusAccClientEntry 2 } + +radiusAccClientID OBJECT-TYPE + SYNTAX SnmpAdminString + MAX-ACCESS read-only + STATUS deprecated + DESCRIPTION + "The NAS-Identifier of the RADIUS accounting client + referred to in this table entry. This is not + necessarily the same as sysName in MIB II." + REFERENCE "RFC 2865 section 5.32" + ::= { radiusAccClientEntry 3 } + +-- Server Counters +-- +-- Requests - DupRequests - BadAuthenticators - MalformedRequests - +-- UnknownTypes - PacketsDropped - Responses = Pending +-- +-- Requests - DupRequests - BadAuthenticators - MalformedRequests - +-- UnknownTypes - PacketsDropped - NoRecords = entries logged + +radiusAccServPacketsDropped OBJECT-TYPE + SYNTAX Counter32 + UNITS "packets" + MAX-ACCESS read-only + STATUS deprecated + DESCRIPTION + "The number of incoming packets received + from this client and silently discarded + for a reason other than malformed, bad + authenticators, or unknown types." + REFERENCE "RFC 2866 section 3" + ::= { radiusAccClientEntry 4 } + +radiusAccServRequests OBJECT-TYPE + SYNTAX Counter32 + UNITS "packets" + MAX-ACCESS read-only + STATUS deprecated + DESCRIPTION + "The number of packets received from this + client on the accounting port." + REFERENCE "RFC 2866 section 4.1" + ::= { radiusAccClientEntry 5 } + +radiusAccServDupRequests OBJECT-TYPE + SYNTAX Counter32 + UNITS "packets" + MAX-ACCESS read-only + STATUS deprecated + DESCRIPTION + "The number of duplicate RADIUS Accounting-Request + packets received from this client." + REFERENCE "RFC 2866 section 4.1" + ::= { radiusAccClientEntry 6 } + +radiusAccServResponses OBJECT-TYPE + SYNTAX Counter32 + UNITS "packets" + MAX-ACCESS read-only + STATUS deprecated + DESCRIPTION + "The number of RADIUS Accounting-Response packets + sent to this client." + REFERENCE "RFC 2866 section 4.2" + ::= { radiusAccClientEntry 7 } + +radiusAccServBadAuthenticators OBJECT-TYPE + SYNTAX Counter32 + UNITS "packets" + MAX-ACCESS read-only + STATUS deprecated + DESCRIPTION + "The number of RADIUS Accounting-Request packets + that contained invalid authenticators received + from this client." + REFERENCE "RFC 2866 section 3" + ::= { radiusAccClientEntry 8 } + +radiusAccServMalformedRequests OBJECT-TYPE + SYNTAX Counter32 + UNITS "packets" + MAX-ACCESS read-only + STATUS deprecated + DESCRIPTION + "The number of malformed RADIUS Accounting-Request + packets that were received from this client. + Bad authenticators and unknown types + are not included as malformed Accounting-Requests." + REFERENCE "RFC 2866 section 3" + ::= { radiusAccClientEntry 9 } + +radiusAccServNoRecords OBJECT-TYPE + SYNTAX Counter32 + UNITS "packets" + MAX-ACCESS read-only + STATUS deprecated + DESCRIPTION + "The number of RADIUS Accounting-Request packets + that were received and responded to but not + recorded." + ::= { radiusAccClientEntry 10 } + +radiusAccServUnknownTypes OBJECT-TYPE + SYNTAX Counter32 + UNITS "packets" + MAX-ACCESS read-only + STATUS deprecated + DESCRIPTION + "The number of RADIUS packets of unknown type that + were received from this client." + REFERENCE "RFC 2866 section 4" + ::= { radiusAccClientEntry 11 } + + +radiusAccClientExtTable OBJECT-TYPE + SYNTAX SEQUENCE OF RadiusAccClientExtEntry + MAX-ACCESS not-accessible + STATUS current + DESCRIPTION + "The (conceptual) table listing the RADIUS accounting + clients with which the server shares a secret." + ::= { radiusAccServ 15 } + +radiusAccClientExtEntry OBJECT-TYPE + SYNTAX RadiusAccClientExtEntry + MAX-ACCESS not-accessible + STATUS current + DESCRIPTION + "An entry (conceptual row) representing a RADIUS + accounting client with which the server shares a + secret." + INDEX { radiusAccClientExtIndex } + ::= { radiusAccClientExtTable 1 } + +RadiusAccClientExtEntry ::= SEQUENCE { + radiusAccClientExtIndex Integer32, + radiusAccClientInetAddressType InetAddressType, + radiusAccClientInetAddress InetAddress, + radiusAccClientExtID SnmpAdminString, + radiusAccServExtPacketsDropped Counter32, + radiusAccServExtRequests Counter32, + radiusAccServExtDupRequests Counter32, + radiusAccServExtResponses Counter32, + radiusAccServExtBadAuthenticators Counter32, + radiusAccServExtMalformedRequests Counter32, + radiusAccServExtNoRecords Counter32, + radiusAccServExtUnknownTypes Counter32, + radiusAccServerCounterDiscontinuity TimeTicks +} + +radiusAccClientExtIndex OBJECT-TYPE + SYNTAX Integer32 (1..2147483647) + MAX-ACCESS not-accessible + STATUS current + DESCRIPTION + "A number uniquely identifying each RADIUS accounting + client with which this server communicates." + ::= { radiusAccClientExtEntry 1 } + + radiusAccClientInetAddressType OBJECT-TYPE + SYNTAX InetAddressType + MAX-ACCESS read-only + STATUS current + DESCRIPTION + "The type of address format used for the + radiusAccClientInetAddress object." + ::= { radiusAccClientExtEntry 2 } + + radiusAccClientInetAddress OBJECT-TYPE + SYNTAX InetAddress + MAX-ACCESS read-only + STATUS current + DESCRIPTION + "The IP address of the RADIUS accounting + client referred to in this table entry, using + the IPv6 address format." + ::= { radiusAccClientExtEntry 3 } + +radiusAccClientExtID OBJECT-TYPE + SYNTAX SnmpAdminString + MAX-ACCESS read-only + STATUS current + DESCRIPTION + "The NAS-Identifier of the RADIUS accounting client + referred to in this table entry. This is not + necessarily the same as sysName in MIB II." + REFERENCE "RFC 2865 section 5.32" + ::= { radiusAccClientExtEntry 4 } + +-- Server Counters +-- +-- Requests - DupRequests - BadAuthenticators - MalformedRequests - +-- UnknownTypes - PacketsDropped - Responses = Pending +-- +-- Requests - DupRequests - BadAuthenticators - MalformedRequests - +-- UnknownTypes - PacketsDropped - NoRecords = entries logged + +radiusAccServExtPacketsDropped OBJECT-TYPE + SYNTAX Counter32 + UNITS "packets" + MAX-ACCESS read-only + STATUS current + DESCRIPTION + "The number of incoming packets received from this + client and silently discarded for a reason other + than malformed, bad authenticators, or unknown types. + This counter may experience a discontinuity when the + RADIUS Accounting Server module within the managed + entity is reinitialized, as indicated by the current + value of radiusAccServerCounterDiscontinuity." + REFERENCE "RFC 2866 section 3" + ::= { radiusAccClientExtEntry 5 } + +radiusAccServExtRequests OBJECT-TYPE + SYNTAX Counter32 + UNITS "packets" + MAX-ACCESS read-only + STATUS current + DESCRIPTION + "The number of packets received from this + client on the accounting port. This counter + may experience a discontinuity when the + RADIUS Accounting Server module within the + managed entity is reinitialized, as indicated by + the current value of + radiusAccServerCounterDiscontinuity." + REFERENCE "RFC 2866 section 4.1" + ::= { radiusAccClientExtEntry 6 } + +radiusAccServExtDupRequests OBJECT-TYPE + SYNTAX Counter32 + UNITS "packets" + MAX-ACCESS read-only + STATUS current + DESCRIPTION + "The number of duplicate RADIUS Accounting-Request + packets received from this client. This counter + may experience a discontinuity when the RADIUS + Accounting Server module within the managed + entity is reinitialized, as indicated by the + current value of + radiusAccServerCounterDiscontinuity." + REFERENCE "RFC 2866 section 4.1" + ::= { radiusAccClientExtEntry 7 } + +radiusAccServExtResponses OBJECT-TYPE + SYNTAX Counter32 + UNITS "packets" + MAX-ACCESS read-only + STATUS current + DESCRIPTION + "The number of RADIUS Accounting-Response packets + sent to this client. This counter may experience + a discontinuity when the RADIUS Accounting Server + module within the managed entity is reinitialized, + as indicated by the current value of + radiusAccServerCounterDiscontinuity." + REFERENCE "RFC 2866 section 4.2" + ::= { radiusAccClientExtEntry 8 } + +radiusAccServExtBadAuthenticators OBJECT-TYPE + SYNTAX Counter32 + UNITS "packets" + MAX-ACCESS read-only + STATUS current + DESCRIPTION + "The number of RADIUS Accounting-Request packets + that contained invalid authenticators received + from this client. This counter may experience a + discontinuity when the RADIUS Accounting Server + module within the managed entity is reinitialized, + as indicated by the current value of + radiusAccServerCounterDiscontinuity." + REFERENCE "RFC 2866 section 3" + ::= { radiusAccClientExtEntry 9 } + +radiusAccServExtMalformedRequests OBJECT-TYPE + SYNTAX Counter32 + UNITS "packets" + MAX-ACCESS read-only + STATUS current + DESCRIPTION + "The number of malformed RADIUS Accounting-Request + packets that were received from this client. + Bad authenticators and unknown types are not + included as malformed Accounting-Requests. This + counter may experience a discontinuity when the + RADIUS Accounting Server module within the managed + entity is reinitialized, as indicated by the current + value of radiusAccServerCounterDiscontinuity." + REFERENCE "RFC 2866 section 3" + ::= { radiusAccClientExtEntry 10 } + +radiusAccServExtNoRecords OBJECT-TYPE + SYNTAX Counter32 + UNITS "packets" + MAX-ACCESS read-only + STATUS current + DESCRIPTION + "The number of RADIUS Accounting-Request packets + that were received and responded to but not + recorded. This counter may experience a + discontinuity when the RADIUS Accounting Server + module within the managed entity is reinitialized, + as indicated by the current value of + radiusAccServerCounterDiscontinuity." + ::= { radiusAccClientExtEntry 11 } + +radiusAccServExtUnknownTypes OBJECT-TYPE + SYNTAX Counter32 + UNITS "packets" + MAX-ACCESS read-only + STATUS current + DESCRIPTION + "The number of RADIUS packets of unknown type that + were received from this client. This counter may + experience a discontinuity when the RADIUS Accounting + Server module within the managed entity is + reinitialized, as indicated by the current value of + radiusAccServerCounterDiscontinuity." + REFERENCE "RFC 2866 section 4" + ::= { radiusAccClientExtEntry 12 } + +radiusAccServerCounterDiscontinuity OBJECT-TYPE + SYNTAX TimeTicks + UNITS "centiseconds" + MAX-ACCESS read-only + STATUS current + DESCRIPTION + "The number of centiseconds since the last + discontinuity in the RADIUS Accounting Server + counters. A discontinuity may be the result of + a reinitialization of the RADIUS Accounting Server + module within the managed entity." + ::= { radiusAccClientExtEntry 13 } + + +-- conformance information + +radiusAccServMIBConformance OBJECT IDENTIFIER + ::= { radiusAccServMIB 2 } + +radiusAccServMIBCompliances OBJECT IDENTIFIER + ::= { radiusAccServMIBConformance 1 } + +radiusAccServMIBGroups OBJECT IDENTIFIER + ::= { radiusAccServMIBConformance 2 } + + +-- compliance statements + +radiusAccServMIBCompliance MODULE-COMPLIANCE + STATUS deprecated + DESCRIPTION + "The compliance statement for accounting servers + implementing the RADIUS Accounting Server MIB. + Implementation of this module is for IPv4-only + entities, or for backwards compatibility use with + entities that support both IPv4 and IPv6." + MODULE -- this module + MANDATORY-GROUPS { radiusAccServMIBGroup } + + OBJECT radiusAccServConfigReset + WRITE-SYNTAX INTEGER { reset(2) } + DESCRIPTION "The only SETable value is 'reset' (2)." + + ::= { radiusAccServMIBCompliances 1 } + +radiusAccServExtMIBCompliance MODULE-COMPLIANCE + STATUS current + DESCRIPTION + "The compliance statement for accounting + servers implementing the RADIUS Accounting + Server IPv6 Extensions MIB. Implementation of + this module is for entities that support IPv6, + or support IPv4 and IPv6." + MODULE -- this module + MANDATORY-GROUPS { radiusAccServExtMIBGroup } + + OBJECT radiusAccServConfigReset + WRITE-SYNTAX INTEGER { reset(2) } + DESCRIPTION "The only SETable value is 'reset' (2)." + + OBJECT radiusAccClientInetAddressType + SYNTAX InetAddressType { ipv4(1), ipv6(2) } + DESCRIPTION + "An implementation is only required to support + IPv4 and globally unique IPv6 addresses." + + OBJECT radiusAccClientInetAddress + SYNTAX InetAddress ( SIZE (4|16) ) + DESCRIPTION + "An implementation is only required to support + IPv4 and globally unique IPv6 addresses." + + ::= { radiusAccServMIBCompliances 2 } + + +-- units of conformance + +radiusAccServMIBGroup OBJECT-GROUP + OBJECTS {radiusAccServIdent, + radiusAccServUpTime, + radiusAccServResetTime, + radiusAccServConfigReset, + radiusAccServTotalRequests, + radiusAccServTotalInvalidRequests, + radiusAccServTotalDupRequests, + radiusAccServTotalResponses, + radiusAccServTotalMalformedRequests, + radiusAccServTotalBadAuthenticators, + radiusAccServTotalPacketsDropped, + radiusAccServTotalNoRecords, + radiusAccServTotalUnknownTypes, + radiusAccClientAddress, + radiusAccClientID, + radiusAccServPacketsDropped, + radiusAccServRequests, + radiusAccServDupRequests, + radiusAccServResponses, + radiusAccServBadAuthenticators, + radiusAccServMalformedRequests, + radiusAccServNoRecords, + radiusAccServUnknownTypes + } + STATUS deprecated + DESCRIPTION + "The collection of objects providing management of + a RADIUS Accounting Server." + ::= { radiusAccServMIBGroups 1 } + +radiusAccServExtMIBGroup OBJECT-GROUP + OBJECTS {radiusAccServIdent, + radiusAccServUpTime, + radiusAccServResetTime, + radiusAccServConfigReset, + radiusAccServTotalRequests, + radiusAccServTotalInvalidRequests, + radiusAccServTotalDupRequests, + radiusAccServTotalResponses, + radiusAccServTotalMalformedRequests, + radiusAccServTotalBadAuthenticators, + radiusAccServTotalPacketsDropped, + radiusAccServTotalNoRecords, + radiusAccServTotalUnknownTypes, + radiusAccClientInetAddressType, + radiusAccClientInetAddress, + radiusAccClientExtID, + radiusAccServExtPacketsDropped, + radiusAccServExtRequests, + radiusAccServExtDupRequests, + radiusAccServExtResponses, + radiusAccServExtBadAuthenticators, + radiusAccServExtMalformedRequests, + radiusAccServExtNoRecords, + radiusAccServExtUnknownTypes, + radiusAccServerCounterDiscontinuity + } + STATUS current + DESCRIPTION + "The collection of objects providing management of + a RADIUS Accounting Server." + ::= { radiusAccServMIBGroups 2 } + +END + diff --git a/mibs/RADIUS-AUTH-CLIENT-MIB.mib b/mibs/RADIUS-AUTH-CLIENT-MIB.mib new file mode 100644 index 0000000..0954c59 --- /dev/null +++ b/mibs/RADIUS-AUTH-CLIENT-MIB.mib @@ -0,0 +1,708 @@ + RADIUS-AUTH-CLIENT-MIB DEFINITIONS ::= BEGIN + + IMPORTS + MODULE-IDENTITY, OBJECT-TYPE, OBJECT-IDENTITY, + Counter32, Integer32, Gauge32, + IpAddress, TimeTicks, mib-2 FROM SNMPv2-SMI + SnmpAdminString FROM SNMP-FRAMEWORK-MIB + InetAddressType, InetAddress, + InetPortNumber FROM INET-ADDRESS-MIB + MODULE-COMPLIANCE, OBJECT-GROUP FROM SNMPv2-CONF; + + + radiusAuthClientMIB MODULE-IDENTITY + LAST-UPDATED "200608210000Z" -- 21 August 2006 + ORGANIZATION "IETF RADIUS Extensions Working Group." + CONTACT-INFO + " Bernard Aboba + Microsoft + One Microsoft Way + Redmond, WA 98052 + US + Phone: +1 425 936 6605 + EMail: bernarda@microsoft.com" + DESCRIPTION + "The MIB module for entities implementing the client + side of the Remote Authentication Dial-In User Service + (RADIUS) authentication protocol. Copyright (C) The + Internet Society (2006). This version of this MIB + module is part of RFC 4668; see the RFC itself for + full legal notices." + REVISION "200608210000Z" -- 21 August 2006 + DESCRIPTION + "Revised version as published in RFC 4668. This + version obsoletes that of RFC 2618 by deprecating + the MIB table containing IPv4-only address formats + and defining a new table to add support for version + neutral IP address formats. The remaining MIB objects + from RFC 2618 are carried forward into this version." + REVISION "199906110000Z" -- 11 Jun 1999 + DESCRIPTION "Initial version as published in RFC 2618." + ::= { radiusAuthentication 2 } + + radiusMIB OBJECT-IDENTITY + STATUS current + DESCRIPTION + "The OID assigned to RADIUS MIB work by the IANA." + ::= { mib-2 67 } + + radiusAuthentication OBJECT IDENTIFIER ::= {radiusMIB 1} + + radiusAuthClientMIBObjects OBJECT IDENTIFIER + ::= { radiusAuthClientMIB 1 } + + radiusAuthClient OBJECT IDENTIFIER + ::= { radiusAuthClientMIBObjects 1 } + + radiusAuthClientInvalidServerAddresses OBJECT-TYPE + SYNTAX Counter32 + UNITS "packets" + MAX-ACCESS read-only + STATUS current + DESCRIPTION + "The number of RADIUS Access-Response packets + received from unknown addresses." + ::= { radiusAuthClient 1 } + + radiusAuthClientIdentifier OBJECT-TYPE + SYNTAX SnmpAdminString + MAX-ACCESS read-only + STATUS current + DESCRIPTION + "The NAS-Identifier of the RADIUS authentication client. + This is not necessarily the same as sysName in MIB II." + REFERENCE "RFC 2865 section 5.32" + ::= { radiusAuthClient 2 } + + radiusAuthServerTable OBJECT-TYPE + SYNTAX SEQUENCE OF RadiusAuthServerEntry + MAX-ACCESS not-accessible + STATUS deprecated + DESCRIPTION + "The (conceptual) table listing the RADIUS authentication + servers with which the client shares a secret." + ::= { radiusAuthClient 3 } + + radiusAuthServerEntry OBJECT-TYPE + SYNTAX RadiusAuthServerEntry + MAX-ACCESS not-accessible + STATUS deprecated + DESCRIPTION + "An entry (conceptual row) representing a RADIUS + authentication server with which the client shares + a secret." + INDEX { radiusAuthServerIndex } + ::= { radiusAuthServerTable 1 } + + RadiusAuthServerEntry ::= SEQUENCE { + radiusAuthServerIndex Integer32, + radiusAuthServerAddress IpAddress, + radiusAuthClientServerPortNumber Integer32, + radiusAuthClientRoundTripTime TimeTicks, + radiusAuthClientAccessRequests Counter32, + radiusAuthClientAccessRetransmissions Counter32, + radiusAuthClientAccessAccepts Counter32, + radiusAuthClientAccessRejects Counter32, + radiusAuthClientAccessChallenges Counter32, + radiusAuthClientMalformedAccessResponses Counter32, + radiusAuthClientBadAuthenticators Counter32, + radiusAuthClientPendingRequests Gauge32, + radiusAuthClientTimeouts Counter32, + radiusAuthClientUnknownTypes Counter32, + radiusAuthClientPacketsDropped Counter32 + } + + radiusAuthServerIndex OBJECT-TYPE + SYNTAX Integer32 (1..2147483647) + MAX-ACCESS not-accessible + STATUS deprecated + DESCRIPTION + "A number uniquely identifying each RADIUS + Authentication server with which this client + communicates." + ::= { radiusAuthServerEntry 1 } + + radiusAuthServerAddress OBJECT-TYPE + SYNTAX IpAddress + MAX-ACCESS read-only + STATUS deprecated + DESCRIPTION + "The IP address of the RADIUS authentication server + referred to in this table entry." + ::= { radiusAuthServerEntry 2 } + + radiusAuthClientServerPortNumber OBJECT-TYPE + SYNTAX Integer32 (0..65535) + MAX-ACCESS read-only + STATUS deprecated + DESCRIPTION + "The UDP port the client is using to send requests to + this server." + REFERENCE "RFC 2865 section 3" + ::= { radiusAuthServerEntry 3 } + + radiusAuthClientRoundTripTime OBJECT-TYPE + SYNTAX TimeTicks + MAX-ACCESS read-only + STATUS deprecated + DESCRIPTION + "The time interval (in hundredths of a second) between + the most recent Access-Reply/Access-Challenge and the + Access-Request that matched it from this RADIUS + authentication server." + ::= { radiusAuthServerEntry 4 } + + -- Request/Response statistics + -- + -- TotalIncomingPackets = Accepts + Rejects + Challenges + + -- UnknownTypes + -- + -- TotalIncomingPackets - MalformedResponses - + -- BadAuthenticators - UnknownTypes - PacketsDropped = + -- Successfully received + -- + -- AccessRequests + PendingRequests + ClientTimeouts = + -- Successfully received + -- + -- + + radiusAuthClientAccessRequests OBJECT-TYPE + SYNTAX Counter32 + UNITS "packets" + MAX-ACCESS read-only + STATUS deprecated + DESCRIPTION + "The number of RADIUS Access-Request packets sent + to this server. This does not include retransmissions." + REFERENCE "RFC 2865 section 4.1" + ::= { radiusAuthServerEntry 5 } + + radiusAuthClientAccessRetransmissions OBJECT-TYPE + SYNTAX Counter32 + UNITS "packets" + MAX-ACCESS read-only + STATUS deprecated + DESCRIPTION + "The number of RADIUS Access-Request packets + retransmitted to this RADIUS authentication server." + REFERENCE "RFC 2865 sections 2.5, 4.1" + ::= { radiusAuthServerEntry 6 } + + radiusAuthClientAccessAccepts OBJECT-TYPE + SYNTAX Counter32 + UNITS "packets" + MAX-ACCESS read-only + STATUS deprecated + DESCRIPTION + "The number of RADIUS Access-Accept packets + (valid or invalid) received from this server." + REFERENCE "RFC 2865 section 4.2" + ::= { radiusAuthServerEntry 7 } + + radiusAuthClientAccessRejects OBJECT-TYPE + SYNTAX Counter32 + UNITS "packets" + MAX-ACCESS read-only + STATUS deprecated + DESCRIPTION + "The number of RADIUS Access-Reject packets + (valid or invalid) received from this server." + REFERENCE "RFC 2865 section 4.3" + ::= { radiusAuthServerEntry 8 } + radiusAuthClientAccessChallenges OBJECT-TYPE + SYNTAX Counter32 + UNITS "packets" + MAX-ACCESS read-only + STATUS deprecated + DESCRIPTION + "The number of RADIUS Access-Challenge packets + (valid or invalid) received from this server." + REFERENCE "RFC 2865 section 4.4" + ::= { radiusAuthServerEntry 9 } + + -- "Access-Response" includes an Access-Accept, Access-Challenge + -- or Access-Reject + + radiusAuthClientMalformedAccessResponses OBJECT-TYPE + SYNTAX Counter32 + UNITS "packets" + MAX-ACCESS read-only + STATUS deprecated + DESCRIPTION + "The number of malformed RADIUS Access-Response + packets received from this server. + Malformed packets include packets with + an invalid length. Bad authenticators or + Message Authenticator attributes or unknown types + are not included as malformed access responses." + ::= { radiusAuthServerEntry 10 } + + radiusAuthClientBadAuthenticators OBJECT-TYPE + SYNTAX Counter32 + UNITS "packets" + MAX-ACCESS read-only + STATUS deprecated + DESCRIPTION + "The number of RADIUS Access-Response packets + containing invalid authenticators or Message + Authenticator attributes received from this server." + REFERENCE "RFC 2865 section 3, RFC 2869 section 5.14" + ::= { radiusAuthServerEntry 11 } + + radiusAuthClientPendingRequests OBJECT-TYPE + SYNTAX Gauge32 + MAX-ACCESS read-only + STATUS deprecated + DESCRIPTION + "The number of RADIUS Access-Request packets + destined for this server that have not yet timed out + or received a response. This variable is incremented + when an Access-Request is sent and decremented due to + receipt of an Access-Accept, Access-Reject, + Access-Challenge, timeout, or retransmission." + REFERENCE "RFC 2865 section 2" + ::= { radiusAuthServerEntry 12 } + + radiusAuthClientTimeouts OBJECT-TYPE + SYNTAX Counter32 + UNITS "timeouts" + MAX-ACCESS read-only + STATUS deprecated + DESCRIPTION + "The number of authentication timeouts to this server. + After a timeout, the client may retry to the same + server, send to a different server, or + give up. A retry to the same server is counted as a + retransmit as well as a timeout. A send to a different + server is counted as a Request as well as a timeout." + REFERENCE "RFC 2865 section 2, RFC 2869 section 2.3.2" + ::= { radiusAuthServerEntry 13 } + + radiusAuthClientUnknownTypes OBJECT-TYPE + SYNTAX Counter32 + UNITS "packets" + MAX-ACCESS read-only + STATUS deprecated + DESCRIPTION + "The number of RADIUS packets of unknown type that + were received from this server on the authentication + port." + ::= { radiusAuthServerEntry 14 } + + radiusAuthClientPacketsDropped OBJECT-TYPE + SYNTAX Counter32 + UNITS "packets" + MAX-ACCESS read-only + STATUS deprecated + DESCRIPTION + "The number of RADIUS packets that were + received from this server on the authentication port + and dropped for some other reason." + ::= { radiusAuthServerEntry 15 } + + + -- New MIB Objects in this revision + + radiusAuthServerExtTable OBJECT-TYPE + SYNTAX SEQUENCE OF RadiusAuthServerExtEntry + MAX-ACCESS not-accessible + STATUS current + DESCRIPTION + "The (conceptual) table listing the RADIUS authentication + servers with which the client shares a secret." + ::= { radiusAuthClient 4 } + + radiusAuthServerExtEntry OBJECT-TYPE + SYNTAX RadiusAuthServerExtEntry + MAX-ACCESS not-accessible + STATUS current + DESCRIPTION + "An entry (conceptual row) representing a RADIUS + authentication server with which the client shares + a secret." + INDEX { radiusAuthServerExtIndex } + ::= { radiusAuthServerExtTable 1 } + + RadiusAuthServerExtEntry ::= SEQUENCE { + radiusAuthServerExtIndex Integer32, + radiusAuthServerInetAddressType InetAddressType, + radiusAuthServerInetAddress InetAddress, + radiusAuthClientServerInetPortNumber InetPortNumber, + radiusAuthClientExtRoundTripTime TimeTicks, + radiusAuthClientExtAccessRequests Counter32, + radiusAuthClientExtAccessRetransmissions Counter32, + radiusAuthClientExtAccessAccepts Counter32, + radiusAuthClientExtAccessRejects Counter32, + radiusAuthClientExtAccessChallenges Counter32, + radiusAuthClientExtMalformedAccessResponses Counter32, + radiusAuthClientExtBadAuthenticators Counter32, + radiusAuthClientExtPendingRequests Gauge32, + radiusAuthClientExtTimeouts Counter32, + radiusAuthClientExtUnknownTypes Counter32, + radiusAuthClientExtPacketsDropped Counter32, + radiusAuthClientCounterDiscontinuity TimeTicks + } + + radiusAuthServerExtIndex OBJECT-TYPE + SYNTAX Integer32 (1..2147483647) + MAX-ACCESS not-accessible + STATUS current + DESCRIPTION + "A number uniquely identifying each RADIUS + Authentication server with which this client + communicates." + ::= { radiusAuthServerExtEntry 1 } + radiusAuthServerInetAddressType OBJECT-TYPE + SYNTAX InetAddressType + MAX-ACCESS read-only + STATUS current + DESCRIPTION + "The type of address format used for the + radiusAuthServerInetAddress object." + ::= { radiusAuthServerExtEntry 2 } + + radiusAuthServerInetAddress OBJECT-TYPE + SYNTAX InetAddress + MAX-ACCESS read-only + STATUS current + DESCRIPTION + "The IP address of the RADIUS authentication + server referred to in this table entry, using + the version-neutral IP address format." + ::= { radiusAuthServerExtEntry 3 } + + radiusAuthClientServerInetPortNumber OBJECT-TYPE + SYNTAX InetPortNumber ( 1..65535 ) + MAX-ACCESS read-only + STATUS current + DESCRIPTION + "The UDP port the client is using to send requests + to this server. The value of zero (0) is invalid." + REFERENCE "RFC 2865 section 3" + ::= { radiusAuthServerExtEntry 4 } + + radiusAuthClientExtRoundTripTime OBJECT-TYPE + SYNTAX TimeTicks + MAX-ACCESS read-only + STATUS current + DESCRIPTION + "The time interval (in hundredths of a second) between + the most recent Access-Reply/Access-Challenge and the + Access-Request that matched it from this RADIUS + authentication server." + REFERENCE "RFC 2865 section 2" + ::= { radiusAuthServerExtEntry 5 } + + -- Request/Response statistics + -- + -- TotalIncomingPackets = Accepts + Rejects + Challenges + + -- UnknownTypes + -- + -- TotalIncomingPackets - MalformedResponses - + -- BadAuthenticators - UnknownTypes - PacketsDropped = + -- Successfully received + -- + -- AccessRequests + PendingRequests + ClientTimeouts = + -- Successfully received + -- + -- + + radiusAuthClientExtAccessRequests OBJECT-TYPE + SYNTAX Counter32 + UNITS "packets" + MAX-ACCESS read-only + STATUS current + DESCRIPTION + "The number of RADIUS Access-Request packets sent + to this server. This does not include retransmissions. + This counter may experience a discontinuity when the + RADIUS Client module within the managed entity is + reinitialized, as indicated by the current value of + radiusAuthClientCounterDiscontinuity." + REFERENCE "RFC 2865 section 4.1" + ::= { radiusAuthServerExtEntry 6 } + + radiusAuthClientExtAccessRetransmissions OBJECT-TYPE + SYNTAX Counter32 + UNITS "packets" + MAX-ACCESS read-only + STATUS current + DESCRIPTION + "The number of RADIUS Access-Request packets + retransmitted to this RADIUS authentication server. + This counter may experience a discontinuity when + the RADIUS Client module within the managed entity + is reinitialized, as indicated by the current value + of radiusAuthClientCounterDiscontinuity." + REFERENCE "RFC 2865 sections 2.5, 4.1" + ::= { radiusAuthServerExtEntry 7 } + + radiusAuthClientExtAccessAccepts OBJECT-TYPE + SYNTAX Counter32 + UNITS "packets" + MAX-ACCESS read-only + STATUS current + DESCRIPTION + "The number of RADIUS Access-Accept packets + (valid or invalid) received from this server. + This counter may experience a discontinuity when + the RADIUS Client module within the managed entity + is reinitialized, as indicated by the current value + of radiusAuthClientCounterDiscontinuity." + REFERENCE "RFC 2865 section 4.2" + ::= { radiusAuthServerExtEntry 8 } + + radiusAuthClientExtAccessRejects OBJECT-TYPE + SYNTAX Counter32 + UNITS "packets" + MAX-ACCESS read-only + STATUS current + DESCRIPTION + "The number of RADIUS Access-Reject packets + (valid or invalid) received from this server. + This counter may experience a discontinuity when + the RADIUS Client module within the managed + entity is reinitialized, as indicated by the + current value of + radiusAuthClientCounterDiscontinuity." + REFERENCE "RFC 2865 section 4.3" + ::= { radiusAuthServerExtEntry 9 } + + radiusAuthClientExtAccessChallenges OBJECT-TYPE + SYNTAX Counter32 + UNITS "packets" + MAX-ACCESS read-only + STATUS current + DESCRIPTION + "The number of RADIUS Access-Challenge packets + (valid or invalid) received from this server. + This counter may experience a discontinuity when + the RADIUS Client module within the managed + entity is reinitialized, as indicated by the + current value of + radiusAuthClientCounterDiscontinuity." + REFERENCE "RFC 2865 section 4.4" + ::= { radiusAuthServerExtEntry 10 } + + -- "Access-Response" includes an Access-Accept, Access-Challenge, + -- or Access-Reject + + radiusAuthClientExtMalformedAccessResponses OBJECT-TYPE + SYNTAX Counter32 + UNITS "packets" + MAX-ACCESS read-only + STATUS current + DESCRIPTION + "The number of malformed RADIUS Access-Response + packets received from this server. + Malformed packets include packets with + an invalid length. Bad authenticators or + Message Authenticator attributes or unknown types + are not included as malformed access responses. + This counter may experience a discontinuity when + the RADIUS Client module within the managed entity + is reinitialized, as indicated by the current value + of radiusAuthClientCounterDiscontinuity." + REFERENCE "RFC 2865 sections 3, 4" + ::= { radiusAuthServerExtEntry 11 } + + radiusAuthClientExtBadAuthenticators OBJECT-TYPE + SYNTAX Counter32 + UNITS "packets" + MAX-ACCESS read-only + STATUS current + DESCRIPTION + "The number of RADIUS Access-Response packets + containing invalid authenticators or Message + Authenticator attributes received from this server. + This counter may experience a discontinuity when + the RADIUS Client module within the managed entity + is reinitialized, as indicated by the current value + of radiusAuthClientCounterDiscontinuity." + REFERENCE "RFC 2865 section 3" + ::= { radiusAuthServerExtEntry 12 } + + radiusAuthClientExtPendingRequests OBJECT-TYPE + SYNTAX Gauge32 + UNITS "packets" + MAX-ACCESS read-only + STATUS current + DESCRIPTION + "The number of RADIUS Access-Request packets + destined for this server that have not yet timed out + or received a response. This variable is incremented + when an Access-Request is sent and decremented due to + receipt of an Access-Accept, Access-Reject, + Access-Challenge, timeout, or retransmission." + REFERENCE "RFC 2865 section 2" + ::= { radiusAuthServerExtEntry 13 } + + radiusAuthClientExtTimeouts OBJECT-TYPE + SYNTAX Counter32 + UNITS "timeouts" + MAX-ACCESS read-only + STATUS current + DESCRIPTION + "The number of authentication timeouts to this server. + After a timeout, the client may retry to the same + server, send to a different server, or + give up. A retry to the same server is counted as a + retransmit as well as a timeout. A send to a different + server is counted as a Request as well as a timeout. + This counter may experience a discontinuity when the + RADIUS Client module within the managed entity is + reinitialized, as indicated by the current value of + radiusAuthClientCounterDiscontinuity." + REFERENCE "RFC 2865 sections 2.5, 4.1" + ::= { radiusAuthServerExtEntry 14 } + + radiusAuthClientExtUnknownTypes OBJECT-TYPE + SYNTAX Counter32 + UNITS "packets" + MAX-ACCESS read-only + STATUS current + DESCRIPTION + "The number of RADIUS packets of unknown type that + were received from this server on the authentication + port. This counter may experience a discontinuity + when the RADIUS Client module within the managed + entity is reinitialized, as indicated by the current + value of radiusAuthClientCounterDiscontinuity." + REFERENCE "RFC 2865 section 4" + ::= { radiusAuthServerExtEntry 15 } + + radiusAuthClientExtPacketsDropped OBJECT-TYPE + SYNTAX Counter32 + UNITS "packets" + MAX-ACCESS read-only + STATUS current + DESCRIPTION + "The number of RADIUS packets that were + received from this server on the authentication port + and dropped for some other reason. This counter may + experience a discontinuity when the RADIUS Client + module within the managed entity is reinitialized, + as indicated by the current value of + radiusAuthClientCounterDiscontinuity." + ::= { radiusAuthServerExtEntry 16 } + + radiusAuthClientCounterDiscontinuity OBJECT-TYPE + SYNTAX TimeTicks + UNITS "centiseconds" + MAX-ACCESS read-only + STATUS current + DESCRIPTION + "The number of centiseconds since the last discontinuity + in the RADIUS Client counters. A discontinuity may + be the result of a reinitialization of the RADIUS + Client module within the managed entity." + ::= { radiusAuthServerExtEntry 17 } + + + -- conformance information + + radiusAuthClientMIBConformance OBJECT IDENTIFIER + ::= { radiusAuthClientMIB 2 } + + radiusAuthClientMIBCompliances OBJECT IDENTIFIER + ::= { radiusAuthClientMIBConformance 1 } + + radiusAuthClientMIBGroups OBJECT IDENTIFIER + ::= { radiusAuthClientMIBConformance 2 } + + + -- compliance statements + + radiusAuthClientMIBCompliance MODULE-COMPLIANCE + STATUS deprecated + DESCRIPTION + "The compliance statement for authentication clients + implementing the RADIUS Authentication Client MIB. + Implementation of this module is for IPv4-only + entities, or for backwards compatibility use with + entities that support both IPv4 and IPv6." + MODULE -- this module + MANDATORY-GROUPS { radiusAuthClientMIBGroup } + + ::= { radiusAuthClientMIBCompliances 1 } + + radiusAuthClientExtMIBCompliance MODULE-COMPLIANCE + STATUS current + DESCRIPTION + "The compliance statement for authentication + clients implementing the RADIUS Authentication + Client IPv6 Extensions MIB. Implementation of + this module is for entities that support IPv6, + or support IPv4 and IPv6." + MODULE -- this module + MANDATORY-GROUPS { radiusAuthClientExtMIBGroup } + + OBJECT radiusAuthServerInetAddressType + SYNTAX InetAddressType { ipv4(1), ipv6(2) } + DESCRIPTION + "An implementation is only required to support + IPv4 and globally unique IPv6 addresses." + + OBJECT radiusAuthServerInetAddress + SYNTAX InetAddress ( SIZE (4|16) ) + DESCRIPTION + "An implementation is only required to support + IPv4 and globally unique IPv6 addresses." + ::= { radiusAuthClientMIBCompliances 2 } + + + -- units of conformance + + radiusAuthClientMIBGroup OBJECT-GROUP + OBJECTS { radiusAuthClientIdentifier, + radiusAuthClientInvalidServerAddresses, + radiusAuthServerAddress, + radiusAuthClientServerPortNumber, + radiusAuthClientRoundTripTime, + radiusAuthClientAccessRequests, + radiusAuthClientAccessRetransmissions, + radiusAuthClientAccessAccepts, + radiusAuthClientAccessRejects, + radiusAuthClientAccessChallenges, + radiusAuthClientMalformedAccessResponses, + radiusAuthClientBadAuthenticators, + radiusAuthClientPendingRequests, + radiusAuthClientTimeouts, + radiusAuthClientUnknownTypes, + radiusAuthClientPacketsDropped + } + STATUS deprecated + DESCRIPTION + "The basic collection of objects providing management of + RADIUS Authentication Clients." + ::= { radiusAuthClientMIBGroups 1 } + + + radiusAuthClientExtMIBGroup OBJECT-GROUP + OBJECTS { radiusAuthClientIdentifier, + radiusAuthClientInvalidServerAddresses, + radiusAuthServerInetAddressType, + radiusAuthServerInetAddress, + radiusAuthClientServerInetPortNumber, + radiusAuthClientExtRoundTripTime, + radiusAuthClientExtAccessRequests, + radiusAuthClientExtAccessRetransmissions, + radiusAuthClientExtAccessAccepts, + radiusAuthClientExtAccessRejects, + radiusAuthClientExtAccessChallenges, + radiusAuthClientExtMalformedAccessResponses, + radiusAuthClientExtBadAuthenticators, + radiusAuthClientExtPendingRequests, + radiusAuthClientExtTimeouts, + radiusAuthClientExtUnknownTypes, + radiusAuthClientExtPacketsDropped, + radiusAuthClientCounterDiscontinuity + } + STATUS current + DESCRIPTION + "The collection of extended objects providing + management of RADIUS Authentication Clients + using version-neutral IP address format." + ::= { radiusAuthClientMIBGroups 2 } + + END diff --git a/mibs/RADIUS-AUTH-SERVER-MIB.mib b/mibs/RADIUS-AUTH-SERVER-MIB.mib new file mode 100644 index 0000000..d54aa20 --- /dev/null +++ b/mibs/RADIUS-AUTH-SERVER-MIB.mib @@ -0,0 +1,775 @@ +RADIUS-AUTH-SERVER-MIB DEFINITIONS ::= BEGIN + +IMPORTS + MODULE-IDENTITY, OBJECT-TYPE, OBJECT-IDENTITY, + Counter32, Integer32, + IpAddress, TimeTicks, mib-2 FROM SNMPv2-SMI + SnmpAdminString FROM SNMP-FRAMEWORK-MIB + InetAddressType, InetAddress FROM INET-ADDRESS-MIB + MODULE-COMPLIANCE, OBJECT-GROUP FROM SNMPv2-CONF; + +radiusAuthServMIB MODULE-IDENTITY + LAST-UPDATED "200608210000Z" -- 21 August 2006 + ORGANIZATION "IETF RADIUS Extensions Working Group." + CONTACT-INFO + " Bernard Aboba + Microsoft + One Microsoft Way + Redmond, WA 98052 + US + Phone: +1 425 936 6605 + EMail: bernarda@microsoft.com" + DESCRIPTION + "The MIB module for entities implementing the server + side of the Remote Authentication Dial-In User + Service (RADIUS) authentication protocol. Copyright + (C) The Internet Society (2006). This version of this + MIB module is part of RFC 4669; see the RFC itself for + full legal notices." + REVISION "200608210000Z" -- 21 August 2006 + DESCRIPTION + "Revised version as published in RFC 4669. This + version obsoletes that of RFC 2619 by deprecating the + MIB table containing IPv4-only address formats and + defining a new table to add support for version-neutral + IP address formats. The remaining MIB objects from RFC + 2619 are carried forward into this version." + REVISION "199906110000Z" -- 11 Jun 1999 + DESCRIPTION "Initial version as published in RFC 2619." + ::= { radiusAuthentication 1 } + +radiusMIB OBJECT-IDENTITY + STATUS current + DESCRIPTION + "The OID assigned to RADIUS MIB work by the IANA." + ::= { mib-2 67 } + +radiusAuthentication OBJECT IDENTIFIER ::= {radiusMIB 1} + +radiusAuthServMIBObjects OBJECT IDENTIFIER + ::= { radiusAuthServMIB 1 } + +radiusAuthServ OBJECT IDENTIFIER + ::= { radiusAuthServMIBObjects 1 } + +radiusAuthServIdent OBJECT-TYPE + SYNTAX SnmpAdminString + MAX-ACCESS read-only + STATUS current + DESCRIPTION + "The implementation identification string for the + RADIUS authentication server software in use on the + system, for example, 'FNS-2.1'." + ::= {radiusAuthServ 1} + +radiusAuthServUpTime OBJECT-TYPE + SYNTAX TimeTicks + MAX-ACCESS read-only + STATUS current + DESCRIPTION + "If the server has a persistent state (e.g., a + process), this value will be the time elapsed (in + hundredths of a second) since the server process + was started. For software without persistent state, + this value will be zero." + ::= {radiusAuthServ 2} + +radiusAuthServResetTime OBJECT-TYPE + SYNTAX TimeTicks + MAX-ACCESS read-only + STATUS current + DESCRIPTION + "If the server has a persistent state (e.g., a process) + and supports a 'reset' operation (e.g., can be told to + re-read configuration files), this value will be the + time elapsed (in hundredths of a second) since the + server was 'reset.' For software that does not + have persistence or does not support a 'reset' + operation, this value will be zero." + ::= {radiusAuthServ 3} + +radiusAuthServConfigReset OBJECT-TYPE + SYNTAX INTEGER { other(1), + reset(2), + initializing(3), + running(4)} + MAX-ACCESS read-write + STATUS current + DESCRIPTION + "Status/action object to reinitialize any persistent + server state. When set to reset(2), any persistent + server state (such as a process) is reinitialized as + if the server had just been started. This value will + never be returned by a read operation. When read, + one of the following values will be returned: + other(1) - server in some unknown state; + initializing(3) - server (re)initializing; + running(4) - server currently running." + ::= {radiusAuthServ 4} + +radiusAuthServTotalAccessRequests OBJECT-TYPE + SYNTAX Counter32 + UNITS "packets" + MAX-ACCESS read-only + STATUS current + DESCRIPTION + "The number of packets received on the + authentication port." + REFERENCE "RFC 2865 section 4.1" + ::= { radiusAuthServ 5} + +radiusAuthServTotalInvalidRequests OBJECT-TYPE + SYNTAX Counter32 + UNITS "packets" + MAX-ACCESS read-only + STATUS current + DESCRIPTION + "The number of RADIUS Access-Request packets + received from unknown addresses." + REFERENCE "RFC 2865 section 4.1" + ::= { radiusAuthServ 6 } + +radiusAuthServTotalDupAccessRequests OBJECT-TYPE + SYNTAX Counter32 + UNITS "packets" + MAX-ACCESS read-only + STATUS current + DESCRIPTION + "The number of duplicate RADIUS Access-Request + packets received." + REFERENCE "RFC 2865 section 4.1" + ::= { radiusAuthServ 7 } + +radiusAuthServTotalAccessAccepts OBJECT-TYPE + SYNTAX Counter32 + UNITS "packets" + MAX-ACCESS read-only + STATUS current + DESCRIPTION + "The number of RADIUS Access-Accept packets sent." + REFERENCE "RFC 2865 section 4.2" + ::= { radiusAuthServ 8 } + +radiusAuthServTotalAccessRejects OBJECT-TYPE + SYNTAX Counter32 + UNITS "packets" + MAX-ACCESS read-only + STATUS current + DESCRIPTION + "The number of RADIUS Access-Reject packets sent." + REFERENCE "RFC 2865 section 4.3" + ::= { radiusAuthServ 9 } + +radiusAuthServTotalAccessChallenges OBJECT-TYPE + SYNTAX Counter32 + UNITS "packets" + MAX-ACCESS read-only + STATUS current + DESCRIPTION + "The number of RADIUS Access-Challenge packets sent." + REFERENCE "RFC 2865 section 4.4" + ::= { radiusAuthServ 10 } + +radiusAuthServTotalMalformedAccessRequests OBJECT-TYPE + SYNTAX Counter32 + UNITS "packets" + MAX-ACCESS read-only + STATUS current + DESCRIPTION + "The number of malformed RADIUS Access-Request + packets received. Bad authenticators + and unknown types are not included as + malformed Access-Requests." + REFERENCE "RFC 2865 section 4.1" + ::= { radiusAuthServ 11 } + +radiusAuthServTotalBadAuthenticators OBJECT-TYPE + SYNTAX Counter32 + UNITS "packets" + MAX-ACCESS read-only + STATUS current + DESCRIPTION + "The number of RADIUS Authentication-Request packets + that contained invalid Message Authenticator + attributes received." + REFERENCE "RFC 2865 section 3" + ::= { radiusAuthServ 12 } + +radiusAuthServTotalPacketsDropped OBJECT-TYPE + SYNTAX Counter32 + UNITS "packets" + MAX-ACCESS read-only + STATUS current + DESCRIPTION + "The number of incoming packets + silently discarded for some reason other + than malformed, bad authenticators or + unknown types." + REFERENCE "RFC 2865 section 3" + ::= { radiusAuthServ 13 } + +radiusAuthServTotalUnknownTypes OBJECT-TYPE + SYNTAX Counter32 + UNITS "packets" + MAX-ACCESS read-only + STATUS current + DESCRIPTION + "The number of RADIUS packets of unknown type that + were received." + REFERENCE "RFC 2865 section 4" + ::= { radiusAuthServ 14 } + + +radiusAuthClientTable OBJECT-TYPE + SYNTAX SEQUENCE OF RadiusAuthClientEntry + MAX-ACCESS not-accessible + STATUS deprecated + DESCRIPTION + "The (conceptual) table listing the RADIUS + authentication clients with which the server shares + a secret." + ::= { radiusAuthServ 15 } + + +radiusAuthClientEntry OBJECT-TYPE + SYNTAX RadiusAuthClientEntry + MAX-ACCESS not-accessible + STATUS deprecated + DESCRIPTION + "An entry (conceptual row) representing a RADIUS + authentication client with which the server shares a + secret." + INDEX { radiusAuthClientIndex } + ::= { radiusAuthClientTable 1 } + +RadiusAuthClientEntry ::= SEQUENCE { + radiusAuthClientIndex Integer32, + radiusAuthClientAddress IpAddress, + radiusAuthClientID SnmpAdminString, + radiusAuthServAccessRequests Counter32, + radiusAuthServDupAccessRequests Counter32, + radiusAuthServAccessAccepts Counter32, + radiusAuthServAccessRejects Counter32, + radiusAuthServAccessChallenges Counter32, + radiusAuthServMalformedAccessRequests Counter32, + radiusAuthServBadAuthenticators Counter32, + radiusAuthServPacketsDropped Counter32, + radiusAuthServUnknownTypes Counter32 +} + +radiusAuthClientIndex OBJECT-TYPE + SYNTAX Integer32 (1..2147483647) + MAX-ACCESS not-accessible + STATUS deprecated + DESCRIPTION + "A number uniquely identifying each RADIUS + authentication client with which this server + communicates." + ::= { radiusAuthClientEntry 1 } + +radiusAuthClientAddress OBJECT-TYPE + SYNTAX IpAddress + MAX-ACCESS read-only + STATUS deprecated + DESCRIPTION + "The NAS-IP-Address of the RADIUS authentication client + referred to in this table entry." + REFERENCE "RFC 2865 section 2" + ::= { radiusAuthClientEntry 2 } + +radiusAuthClientID OBJECT-TYPE + SYNTAX SnmpAdminString + MAX-ACCESS read-only + STATUS deprecated + DESCRIPTION + "The NAS-Identifier of the RADIUS authentication client + referred to in this table entry. This is not + necessarily the same as sysName in MIB II." + REFERENCE "RFC 2865 section 5.32" + ::= { radiusAuthClientEntry 3 } + +-- Server Counters + +-- +-- Responses = AccessAccepts + AccessRejects + AccessChallenges +-- +-- Requests - DupRequests - BadAuthenticators - MalformedRequests - +-- UnknownTypes - PacketsDropped - Responses = Pending +-- +-- Requests - DupRequests - BadAuthenticators - MalformedRequests - +-- UnknownTypes - PacketsDropped = entries logged + +radiusAuthServAccessRequests OBJECT-TYPE + SYNTAX Counter32 + UNITS "packets" + MAX-ACCESS read-only + STATUS deprecated + DESCRIPTION + "The number of packets received on the authentication + port from this client." + REFERENCE "RFC 2865 section 4.1" + ::= { radiusAuthClientEntry 4 } + +radiusAuthServDupAccessRequests OBJECT-TYPE + SYNTAX Counter32 + UNITS "packets" + MAX-ACCESS read-only + STATUS deprecated + DESCRIPTION + "The number of duplicate RADIUS Access-Request + packets received from this client." + REFERENCE "RFC 2865 section 4.1" + ::= { radiusAuthClientEntry 5 } + +radiusAuthServAccessAccepts OBJECT-TYPE + SYNTAX Counter32 + UNITS "packets" + MAX-ACCESS read-only + STATUS deprecated + DESCRIPTION + "The number of RADIUS Access-Accept packets + sent to this client." + REFERENCE "RFC 2865 section 4.2" + ::= { radiusAuthClientEntry 6 } + +radiusAuthServAccessRejects OBJECT-TYPE + SYNTAX Counter32 + UNITS "packets" + MAX-ACCESS read-only + STATUS deprecated + DESCRIPTION + "The number of RADIUS Access-Reject packets + sent to this client." + REFERENCE "RFC 2865 section 4.3" + ::= { radiusAuthClientEntry 7 } + +radiusAuthServAccessChallenges OBJECT-TYPE + SYNTAX Counter32 + UNITS "packets" + MAX-ACCESS read-only + STATUS deprecated + DESCRIPTION + "The number of RADIUS Access-Challenge packets + sent to this client." + REFERENCE "RFC 2865 section 4.4" + ::= { radiusAuthClientEntry 8 } + +radiusAuthServMalformedAccessRequests OBJECT-TYPE + SYNTAX Counter32 + UNITS "packets" + MAX-ACCESS read-only + STATUS deprecated + DESCRIPTION + "The number of malformed RADIUS Access-Request + packets received from this client. + Bad authenticators and unknown types are not included + as malformed Access-Requests." + REFERENCE "RFC 2865 section 3" + ::= { radiusAuthClientEntry 9 } + +radiusAuthServBadAuthenticators OBJECT-TYPE + SYNTAX Counter32 + UNITS "packets" + MAX-ACCESS read-only + STATUS deprecated + DESCRIPTION + "The number of RADIUS Authentication-Request packets + that contained invalid Message Authenticator + attributes received from this client." + REFERENCE "RFC 2865 section 3" + ::= { radiusAuthClientEntry 10 } + +radiusAuthServPacketsDropped OBJECT-TYPE + SYNTAX Counter32 + UNITS "packets" + MAX-ACCESS read-only + STATUS deprecated + DESCRIPTION + "The number of incoming packets from this + client silently discarded for some reason other + than malformed, bad authenticators or + unknown types." + REFERENCE "RFC 2865 section 3" + ::= { radiusAuthClientEntry 11 } + +radiusAuthServUnknownTypes OBJECT-TYPE + SYNTAX Counter32 + UNITS "packets" + MAX-ACCESS read-only + STATUS deprecated + DESCRIPTION + "The number of RADIUS packets of unknown type that + were received from this client." + REFERENCE "RFC 2865 section 4" + ::= { radiusAuthClientEntry 12 } + +radiusAuthClientExtTable OBJECT-TYPE + SYNTAX SEQUENCE OF RadiusAuthClientExtEntry + MAX-ACCESS not-accessible + STATUS current + DESCRIPTION + "The (conceptual) table listing the RADIUS + authentication clients with which the server shares + a secret." + ::= { radiusAuthServ 16 } + +radiusAuthClientExtEntry OBJECT-TYPE + SYNTAX RadiusAuthClientExtEntry + MAX-ACCESS not-accessible + STATUS current + DESCRIPTION + "An entry (conceptual row) representing a RADIUS + authentication client with which the server shares a + secret." + INDEX { radiusAuthClientExtIndex } + ::= { radiusAuthClientExtTable 1 } + +RadiusAuthClientExtEntry ::= SEQUENCE { + radiusAuthClientExtIndex Integer32, + radiusAuthClientInetAddressType InetAddressType, + radiusAuthClientInetAddress InetAddress, + radiusAuthClientExtID SnmpAdminString, + radiusAuthServExtAccessRequests Counter32, + radiusAuthServExtDupAccessRequests Counter32, + radiusAuthServExtAccessAccepts Counter32, + radiusAuthServExtAccessRejects Counter32, + radiusAuthServExtAccessChallenges Counter32, + radiusAuthServExtMalformedAccessRequests Counter32, + radiusAuthServExtBadAuthenticators Counter32, + radiusAuthServExtPacketsDropped Counter32, + radiusAuthServExtUnknownTypes Counter32, + radiusAuthServCounterDiscontinuity TimeTicks +} + +radiusAuthClientExtIndex OBJECT-TYPE + SYNTAX Integer32 (1..2147483647) + MAX-ACCESS not-accessible + STATUS current + DESCRIPTION + "A number uniquely identifying each RADIUS + authentication client with which this server + communicates." + ::= { radiusAuthClientExtEntry 1 } + +radiusAuthClientInetAddressType OBJECT-TYPE + SYNTAX InetAddressType + MAX-ACCESS read-only + STATUS current + DESCRIPTION + "The type of address format used for the + radiusAuthClientInetAddress object." + ::= { radiusAuthClientExtEntry 2 } + + radiusAuthClientInetAddress OBJECT-TYPE + SYNTAX InetAddress + MAX-ACCESS read-only + STATUS current + DESCRIPTION + "The IP address of the RADIUS authentication + client referred to in this table entry, using + the version-neutral IP address format." + ::= { radiusAuthClientExtEntry 3 } + + +radiusAuthClientExtID OBJECT-TYPE + SYNTAX SnmpAdminString + MAX-ACCESS read-only + STATUS current + DESCRIPTION + "The NAS-Identifier of the RADIUS authentication client + referred to in this table entry. This is not + necessarily the same as sysName in MIB II." + REFERENCE "RFC 2865 section 5.32" + ::= { radiusAuthClientExtEntry 4 } + +-- Server Counters + +-- +-- Responses = AccessAccepts + AccessRejects + AccessChallenges +-- +-- Requests - DupRequests - BadAuthenticators - MalformedRequests - +-- UnknownTypes - PacketsDropped - Responses = Pending +-- +-- Requests - DupRequests - BadAuthenticators - MalformedRequests - +-- UnknownTypes - PacketsDropped = entries logged + +radiusAuthServExtAccessRequests OBJECT-TYPE + SYNTAX Counter32 + UNITS "packets" + MAX-ACCESS read-only + STATUS current + DESCRIPTION + "The number of packets received on the authentication + port from this client. This counter may experience a + discontinuity when the RADIUS Server module within the + managed entity is reinitialized, as indicated by the + current value of radiusAuthServCounterDiscontinuity." + REFERENCE "RFC 2865 section 4.1" + ::= { radiusAuthClientExtEntry 5 } + +radiusAuthServExtDupAccessRequests OBJECT-TYPE + SYNTAX Counter32 + UNITS "packets" + MAX-ACCESS read-only + STATUS current + DESCRIPTION + "The number of duplicate RADIUS Access-Request + packets received from this client. This counter may + experience a discontinuity when the RADIUS Server + module within the managed entity is reinitialized, as + indicated by the current value of + radiusAuthServCounterDiscontinuity." + REFERENCE "RFC 2865 section 4.1" + ::= { radiusAuthClientExtEntry 6 } + +radiusAuthServExtAccessAccepts OBJECT-TYPE + SYNTAX Counter32 + UNITS "packets" + MAX-ACCESS read-only + STATUS current + DESCRIPTION + "The number of RADIUS Access-Accept packets + sent to this client. This counter may experience a + discontinuity when the RADIUS Server module within the + managed entity is reinitialized, as indicated by the + current value of radiusAuthServCounterDiscontinuity." + REFERENCE "RFC 2865 section 4.2" + ::= { radiusAuthClientExtEntry 7 } + +radiusAuthServExtAccessRejects OBJECT-TYPE + SYNTAX Counter32 + UNITS "packets" + MAX-ACCESS read-only + STATUS current + DESCRIPTION + "The number of RADIUS Access-Reject packets + sent to this client. This counter may experience a + discontinuity when the RADIUS Server module within the + managed entity is reinitialized, as indicated by the + current value of radiusAuthServCounterDiscontinuity." + REFERENCE "RFC 2865 section 4.3" + ::= { radiusAuthClientExtEntry 8 } + +radiusAuthServExtAccessChallenges OBJECT-TYPE + SYNTAX Counter32 + UNITS "packets" + MAX-ACCESS read-only + STATUS current + DESCRIPTION + "The number of RADIUS Access-Challenge packets + sent to this client. This counter may experience a + discontinuity when the RADIUS Server module within the + managed entity is reinitialized, as indicated by the + current value of radiusAuthServCounterDiscontinuity." + REFERENCE "RFC 2865 section 4.4" + ::= { radiusAuthClientExtEntry 9 } + +radiusAuthServExtMalformedAccessRequests OBJECT-TYPE + SYNTAX Counter32 + UNITS "packets" + MAX-ACCESS read-only + STATUS current + DESCRIPTION + "The number of malformed RADIUS Access-Request + packets received from this client. Bad authenticators + and unknown types are not included as malformed + Access-Requests. This counter may experience a + discontinuity when the RADIUS Server module within the + managed entity is reinitialized, as indicated by the + current value of radiusAuthServCounterDiscontinuity." + REFERENCE "RFC 2865 sections 3, 4.1" + ::= { radiusAuthClientExtEntry 10 } + +radiusAuthServExtBadAuthenticators OBJECT-TYPE + SYNTAX Counter32 + UNITS "packets" + MAX-ACCESS read-only + STATUS current + DESCRIPTION + "The number of RADIUS Authentication-Request packets + that contained invalid Message Authenticator + attributes received from this client. This counter + may experience a discontinuity when the RADIUS Server + module within the managed entity is reinitialized, as + indicated by the current value of + radiusAuthServCounterDiscontinuity." + REFERENCE "RFC 2865 section 3" + ::= { radiusAuthClientExtEntry 11 } + +radiusAuthServExtPacketsDropped OBJECT-TYPE + SYNTAX Counter32 + UNITS "packets" + MAX-ACCESS read-only + STATUS current + DESCRIPTION + "The number of incoming packets from this client + silently discarded for some reason other than + malformed, bad authenticators or unknown types. + This counter may experience a discontinuity when the + RADIUS Server module within the managed entity is + reinitialized, as indicated by the current value of + radiusAuthServCounterDiscontinuity." + REFERENCE "RFC 2865 section 3" + ::= { radiusAuthClientExtEntry 12 } + +radiusAuthServExtUnknownTypes OBJECT-TYPE + SYNTAX Counter32 + UNITS "packets" + MAX-ACCESS read-only + STATUS current + DESCRIPTION + "The number of RADIUS packets of unknown type that + were received from this client. This counter may + experience a discontinuity when the RADIUS Server + module within the managed entity is reinitialized, as + indicated by the current value of + radiusAuthServCounterDiscontinuity." + REFERENCE "RFC 2865 section 4" + ::= { radiusAuthClientExtEntry 13 } + +radiusAuthServCounterDiscontinuity OBJECT-TYPE + SYNTAX TimeTicks + UNITS "centiseconds" + MAX-ACCESS read-only + STATUS current + DESCRIPTION + "The number of centiseconds since the last + discontinuity in the RADIUS Server counters. + A discontinuity may be the result of a + reinitialization of the RADIUS Server module + within the managed entity." + ::= { radiusAuthClientExtEntry 14 } + +-- conformance information + +radiusAuthServMIBConformance OBJECT IDENTIFIER + ::= { radiusAuthServMIB 2 } + +radiusAuthServMIBCompliances OBJECT IDENTIFIER + ::= { radiusAuthServMIBConformance 1 } + +radiusAuthServMIBGroups OBJECT IDENTIFIER + ::= { radiusAuthServMIBConformance 2 } + +-- compliance statements + +radiusAuthServMIBCompliance MODULE-COMPLIANCE + STATUS deprecated + DESCRIPTION + "The compliance statement for authentication + servers implementing the RADIUS Authentication + Server MIB. Implementation of this module is for + IPv4-only entities, or for backwards compatibility + use with entities that support both IPv4 and + IPv6." + MODULE -- this module + MANDATORY-GROUPS { radiusAuthServMIBGroup } + + OBJECT radiusAuthServConfigReset + WRITE-SYNTAX INTEGER { reset(2) } + DESCRIPTION "The only SETable value is 'reset' (2)." + + ::= { radiusAuthServMIBCompliances 1 } + + +radiusAuthServMIBExtCompliance MODULE-COMPLIANCE + STATUS current + DESCRIPTION + "The compliance statement for authentication + servers implementing the RADIUS Authentication + Server IPv6 Extensions MIB. Implementation of + this module is for entities that support IPv6, + or support IPv4 and IPv6." + MODULE -- this module + MANDATORY-GROUPS { radiusAuthServExtMIBGroup } + + OBJECT radiusAuthServConfigReset + WRITE-SYNTAX INTEGER { reset(2) } + DESCRIPTION "The only SETable value is 'reset' (2)." + + OBJECT radiusAuthClientInetAddressType + SYNTAX InetAddressType { ipv4(1), ipv6(2) } + DESCRIPTION + "An implementation is only required to support + IPv4 and globally unique IPv6 addresses." + + OBJECT radiusAuthClientInetAddress + SYNTAX InetAddress ( SIZE (4|16) ) + DESCRIPTION + "An implementation is only required to support + IPv4 and globally unique IPv6 addresses." + + ::= { radiusAuthServMIBCompliances 2 } + + +-- units of conformance + +radiusAuthServMIBGroup OBJECT-GROUP + OBJECTS {radiusAuthServIdent, + radiusAuthServUpTime, + radiusAuthServResetTime, + radiusAuthServConfigReset, + radiusAuthServTotalAccessRequests, + radiusAuthServTotalInvalidRequests, + radiusAuthServTotalDupAccessRequests, + radiusAuthServTotalAccessAccepts, + radiusAuthServTotalAccessRejects, + radiusAuthServTotalAccessChallenges, + radiusAuthServTotalMalformedAccessRequests, + radiusAuthServTotalBadAuthenticators, + radiusAuthServTotalPacketsDropped, + radiusAuthServTotalUnknownTypes, + radiusAuthClientAddress, + radiusAuthClientID, + radiusAuthServAccessRequests, + radiusAuthServDupAccessRequests, + radiusAuthServAccessAccepts, + radiusAuthServAccessRejects, + radiusAuthServAccessChallenges, + radiusAuthServMalformedAccessRequests, + radiusAuthServBadAuthenticators, + radiusAuthServPacketsDropped, + radiusAuthServUnknownTypes + } + STATUS deprecated + DESCRIPTION + "The collection of objects providing management of + a RADIUS Authentication Server." + ::= { radiusAuthServMIBGroups 1 } + +radiusAuthServExtMIBGroup OBJECT-GROUP + OBJECTS {radiusAuthServIdent, + radiusAuthServUpTime, + radiusAuthServResetTime, + radiusAuthServConfigReset, + radiusAuthServTotalAccessRequests, + radiusAuthServTotalInvalidRequests, + radiusAuthServTotalDupAccessRequests, + radiusAuthServTotalAccessAccepts, + radiusAuthServTotalAccessRejects, + radiusAuthServTotalAccessChallenges, + radiusAuthServTotalMalformedAccessRequests, + radiusAuthServTotalBadAuthenticators, + radiusAuthServTotalPacketsDropped, + radiusAuthServTotalUnknownTypes, + radiusAuthClientInetAddressType, + radiusAuthClientInetAddress, + radiusAuthClientExtID, + radiusAuthServExtAccessRequests, + radiusAuthServExtDupAccessRequests, + radiusAuthServExtAccessAccepts, + radiusAuthServExtAccessRejects, + radiusAuthServExtAccessChallenges, + radiusAuthServExtMalformedAccessRequests, + radiusAuthServExtBadAuthenticators, + radiusAuthServExtPacketsDropped, + radiusAuthServExtUnknownTypes, + radiusAuthServCounterDiscontinuity + } + STATUS current + DESCRIPTION + "The collection of objects providing management of + a RADIUS Authentication Server." + ::= { radiusAuthServMIBGroups 2 } + +END diff --git a/mibs/RADIUS-STAT-MIB.mib b/mibs/RADIUS-STAT-MIB.mib new file mode 100644 index 0000000..35bf00b --- /dev/null +++ b/mibs/RADIUS-STAT-MIB.mib @@ -0,0 +1,349 @@ +RADIUS-STAT-MIB DEFINITIONS ::= BEGIN + +IMPORTS + MODULE-IDENTITY, OBJECT-TYPE, OBJECT-IDENTITY, + Counter32, Integer32, + IpAddress, TimeTicks, mib-2 FROM SNMPv2-SMI + SnmpAdminString FROM SNMP-FRAMEWORK-MIB; + +radiusStatMIB MODULE-IDENTITY + LAST-UPDATED "0001020000Z" + ORGANIZATION "IETF RADIUS Working Group." + CONTACT-INFO + " Sergey Poznyakoff + email: gray@farlep.net" + DESCRIPTION + "The MIB module for entities implementing the statistics + side of the Remote Access Dialin User Service (RADIUS) + authentication protocol." + REVISION "0001020000Z" + DESCRIPTION "Experimental Version" + ::= { radiusStatistics 1 } + +radiusMIB OBJECT-IDENTITY + STATUS current + DESCRIPTION + "The OID assigned to RADIUS MIB work by the IANA." + ::= { mib-2 67 } + +radiusStatistics OBJECT IDENTIFIER ::= {radiusMIB 3} + +radiusStatIdent OBJECT-TYPE + SYNTAX SnmpAdminString + MAX-ACCESS read-only + STATUS current + DESCRIPTION + "The implementation identification string for the + RADIUS statistics server software in use on the + system" + ::= {radiusStatMIB 1} + +radiusStatUpTime OBJECT-TYPE + SYNTAX TimeTicks + MAX-ACCESS read-only + STATUS current + DESCRIPTION + "Time (in hundredths of a second) since the statistics + was started." + ::= {radiusStatMIB 2} + +radiusStatConfigReset OBJECT-TYPE + SYNTAX INTEGER { other(1), + reset(2), + initializing(3), + running(4)} + MAX-ACCESS read-write + STATUS current + DESCRIPTION + "Status/action object to reinitialize any persistent + server state. When set to reset(2), any persistent + server state (such as a process) is reinitialized as if + the server had just been started. This value will + never be returned by a read operation. When read, one of + the following values will be returned: + other(1) - server in some unknown state; + initializing(3) - server (re)initializing; + running(4) - server currently running." + ::= {radiusStatMIB 3} + +radiusStatTotalLines OBJECT-TYPE + SYNTAX Counter32 + MAX-ACCESS read-only + STATUS current + DESCRIPTION + "The number of dialup lines registered by the statistics + module" + ::= { radiusStatMIB 4} + +radiusStatTotalLinesInUse OBJECT-TYPE + SYNTAX Counter32 + MAX-ACCESS read-only + STATUS current + DESCRIPTION + "The number dial-up lines currently in use" + ::= { radiusStatMIB 5 } + +radiusStatTotalLinesIdle OBJECT-TYPE + SYNTAX Counter32 + MAX-ACCESS read-only + STATUS current + DESCRIPTION + "The number dial-up lines currently idle" + ::= { radiusStatMIB 6 } + +radiusStatNASTable OBJECT-TYPE + SYNTAX SEQUENCE OF RadiusStatNASEntry + MAX-ACCESS not-accessible + STATUS current + DESCRIPTION + "The (conceptual) table listing the available + Network Access Servers" + ::= { radiusStatMIB 7 } + +radiusStatNASEntry OBJECT-TYPE + SYNTAX RadiusStatNASEntry + MAX-ACCESS not-accessible + STATUS current + DESCRIPTION + "An entry (conceptual row) representing a Network + Access Server" + INDEX { nasIndex } + ::= { radiusStatNASTable 1 } + +RadiusStatNASEntry ::= SEQUENCE { + nasIndex Integer32, + nasAddress IpAddress, + nasID SnmpAdminString, + nasLines Counter32, + nasLinesInUse Counter32, + nasLinesIdle Counter32, +} + +nasIndex OBJECT-TYPE + SYNTAX Integer32 (1..2147483647) + MAX-ACCESS not-accessible + STATUS current + DESCRIPTION + "A number uniquely identifying each NAS" + ::= { radiusStatNASEntry 1 } + +nasAddress OBJECT-TYPE + SYNTAX IpAddress + MAX-ACCESS read-only + STATUS current + DESCRIPTION + "The NAS-IP-Address" + ::= { radiusStatNASEntry 2 } + +nasID OBJECT-TYPE + SYNTAX SnmpAdminString + MAX-ACCESS read-only + STATUS current + DESCRIPTION + "The NAS-Identifier" + ::= { radiusStatNASEntry 3 } + +nasLines OBJECT-TYPE + SYNTAX Counter32 + MAX-ACCESS read-only + STATUS current + DESCRIPTION + "The number of lines served by the NAS" + ::= { radiusStatNASEntry 4 } + +nasLinesInUse OBJECT-TYPE + SYNTAX Counter32 + MAX-ACCESS read-only + STATUS current + DESCRIPTION + "The number of lines currently in use on this NAS" + ::= { radiusStatNASEntry 5 } + +nasLinesIdle OBJECT-TYPE + SYNTAX Counter32 + MAX-ACCESS read-only + STATUS current + DESCRIPTION + "The number of lines currently idle on this NAS" + ::= { radiusStatNASEntry 6 } + +radiusStatNASPortTable OBJECT-TYPE + SYNTAX SEQUENCE OF RadiusStatNASPortEntry + MAX-ACCESS not-accessible + STATUS current + DESCRIPTION + "The (conceptual) table listing the available ports" + ::= { radiusStatMIB 8 } + +radiusStatNASPortEntry OBJECT-TYPE + SYNTAX RadiusStatNASPortEntry + MAX-ACCESS not-accessible + STATUS current + DESCRIPTION + "An entry (conceptual row) representing a port" + INDEX { PortIndex } + ::= { radiusStatNASPortTable 1 } + +RadiusStatNASPortEntry ::= SEQUENCE { + radiusStatPortIndex Integer32, + radiusStatNASIndex Integer32, + radiusStatPortID Integer32, + radiusStatPortFramedAddress IpAddress, + radiusStatPortTotalLogins Counter32, + radiusStatPortStatus INTEGER, + radiusStatPortStatusDate SnmpAdminString, + radiusStatPortUpTime TimeTicks, + radiusStatPortLastLoginName SnmpAdminString, + radiusStatPortLastLoginDate SnmpAdminString, + radiusStatPortLastLogoutDate SnmpAdminString, + radiusStatPortIdleTotalTime TimeTicks, + radiusStatPortIdleMaxTime TimeTicks, + radiusStatPortIdleMaxDate SnmpAdminString, + radiusStatPortInUseTotalTime TimeTicks, + radiusStatPortInUseMaxTime TimeTicks, + radiusStatPortInUseMaxDate SnmpAdminString, +} + +radiusStatPortIndex OBJECT-TYPE + SYNTAX Integer32 (1..2147483647) + MAX-ACCESS read-only + STATUS current + DESCRIPTION + "A number uniquely identifying each port" + ::= { radiusStatNASPortEntry 1 } + +radiusStatNASIndex OBJECT-TYPE + SYNTAX Integer32 (1..2147483647) + MAX-ACCESS read-only + STATUS current + DESCRIPTION + "A number uniquely identifying each port" + ::= { radiusStatNASPortEntry 2 } + +radiusStatPortID OBJECT-TYPE + SYNTAX Integer32 (1..2147483647) + MAX-ACCESS read-only + STATUS current + DESCRIPTION + "The Port-Identifier" + ::= { radiusStatNASPortEntry 3 } + +radiusStatPortFramedAddress OBJECT-TYPE + SYNTAX IpAddress + MAX-ACCESS read-only + STATUS current + DESCRIPTION + "The Port-Identifier" + ::= { radiusStatNASPortEntry 4 } + +radiusStatPortTotalLogins OBJECT-TYPE + SYNTAX Counter32 + MAX-ACCESS read-only + STATUS current + DESCRIPTION + "The number of logins registered so far" + ::= { radiusStatNASPortEntry 5 } + +radiusStatPortStatus OBJECT-TYPE + SYNTAX INTEGER { + idle(1), + inUse(2) + } + MAX-ACCESS read-only + STATUS current + DESCRIPTION + "The status of the port" + ::= { radiusStatNASPortEntry 6 } + +radiusStatPortStatusDate OBJECT-TYPE + SYNTAX SnmpAdminString + MAX-ACCESS read-only + STATUS current + DESCRIPTION + "Time of the last change in port status" + ::= { radiusStatNASPortEntry 7 } + +radiusStatPortUpTime OBJECT-TYPE + SYNTAX TimeTicks + MAX-ACCESS read-only + STATUS current + DESCRIPTION + "Time in thousandths of a second since the port changed its + status" + ::= { radiusStatNASPortEntry 8 } + +radiusStatPortLastLoginName OBJECT-TYPE + SYNTAX SnmpAdminString + MAX-ACCESS read-only + STATUS current + DESCRIPTION + "The username of the last user logged in on that port" + ::= { radiusStatNASPortEntry 9 } + +radiusStatPortLastLoginDate OBJECT-TYPE + SYNTAX SnmpAdminString + MAX-ACCESS read-only + STATUS current + DESCRIPTION + "Time of the last login" + ::= { radiusStatNASPortEntry 10 } + +radiusStatPortLastLogoutDate OBJECT-TYPE + SYNTAX SnmpAdminString + MAX-ACCESS read-only + STATUS current + DESCRIPTION + "Time of the last logout" + ::= { radiusStatNASPortEntry 11 } + +radiusStatPortIdleTotalTime OBJECT-TYPE + SYNTAX TimeTicks + MAX-ACCESS read-only + STATUS current + DESCRIPTION + "Total time the port was idle" + ::= { radiusStatNASPortEntry 12 } + +radiusStatPortIdleMaxTime OBJECT-TYPE + SYNTAX TimeTicks + MAX-ACCESS read-only + STATUS current + DESCRIPTION + "Maximum time the port was idle" + ::= { radiusStatNASPortEntry 13 } + +radiusStatPortIdleMaxDate OBJECT-TYPE + SYNTAX SnmpAdminString + MAX-ACCESS read-only + STATUS current + DESCRIPTION + "Date when the maximum idle time was registered" + ::= { radiusStatNASPortEntry 14 } + +radiusStatPortInUseTotalTime OBJECT-TYPE + SYNTAX TimeTicks + MAX-ACCESS read-only + STATUS current + DESCRIPTION + "Total time the port was in use" + ::= { radiusStatNASPortEntry 15 } + +radiusStatPortInUseMaxTime OBJECT-TYPE + SYNTAX TimeTicks + MAX-ACCESS read-only + STATUS current + DESCRIPTION + "Maximum time the port was in use" + ::= { radiusStatNASPortEntry 16 } + +radiusStatPortInUseMaxDate OBJECT-TYPE + SYNTAX SnmpAdminString + MAX-ACCESS read-only + STATUS current + DESCRIPTION + "Date when the maximum in use time was registered" + ::= { radiusStatNASPortEntry 17 } + +END + + diff --git a/mibs/README b/mibs/README new file mode 100644 index 0000000..80eaa6d --- /dev/null +++ b/mibs/README @@ -0,0 +1,7 @@ +This directory contains the ASN.1 specification of the SNMP OIDs +assigned to RADIUS MIB work by the IANA. The specifications in +RADIUS-ACC-SERVER-MIB.txt and RADIUS-AUTH-SERVER-MIB.txt are +extracted from RFCs 2621 and 2619 accordingly. The corresponding +RFCs can be found in subdirectory doc/rfc of the package. Both +RFCs allow unlimited distribution of the information contained +therein.
\ No newline at end of file |