CISCO-RADIUS-MIB
AI MIB Summary
The CISCO-RADIUS-MIB enables monitoring and configuration of Cisco device RADIUS authentication and accounting sessions, including user connection requests, authentication results, and associated logging events. It also provides control objects for enabling or disabling Telnet and SSH authentication services on the managed network equipment.
MIB module for monitoring and configuring authentication and logging services using RADIUS (Remote Authentication Dial In User Service) related objects.
The RADIUS (RFC2865) framework consists of clients and servers. A client is responsible for passing user information to designated RADIUS servers, and then acting on the response which is returned.
RADIUS server is responsible for receiving user connection requests, authenticating the user, and then returning all configuration information necessary for the client to deliver service to the user.
This MIB module also contains objects for enabling/disabling telnet and SSH (Secure Shell) authentication. Secure Shell is program which is used to log into another machine over a secured session.
29
Objects
Active
Status
6
Dependencies
Imported Objects
Objects
29 total| Object Name |
|---|
ciscoRadiusMIB OBJECT IDENTIFIER .1.3.6.1.4.1.9.9.288 |
RFC1155-SMI Unknown .1.3.6.1.4.1.9.9.288 |
ciscoRadiusMIBObjects OBJECT IDENTIFIER .1.3.6.1.4.1.9.9.288.1 |
crRadiusGenericConfig OBJECT IDENTIFIER .1.3.6.1.4.1.9.9.288.1.1 |
crRadiusLoginAuthenticationThe login authentication using RADIUS feature is enabled for
telnet/SSH sessions if the 'telnet (0) ' bit is set, and
disabled if this bit is reset.
The login authentication using RADIUS feature is enabled for
console sessions if the 'console (1) ' bit is set, and
disabled if this bit is reset.rw OCTET STRING .1.3.6.1.4.1.9.9.288.1.1.1 |
crRadiusDeadtimeIndicates the length of time in minutes that the system will
mark the server dead when a RADIUS server does not respond to
an authentication request. During the interval of the dead
time, any authentication request that comes up would not be
sent to that RADIUS server that was marked as dead. The
default value of 0 means that the RADIUS servers will not be
marked dead if they do not respond.rw TimeIntervalMin .1.3.6.1.4.1.9.9.288.1.1.2 |
crRadiusAuthKeyThe key used in encrypting the packets passed between the
RADIUS server and the client. This key must match the one
configured on the server.
A zero-length string is always returned when this object is
read.rw CiscoRadiusAuthKey -- Rsyntax OCTET STRING .1.3.6.1.4.1.9.9.288.1.1.3 |
crRadiusTimeoutThis is the time in seconds between retransmissions to
the RADIUS server.rw TimeIntervalSec .1.3.6.1.4.1.9.9.288.1.1.4 |
crRadiusRetransmitsThe additional number of times the RADIUS server should be
tried by the RADIUS client before giving up on the server.rw Gauge .1.3.6.1.4.1.9.9.288.1.1.5 |
crRadiusAccountingLogMaxSizeThe maximum size of the accounting log file in bytes.
The log file is stored on local persistent storage at the
device. If the size is set to a smaller value than the
existing one, then smaller log will be available for view
by the user.rw Gauge .1.3.6.1.4.1.9.9.288.1.1.6 |
crRadiusAccountingMethodThe accounting method on the device. If bit 0
is set, the accounting method is RADIUS. If bit 1
is set, then the accounting method is local. It is
possible for the user to set both the bits so that
both the RADIUS as well as local accounting methods
are used. It is also possible to set none of the
methods; in this case the switch will not do any
accounting.rw OCTET STRING .1.3.6.1.4.1.9.9.288.1.1.7 |
crRadiusServerConfig OBJECT IDENTIFIER .1.3.6.1.4.1.9.9.288.1.2 |
crRadiusServerTableMaxEntriesThe maximum number of entries that the agent supports in the
crRadiusServerTable.ro Gauge .1.3.6.1.4.1.9.9.288.1.2.1 |
crRadiusServerTableThis table lists RADIUS servers. SEQUENCE OF RadiusServerEntry .1.3.6.1.4.1.9.9.288.1.2.2 |
crRadiusServerEntryA RADIUS server table entry.
Users can add/delete entries in this table using object
'crRadiusServerRowStatus'.
An entry cannot be created until following objects are
instantiated :
- crRadiusServerAddrType
- crRadiusServerAddr
Also, following objects cannot be modified when
'crRadiusServerRowStatus' is 'active' :
- crRadiusServerAddrType
- crRadiusServerAddr
To modify above objects, the entry must be deleted and
re-created with new values of above objects.
If 'crRadiusServerKey' is not instantiated or is a
zero-length string, then value of the object
'crRadiusAuthkey' is used as the key to communicate with the
corresponding RADIUS server. RadiusServerEntry .1.3.6.1.4.1.9.9.288.1.2.2.1 |
crRadiusServerIndexAn arbitrary integer value, greater than zero, and less than
and equal to crRadiusServerTableMaxEntries, which identifies
a RADIUS Server in this table.
The value of this object must be persistent across
reboots/reinitialization of the device. Gauge .1.3.6.1.4.1.9.9.288.1.2.2.1.1 |
crRadiusServerAddrTypeThe type of address of the RADIUS Server as specified by
object 'crRadiusServerAddr'.rw InetAddressType -- Rsyntax INTEGER { -- ?? enum value of zero may cause problems -- unknown(0), -- ipv4(1), -- ipv6(2), -- dns(16) -- } .1.3.6.1.4.1.9.9.288.1.2.2.1.2 |
crRadiusServerAddrThe address of the RADIUS Server.rw InetAddress -- Rsyntax OCTET STRING .1.3.6.1.4.1.9.9.288.1.2.2.1.3 |
crRadiusServerAuthPortThis is the destination UDP port number to which RADIUS
authentication messages should be sent. The RADIUS server
will not be used for authentication if this port number is
0.rw CiscoPort -- Rsyntax INTEGER .1.3.6.1.4.1.9.9.288.1.2.2.1.4 |
crRadiusServerAcctPortThis is the destination UDP port number to which RADIUS
accounting messages should be sent.rw CiscoPort -- Rsyntax INTEGER .1.3.6.1.4.1.9.9.288.1.2.2.1.5 |
crRadiusServerKeyThe key used in encrypting the packets passed between the
RADIUS server and the client. This key must match the one
configured on the server.
A zero-length string is always returned when this object is
read.
Note that if this object is a zero length string, then
'crRadiusAuthKey' is used as the key for this server.rw CiscoRadiusAuthKey -- Rsyntax OCTET STRING .1.3.6.1.4.1.9.9.288.1.2.2.1.6 |
crRadiusServerTypeType of the RADIUS server.
other (1), - a lower priority server
primary (2) - the primary server which is tried first
by the RADIUS client.rw Enumeration .1.3.6.1.4.1.9.9.288.1.2.2.1.7 |
crRadiusServerModeMode of the RADIUS server.
none (1) - neither authentication nor
accounting
authAndAcct (2) - both authentication and
accounting
authOnly (3) - only for authentication
acctOnly (4) - only for accounting.rw Enumeration .1.3.6.1.4.1.9.9.288.1.2.2.1.8 |
crRadiusServerRowStatusStatus of this row.rw RowStatus -- Rsyntax INTEGER { -- active(1), -- notInService(2), -- notReady(3), -- createAndGo(4), -- createAndWait(5), -- destroy(6) -- } .1.3.6.1.4.1.9.9.288.1.2.2.1.9 |
ciscoRadiusMIBConformance OBJECT IDENTIFIER .1.3.6.1.4.1.9.9.288.2 |
ciscoRadiusMIBCompliances OBJECT IDENTIFIER .1.3.6.1.4.1.9.9.288.2.1 |
ciscoRadiusMIBCompliance OBJECT IDENTIFIER .1.3.6.1.4.1.9.9.288.2.1.1 |
ciscoRadiusMIBGroups OBJECT IDENTIFIER .1.3.6.1.4.1.9.9.288.2.2 |
crmConfigurationGroup OBJECT IDENTIFIER .1.3.6.1.4.1.9.9.288.2.2.1 |