ZYXEL-AAA-MIB
AI MIB Summary
The ZYXEL-AAA-MIB enables monitoring and management of authentication, authorization, and accounting events on Zyxel network devices, specifically tracking user session states, login failures, and accounting record generation via SNMP.
The subtree for authentication, authorization and accounting (AAA)
Main OID:
zyxelAaa.1.3.6.1.4.1.890.1.15.3.94
32
Objects
Active
Status
14
Dependencies
Imported Objects
Objects
32 total| Object Name |
|---|
zyxelAaaThe subtree for authentication, authorization and accounting (AAA) MODULE-IDENTITY .1.3.6.1.4.1.890.1.15.3.94 |
RFC1155-SMIThe subtree for authentication, authorization and accounting (AAA) Unknown .1.3.6.1.4.1.890.1.15.3.94 |
IF-MIBThe subtree for authentication, authorization and accounting (AAA) NOTIFICATION-TYPE .1.3.6.1.4.1.890.1.15.3.94 |
zyxelAaaSetup OBJECT IDENTIFIER .1.3.6.1.4.1.890.1.15.3.94.1 |
zyxelAaaAuthenticationSetup OBJECT IDENTIFIER .1.3.6.1.4.1.890.1.15.3.94.1.1 |
zyxelAaaAuthenticationTypeTableThe table contains authentication type configuration. SEQUENCE OF ZyxelAaaAuthenticationTypeEntry .1.3.6.1.4.1.890.1.15.3.94.1.1.1 |
zyxelAaaAuthenticationTypeEntryAn entry contains authentication type configuration. ZyxelAaaAuthenticationTypeEntry .1.3.6.1.4.1.890.1.15.3.94.1.1.1.1 |
zyAaaAuthenticationTypeName'Privilege Enable' means to authenticate access privilege level for administrator accounts (users for switch management).
'Login' means to authenticate administrator accounts (users for switch management). DisplayString (SNMPv2-TC) .1.3.6.1.4.1.890.1.15.3.94.1.1.1.1.1 |
zyAaaAuthenticationTypeMethodListThere are three methods for the switch to authenticate the two types.
The switch checks the methods in the order you configure them
(first Method 1, then Method 2 and finally Method 3).
You must configure the settings in the Method 1 field.
If you want the switch to check other sources for authentication,
specified them in Method 2 and Method 3 fields.rw OCTET STRING .1.3.6.1.4.1.890.1.15.3.94.1.1.1.1.2 |
zyxelAaaAuthorizationSetup OBJECT IDENTIFIER .1.3.6.1.4.1.890.1.15.3.94.1.2 |
zyAaaAuthorizationConsoleStateEnable/Disable authorization on console for the switch.rw EnabledStatus (P-BRIDGE-MIB) .1.3.6.1.4.1.890.1.15.3.94.1.2.1 |
zyxelAaaAuthorizationTypeTableThe table contains authorization type configuration. SEQUENCE OF ZyxelAaaAuthorizationTypeEntry .1.3.6.1.4.1.890.1.15.3.94.1.2.2 |
zyxelAaaAuthorizationTypeEntryAn entry contains authorization type configuration. ZyxelAaaAuthorizationTypeEntry .1.3.6.1.4.1.890.1.15.3.94.1.2.2.1 |
zyAaaAuthorizationTypeName'Exec' allows an administrator which logs in the switch through Telnet
or SSH to have different access privilege level assigned via the external server.
'Dot1x' allows an IEEE 802.1x client to have different bandwidth limit or VLAN ID
assigned via the external server. DisplayString (SNMPv2-TC) .1.3.6.1.4.1.890.1.15.3.94.1.2.2.1.1 |
zyAaaAuthorizationTypeStateEnable/Disable authorization for a specified event type.rw EnabledStatus (P-BRIDGE-MIB) .1.3.6.1.4.1.890.1.15.3.94.1.2.2.1.2 |
zyAaaAuthorizationTypeMethodEnter whether you want to use RADIUS or TACACS+ for authorization of
specific types of events. RADIUS is the only method for IEEE 802.1x authorization.rw Enumeration .1.3.6.1.4.1.890.1.15.3.94.1.2.2.1.3 |
zyxelAaaAccountingSetup OBJECT IDENTIFIER .1.3.6.1.4.1.890.1.15.3.94.1.3 |
zyAaaAccountingUpdatePeriodThe amount of time in minutes before the switch sends an update to the accounting server.rw Integer32 .1.3.6.1.4.1.890.1.15.3.94.1.3.1 |
zyxelAaaAccountingTypeTableThe table contains accounting type configuration. SEQUENCE OF ZyxelAaaAccountingTypeEntry .1.3.6.1.4.1.890.1.15.3.94.1.3.2 |
zyxelAaaAccountingTypeEntryAn entry contains accounting type configuration. ZyxelAaaAccountingTypeEntry .1.3.6.1.4.1.890.1.15.3.94.1.3.2.1 |
zyAaaAccountingTypeName'System' means the switch will send information when the following
system events occur: system boots up, system shuts down, system
accounting is enabled, and system accounting is disabled.
'Exec' means the switch will send information when an administrator
logs in and logs out via the console port, telnet or SSH.
'Dot1x' means the switch will send information when an IEEE 802.1x
client begins a session (authenticates via the switch), ends a session
as well as interim updates of a session.
'Commands' means the switch to send information when commands of specified
privilege level and higher are executed on the switch. DisplayString (SNMPv2-TC) .1.3.6.1.4.1.890.1.15.3.94.1.3.2.1.1 |
zyAaaAccountingTypeStateEnable/Disable accounting for a specified event type.rw EnabledStatus (P-BRIDGE-MIB) .1.3.6.1.4.1.890.1.15.3.94.1.3.2.1.2 |
zyAaaAccountingTypeBroadcastStateEnable/Disable this to have the switch send accounting information to
all configured accounting servers at the same time.rw EnabledStatus (P-BRIDGE-MIB) .1.3.6.1.4.1.890.1.15.3.94.1.3.2.1.3 |
zyAaaAccountingTypeModeThe switch supports two modes of recording login events. Select 'start-stop' to
have the switch send information to the accounting server when a user begins a
session, during a user's session (if it lasts past the Update Period),
and when a user ends a session. Select 'stop-only' to have the switch send
information to the accounting server only when a user ends a session.rw Enumeration .1.3.6.1.4.1.890.1.15.3.94.1.3.2.1.4 |
zyAaaAccountingTypeMethodEnter whether you want to use RADIUS or TACACS+ for accounting of specified types of events.rw Enumeration .1.3.6.1.4.1.890.1.15.3.94.1.3.2.1.5 |
zyAaaAccountingTypePrivilegeThis is only configurable for commands type of event. Enter the threshold command
privilege level for which the switch should send accounting information.
The switch will send accounting information when commands at the level you specify
and higher are executed on the switch.rw Enumeration .1.3.6.1.4.1.890.1.15.3.94.1.3.2.1.6 |
zyxelAaaTrapInfoObjects OBJECT IDENTIFIER .1.3.6.1.4.1.890.1.15.3.94.2 |
zyAaaTrapAuthenticationMethodThis trap displays which authentication method is failed. Enumeration .1.3.6.1.4.1.890.1.15.3.94.2.1 |
zyAaaTrapAuthorizationMethodThis trap displays which authorization method is failed. Enumeration .1.3.6.1.4.1.890.1.15.3.94.2.2 |
zyxelAaaNotifications OBJECT IDENTIFIER .1.3.6.1.4.1.890.1.15.3.94.3 |
zyAaaAuthenticationFailureManagement connection authentication has failed. NOTIFICATION-TYPE .1.3.6.1.4.1.890.1.15.3.94.3.1 |
zyAaaAuthorizationFailureManagement connection authorization has failed. NOTIFICATION-TYPE .1.3.6.1.4.1.890.1.15.3.94.3.2 |