1 RADIUS-ACC-CLIENT-MIB DEFINITIONS ::= BEGIN 2 3 IMPORTS 4 MODULE-IDENTITY, OBJECT-TYPE, OBJECT-IDENTITY, 5 Counter32, Integer32, Gauge32, 6 IpAddress, TimeTicks, mib-2 FROM SNMPv2-SMI 7 SnmpAdminString FROM SNMP-FRAMEWORK-MIB 8 InetAddressType, InetAddress, 9 InetPortNumber FROM INET-ADDRESS-MIB 10 MODULE-COMPLIANCE, OBJECT-GROUP FROM SNMPv2-CONF; 11 12 13 radiusAccClientMIB MODULE-IDENTITY 14 LAST-UPDATED "200608210000Z" -- 21 August 2006 15 ORGANIZATION "IETF RADIUS Extensions Working Group." 16 CONTACT-INFO 17 " Bernard Aboba 18 Microsoft 19 One Microsoft Way 20 Redmond, WA 98052 21 US 22 Phone: +1 425 936 6605 23 EMail: bernarda@microsoft.com" 24 DESCRIPTION 25 "The MIB module for entities implementing the client 26 side of the Remote Authentication Dial-In User Service 27 (RADIUS) accounting protocol. Copyright (C) The 28 Internet Society (2006). This version of this MIB 29 module is part of RFC 4670; see the RFC itself for 30 full legal notices." 31 REVISION "200608210000Z" -- 21 August 2006 32 DESCRIPTION 33 "Revised version as published in RFC 4670. 34 This version obsoletes that of RFC 2620 by 35 deprecating the MIB table containing IPv4-only 36 address formats and defining a new table to add support 37 for version-neutral IP address formats. The remaining 38 MIB objects from RFC 2620 are carried forward into this 39 version." 40 REVISION "199906110000Z" -- 11 Jun 1999 41 DESCRIPTION "Initial version as published in RFC 2620." 42 ::= { radiusAccounting 2 } 43 44 radiusMIB OBJECT-IDENTITY 45 STATUS current 46 DESCRIPTION 47 "The OID assigned to RADIUS MIB work by the IANA." 48 ::= { mib-2 67 } 49 50 radiusAccounting OBJECT IDENTIFIER ::= {radiusMIB 2} 51 52 radiusAccClientMIBObjects OBJECT IDENTIFIER 53 ::= { radiusAccClientMIB 1 } 54 55 radiusAccClient OBJECT IDENTIFIER 56 ::= { radiusAccClientMIBObjects 1 } 57 58 radiusAccClientInvalidServerAddresses OBJECT-TYPE 59 SYNTAX Counter32 60 UNITS "packets" 61 MAX-ACCESS read-only 62 STATUS current 63 DESCRIPTION 64 "The number of RADIUS Accounting-Response packets 65 received from unknown addresses." 66 ::= { radiusAccClient 1 } 67 radiusAccClientIdentifier OBJECT-TYPE 68 SYNTAX SnmpAdminString 69 MAX-ACCESS read-only 70 STATUS current 71 DESCRIPTION 72 "The NAS-Identifier of the RADIUS accounting client. 73 This is not necessarily the same as sysName in MIB 74 II." 75 REFERENCE "RFC 2865 section 5.32" 76 ::= { radiusAccClient 2 } 77 78 radiusAccServerTable OBJECT-TYPE 79 SYNTAX SEQUENCE OF RadiusAccServerEntry 80 MAX-ACCESS not-accessible 81 STATUS deprecated 82 DESCRIPTION 83 "The (conceptual) table listing the RADIUS accounting 84 servers with which the client shares a secret." 85 ::= { radiusAccClient 3 } 86 87 radiusAccServerEntry OBJECT-TYPE 88 SYNTAX RadiusAccServerEntry 89 MAX-ACCESS not-accessible 90 STATUS deprecated 91 DESCRIPTION 92 "An entry (conceptual row) representing a RADIUS 93 accounting server with which the client shares a 94 secret." 95 INDEX { radiusAccServerIndex } 96 ::= { radiusAccServerTable 1 } 97 98 RadiusAccServerEntry ::= SEQUENCE { 99 radiusAccServerIndex Integer32, 100 radiusAccServerAddress IpAddress, 101 radiusAccClientServerPortNumber Integer32, 102 radiusAccClientRoundTripTime TimeTicks, 103 radiusAccClientRequests Counter32, 104 radiusAccClientRetransmissions Counter32, 105 radiusAccClientResponses Counter32, 106 radiusAccClientMalformedResponses Counter32, 107 radiusAccClientBadAuthenticators Counter32, 108 radiusAccClientPendingRequests Gauge32, 109 radiusAccClientTimeouts Counter32, 110 radiusAccClientUnknownTypes Counter32, 111 radiusAccClientPacketsDropped Counter32 112 } 113 114 radiusAccServerIndex OBJECT-TYPE 115 SYNTAX Integer32 (1..2147483647) 116 MAX-ACCESS not-accessible 117 STATUS deprecated 118 DESCRIPTION 119 "A number uniquely identifying each RADIUS 120 Accounting server with which this client 121 communicates." 122 ::= { radiusAccServerEntry 1 } 123 124 radiusAccServerAddress OBJECT-TYPE 125 SYNTAX IpAddress 126 MAX-ACCESS read-only 127 STATUS deprecated 128 DESCRIPTION 129 "The IP address of the RADIUS accounting server 130 referred to in this table entry." 131 ::= { radiusAccServerEntry 2 } 132 133 radiusAccClientServerPortNumber OBJECT-TYPE 134 SYNTAX Integer32 (0..65535) 135 MAX-ACCESS read-only 136 STATUS deprecated 137 DESCRIPTION 138 "The UDP port the client is using to send requests to 139 this server." 140 REFERENCE "RFC 2866 section 3" 141 ::= { radiusAccServerEntry 3 } 142 143 radiusAccClientRoundTripTime OBJECT-TYPE 144 SYNTAX TimeTicks 145 MAX-ACCESS read-only 146 STATUS deprecated 147 DESCRIPTION 148 "The time interval between the most recent 149 Accounting-Response and the Accounting-Request that 150 matched it from this RADIUS accounting server." 151 REFERENCE "RFC 2866 section 2" 152 ::= { radiusAccServerEntry 4 } 153 154 -- Request/Response statistics 155 -- 156 -- Requests = Responses + PendingRequests + ClientTimeouts 157 -- 158 -- Responses - MalformedResponses - BadAuthenticators - 159 -- UnknownTypes - PacketsDropped = Successfully received 160 161 radiusAccClientRequests OBJECT-TYPE 162 SYNTAX Counter32 163 UNITS "packets" 164 MAX-ACCESS read-only 165 STATUS deprecated 166 DESCRIPTION 167 "The number of RADIUS Accounting-Request packets 168 sent. This does not include retransmissions." 169 REFERENCE "RFC 2866 section 4.1" 170 ::= { radiusAccServerEntry 5 } 171 172 radiusAccClientRetransmissions OBJECT-TYPE 173 SYNTAX Counter32 174 UNITS "packets" 175 MAX-ACCESS read-only 176 STATUS deprecated 177 DESCRIPTION 178 "The number of RADIUS Accounting-Request packets 179 retransmitted to this RADIUS accounting server. 180 Retransmissions include retries where the 181 Identifier and Acct-Delay have been updated, as 182 well as those in which they remain the same." 183 REFERENCE "RFC 2866 section 2" 184 ::= { radiusAccServerEntry 6 } 185 186 radiusAccClientResponses OBJECT-TYPE 187 SYNTAX Counter32 188 UNITS "packets" 189 MAX-ACCESS read-only 190 STATUS deprecated 191 DESCRIPTION 192 "The number of RADIUS packets received on the 193 accounting port from this server." 194 REFERENCE "RFC 2866 section 4.2" 195 ::= { radiusAccServerEntry 7 } 196 197 radiusAccClientMalformedResponses OBJECT-TYPE 198 SYNTAX Counter32 199 UNITS "packets" 200 MAX-ACCESS read-only 201 STATUS deprecated 202 DESCRIPTION 203 "The number of malformed RADIUS Accounting-Response 204 packets received from this server. Malformed packets 205 include packets with an invalid length. Bad 206 authenticators and unknown types are not included as 207 malformed accounting responses." 208 REFERENCE "RFC 2866 section 3" 209 ::= { radiusAccServerEntry 8 } 210 211 radiusAccClientBadAuthenticators OBJECT-TYPE 212 SYNTAX Counter32 213 UNITS "packets" 214 MAX-ACCESS read-only 215 STATUS deprecated 216 DESCRIPTION 217 "The number of RADIUS Accounting-Response 218 packets that contained invalid authenticators 219 received from this server." 220 REFERENCE "RFC 2866 section 3" 221 ::= { radiusAccServerEntry 9 } 222 223 radiusAccClientPendingRequests OBJECT-TYPE 224 SYNTAX Gauge32 225 UNITS "packets" 226 MAX-ACCESS read-only 227 STATUS deprecated 228 DESCRIPTION 229 "The number of RADIUS Accounting-Request packets 230 sent to this server that have not yet timed out or 231 received a response. This variable is incremented 232 when an Accounting-Request is sent and decremented 233 due to receipt of an Accounting-Response, a timeout, 234 or a retransmission." 235 REFERENCE "RFC 2866 section 2" 236 ::= { radiusAccServerEntry 10 } 237 238 radiusAccClientTimeouts OBJECT-TYPE 239 SYNTAX Counter32 240 UNITS "timeouts" 241 MAX-ACCESS read-only 242 STATUS deprecated 243 DESCRIPTION 244 "The number of accounting timeouts to this server. 245 After a timeout, the client may retry to the same 246 server, send to a different server, or give up. 247 A retry to the same server is counted as a 248 retransmit as well as a timeout. A send to a different 249 server is counted as an Accounting-Request as well as 250 a timeout." 251 REFERENCE "RFC 2866 section 2" 252 ::= { radiusAccServerEntry 11 } 253 254 radiusAccClientUnknownTypes OBJECT-TYPE 255 SYNTAX Counter32 256 UNITS "packets" 257 MAX-ACCESS read-only 258 STATUS deprecated 259 DESCRIPTION 260 "The number of RADIUS packets of unknown type that 261 were received from this server on the accounting port." 262 REFERENCE "RFC 2866 section 4" 263 ::= { radiusAccServerEntry 12 } 264 265 radiusAccClientPacketsDropped OBJECT-TYPE 266 SYNTAX Counter32 267 UNITS "packets" 268 MAX-ACCESS read-only 269 STATUS deprecated 270 DESCRIPTION 271 "The number of RADIUS packets that were received from 272 this server on the accounting port and dropped for some 273 other reason." 274 ::= { radiusAccServerEntry 13 } 275 276 277 -- New MIB objects added in this revision 278 279 radiusAccServerExtTable OBJECT-TYPE 280 SYNTAX SEQUENCE OF RadiusAccServerExtEntry 281 MAX-ACCESS not-accessible 282 STATUS current 283 DESCRIPTION 284 "The (conceptual) table listing the RADIUS accounting 285 servers with which the client shares a secret." 286 ::= { radiusAccClient 4 } 287 288 radiusAccServerExtEntry OBJECT-TYPE 289 SYNTAX RadiusAccServerExtEntry 290 MAX-ACCESS not-accessible 291 STATUS current 292 DESCRIPTION 293 "An entry (conceptual row) representing a RADIUS 294 accounting server with which the client shares a 295 secret." 296 INDEX { radiusAccServerExtIndex } 297 ::= { radiusAccServerExtTable 1 } 298 299 RadiusAccServerExtEntry ::= SEQUENCE { 300 radiusAccServerExtIndex Integer32, 301 radiusAccServerInetAddressType InetAddressType, 302 radiusAccServerInetAddress InetAddress, 303 radiusAccClientServerInetPortNumber InetPortNumber, 304 radiusAccClientExtRoundTripTime TimeTicks, 305 radiusAccClientExtRequests Counter32, 306 radiusAccClientExtRetransmissions Counter32, 307 radiusAccClientExtResponses Counter32, 308 radiusAccClientExtMalformedResponses Counter32, 309 radiusAccClientExtBadAuthenticators Counter32, 310 radiusAccClientExtPendingRequests Gauge32, 311 radiusAccClientExtTimeouts Counter32, 312 radiusAccClientExtUnknownTypes Counter32, 313 radiusAccClientExtPacketsDropped Counter32, 314 radiusAccClientCounterDiscontinuity TimeTicks 315 } 316 317 radiusAccServerExtIndex OBJECT-TYPE 318 SYNTAX Integer32 (1..2147483647) 319 MAX-ACCESS not-accessible 320 STATUS current 321 DESCRIPTION 322 "A number uniquely identifying each RADIUS 323 Accounting server with which this client 324 communicates." 325 ::= { radiusAccServerExtEntry 1 } 326 327 328 radiusAccServerInetAddressType OBJECT-TYPE 329 SYNTAX InetAddressType 330 MAX-ACCESS read-only 331 STATUS current 332 DESCRIPTION 333 "The type of address format used for the 334 radiusAccServerInetAddress object." 335 ::= { radiusAccServerExtEntry 2 } 336 337 338 radiusAccServerInetAddress OBJECT-TYPE 339 SYNTAX InetAddress 340 MAX-ACCESS read-only 341 STATUS current 342 DESCRIPTION 343 "The IP address of the RADIUS accounting 344 server referred to in this table entry, using 345 the version-neutral IP address format." 346 ::= { radiusAccServerExtEntry 3 } 347 348 radiusAccClientServerInetPortNumber OBJECT-TYPE 349 SYNTAX InetPortNumber ( 1..65535 ) 350 MAX-ACCESS read-only 351 STATUS current 352 DESCRIPTION 353 "The UDP port the client is using to send requests 354 to this accounting server. The value zero (0) is 355 invalid." 356 REFERENCE "RFC 2866 section 3" 357 ::= { radiusAccServerExtEntry 4 } 358 359 360 radiusAccClientExtRoundTripTime OBJECT-TYPE 361 SYNTAX TimeTicks 362 MAX-ACCESS read-only 363 STATUS current 364 DESCRIPTION 365 "The time interval between the most recent 366 Accounting-Response and the Accounting-Request that 367 matched it from this RADIUS accounting server." 368 REFERENCE "RFC 2866 section 2" 369 ::= { radiusAccServerExtEntry 5 } 370 371 -- Request/Response statistics 372 -- 373 -- Requests = Responses + PendingRequests + ClientTimeouts 374 -- 375 -- Responses - MalformedResponses - BadAuthenticators - 376 -- UnknownTypes - PacketsDropped = Successfully received 377 378 radiusAccClientExtRequests OBJECT-TYPE 379 SYNTAX Counter32 380 UNITS "packets" 381 MAX-ACCESS read-only 382 STATUS current 383 DESCRIPTION 384 "The number of RADIUS Accounting-Request packets 385 sent. This does not include retransmissions. 386 This counter may experience a discontinuity when the 387 RADIUS Accounting Client module within the managed 388 entity is reinitialized, as indicated by the current 389 value of radiusAccClientCounterDiscontinuity." 390 REFERENCE "RFC 2866 section 4.1" 391 ::= { radiusAccServerExtEntry 6 } 392 393 radiusAccClientExtRetransmissions OBJECT-TYPE 394 SYNTAX Counter32 395 UNITS "packets" 396 MAX-ACCESS read-only 397 STATUS current 398 DESCRIPTION 399 "The number of RADIUS Accounting-Request packets 400 retransmitted to this RADIUS accounting server. 401 Retransmissions include retries where the 402 Identifier and Acct-Delay have been updated, as 403 well as those in which they remain the same. 404 This counter may experience a discontinuity when the 405 RADIUS Accounting Client module within the managed 406 entity is reinitialized, as indicated by the current 407 value of radiusAccClientCounterDiscontinuity." 408 REFERENCE "RFC 2866 section 2" 409 ::= { radiusAccServerExtEntry 7 } 410 411 radiusAccClientExtResponses OBJECT-TYPE 412 SYNTAX Counter32 413 UNITS "packets" 414 MAX-ACCESS read-only 415 STATUS current 416 DESCRIPTION 417 "The number of RADIUS packets received on the 418 accounting port from this server. This counter 419 may experience a discontinuity when the RADIUS 420 Accounting Client module within the managed entity is 421 reinitialized, as indicated by the current value of 422 radiusAccClientCounterDiscontinuity." 423 REFERENCE "RFC 2866 section 4.2" 424 ::= { radiusAccServerExtEntry 8 } 425 426 radiusAccClientExtMalformedResponses OBJECT-TYPE 427 SYNTAX Counter32 428 UNITS "packets" 429 MAX-ACCESS read-only 430 STATUS current 431 DESCRIPTION 432 "The number of malformed RADIUS Accounting-Response 433 packets received from this server. Malformed packets 434 include packets with an invalid length. Bad 435 authenticators and unknown types are not included as 436 malformed accounting responses. This counter may 437 experience a discontinuity when the RADIUS Accounting 438 Client module within the managed entity is 439 reinitialized, as indicated by the current 440 value of radiusAccClientCounterDiscontinuity." 441 REFERENCE "RFC 2866 section 3" 442 ::= { radiusAccServerExtEntry 9 } 443 444 radiusAccClientExtBadAuthenticators OBJECT-TYPE 445 SYNTAX Counter32 446 UNITS "packets" 447 MAX-ACCESS read-only 448 STATUS current 449 DESCRIPTION 450 "The number of RADIUS Accounting-Response 451 packets that contained invalid authenticators 452 received from this server. This counter may 453 experience a discontinuity when the RADIUS 454 Accounting Client module within the managed 455 entity is reinitialized, as indicated by the 456 current value of 457 radiusAccClientCounterDiscontinuity." 458 REFERENCE "RFC 2866 section 3" 459 ::= { radiusAccServerExtEntry 10 } 460 461 radiusAccClientExtPendingRequests OBJECT-TYPE 462 SYNTAX Gauge32 463 UNITS "packets" 464 MAX-ACCESS read-only 465 STATUS current 466 DESCRIPTION 467 "The number of RADIUS Accounting-Request packets 468 sent to this server that have not yet timed out or 469 received a response. This variable is incremented 470 when an Accounting-Request is sent and decremented 471 due to receipt of an Accounting-Response, a timeout, 472 or a retransmission. This counter may experience a 473 discontinuity when the RADIUS Accounting Client module 474 within the managed entity is reinitialized, as 475 indicated by the current value of 476 radiusAccClientCounterDiscontinuity." 477 REFERENCE "RFC 2866 section 2" 478 ::= { radiusAccServerExtEntry 11 } 479 480 radiusAccClientExtTimeouts OBJECT-TYPE 481 SYNTAX Counter32 482 UNITS "timeouts" 483 MAX-ACCESS read-only 484 STATUS current 485 DESCRIPTION 486 "The number of accounting timeouts to this server. 487 After a timeout, the client may retry to the same 488 server, send to a different server, or give up. 489 A retry to the same server is counted as a 490 retransmit as well as a timeout. A send to a different 491 server is counted as an Accounting-Request as well as 492 a timeout. This counter may experience a discontinuity 493 when the RADIUS Accounting Client module within the 494 managed entity is reinitialized, as indicated by the 495 current value of radiusAccClientCounterDiscontinuity." 496 REFERENCE "RFC 2866 section 2" 497 ::= { radiusAccServerExtEntry 12 } 498 499 radiusAccClientExtUnknownTypes OBJECT-TYPE 500 SYNTAX Counter32 501 UNITS "packets" 502 MAX-ACCESS read-only 503 STATUS current 504 DESCRIPTION 505 "The number of RADIUS packets of unknown type that 506 were received from this server on the accounting port. 507 This counter may experience a discontinuity when the 508 RADIUS Accounting Client module within the managed 509 entity is reinitialized, as indicated by the current 510 value of radiusAccClientCounterDiscontinuity." 511 REFERENCE "RFC 2866 section 4" 512 ::= { radiusAccServerExtEntry 13 } 513 514 radiusAccClientExtPacketsDropped OBJECT-TYPE 515 SYNTAX Counter32 516 UNITS "packets" 517 MAX-ACCESS read-only 518 STATUS current 519 DESCRIPTION 520 "The number of RADIUS packets that were received from 521 this server on the accounting port and dropped for some 522 other reason. This counter may experience a 523 discontinuity when the RADIUS Accounting Client module 524 within the managed entity is reinitialized, as indicated 525 by the current value of 526 radiusAccClientCounterDiscontinuity." 527 ::= { radiusAccServerExtEntry 14 } 528 529 radiusAccClientCounterDiscontinuity OBJECT-TYPE 530 SYNTAX TimeTicks 531 UNITS "centiseconds" 532 MAX-ACCESS read-only 533 STATUS current 534 DESCRIPTION 535 "The number of centiseconds since the last 536 discontinuity in the RADIUS Accounting Client 537 counters. A discontinuity may be the result of a 538 reinitialization of the RADIUS Accounting Client 539 module within the managed entity." 540 ::= { radiusAccServerExtEntry 15 } 541 542 543 -- conformance information 544 545 radiusAccClientMIBConformance OBJECT IDENTIFIER 546 ::= { radiusAccClientMIB 2 } 547 548 radiusAccClientMIBCompliances OBJECT IDENTIFIER 549 ::= { radiusAccClientMIBConformance 1 } 550 551 radiusAccClientMIBGroups OBJECT IDENTIFIER 552 ::= { radiusAccClientMIBConformance 2 } 553 554 555 -- units of conformance 556 557 radiusAccClientMIBCompliance MODULE-COMPLIANCE 558 STATUS deprecated 559 DESCRIPTION 560 "The compliance statement for accounting clients 561 implementing the RADIUS Accounting Client MIB. 562 Implementation of this module is for IPv4-only 563 entities, or for backwards compatibility use with 564 entities that support both IPv4 and IPv6." 565 MODULE -- this module 566 MANDATORY-GROUPS { radiusAccClientMIBGroup } 567 568 ::= { radiusAccClientMIBCompliances 1 } 569 570 571 radiusAccClientExtMIBCompliance MODULE-COMPLIANCE 572 STATUS current 573 DESCRIPTION 574 "The compliance statement for accounting 575 clients implementing the RADIUS Accounting 576 Client IPv6 Extensions MIB. Implementation of 577 this module is for entities that support IPv6, 578 or support IPv4 and IPv6." 579 MODULE -- this module 580 MANDATORY-GROUPS { radiusAccClientExtMIBGroup } 581 582 OBJECT radiusAccServerInetAddressType 583 SYNTAX InetAddressType { ipv4(1), ipv6(2) } 584 DESCRIPTION 585 "An implementation is only required to support 586 IPv4 and globally unique IPv6 addresses." 587 588 OBJECT radiusAccServerInetAddress 589 SYNTAX InetAddress ( SIZE (4|16) ) 590 DESCRIPTION 591 "An implementation is only required to support 592 IPv4 and globally unique IPv6 addresses." 593 594 ::= { radiusAccClientMIBCompliances 2 } 595 596 597 -- units of conformance 598 599 radiusAccClientMIBGroup OBJECT-GROUP 600 OBJECTS { radiusAccClientIdentifier, 601 radiusAccClientInvalidServerAddresses, 602 radiusAccServerAddress, 603 radiusAccClientServerPortNumber, 604 radiusAccClientRoundTripTime, 605 radiusAccClientRequests, 606 radiusAccClientRetransmissions, 607 radiusAccClientResponses, 608 radiusAccClientMalformedResponses, 609 radiusAccClientBadAuthenticators, 610 radiusAccClientPendingRequests, 611 radiusAccClientTimeouts, 612 radiusAccClientUnknownTypes, 613 radiusAccClientPacketsDropped 614 } 615 STATUS deprecated 616 DESCRIPTION 617 "The basic collection of objects providing management of 618 RADIUS Accounting Clients." 619 ::= { radiusAccClientMIBGroups 1 } 620 621 622 radiusAccClientExtMIBGroup OBJECT-GROUP 623 OBJECTS { radiusAccClientIdentifier, 624 radiusAccClientInvalidServerAddresses, 625 radiusAccServerInetAddressType, 626 radiusAccServerInetAddress, 627 radiusAccClientServerInetPortNumber, 628 radiusAccClientExtRoundTripTime, 629 radiusAccClientExtRequests, 630 radiusAccClientExtRetransmissions, 631 radiusAccClientExtResponses, 632 radiusAccClientExtMalformedResponses, 633 radiusAccClientExtBadAuthenticators, 634 radiusAccClientExtPendingRequests, 635 radiusAccClientExtTimeouts, 636 radiusAccClientExtUnknownTypes, 637 radiusAccClientExtPacketsDropped, 638 radiusAccClientCounterDiscontinuity 639 } 640 STATUS current 641 DESCRIPTION 642 "The basic collection of objects providing management of 643 RADIUS Accounting Clients." 644 ::= { radiusAccClientMIBGroups 2 } 645 646 647 END 648