1 RADIUS-ACC-CLIENT-MIB DEFINITIONS ::= BEGIN
4 MODULE-IDENTITY, OBJECT-TYPE, OBJECT-IDENTITY,
5 Counter32, Integer32, Gauge32,
6 IpAddress, TimeTicks, mib-2 FROM SNMPv2-SMI
7 SnmpAdminString FROM SNMP-FRAMEWORK-MIB
8 InetAddressType, InetAddress,
9 InetPortNumber FROM INET-ADDRESS-MIB
10 MODULE-COMPLIANCE, OBJECT-GROUP FROM SNMPv2-CONF;
13 radiusAccClientMIB MODULE-IDENTITY
14 LAST-UPDATED "200608210000Z" -- 21 August 2006
15 ORGANIZATION "IETF RADIUS Extensions Working Group."
22 Phone: +1 425 936 6605
23 EMail: bernarda@microsoft.com"
25 "The MIB module for entities implementing the client
26 side of the Remote Authentication Dial-In User Service
27 (RADIUS) accounting protocol. Copyright (C) The
28 Internet Society (2006). This version of this MIB
29 module is part of RFC 4670; see the RFC itself for
31 REVISION "200608210000Z" -- 21 August 2006
33 "Revised version as published in RFC 4670.
34 This version obsoletes that of RFC 2620 by
35 deprecating the MIB table containing IPv4-only
36 address formats and defining a new table to add support
37 for version-neutral IP address formats. The remaining
38 MIB objects from RFC 2620 are carried forward into this
40 REVISION "199906110000Z" -- 11 Jun 1999
41 DESCRIPTION "Initial version as published in RFC 2620."
42 ::= { radiusAccounting 2 }
44 radiusMIB OBJECT-IDENTITY
47 "The OID assigned to RADIUS MIB work by the IANA."
50 radiusAccounting OBJECT IDENTIFIER ::= {radiusMIB 2}
52 radiusAccClientMIBObjects OBJECT IDENTIFIER
53 ::= { radiusAccClientMIB 1 }
55 radiusAccClient OBJECT IDENTIFIER
56 ::= { radiusAccClientMIBObjects 1 }
58 radiusAccClientInvalidServerAddresses OBJECT-TYPE
64 "The number of RADIUS Accounting-Response packets
65 received from unknown addresses."
66 ::= { radiusAccClient 1 }
67 radiusAccClientIdentifier OBJECT-TYPE
68 SYNTAX SnmpAdminString
72 "The NAS-Identifier of the RADIUS accounting client.
73 This is not necessarily the same as sysName in MIB
75 REFERENCE "RFC 2865 section 5.32"
76 ::= { radiusAccClient 2 }
78 radiusAccServerTable OBJECT-TYPE
79 SYNTAX SEQUENCE OF RadiusAccServerEntry
80 MAX-ACCESS not-accessible
83 "The (conceptual) table listing the RADIUS accounting
84 servers with which the client shares a secret."
85 ::= { radiusAccClient 3 }
87 radiusAccServerEntry OBJECT-TYPE
88 SYNTAX RadiusAccServerEntry
89 MAX-ACCESS not-accessible
92 "An entry (conceptual row) representing a RADIUS
93 accounting server with which the client shares a
95 INDEX { radiusAccServerIndex }
96 ::= { radiusAccServerTable 1 }
98 RadiusAccServerEntry ::= SEQUENCE {
99 radiusAccServerIndex Integer32,
100 radiusAccServerAddress IpAddress,
101 radiusAccClientServerPortNumber Integer32,
102 radiusAccClientRoundTripTime TimeTicks,
103 radiusAccClientRequests Counter32,
104 radiusAccClientRetransmissions Counter32,
105 radiusAccClientResponses Counter32,
106 radiusAccClientMalformedResponses Counter32,
107 radiusAccClientBadAuthenticators Counter32,
108 radiusAccClientPendingRequests Gauge32,
109 radiusAccClientTimeouts Counter32,
110 radiusAccClientUnknownTypes Counter32,
111 radiusAccClientPacketsDropped Counter32
114 radiusAccServerIndex OBJECT-TYPE
115 SYNTAX Integer32 (1..2147483647)
116 MAX-ACCESS not-accessible
119 "A number uniquely identifying each RADIUS
120 Accounting server with which this client
122 ::= { radiusAccServerEntry 1 }
124 radiusAccServerAddress OBJECT-TYPE
129 "The IP address of the RADIUS accounting server
130 referred to in this table entry."
131 ::= { radiusAccServerEntry 2 }
133 radiusAccClientServerPortNumber OBJECT-TYPE
134 SYNTAX Integer32 (0..65535)
138 "The UDP port the client is using to send requests to
140 REFERENCE "RFC 2866 section 3"
141 ::= { radiusAccServerEntry 3 }
143 radiusAccClientRoundTripTime OBJECT-TYPE
148 "The time interval between the most recent
149 Accounting-Response and the Accounting-Request that
150 matched it from this RADIUS accounting server."
151 REFERENCE "RFC 2866 section 2"
152 ::= { radiusAccServerEntry 4 }
154 -- Request/Response statistics
156 -- Requests = Responses + PendingRequests + ClientTimeouts
158 -- Responses - MalformedResponses - BadAuthenticators -
159 -- UnknownTypes - PacketsDropped = Successfully received
161 radiusAccClientRequests OBJECT-TYPE
167 "The number of RADIUS Accounting-Request packets
168 sent. This does not include retransmissions."
169 REFERENCE "RFC 2866 section 4.1"
170 ::= { radiusAccServerEntry 5 }
172 radiusAccClientRetransmissions OBJECT-TYPE
178 "The number of RADIUS Accounting-Request packets
179 retransmitted to this RADIUS accounting server.
180 Retransmissions include retries where the
181 Identifier and Acct-Delay have been updated, as
182 well as those in which they remain the same."
183 REFERENCE "RFC 2866 section 2"
184 ::= { radiusAccServerEntry 6 }
186 radiusAccClientResponses OBJECT-TYPE
192 "The number of RADIUS packets received on the
193 accounting port from this server."
194 REFERENCE "RFC 2866 section 4.2"
195 ::= { radiusAccServerEntry 7 }
197 radiusAccClientMalformedResponses OBJECT-TYPE
203 "The number of malformed RADIUS Accounting-Response
204 packets received from this server. Malformed packets
205 include packets with an invalid length. Bad
206 authenticators and unknown types are not included as
207 malformed accounting responses."
208 REFERENCE "RFC 2866 section 3"
209 ::= { radiusAccServerEntry 8 }
211 radiusAccClientBadAuthenticators OBJECT-TYPE
217 "The number of RADIUS Accounting-Response
218 packets that contained invalid authenticators
219 received from this server."
220 REFERENCE "RFC 2866 section 3"
221 ::= { radiusAccServerEntry 9 }
223 radiusAccClientPendingRequests OBJECT-TYPE
229 "The number of RADIUS Accounting-Request packets
230 sent to this server that have not yet timed out or
231 received a response. This variable is incremented
232 when an Accounting-Request is sent and decremented
233 due to receipt of an Accounting-Response, a timeout,
234 or a retransmission."
235 REFERENCE "RFC 2866 section 2"
236 ::= { radiusAccServerEntry 10 }
238 radiusAccClientTimeouts OBJECT-TYPE
244 "The number of accounting timeouts to this server.
245 After a timeout, the client may retry to the same
246 server, send to a different server, or give up.
247 A retry to the same server is counted as a
248 retransmit as well as a timeout. A send to a different
249 server is counted as an Accounting-Request as well as
251 REFERENCE "RFC 2866 section 2"
252 ::= { radiusAccServerEntry 11 }
254 radiusAccClientUnknownTypes OBJECT-TYPE
260 "The number of RADIUS packets of unknown type that
261 were received from this server on the accounting port."
262 REFERENCE "RFC 2866 section 4"
263 ::= { radiusAccServerEntry 12 }
265 radiusAccClientPacketsDropped OBJECT-TYPE
271 "The number of RADIUS packets that were received from
272 this server on the accounting port and dropped for some
274 ::= { radiusAccServerEntry 13 }
277 -- New MIB objects added in this revision
279 radiusAccServerExtTable OBJECT-TYPE
280 SYNTAX SEQUENCE OF RadiusAccServerExtEntry
281 MAX-ACCESS not-accessible
284 "The (conceptual) table listing the RADIUS accounting
285 servers with which the client shares a secret."
286 ::= { radiusAccClient 4 }
288 radiusAccServerExtEntry OBJECT-TYPE
289 SYNTAX RadiusAccServerExtEntry
290 MAX-ACCESS not-accessible
293 "An entry (conceptual row) representing a RADIUS
294 accounting server with which the client shares a
296 INDEX { radiusAccServerExtIndex }
297 ::= { radiusAccServerExtTable 1 }
299 RadiusAccServerExtEntry ::= SEQUENCE {
300 radiusAccServerExtIndex Integer32,
301 radiusAccServerInetAddressType InetAddressType,
302 radiusAccServerInetAddress InetAddress,
303 radiusAccClientServerInetPortNumber InetPortNumber,
304 radiusAccClientExtRoundTripTime TimeTicks,
305 radiusAccClientExtRequests Counter32,
306 radiusAccClientExtRetransmissions Counter32,
307 radiusAccClientExtResponses Counter32,
308 radiusAccClientExtMalformedResponses Counter32,
309 radiusAccClientExtBadAuthenticators Counter32,
310 radiusAccClientExtPendingRequests Gauge32,
311 radiusAccClientExtTimeouts Counter32,
312 radiusAccClientExtUnknownTypes Counter32,
313 radiusAccClientExtPacketsDropped Counter32,
314 radiusAccClientCounterDiscontinuity TimeTicks
317 radiusAccServerExtIndex OBJECT-TYPE
318 SYNTAX Integer32 (1..2147483647)
319 MAX-ACCESS not-accessible
322 "A number uniquely identifying each RADIUS
323 Accounting server with which this client
325 ::= { radiusAccServerExtEntry 1 }
328 radiusAccServerInetAddressType OBJECT-TYPE
329 SYNTAX InetAddressType
333 "The type of address format used for the
334 radiusAccServerInetAddress object."
335 ::= { radiusAccServerExtEntry 2 }
338 radiusAccServerInetAddress OBJECT-TYPE
343 "The IP address of the RADIUS accounting
344 server referred to in this table entry, using
345 the version-neutral IP address format."
346 ::= { radiusAccServerExtEntry 3 }
348 radiusAccClientServerInetPortNumber OBJECT-TYPE
349 SYNTAX InetPortNumber ( 1..65535 )
353 "The UDP port the client is using to send requests
354 to this accounting server. The value zero (0) is
356 REFERENCE "RFC 2866 section 3"
357 ::= { radiusAccServerExtEntry 4 }
360 radiusAccClientExtRoundTripTime OBJECT-TYPE
365 "The time interval between the most recent
366 Accounting-Response and the Accounting-Request that
367 matched it from this RADIUS accounting server."
368 REFERENCE "RFC 2866 section 2"
369 ::= { radiusAccServerExtEntry 5 }
371 -- Request/Response statistics
373 -- Requests = Responses + PendingRequests + ClientTimeouts
375 -- Responses - MalformedResponses - BadAuthenticators -
376 -- UnknownTypes - PacketsDropped = Successfully received
378 radiusAccClientExtRequests OBJECT-TYPE
384 "The number of RADIUS Accounting-Request packets
385 sent. This does not include retransmissions.
386 This counter may experience a discontinuity when the
387 RADIUS Accounting Client module within the managed
388 entity is reinitialized, as indicated by the current
389 value of radiusAccClientCounterDiscontinuity."
390 REFERENCE "RFC 2866 section 4.1"
391 ::= { radiusAccServerExtEntry 6 }
393 radiusAccClientExtRetransmissions OBJECT-TYPE
399 "The number of RADIUS Accounting-Request packets
400 retransmitted to this RADIUS accounting server.
401 Retransmissions include retries where the
402 Identifier and Acct-Delay have been updated, as
403 well as those in which they remain the same.
404 This counter may experience a discontinuity when the
405 RADIUS Accounting Client module within the managed
406 entity is reinitialized, as indicated by the current
407 value of radiusAccClientCounterDiscontinuity."
408 REFERENCE "RFC 2866 section 2"
409 ::= { radiusAccServerExtEntry 7 }
411 radiusAccClientExtResponses OBJECT-TYPE
417 "The number of RADIUS packets received on the
418 accounting port from this server. This counter
419 may experience a discontinuity when the RADIUS
420 Accounting Client module within the managed entity is
421 reinitialized, as indicated by the current value of
422 radiusAccClientCounterDiscontinuity."
423 REFERENCE "RFC 2866 section 4.2"
424 ::= { radiusAccServerExtEntry 8 }
426 radiusAccClientExtMalformedResponses OBJECT-TYPE
432 "The number of malformed RADIUS Accounting-Response
433 packets received from this server. Malformed packets
434 include packets with an invalid length. Bad
435 authenticators and unknown types are not included as
436 malformed accounting responses. This counter may
437 experience a discontinuity when the RADIUS Accounting
438 Client module within the managed entity is
439 reinitialized, as indicated by the current
440 value of radiusAccClientCounterDiscontinuity."
441 REFERENCE "RFC 2866 section 3"
442 ::= { radiusAccServerExtEntry 9 }
444 radiusAccClientExtBadAuthenticators OBJECT-TYPE
450 "The number of RADIUS Accounting-Response
451 packets that contained invalid authenticators
452 received from this server. This counter may
453 experience a discontinuity when the RADIUS
454 Accounting Client module within the managed
455 entity is reinitialized, as indicated by the
457 radiusAccClientCounterDiscontinuity."
458 REFERENCE "RFC 2866 section 3"
459 ::= { radiusAccServerExtEntry 10 }
461 radiusAccClientExtPendingRequests OBJECT-TYPE
467 "The number of RADIUS Accounting-Request packets
468 sent to this server that have not yet timed out or
469 received a response. This variable is incremented
470 when an Accounting-Request is sent and decremented
471 due to receipt of an Accounting-Response, a timeout,
472 or a retransmission. This counter may experience a
473 discontinuity when the RADIUS Accounting Client module
474 within the managed entity is reinitialized, as
475 indicated by the current value of
476 radiusAccClientCounterDiscontinuity."
477 REFERENCE "RFC 2866 section 2"
478 ::= { radiusAccServerExtEntry 11 }
480 radiusAccClientExtTimeouts OBJECT-TYPE
486 "The number of accounting timeouts to this server.
487 After a timeout, the client may retry to the same
488 server, send to a different server, or give up.
489 A retry to the same server is counted as a
490 retransmit as well as a timeout. A send to a different
491 server is counted as an Accounting-Request as well as
492 a timeout. This counter may experience a discontinuity
493 when the RADIUS Accounting Client module within the
494 managed entity is reinitialized, as indicated by the
495 current value of radiusAccClientCounterDiscontinuity."
496 REFERENCE "RFC 2866 section 2"
497 ::= { radiusAccServerExtEntry 12 }
499 radiusAccClientExtUnknownTypes OBJECT-TYPE
505 "The number of RADIUS packets of unknown type that
506 were received from this server on the accounting port.
507 This counter may experience a discontinuity when the
508 RADIUS Accounting Client module within the managed
509 entity is reinitialized, as indicated by the current
510 value of radiusAccClientCounterDiscontinuity."
511 REFERENCE "RFC 2866 section 4"
512 ::= { radiusAccServerExtEntry 13 }
514 radiusAccClientExtPacketsDropped OBJECT-TYPE
520 "The number of RADIUS packets that were received from
521 this server on the accounting port and dropped for some
522 other reason. This counter may experience a
523 discontinuity when the RADIUS Accounting Client module
524 within the managed entity is reinitialized, as indicated
525 by the current value of
526 radiusAccClientCounterDiscontinuity."
527 ::= { radiusAccServerExtEntry 14 }
529 radiusAccClientCounterDiscontinuity OBJECT-TYPE
535 "The number of centiseconds since the last
536 discontinuity in the RADIUS Accounting Client
537 counters. A discontinuity may be the result of a
538 reinitialization of the RADIUS Accounting Client
539 module within the managed entity."
540 ::= { radiusAccServerExtEntry 15 }
543 -- conformance information
545 radiusAccClientMIBConformance OBJECT IDENTIFIER
546 ::= { radiusAccClientMIB 2 }
548 radiusAccClientMIBCompliances OBJECT IDENTIFIER
549 ::= { radiusAccClientMIBConformance 1 }
551 radiusAccClientMIBGroups OBJECT IDENTIFIER
552 ::= { radiusAccClientMIBConformance 2 }
555 -- units of conformance
557 radiusAccClientMIBCompliance MODULE-COMPLIANCE
560 "The compliance statement for accounting clients
561 implementing the RADIUS Accounting Client MIB.
562 Implementation of this module is for IPv4-only
563 entities, or for backwards compatibility use with
564 entities that support both IPv4 and IPv6."
565 MODULE -- this module
566 MANDATORY-GROUPS { radiusAccClientMIBGroup }
568 ::= { radiusAccClientMIBCompliances 1 }
571 radiusAccClientExtMIBCompliance MODULE-COMPLIANCE
574 "The compliance statement for accounting
575 clients implementing the RADIUS Accounting
576 Client IPv6 Extensions MIB. Implementation of
577 this module is for entities that support IPv6,
578 or support IPv4 and IPv6."
579 MODULE -- this module
580 MANDATORY-GROUPS { radiusAccClientExtMIBGroup }
582 OBJECT radiusAccServerInetAddressType
583 SYNTAX InetAddressType { ipv4(1), ipv6(2) }
585 "An implementation is only required to support
586 IPv4 and globally unique IPv6 addresses."
588 OBJECT radiusAccServerInetAddress
589 SYNTAX InetAddress ( SIZE (4|16) )
591 "An implementation is only required to support
592 IPv4 and globally unique IPv6 addresses."
594 ::= { radiusAccClientMIBCompliances 2 }
597 -- units of conformance
599 radiusAccClientMIBGroup OBJECT-GROUP
600 OBJECTS { radiusAccClientIdentifier,
601 radiusAccClientInvalidServerAddresses,
602 radiusAccServerAddress,
603 radiusAccClientServerPortNumber,
604 radiusAccClientRoundTripTime,
605 radiusAccClientRequests,
606 radiusAccClientRetransmissions,
607 radiusAccClientResponses,
608 radiusAccClientMalformedResponses,
609 radiusAccClientBadAuthenticators,
610 radiusAccClientPendingRequests,
611 radiusAccClientTimeouts,
612 radiusAccClientUnknownTypes,
613 radiusAccClientPacketsDropped
617 "The basic collection of objects providing management of
618 RADIUS Accounting Clients."
619 ::= { radiusAccClientMIBGroups 1 }
622 radiusAccClientExtMIBGroup OBJECT-GROUP
623 OBJECTS { radiusAccClientIdentifier,
624 radiusAccClientInvalidServerAddresses,
625 radiusAccServerInetAddressType,
626 radiusAccServerInetAddress,
627 radiusAccClientServerInetPortNumber,
628 radiusAccClientExtRoundTripTime,
629 radiusAccClientExtRequests,
630 radiusAccClientExtRetransmissions,
631 radiusAccClientExtResponses,
632 radiusAccClientExtMalformedResponses,
633 radiusAccClientExtBadAuthenticators,
634 radiusAccClientExtPendingRequests,
635 radiusAccClientExtTimeouts,
636 radiusAccClientExtUnknownTypes,
637 radiusAccClientExtPacketsDropped,
638 radiusAccClientCounterDiscontinuity
642 "The basic collection of objects providing management of
643 RADIUS Accounting Clients."
644 ::= { radiusAccClientMIBGroups 2 }