graham/towerops
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions
towerops/priv/mibs/ciena/CIENA-CES-RADIUS-CLIENT-MIB
Graham McIntire b4f8b40b7f
Include MIB files in Docker image instead of using PVC 
- Remove PVC volume mount from k8s/deployment.yaml
- Delete k8s/mib-pvc.yaml (no longer needed)
- Update .gitignore to commit MIB files to git
- Add mix import_mibs task to copy MIBs from LibreNMS
- Add all MIB files from priv/mibs/ to git

This fixes the multi-attach volume error in Kubernetes where new pods
couldn't start because the RWO (ReadWriteOnce) PVC was attached to the
old pod. MIBs are now part of the Docker image and can be used by all
pods simultaneously.
2026-01-19 14:01:03 -06:00

1711 lines
66 KiB
Text
Raw Blame History

-- This file was included in WWP MIB release 04-16-00-0047
--
-- CIENA-CES-TCE-RADIUS-CLIENT-MIB.my
--
--
CIENA-CES-RADIUS-CLIENT-MIB DEFINITIONS ::= BEGIN
IMPORTS
Counter32, Gauge32, IpAddress, Unsigned32, Integer32, TimeTicks, OBJECT-TYPE, MODULE-IDENTITY
FROM SNMPv2-SMI
DisplayString, RowStatus, TruthValue, TEXTUAL-CONVENTION
FROM SNMPv2-TC
cienaCesStatistics
FROM CIENA-SMI
CienaGlobalState
FROM CIENA-TC
InetAddressType, InetAddress
FROM INET-ADDRESS-MIB;
cienaCesRadiusClientMIB MODULE-IDENTITY
LAST-UPDATED "201602170000Z"
ORGANIZATION "Ciena Corp."
CONTACT-INFO
" Mib Meister
115 North Sullivan Road
Spokane Valley, WA 99037
USA
Phone: +1 509 242 9000
Email: support@ciena.com"
DESCRIPTION
"This module defines the objects used by the RADIUS client."
REVISION "201602170000Z"
DESCRIPTION
"Updated DESCRIPTION of cienaCesRadiusUserLoginStatus,
cienaCesRadiusUserLoginAcctStatus, cienaCesRadiusDot1xAuthStatus,
and cienaCesRadiusDot1xAcctStatus."
REVISION "201507220000Z"
DESCRIPTION
"Changed the RADIUS authentication string range to accept a zero length string."
REVISION "201506220000Z"
DESCRIPTION
"Added cienaCesRadiusUserLoginAuthSecret, cienaCesRadiusUserLoginAcctAuthSecret,
cienaCesRadiusDot1xAuthAuthSecret, cienaCesRadiusDot1xAcctAuthSecret"
REVISION "201406120000Z"
DESCRIPTION
"Added cienaCesRadiusUserLoginAcct"
REVISION "201401020000Z"
DESCRIPTION
"Added independent Inet addressing and Unsigned32 imports.
Deprecated cienaCesRadiusClientTimeout, cienaCesRadiusClientRetries, cienaCesRadiusClientAuthKey,
cienaCesRadiusClientAuthKeyUnset, cienaCesRadiusClientSearchType, and cienaCesRadiusClientServerTable.
Added cienaCesRadiusUserLoginTable, cienaCesRadiusDot1XAuthTable, cienaCesRadiusDot1XAcctTable"
REVISION "201204170000Z"
DESCRIPTION
"Corrected the maximum RADIUS authentication string length from 127 to 64 characters."
REVISION "201005180000Z"
DESCRIPTION
"Initial creation."
::= { cienaCesStatistics 3 }
RadiusString ::= TEXTUAL-CONVENTION
DISPLAY-HINT "255a"
STATUS current
DESCRIPTION
"Used to represent the RADIUS authentication string."
SYNTAX OCTET STRING (SIZE (0 | 8..64))
--
-- Node definitions
--
cienaCesRadiusClientMIBObjects OBJECT IDENTIFIER ::= { cienaCesRadiusClientMIB 1 }
cienaCesRadiusClient OBJECT IDENTIFIER ::= {cienaCesRadiusClientMIBObjects 1 }
cienaCesRadiusClientGlobal OBJECT IDENTIFIER ::= {cienaCesRadiusClient 1 }
cienaCesRadiusClientServer OBJECT IDENTIFIER ::= {cienaCesRadiusClient 2 }
cienaCesRadiusUserLogin OBJECT IDENTIFIER ::= {cienaCesRadiusClient 3 }
cienaCesRadiusUserLoginGlobal OBJECT IDENTIFIER ::= {cienaCesRadiusUserLogin 1 }
cienaCesRadiusDot1xAuth OBJECT IDENTIFIER ::= {cienaCesRadiusClient 4 }
cienaCesRadiusDot1xAuthGlobal OBJECT IDENTIFIER ::= {cienaCesRadiusDot1xAuth 1 }
cienaCesRadiusDot1xAcct OBJECT IDENTIFIER ::= {cienaCesRadiusClient 5 }
cienaCesRadiusDot1xAcctGlobal OBJECT IDENTIFIER ::= {cienaCesRadiusDot1xAcct 1 }
cienaCesRadiusUserLoginAcct OBJECT IDENTIFIER ::= {cienaCesRadiusClient 6 }
cienaCesRadiusUserLoginAcctGlobal OBJECT IDENTIFIER ::= {cienaCesRadiusUserLoginAcct 1 }
-- Notifications
cienaCesRadiusClientMIBNotificationPrefix OBJECT IDENTIFIER ::= { cienaCesRadiusClientMIB 2 }
cienaCesRadiusClientMIBNotifications OBJECT IDENTIFIER ::=
{ cienaCesRadiusClientMIBNotificationPrefix 0 }
-- Conformance information
cienaCesRadiusClientMIBConformance OBJECT IDENTIFIER ::= { cienaCesRadiusClientMIB 3 }
cienaCesRadiusClientMIBCompliances OBJECT IDENTIFIER ::= { cienaCesRadiusClientMIBConformance 1 }
cienaCesRadiusClientMIBGroups OBJECT IDENTIFIER ::= { cienaCesRadiusClientMIBConformance 2 }
cienaCesRadiusAdminState OBJECT-TYPE
SYNTAX CienaGlobalState
MAX-ACCESS read-write
STATUS current
DESCRIPTION
"Setting this object administratively enables or disables the RADIUS client."
::= { cienaCesRadiusClientGlobal 1 }
cienaCesRadiusOperState OBJECT-TYPE
SYNTAX CienaGlobalState
MAX-ACCESS read-only
STATUS current
DESCRIPTION
"This object returns the operational state of the RADIUS client."
::= { cienaCesRadiusClientGlobal 2 }
cienaCesRadiusClientTimeout OBJECT-TYPE
SYNTAX Integer32 (1..30)
UNITS "seconds"
MAX-ACCESS read-write
STATUS deprecated
DESCRIPTION
"This is the time in seconds between re-transmissions
to the RADIUS server."
DEFVAL { 1 }
::= { cienaCesRadiusClientGlobal 3 }
cienaCesRadiusClientRetries OBJECT-TYPE
SYNTAX Integer32 (0..3)
MAX-ACCESS read-write
STATUS deprecated
DESCRIPTION
"Indicates the number of times the RADIUS server should be
tried before giving up on the server."
DEFVAL { 3 }
::= { cienaCesRadiusClientGlobal 4 }
cienaCesRadiusClientAuthKey OBJECT-TYPE
SYNTAX RadiusString
MAX-ACCESS read-write
STATUS deprecated
DESCRIPTION
"The authenticaion key to be used for RADIUS servers.
Retrieving the value of this object via SNMP returns
an empty string for security reasons."
::= { cienaCesRadiusClientGlobal 5 }
cienaCesRadiusClientAuthKeyUnset OBJECT-TYPE
SYNTAX TruthValue
MAX-ACCESS read-write
STATUS deprecated
DESCRIPTION
"Setting this object to true clears the value of
cienaCesRadiusClientAuthKey.
Reading this object always returns a value of false."
::= { cienaCesRadiusClientGlobal 6 }
cienaCesRadiusClientSearchType OBJECT-TYPE
SYNTAX INTEGER {
cached(1),
priority(2)
}
MAX-ACCESS read-write
STATUS deprecated
DESCRIPTION
"This object sets the search type of the RADIUS client."
::= { cienaCesRadiusClientGlobal 7 }
--
-- Radius Client Server Table
--
cienaCesRadiusClientServerTable OBJECT-TYPE
SYNTAX SEQUENCE OF CienaCesRadiusClientServerEntry
MAX-ACCESS not-accessible
STATUS deprecated
DESCRIPTION
"Lists the possible RADIUS servers.
While creating an entry, cienaCesRadiusRadiusClientServerStatus and
cienaCesRadiusClientServerAddr must be specified. The SNMP multiple
set operation must be used to create an entry."
::= { cienaCesRadiusClientServer 1 }
cienaCesRadiusClientServerEntry OBJECT-TYPE
SYNTAX CienaCesRadiusClientServerEntry
MAX-ACCESS not-accessible
STATUS deprecated
DESCRIPTION
"RADIUS server entry."
INDEX { cienaCesRadiusClientServerIndex}
::= { cienaCesRadiusClientServerTable 1 }
CienaCesRadiusClientServerEntry ::= SEQUENCE {
cienaCesRadiusClientServerIndex Integer32,
cienaCesRadiusClientServerAddr DisplayString,
cienaCesRadiusClientServerResolvedAddr IpAddress,
cienaCesRadiusClientServerPriority Integer32,
cienaCesRadiusClientServerAuthPort Integer32,
cienaCesRadiusClientServerRoundTripTime TimeTicks,
cienaCesRadiusClientServerAccessRequests Counter32,
cienaCesRadiusClientServerAccessRetransmissions Counter32,
cienaCesRadiusClientServerAccessAccepts Counter32,
cienaCesRadiusClientServerAccessRejects Counter32,
cienaCesRadiusClientServerAccessChallenges Counter32,
cienaCesRadiusClientServerMalformedAccessResponses Counter32,
cienaCesRadiusClientServerBadAuthenticators Counter32,
cienaCesRadiusClientServerPendingRequests Gauge32,
cienaCesRadiusClientServerTimeouts Counter32,
cienaCesRadiusClientServerUnknownTypes Counter32,
cienaCesRadiusClientServerPacketsDropped Counter32,
cienaCesRadiusClientServerApplication INTEGER,
cienaCesRadiusClientServerStatus RowStatus
}
cienaCesRadiusClientServerIndex OBJECT-TYPE
SYNTAX Integer32 (1..8)
MAX-ACCESS not-accessible
STATUS deprecated
DESCRIPTION
"Specifies the index of this table."
::= { cienaCesRadiusClientServerEntry 1 }
cienaCesRadiusClientServerAddr OBJECT-TYPE
SYNTAX DisplayString
MAX-ACCESS read-create
STATUS deprecated
DESCRIPTION
"Host name or IP address of the RADIUS server."
::= { cienaCesRadiusClientServerEntry 2 }
cienaCesRadiusClientServerResolvedAddr OBJECT-TYPE
SYNTAX IpAddress
MAX-ACCESS read-only
STATUS deprecated
DESCRIPTION
"Specifies the resolved IP address if cienaCesRadiusClientServerAddr is set to
host name. If cienaCesRadiusClientServerAddr is set to IP address,
then cienaCesRadiusClientServerResolvedAddr contains the same
information as cienaCesRadiusClientServerAddr."
::= { cienaCesRadiusClientServerEntry 3 }
cienaCesRadiusClientServerPriority OBJECT-TYPE
SYNTAX Integer32
MAX-ACCESS read-create
STATUS deprecated
DESCRIPTION
"Specifies the priority of RADIUS servers configured on the device."
::= { cienaCesRadiusClientServerEntry 4 }
cienaCesRadiusClientServerAuthPort OBJECT-TYPE
SYNTAX Integer32 (1..65535)
MAX-ACCESS read-create
STATUS deprecated
DESCRIPTION
"The destination UDP port number to which RADIUS
messages should be sent. The RADIUS server is not
used for authentication if this port number is 0."
DEFVAL { 1812 }
::= { cienaCesRadiusClientServerEntry 5 }
cienaCesRadiusClientServerRoundTripTime OBJECT-TYPE
SYNTAX TimeTicks
MAX-ACCESS read-only
STATUS deprecated
DESCRIPTION
"The time interval (in hundredths of a second) between
the most recent Access-Reply/Access-Challenge and the
Access-Request that matched it from this RADIUS
authentication server."
::= { cienaCesRadiusClientServerEntry 6 }
cienaCesRadiusClientServerAccessRequests OBJECT-TYPE
SYNTAX Counter32
MAX-ACCESS read-only
STATUS deprecated
DESCRIPTION
"The number of RADIUS Access-Request packets sent
to this server. This does not include retransmissions."
::= { cienaCesRadiusClientServerEntry 7 }
cienaCesRadiusClientServerAccessRetransmissions OBJECT-TYPE
SYNTAX Counter32
MAX-ACCESS read-only
STATUS deprecated
DESCRIPTION
"The number of RADIUS Access-Request packets
retransmitted to this RADIUS authentication server."
::= { cienaCesRadiusClientServerEntry 8 }
cienaCesRadiusClientServerAccessAccepts OBJECT-TYPE
SYNTAX Counter32
MAX-ACCESS read-only
STATUS deprecated
DESCRIPTION
"The number of RADIUS Access-Accept packets
(valid or invalid) received from this server."
::= { cienaCesRadiusClientServerEntry 9 }
cienaCesRadiusClientServerAccessRejects OBJECT-TYPE
SYNTAX Counter32
MAX-ACCESS read-only
STATUS deprecated
DESCRIPTION
"The number of RADIUS Access-Reject packets
(valid or invalid) received from this server."
::= { cienaCesRadiusClientServerEntry 10 }
cienaCesRadiusClientServerAccessChallenges OBJECT-TYPE
SYNTAX Counter32
MAX-ACCESS read-only
STATUS deprecated
DESCRIPTION
"The number of RADIUS Access-Challenge packets
(valid or invalid) received from this server."
::= { cienaCesRadiusClientServerEntry 11 }
cienaCesRadiusClientServerMalformedAccessResponses OBJECT-TYPE
SYNTAX Counter32
MAX-ACCESS read-only
STATUS deprecated
DESCRIPTION
"The number of malformed RADIUS Access-Response
packets received from this server.
Malformed packets include packets with
an invalid length. Bad authenticators or
signature attributes or unknown types are not
included as malformed access responses."
::= { cienaCesRadiusClientServerEntry 12 }
cienaCesRadiusClientServerBadAuthenticators OBJECT-TYPE
SYNTAX Counter32
MAX-ACCESS read-only
STATUS deprecated
DESCRIPTION
"The number of RADIUS Access-Response packets
containing invalid authenticators or signature
attributes received from this server."
::= { cienaCesRadiusClientServerEntry 13 }
cienaCesRadiusClientServerPendingRequests OBJECT-TYPE
SYNTAX Gauge32
MAX-ACCESS read-only
STATUS deprecated
DESCRIPTION
"The number of RADIUS Access-Request packets
destined for this server that have not yet timed out
or received a response. This variable is incremented
when an Access-Request is sent and decremented due to
receipt of an Access-Accept, Access-Reject,
Access-Challenge, a timeout, or retransmission."
::= { cienaCesRadiusClientServerEntry 14 }
cienaCesRadiusClientServerTimeouts OBJECT-TYPE
SYNTAX Counter32
MAX-ACCESS read-only
STATUS deprecated
DESCRIPTION
"The number of authentication timeouts to this server.
After a timeout the client may retry sending to the same
server, send to a different server, or
give up. A retry to the same server is counted as a
retransmit as well as a timeout. A send to a different
server is counted as a request as well as a timeout."
::= { cienaCesRadiusClientServerEntry 15 }
cienaCesRadiusClientServerUnknownTypes OBJECT-TYPE
SYNTAX Counter32
MAX-ACCESS read-only
STATUS deprecated
DESCRIPTION
"The number of RADIUS packets of unknown type which
were received from this server on the authentication port."
::= { cienaCesRadiusClientServerEntry 16 }
cienaCesRadiusClientServerPacketsDropped OBJECT-TYPE
SYNTAX Counter32
MAX-ACCESS read-only
STATUS deprecated
DESCRIPTION
"The number of RADIUS packets which were
received from this server on the authentication port
and dropped for some other reason."
::= { cienaCesRadiusClientServerEntry 17}
cienaCesRadiusClientServerApplication OBJECT-TYPE
SYNTAX INTEGER {
userLogin(1),
all(2)
}
MAX-ACCESS read-create
STATUS deprecated
DESCRIPTION
"This object specifies how the RADIUS server should be used for authentication."
DEFVAL {all}
::= { cienaCesRadiusClientServerEntry 18}
cienaCesRadiusClientServerStatus OBJECT-TYPE
SYNTAX RowStatus
MAX-ACCESS read-create
STATUS deprecated
DESCRIPTION
"To create a row in this table, a manager must
set this object to createAndGo(4).
To create an entry, cienaCesRadiusClientServerStatus and
cienaCesRadiusClientServerAddr must be specified. The SNMP
multiple set operation must be used to create the entry.
To disable a RADIUS server, set the
cienaCesRadiusClientServerStatus object to 'notInService' state."
::= { cienaCesRadiusClientServerEntry 19 }
--
-- Radius User Login Global
--
cienaCesRadiusUserLoginTimeout OBJECT-TYPE
SYNTAX Integer32 (1..30)
UNITS "seconds"
MAX-ACCESS read-write
STATUS current
DESCRIPTION
"This is the time in seconds between re-transmissions
to the RADIUS server."
DEFVAL { 1 }
::= { cienaCesRadiusUserLoginGlobal 1 }
cienaCesRadiusUserLoginRetries OBJECT-TYPE
SYNTAX Integer32 (0..3)
MAX-ACCESS read-write
STATUS current
DESCRIPTION
"Indicates the number of times the RADIUS server should be
tried before giving up on the server."
DEFVAL { 3 }
::= { cienaCesRadiusUserLoginGlobal 2 }
cienaCesRadiusUserLoginAuthKey OBJECT-TYPE
SYNTAX RadiusString
MAX-ACCESS read-write
STATUS current
DESCRIPTION
"The authenticaion key to be used for RADIUS servers.
Retrieving the value of this object via SNMP returns
an empty string for security reasons."
::= { cienaCesRadiusUserLoginGlobal 3 }
cienaCesRadiusUserLoginSearchType OBJECT-TYPE
SYNTAX INTEGER {
cached(1),
priority(2)
}
MAX-ACCESS read-write
STATUS current
DESCRIPTION
"This object sets the search type of the RADIUS client."
::= { cienaCesRadiusUserLoginGlobal 4 }
cienaCesRadiusUserLoginAuthSecret OBJECT-TYPE
SYNTAX OCTET STRING(SIZE(0..259))
MAX-ACCESS read-write
STATUS current
DESCRIPTION
"Used to set the pre-encrypted secret for user-login auth.
When read, this object returns the encrypted secret."
::= { cienaCesRadiusUserLoginGlobal 5 }
--
-- Radius User Login Table
--
cienaCesRadiusUserLoginTable OBJECT-TYPE
SYNTAX SEQUENCE OF CienaCesRadiusUserLoginEntry
MAX-ACCESS not-accessible
STATUS current
DESCRIPTION
"Lists the possible RADIUS user login servers.
While creating an entry, cienaCesRadiusUserLoginStatus and
cienaCesRadiusUserLoginAddr must be specified. The SNMP multiple
set operation must be used to create an entry."
::= { cienaCesRadiusUserLogin 2 }
cienaCesRadiusUserLoginEntry OBJECT-TYPE
SYNTAX CienaCesRadiusUserLoginEntry
MAX-ACCESS not-accessible
STATUS current
DESCRIPTION
"RADIUS user login entry."
INDEX { cienaCesRadiusUserLoginIndex }
::= { cienaCesRadiusUserLoginTable 1 }
CienaCesRadiusUserLoginEntry ::= SEQUENCE {
cienaCesRadiusUserLoginIndex Integer32,
cienaCesRadiusUserLoginResolvedInetAddrType InetAddressType,
cienaCesRadiusUserLoginResolvedInetAddress InetAddress,
cienaCesRadiusUserLoginAddr DisplayString,
cienaCesRadiusUserLoginPriority Integer32,
cienaCesRadiusUserLoginAuthPort Integer32,
cienaCesRadiusUserLoginClearStatistics TruthValue,
cienaCesRadiusUserLoginRoundTripTime TimeTicks,
cienaCesRadiusUserLoginRequests Counter32,
cienaCesRadiusUserLoginRetransmissions Counter32,
cienaCesRadiusUserLoginAccessAccepts Counter32,
cienaCesRadiusUserLoginAccessRejects Counter32,
cienaCesRadiusUserLoginAccessChallenges Counter32,
cienaCesRadiusUserLoginAccountingResponses Counter32,
cienaCesRadiusUserLoginMalformedResponses Counter32,
cienaCesRadiusUserLoginBadAuthenticators Counter32,
cienaCesRadiusUserLoginTimeouts Counter32,
cienaCesRadiusUserLoginUnknownTypes Counter32,
cienaCesRadiusUserLoginPacketsDropped Counter32,
cienaCesRadiusUserLoginStatus RowStatus
}
cienaCesRadiusUserLoginIndex OBJECT-TYPE
SYNTAX Integer32 (1..8)
MAX-ACCESS not-accessible
STATUS current
DESCRIPTION
"Specifies the index of this table."
::= { cienaCesRadiusUserLoginEntry 1 }
cienaCesRadiusUserLoginResolvedInetAddrType OBJECT-TYPE
SYNTAX InetAddressType
MAX-ACCESS read-only
STATUS current
DESCRIPTION
"Specifies the resolved IP address type. This OID is used in conjunction
with cienaCesRadiusUserLoginInetAddrress.
When set to :
ipv4 : cienaCesRadiusUserLoginResolvedInetAddress should be compliant with InetAddressIPv4
ipv6 : cienaCesRadiusUserLoginResolvedInetAddress should be compliant with InetAddressIPv6 "
::= { cienaCesRadiusUserLoginEntry 2 }
cienaCesRadiusUserLoginResolvedInetAddress OBJECT-TYPE
SYNTAX InetAddress
MAX-ACCESS read-only
STATUS current
DESCRIPTION
"Specifies the resolved IP address if cienaCesRadiusUserLoginAddr is set to host name.
If cienaCesRadiusUserLoginAddr is set to ip address then
cienaCesRadiusUserLoginResolvedInetAddress will contain same information as
cienaCesRadiusUserLoginAddr.
This OID should be used in conjuction with cienaCesRadiusUserLoginResolvedInetAddrType."
::= { cienaCesRadiusUserLoginEntry 3 }
cienaCesRadiusUserLoginAddr OBJECT-TYPE
SYNTAX DisplayString
MAX-ACCESS read-create
STATUS current
DESCRIPTION
"Host name or IP address of the RADIUS server."
::= { cienaCesRadiusUserLoginEntry 4 }
cienaCesRadiusUserLoginPriority OBJECT-TYPE
SYNTAX Integer32
MAX-ACCESS read-create
STATUS current
DESCRIPTION
"Specifies the priority of RADIUS servers configured on the device."
::= { cienaCesRadiusUserLoginEntry 5 }
cienaCesRadiusUserLoginAuthPort OBJECT-TYPE
SYNTAX Integer32 (1..65535)
MAX-ACCESS read-create
STATUS current
DESCRIPTION
"The destination UDP port number to which RADIUS
messages should be sent. The RADIUS server is not
used for authentication if this port number is 0."
DEFVAL { 1812 }
::= { cienaCesRadiusUserLoginEntry 6 }
cienaCesRadiusUserLoginClearStatistics OBJECT-TYPE
SYNTAX TruthValue
MAX-ACCESS read-write
STATUS current
DESCRIPTION
"This object clears the statistics for a server."
::= { cienaCesRadiusUserLoginEntry 7 }
cienaCesRadiusUserLoginRoundTripTime OBJECT-TYPE
SYNTAX TimeTicks
MAX-ACCESS read-only
STATUS current
DESCRIPTION
"The time interval (in hundredths of a second) between
the most recent Access-Reply/Access-Challenge and the
Access-Request that matched it from this RADIUS
authentication server."
::= { cienaCesRadiusUserLoginEntry 8 }
cienaCesRadiusUserLoginRequests OBJECT-TYPE
SYNTAX Counter32
MAX-ACCESS read-only
STATUS current
DESCRIPTION
"The number of RADIUS Access-Request packets sent
to this server. This does not include retransmissions."
::= { cienaCesRadiusUserLoginEntry 9 }
cienaCesRadiusUserLoginRetransmissions OBJECT-TYPE
SYNTAX Counter32
MAX-ACCESS read-only
STATUS current
DESCRIPTION
"The number of RADIUS Access-Request packets
retransmitted to this RADIUS authentication server."
::= { cienaCesRadiusUserLoginEntry 10 }
cienaCesRadiusUserLoginAccessAccepts OBJECT-TYPE
SYNTAX Counter32
MAX-ACCESS read-only
STATUS current
DESCRIPTION
"The number of RADIUS Access-Accept packets
(valid or invalid) received from this server."
::= { cienaCesRadiusUserLoginEntry 11 }
cienaCesRadiusUserLoginAccessRejects OBJECT-TYPE
SYNTAX Counter32
MAX-ACCESS read-only
STATUS current
DESCRIPTION
"The number of RADIUS Access-Reject packets
(valid or invalid) received from this server."
::= { cienaCesRadiusUserLoginEntry 12 }
cienaCesRadiusUserLoginAccessChallenges OBJECT-TYPE
SYNTAX Counter32
MAX-ACCESS read-only
STATUS current
DESCRIPTION
"The number of RADIUS Access-Challenge packets
(valid or invalid) received from this server."
::= { cienaCesRadiusUserLoginEntry 13 }
cienaCesRadiusUserLoginAccountingResponses OBJECT-TYPE
SYNTAX Counter32
MAX-ACCESS read-only
STATUS current
DESCRIPTION
"The number of RADIUS Accounting-Response packets
(valid or invalid) received from this server."
::= { cienaCesRadiusUserLoginEntry 14 }
cienaCesRadiusUserLoginMalformedResponses OBJECT-TYPE
SYNTAX Counter32
MAX-ACCESS read-only
STATUS current
DESCRIPTION
"The number of malformed RADIUS Access-Response
packets received from this server.
Malformed packets include packets with
an invalid length. Bad authenticators or
signature attributes or unknown types are not
included as malformed access responses."
::= { cienaCesRadiusUserLoginEntry 15 }
cienaCesRadiusUserLoginBadAuthenticators OBJECT-TYPE
SYNTAX Counter32
MAX-ACCESS read-only
STATUS current
DESCRIPTION
"The number of RADIUS Access-Response packets
containing invalid authenticators or signature
attributes received from this server."
::= { cienaCesRadiusUserLoginEntry 16 }
cienaCesRadiusUserLoginTimeouts OBJECT-TYPE
SYNTAX Counter32
MAX-ACCESS read-only
STATUS current
DESCRIPTION
"The number of authentication timeouts to this server.
After a timeout the client may retry sending to the same
server, send to a different server, or
give up. A retry to the same server is counted as a
retransmit as well as a timeout. A send to a different
server is counted as a request as well as a timeout."
::= { cienaCesRadiusUserLoginEntry 17 }
cienaCesRadiusUserLoginUnknownTypes OBJECT-TYPE
SYNTAX Counter32
MAX-ACCESS read-only
STATUS current
DESCRIPTION
"The number of RADIUS packets of unknown type which
were received from this server on the authentication port."
::= { cienaCesRadiusUserLoginEntry 18 }
cienaCesRadiusUserLoginPacketsDropped OBJECT-TYPE
SYNTAX Counter32
MAX-ACCESS read-only
STATUS current
DESCRIPTION
"The number of RADIUS packets which were
received from this server on the authentication port
and dropped for some other reason."
::= { cienaCesRadiusUserLoginEntry 19 }
cienaCesRadiusUserLoginStatus OBJECT-TYPE
SYNTAX RowStatus
MAX-ACCESS read-create
STATUS current
DESCRIPTION
"To create a row in this table, a manager must specify
cienaCesRadiusUserLoginAddr and set this object to createAndGo(4).
The RADIUS server will initially be administratively disabled.
To administratively enable the RADIUS server, set this object to
active(1). To administratively disable the RADIUS server set this
object to notInService(2)."
::= { cienaCesRadiusUserLoginEntry 20 }
--
-- Radius User Login Acct Global
--
cienaCesRadiusUserLoginAcctAdminState OBJECT-TYPE
SYNTAX INTEGER {
disabled(1),
enabled(2)
}
MAX-ACCESS read-write
STATUS current
DESCRIPTION
"Setting this object administratively enables/disables the RADIUS user login accounting client on the device."
::= { cienaCesRadiusUserLoginAcctGlobal 1 }
cienaCesRadiusUserLoginAcctTimeout OBJECT-TYPE
SYNTAX Integer32 (1..30)
UNITS "seconds"
MAX-ACCESS read-write
STATUS current
DESCRIPTION
"This is the time in seconds between re-transmissions
to the RADIUS server."
DEFVAL { 1 }
::= { cienaCesRadiusUserLoginAcctGlobal 2 }
cienaCesRadiusUserLoginAcctRetries OBJECT-TYPE
SYNTAX Integer32 (0..3)
MAX-ACCESS read-write
STATUS current
DESCRIPTION
"Indicates the number of times the RADIUS server should be
tried before giving up on the server."
DEFVAL { 3 }
::= { cienaCesRadiusUserLoginAcctGlobal 3 }
cienaCesRadiusUserLoginAcctAuthKey OBJECT-TYPE
SYNTAX RadiusString
MAX-ACCESS read-write
STATUS current
DESCRIPTION
"The authenticaion key to be used for RADIUS servers.
Retrieving the value of this object via SNMP returns
an empty string for security reasons."
::= { cienaCesRadiusUserLoginAcctGlobal 4 }
cienaCesRadiusUserLoginAcctSearchType OBJECT-TYPE
SYNTAX INTEGER {
cached(1),
priority(2)
}
MAX-ACCESS read-write
STATUS current
DESCRIPTION
"This object sets the search type of the RADIUS client."
::= { cienaCesRadiusUserLoginAcctGlobal 5 }
cienaCesRadiusUserLoginAcctAuthSecret OBJECT-TYPE
SYNTAX OCTET STRING(SIZE(0..259))
MAX-ACCESS read-write
STATUS current
DESCRIPTION
"Used to set the pre-encrypted secret for user-login accounting
auth. When read, this object returns the encrypted secret."
::= { cienaCesRadiusUserLoginAcctGlobal 6 }
--
-- Radius User Login Acct Table
--
cienaCesRadiusUserLoginAcctTable OBJECT-TYPE
SYNTAX SEQUENCE OF CienaCesRadiusUserLoginAcctEntry
MAX-ACCESS not-accessible
STATUS current
DESCRIPTION
"Lists the possible RADIUS user login servers.
While creating an entry, cienaCesRadiusUserLoginAcctStatus and
cienaCesRadiusUserLoginAcctAddr must be specified. The SNMP multiple
set operation must be used to create an entry."
::= { cienaCesRadiusUserLoginAcct 2 }
cienaCesRadiusUserLoginAcctEntry OBJECT-TYPE
SYNTAX CienaCesRadiusUserLoginAcctEntry
MAX-ACCESS not-accessible
STATUS current
DESCRIPTION
"RADIUS user login entry."
INDEX { cienaCesRadiusUserLoginAcctIndex }
::= { cienaCesRadiusUserLoginAcctTable 1 }
CienaCesRadiusUserLoginAcctEntry ::= SEQUENCE {
cienaCesRadiusUserLoginAcctIndex Integer32,
cienaCesRadiusUserLoginAcctResolvedInetAddrType InetAddressType,
cienaCesRadiusUserLoginAcctResolvedInetAddress InetAddress,
cienaCesRadiusUserLoginAcctAddr DisplayString,
cienaCesRadiusUserLoginAcctPriority Integer32,
cienaCesRadiusUserLoginAcctAuthPort Integer32,
cienaCesRadiusUserLoginAcctClearStatistics TruthValue,
cienaCesRadiusUserLoginAcctRoundTripTime TimeTicks,
cienaCesRadiusUserLoginAcctRequests Counter32,
cienaCesRadiusUserLoginAcctRetransmissions Counter32,
cienaCesRadiusUserLoginAcctAccessAccepts Counter32,
cienaCesRadiusUserLoginAcctAccessRejects Counter32,
cienaCesRadiusUserLoginAcctAccessChallenges Counter32,
cienaCesRadiusUserLoginAcctAccountingResponses Counter32,
cienaCesRadiusUserLoginAcctMalformedResponses Counter32,
cienaCesRadiusUserLoginAcctBadAuthenticators Counter32,
cienaCesRadiusUserLoginAcctTimeouts Counter32,
cienaCesRadiusUserLoginAcctUnknownTypes Counter32,
cienaCesRadiusUserLoginAcctPacketsDropped Counter32,
cienaCesRadiusUserLoginAcctStatus RowStatus
}
cienaCesRadiusUserLoginAcctIndex OBJECT-TYPE
SYNTAX Integer32 (1..8)
MAX-ACCESS not-accessible
STATUS current
DESCRIPTION
"Specifies the index of this table."
::= { cienaCesRadiusUserLoginAcctEntry 1 }
cienaCesRadiusUserLoginAcctResolvedInetAddrType OBJECT-TYPE
SYNTAX InetAddressType
MAX-ACCESS read-only
STATUS current
DESCRIPTION
"Specifies the resolved IP address type. This OID is used in conjunction
with cienaCesRadiusUserLoginAcctInetAddrress.
When set to :
ipv4 : cienaCesRadiusUserLoginAcctResolvedInetAddress should be compliant with InetAddressIPv4
ipv6 : cienaCesRadiusUserLoginAcctResolvedInetAddress should be compliant with InetAddressIPv6 "
::= { cienaCesRadiusUserLoginAcctEntry 2 }
cienaCesRadiusUserLoginAcctResolvedInetAddress OBJECT-TYPE
SYNTAX InetAddress
MAX-ACCESS read-only
STATUS current
DESCRIPTION
"Specifies the resolved IP address if cienaCesRadiusUserLoginAcctAddr is set to host name.
If cienaCesRadiusUserLoginAcctAddr is set to ip address then
cienaCesRadiusUserLoginAcctResolvedInetAddress will contain same information as
cienaCesRadiusUserLoginAcctAddr.
This OID should be used in conjuction with cienaCesRadiusUserLoginAcctResolvedInetAddrType."
::= { cienaCesRadiusUserLoginAcctEntry 3 }
cienaCesRadiusUserLoginAcctAddr OBJECT-TYPE
SYNTAX DisplayString
MAX-ACCESS read-create
STATUS current
DESCRIPTION
"Host name or IP address of the RADIUS server."
::= { cienaCesRadiusUserLoginAcctEntry 4 }
cienaCesRadiusUserLoginAcctPriority OBJECT-TYPE
SYNTAX Integer32
MAX-ACCESS read-create
STATUS current
DESCRIPTION
"Specifies the priority of RADIUS servers configured on the device."
::= { cienaCesRadiusUserLoginAcctEntry 5 }
cienaCesRadiusUserLoginAcctAuthPort OBJECT-TYPE
SYNTAX Integer32 (1..65535)
MAX-ACCESS read-create
STATUS current
DESCRIPTION
"The destination UDP port number to which RADIUS
messages should be sent. The RADIUS server is not
used for authentication if this port number is 0."
DEFVAL { 1812 }
::= { cienaCesRadiusUserLoginAcctEntry 6 }
cienaCesRadiusUserLoginAcctClearStatistics OBJECT-TYPE
SYNTAX TruthValue
MAX-ACCESS read-write
STATUS current
DESCRIPTION
"This object clears the statistics for a server."
::= { cienaCesRadiusUserLoginAcctEntry 7 }
cienaCesRadiusUserLoginAcctRoundTripTime OBJECT-TYPE
SYNTAX TimeTicks
MAX-ACCESS read-only
STATUS current
DESCRIPTION
"The time interval (in hundredths of a second) between
the most recent Access-Reply/Access-Challenge and the
Access-Request that matched it from this RADIUS
authentication server."
::= { cienaCesRadiusUserLoginAcctEntry 8 }
cienaCesRadiusUserLoginAcctRequests OBJECT-TYPE
SYNTAX Counter32
MAX-ACCESS read-only
STATUS current
DESCRIPTION
"The number of RADIUS Access-Request packets sent
to this server. This does not include retransmissions."
::= { cienaCesRadiusUserLoginAcctEntry 9 }
cienaCesRadiusUserLoginAcctRetransmissions OBJECT-TYPE
SYNTAX Counter32
MAX-ACCESS read-only
STATUS current
DESCRIPTION
"The number of RADIUS Access-Request packets
retransmitted to this RADIUS authentication server."
::= { cienaCesRadiusUserLoginAcctEntry 10 }
cienaCesRadiusUserLoginAcctAccessAccepts OBJECT-TYPE
SYNTAX Counter32
MAX-ACCESS read-only
STATUS current
DESCRIPTION
"The number of RADIUS Access-Accept packets
(valid or invalid) received from this server."
::= { cienaCesRadiusUserLoginAcctEntry 11 }
cienaCesRadiusUserLoginAcctAccessRejects OBJECT-TYPE
SYNTAX Counter32
MAX-ACCESS read-only
STATUS current
DESCRIPTION
"The number of RADIUS Access-Reject packets
(valid or invalid) received from this server."
::= { cienaCesRadiusUserLoginAcctEntry 12 }
cienaCesRadiusUserLoginAcctAccessChallenges OBJECT-TYPE
SYNTAX Counter32
MAX-ACCESS read-only
STATUS current
DESCRIPTION
"The number of RADIUS Access-Challenge packets
(valid or invalid) received from this server."
::= { cienaCesRadiusUserLoginAcctEntry 13 }
cienaCesRadiusUserLoginAcctAccountingResponses OBJECT-TYPE
SYNTAX Counter32
MAX-ACCESS read-only
STATUS current
DESCRIPTION
"The number of RADIUS Accounting-Response packets
(valid or invalid) received from this server."
::= { cienaCesRadiusUserLoginAcctEntry 14 }
cienaCesRadiusUserLoginAcctMalformedResponses OBJECT-TYPE
SYNTAX Counter32
MAX-ACCESS read-only
STATUS current
DESCRIPTION
"The number of malformed RADIUS Access-Response
packets received from this server.
Malformed packets include packets with
an invalid length. Bad authenticators or
signature attributes or unknown types are not
included as malformed access responses."
::= { cienaCesRadiusUserLoginAcctEntry 15 }
cienaCesRadiusUserLoginAcctBadAuthenticators OBJECT-TYPE
SYNTAX Counter32
MAX-ACCESS read-only
STATUS current
DESCRIPTION
"The number of RADIUS Access-Response packets
containing invalid authenticators or signature
attributes received from this server."
::= { cienaCesRadiusUserLoginAcctEntry 16 }
cienaCesRadiusUserLoginAcctTimeouts OBJECT-TYPE
SYNTAX Counter32
MAX-ACCESS read-only
STATUS current
DESCRIPTION
"The number of authentication timeouts to this server.
After a timeout the client may retry sending to the same
server, send to a different server, or
give up. A retry to the same server is counted as a
retransmit as well as a timeout. A send to a different
server is counted as a request as well as a timeout."
::= { cienaCesRadiusUserLoginAcctEntry 17 }
cienaCesRadiusUserLoginAcctUnknownTypes OBJECT-TYPE
SYNTAX Counter32
MAX-ACCESS read-only
STATUS current
DESCRIPTION
"The number of RADIUS packets of unknown type which
were received from this server on the authentication port."
::= { cienaCesRadiusUserLoginAcctEntry 18 }
cienaCesRadiusUserLoginAcctPacketsDropped OBJECT-TYPE
SYNTAX Counter32
MAX-ACCESS read-only
STATUS current
DESCRIPTION
"The number of RADIUS packets which were
received from this server on the authentication port
and dropped for some other reason."
::= { cienaCesRadiusUserLoginAcctEntry 19 }
cienaCesRadiusUserLoginAcctStatus OBJECT-TYPE
SYNTAX RowStatus
MAX-ACCESS read-create
STATUS current
DESCRIPTION
"To create a row in this table, a manager must specify
cienaCesRadiusUserLoginAcctAddr and set this object to createAndGo(4).
The RADIUS server will initially be administratively disabled.
To administratively enable the RADIUS server, set this object to
active(1). To administratively disable the RADIUS server set this
object to notInService(2)."
::= { cienaCesRadiusUserLoginAcctEntry 20 }
--
-- Radius Dot1x Auth Global
--
cienaCesRadiusDot1xAuthTimeout OBJECT-TYPE
SYNTAX Integer32 (1..30)
UNITS "seconds"
MAX-ACCESS read-write
STATUS current
DESCRIPTION
"This is the time in seconds between re-transmissions
to the RADIUS server."
DEFVAL { 1 }
::= { cienaCesRadiusDot1xAuthGlobal 1 }
cienaCesRadiusDot1xAuthRetries OBJECT-TYPE
SYNTAX Integer32 (0..3)
MAX-ACCESS read-write
STATUS current
DESCRIPTION
"Indicates the number of times the RADIUS server should be
tried before giving up on the server."
DEFVAL { 3 }
::= { cienaCesRadiusDot1xAuthGlobal 2 }
cienaCesRadiusDot1xAuthAuthKey OBJECT-TYPE
SYNTAX RadiusString
MAX-ACCESS read-write
STATUS current
DESCRIPTION
"The authenticaion key to be used for RADIUS servers.
Retrieving the value of this object via SNMP returns
an empty string for security reasons."
::= { cienaCesRadiusDot1xAuthGlobal 3 }
cienaCesRadiusDot1xAuthSearchType OBJECT-TYPE
SYNTAX INTEGER {
priority(1),
loadBalance(2)
}
MAX-ACCESS read-write
STATUS current
DESCRIPTION
"This object sets the search type of the RADIUS client."
::= { cienaCesRadiusDot1xAuthGlobal 4 }
cienaCesRadiusDot1xAuthGreylistTimeout OBJECT-TYPE
SYNTAX Unsigned32 (60..14400)
UNITS "seconds"
MAX-ACCESS read-write
STATUS current
DESCRIPTION
"The max greylist timeout for a RADIUS Dot1x Auth server between
1 minute and 4 hours."
DEFVAL { 600 }
::= { cienaCesRadiusDot1xAuthGlobal 5 }
cienaCesRadiusDot1xAuthAuthSecret OBJECT-TYPE
SYNTAX OCTET STRING(SIZE(0..259))
MAX-ACCESS read-write
STATUS current
DESCRIPTION
"Used to set the pre-encrypted secret for dot1x auth.
When read, this object returns the encrypted secret."
::= { cienaCesRadiusDot1xAuthGlobal 6 }
--
-- Radius Dot1x Auth Table
--
cienaCesRadiusDot1xAuthTable OBJECT-TYPE
SYNTAX SEQUENCE OF CienaCesRadiusDot1xAuthEntry
MAX-ACCESS not-accessible
STATUS current
DESCRIPTION
"Lists the possible RADIUS Dot1x auth servers.
While creating an entry, cienaCesRadiusDot1xAuthStatus and
cienaCesRadiusDot1xAuthAddr must be specified. The SNMP multiple
set operation must be used to create an entry."
::= { cienaCesRadiusDot1xAuth 2 }
cienaCesRadiusDot1xAuthEntry OBJECT-TYPE
SYNTAX CienaCesRadiusDot1xAuthEntry
MAX-ACCESS not-accessible
STATUS current
DESCRIPTION
"RADIUS user login entry."
INDEX { cienaCesRadiusDot1xAuthIndex }
::= { cienaCesRadiusDot1xAuthTable 1 }
CienaCesRadiusDot1xAuthEntry ::= SEQUENCE {
cienaCesRadiusDot1xAuthIndex Integer32,
cienaCesRadiusDot1xAuthResolvedInetAddrType InetAddressType,
cienaCesRadiusDot1xAuthResolvedInetAddress InetAddress,
cienaCesRadiusDot1xAuthAddr DisplayString,
cienaCesRadiusDot1xAuthPriority Integer32,
cienaCesRadiusDot1xAuthAuthPort Integer32,
cienaCesRadiusDot1xAuthClearStatistics TruthValue,
cienaCesRadiusDot1xAuthGreylistTimeRemaining Unsigned32,
cienaCesRadiusDot1xAuthRoundTripTime TimeTicks,
cienaCesRadiusDot1xAuthRequests Counter32,
cienaCesRadiusDot1xAuthRetransmissions Counter32,
cienaCesRadiusDot1xAuthAccessAccepts Counter32,
cienaCesRadiusDot1xAuthAccessRejects Counter32,
cienaCesRadiusDot1xAuthAccessChallenges Counter32,
cienaCesRadiusDot1xAuthAccountingResponses Counter32,
cienaCesRadiusDot1xAuthMalformedResponses Counter32,
cienaCesRadiusDot1xAuthBadAuthenticators Counter32,
cienaCesRadiusDot1xAuthTimeouts Counter32,
cienaCesRadiusDot1xAuthUnknownTypes Counter32,
cienaCesRadiusDot1xAuthPacketsDropped Counter32,
cienaCesRadiusDot1xAuthStatus RowStatus
}
cienaCesRadiusDot1xAuthIndex OBJECT-TYPE
SYNTAX Integer32 (1..8)
MAX-ACCESS not-accessible
STATUS current
DESCRIPTION
"Specifies the index of this table."
::= { cienaCesRadiusDot1xAuthEntry 1 }
cienaCesRadiusDot1xAuthResolvedInetAddrType OBJECT-TYPE
SYNTAX InetAddressType
MAX-ACCESS read-only
STATUS current
DESCRIPTION
"Specifies the resolved IP address type. This OID is used in conjunction
with cienaCesRadiusDot1xAuthInetAddrress.
When set to :
ipv4 : cienaCesRadiusDot1xAuthResolvedInetAddress should be compliant with InetAddressIPv4
ipv6 : cienaCesRadiusDot1xAuthResolvedInetAddress should be compliant with InetAddressIPv6 "
::= { cienaCesRadiusDot1xAuthEntry 2 }
cienaCesRadiusDot1xAuthResolvedInetAddress OBJECT-TYPE
SYNTAX InetAddress
MAX-ACCESS read-only
STATUS current
DESCRIPTION
"Specifies the resolved IP address if cienaCesRadiusDot1xAuthAddr is set to host name.
If cienaCesRadiusDot1xAuthAddr is set to ip address then
cienaCesRadiusDot1xAuthResolvedInetAddress will contain same information as
cienaCesRadiusDot1xAuthAddr.
This OID should be used in conjuction with cienaCesRadiusDot1xAuthResolvedInetAddrType."
::= { cienaCesRadiusDot1xAuthEntry 3 }
cienaCesRadiusDot1xAuthAddr OBJECT-TYPE
SYNTAX DisplayString
MAX-ACCESS read-create
STATUS current
DESCRIPTION
"Host name or IP address of the RADIUS server."
::= { cienaCesRadiusDot1xAuthEntry 4 }
cienaCesRadiusDot1xAuthPriority OBJECT-TYPE
SYNTAX Integer32
MAX-ACCESS read-create
STATUS current
DESCRIPTION
"Specifies the priority of RADIUS servers configured on the device."
::= { cienaCesRadiusDot1xAuthEntry 5 }
cienaCesRadiusDot1xAuthAuthPort OBJECT-TYPE
SYNTAX Integer32 (1..65535)
MAX-ACCESS read-create
STATUS current
DESCRIPTION
"The destination UDP port number to which RADIUS
messages should be sent. The RADIUS server is not
used for authentication if this port number is 0."
DEFVAL { 1812 }
::= { cienaCesRadiusDot1xAuthEntry 6 }
cienaCesRadiusDot1xAuthClearStatistics OBJECT-TYPE
SYNTAX TruthValue
MAX-ACCESS read-write
STATUS current
DESCRIPTION
"This object clears the statistics for a server."
::= { cienaCesRadiusDot1xAuthEntry 7 }
cienaCesRadiusDot1xAuthGreylistTimeRemaining OBJECT-TYPE
SYNTAX Unsigned32 (0..14400)
UNITS "seconds"
MAX-ACCESS read-only
STATUS current
DESCRIPTION
"Reflects the remaining time before the server removed from the greylist.
A value of '0' (zero) indicates the current server is not greylisted"
::= { cienaCesRadiusDot1xAuthEntry 8 }
cienaCesRadiusDot1xAuthRoundTripTime OBJECT-TYPE
SYNTAX TimeTicks
MAX-ACCESS read-only
STATUS current
DESCRIPTION
"The time interval (in hundredths of a second) between
the most recent Access-Reply/Access-Challenge and the
Access-Request that matched it from this RADIUS
authentication server."
::= { cienaCesRadiusDot1xAuthEntry 9 }
cienaCesRadiusDot1xAuthRequests OBJECT-TYPE
SYNTAX Counter32
MAX-ACCESS read-only
STATUS current
DESCRIPTION
"The number of RADIUS Access-Request packets sent
to this server. This does not include retransmissions."
::= { cienaCesRadiusDot1xAuthEntry 10 }
cienaCesRadiusDot1xAuthRetransmissions OBJECT-TYPE
SYNTAX Counter32
MAX-ACCESS read-only
STATUS current
DESCRIPTION
"The number of RADIUS Access-Request packets
retransmitted to this RADIUS authentication server."
::= { cienaCesRadiusDot1xAuthEntry 11 }
cienaCesRadiusDot1xAuthAccessAccepts OBJECT-TYPE
SYNTAX Counter32
MAX-ACCESS read-only
STATUS current
DESCRIPTION
"The number of RADIUS Access-Accept packets
(valid or invalid) received from this server."
::= { cienaCesRadiusDot1xAuthEntry 12 }
cienaCesRadiusDot1xAuthAccessRejects OBJECT-TYPE
SYNTAX Counter32
MAX-ACCESS read-only
STATUS current
DESCRIPTION
"The number of RADIUS Access-Reject packets
(valid or invalid) received from this server."
::= { cienaCesRadiusDot1xAuthEntry 13 }
cienaCesRadiusDot1xAuthAccessChallenges OBJECT-TYPE
SYNTAX Counter32
MAX-ACCESS read-only
STATUS current
DESCRIPTION
"The number of RADIUS Access-Challenge packets
(valid or invalid) received from this server."
::= { cienaCesRadiusDot1xAuthEntry 14 }
cienaCesRadiusDot1xAuthAccountingResponses OBJECT-TYPE
SYNTAX Counter32
MAX-ACCESS read-only
STATUS current
DESCRIPTION
"The number of RADIUS Accounting-Response packets
(valid or invalid) received from this server."
::= { cienaCesRadiusDot1xAuthEntry 15 }
cienaCesRadiusDot1xAuthMalformedResponses OBJECT-TYPE
SYNTAX Counter32
MAX-ACCESS read-only
STATUS current
DESCRIPTION
"The number of malformed RADIUS Access-Response
packets received from this server.
Malformed packets include packets with
an invalid length. Bad authenticators or
signature attributes or unknown types are not
included as malformed access responses."
::= { cienaCesRadiusDot1xAuthEntry 16 }
cienaCesRadiusDot1xAuthBadAuthenticators OBJECT-TYPE
SYNTAX Counter32
MAX-ACCESS read-only
STATUS current
DESCRIPTION
"The number of RADIUS Access-Response packets
containing invalid authenticators or signature
attributes received from this server."
::= { cienaCesRadiusDot1xAuthEntry 17 }
cienaCesRadiusDot1xAuthTimeouts OBJECT-TYPE
SYNTAX Counter32
MAX-ACCESS read-only
STATUS current
DESCRIPTION
"The number of authentication timeouts to this server.
After a timeout the client may retry sending to the same
server, send to a different server, or
give up. A retry to the same server is counted as a
retransmit as well as a timeout. A send to a different
server is counted as a request as well as a timeout."
::= { cienaCesRadiusDot1xAuthEntry 18 }
cienaCesRadiusDot1xAuthUnknownTypes OBJECT-TYPE
SYNTAX Counter32
MAX-ACCESS read-only
STATUS current
DESCRIPTION
"The number of RADIUS packets of unknown type which
were received from this server on the authentication port."
::= { cienaCesRadiusDot1xAuthEntry 19 }
cienaCesRadiusDot1xAuthPacketsDropped OBJECT-TYPE
SYNTAX Counter32
MAX-ACCESS read-only
STATUS current
DESCRIPTION
"The number of RADIUS packets which were
received from this server on the authentication port
and dropped for some other reason."
::= { cienaCesRadiusDot1xAuthEntry 20 }
cienaCesRadiusDot1xAuthStatus OBJECT-TYPE
SYNTAX RowStatus
MAX-ACCESS read-create
STATUS current
DESCRIPTION
"To create a row in this table, a manager must specify
cienaCesRadiusDot1xAuthAddr and set this object to createAndGo(4).
The RADIUS server will initially be administratively disabled.
To administratively enable the RADIUS server, set this object to
active(1). To administratively disable the RADIUS server set this
object to notInService(2)."
::= { cienaCesRadiusDot1xAuthEntry 21 }
--
-- Radius Dot1x Acct Global
--
cienaCesRadiusDot1xAcctAdminState OBJECT-TYPE
SYNTAX INTEGER {
disabled(1),
enabled(2)
}
MAX-ACCESS read-write
STATUS current
DESCRIPTION
"Setting this object administratively enables/disables the RADIUS Dot1x accounting client on the device."
::= { cienaCesRadiusDot1xAcctGlobal 1 }
cienaCesRadiusDot1xAcctTimeout OBJECT-TYPE
SYNTAX Integer32 (1..30)
UNITS "seconds"
MAX-ACCESS read-write
STATUS current
DESCRIPTION
"This is the time in seconds between re-transmissions
to the RADIUS server."
DEFVAL { 1 }
::= { cienaCesRadiusDot1xAcctGlobal 2 }
cienaCesRadiusDot1xAcctRetries OBJECT-TYPE
SYNTAX Integer32 (0..3)
MAX-ACCESS read-write
STATUS current
DESCRIPTION
"Indicates the number of times the RADIUS server should be
tried before giving up on the server."
DEFVAL { 3 }
::= { cienaCesRadiusDot1xAcctGlobal 3 }
cienaCesRadiusDot1xAcctAuthKey OBJECT-TYPE
SYNTAX RadiusString
MAX-ACCESS read-write
STATUS current
DESCRIPTION
"The authenticaion key to be used for RADIUS servers.
Retrieving the value of this object via SNMP returns
an empty string for security reasons."
::= { cienaCesRadiusDot1xAcctGlobal 4 }
cienaCesRadiusDot1xAcctSearchType OBJECT-TYPE
SYNTAX INTEGER {
priority(1),
loadBalance(2)
}
MAX-ACCESS read-write
STATUS current
DESCRIPTION
"This object sets the search type of the RADIUS client."
::= { cienaCesRadiusDot1xAcctGlobal 5 }
cienaCesRadiusDot1xAcctGreylistTimeout OBJECT-TYPE
SYNTAX Unsigned32 (60..14400)
UNITS "seconds"
MAX-ACCESS read-write
STATUS current
DESCRIPTION
"The max greylist timeout for a RADIUS Dot1x Acct server between
1 minute and 4 hours."
DEFVAL { 600 }
::= { cienaCesRadiusDot1xAcctGlobal 6 }
cienaCesRadiusDot1xAcctAuthSecret OBJECT-TYPE
SYNTAX OCTET STRING(SIZE(0..259))
MAX-ACCESS read-write
STATUS current
DESCRIPTION
"Used to set the pre-encrypted secret for dot1x auth acct.
When read, this object returns the encrypted secret."
::= { cienaCesRadiusDot1xAcctGlobal 7 }
--
-- Dadius Dot1x Acct Table
--
cienaCesRadiusDot1xAcctTable OBJECT-TYPE
SYNTAX SEQUENCE OF CienaCesRadiusDot1xAcctEntry
MAX-ACCESS not-accessible
STATUS current
DESCRIPTION
"Lists the possible RADIUS Dot1x Acct servers.
While creating an entry, cienaCesRadiusDot1xAcctStatus and
cienaCesRadiusDot1xAcctAddr must be specified. The SNMP multiple
set operation must be used to create an entry."
::= { cienaCesRadiusDot1xAcct 2 }
cienaCesRadiusDot1xAcctEntry OBJECT-TYPE
SYNTAX CienaCesRadiusDot1xAcctEntry
MAX-ACCESS not-accessible
STATUS current
DESCRIPTION
"RADIUS user login entry."
INDEX { cienaCesRadiusDot1xAcctIndex }
::= { cienaCesRadiusDot1xAcctTable 1 }
CienaCesRadiusDot1xAcctEntry ::= SEQUENCE {
cienaCesRadiusDot1xAcctIndex Integer32,
cienaCesRadiusDot1xAcctResolvedInetAddrType InetAddressType,
cienaCesRadiusDot1xAcctResolvedInetAddress InetAddress,
cienaCesRadiusDot1xAcctAddr DisplayString,
cienaCesRadiusDot1xAcctPriority Integer32,
cienaCesRadiusDot1xAcctAuthPort Integer32,
cienaCesRadiusDot1xAcctClearStatistics TruthValue,
cienaCesRadiusDot1xAcctGreylistTimeRemaining Unsigned32,
cienaCesRadiusDot1xAcctRoundTripTime TimeTicks,
cienaCesRadiusDot1xAcctRequests Counter32,
cienaCesRadiusDot1xAcctRetransmissions Counter32,
cienaCesRadiusDot1xAcctAccessAccepts Counter32,
cienaCesRadiusDot1xAcctAccessRejects Counter32,
cienaCesRadiusDot1xAcctAccessChallenges Counter32,
cienaCesRadiusDot1xAcctAccountingResponses Counter32,
cienaCesRadiusDot1xAcctMalformedResponses Counter32,
cienaCesRadiusDot1xAcctBadAuthenticators Counter32,
cienaCesRadiusDot1xAcctTimeouts Counter32,
cienaCesRadiusDot1xAcctUnknownTypes Counter32,
cienaCesRadiusDot1xAcctPacketsDropped Counter32,
cienaCesRadiusDot1xAcctStatus RowStatus
}
cienaCesRadiusDot1xAcctIndex OBJECT-TYPE
SYNTAX Integer32 (1..8)
MAX-ACCESS not-accessible
STATUS current
DESCRIPTION
"Specifies the index of this table."
::= { cienaCesRadiusDot1xAcctEntry 1 }
cienaCesRadiusDot1xAcctResolvedInetAddrType OBJECT-TYPE
SYNTAX InetAddressType
MAX-ACCESS read-only
STATUS current
DESCRIPTION
"Specifies the resolved IP address type. This OID is used in conjunction
with cienaCesRadiusDot1xAcctInetAddrress.
When set to :
ipv4 : cienaCesRadiusDot1xAcctResolvedInetAddress should be compliant with InetAddressIPv4
ipv6 : cienaCesRadiusDot1xAcctResolvedInetAddress should be compliant with InetAddressIPv6 "
::= { cienaCesRadiusDot1xAcctEntry 2 }
cienaCesRadiusDot1xAcctResolvedInetAddress OBJECT-TYPE
SYNTAX InetAddress
MAX-ACCESS read-only
STATUS current
DESCRIPTION
"Specifies the resolved IP address if cienaCesRadiusDot1xAcctAddr is set to host name.
If cienaCesRadiusDot1xAcctAddr is set to ip address then
cienaCesRadiusDot1xAcctResolvedInetAddress will contain same information as
cienaCesRadiusDot1xAcctAddr.
This OID should be used in conjuction with cienaCesRadiusDot1xAcctResolvedInetAddrType."
::= { cienaCesRadiusDot1xAcctEntry 3 }
cienaCesRadiusDot1xAcctAddr OBJECT-TYPE
SYNTAX DisplayString
MAX-ACCESS read-create
STATUS current
DESCRIPTION
"Host name or IP address of the RADIUS server."
::= { cienaCesRadiusDot1xAcctEntry 4 }
cienaCesRadiusDot1xAcctPriority OBJECT-TYPE
SYNTAX Integer32
MAX-ACCESS read-create
STATUS current
DESCRIPTION
"Specifies the priority of RADIUS servers configured on the device."
::= { cienaCesRadiusDot1xAcctEntry 5 }
cienaCesRadiusDot1xAcctAuthPort OBJECT-TYPE
SYNTAX Integer32 (1..65535)
MAX-ACCESS read-create
STATUS current
DESCRIPTION
"The destination UDP port number to which RADIUS
messages should be sent. The RADIUS server is not
used for authentication if this port number is 0."
DEFVAL { 1812 }
::= { cienaCesRadiusDot1xAcctEntry 6 }
cienaCesRadiusDot1xAcctClearStatistics OBJECT-TYPE
SYNTAX TruthValue
MAX-ACCESS read-write
STATUS current
DESCRIPTION
"This object clears the statistics for a server."
::= { cienaCesRadiusDot1xAcctEntry 7 }
cienaCesRadiusDot1xAcctGreylistTimeRemaining OBJECT-TYPE
SYNTAX Unsigned32 (0..14400)
UNITS "seconds"
MAX-ACCESS read-only
STATUS current
DESCRIPTION
"Reflects the remaining time before the server removed from the greylist.
A value of '0' (zero) indicates the current server is not greylisted"
::= { cienaCesRadiusDot1xAcctEntry 8 }
cienaCesRadiusDot1xAcctRoundTripTime OBJECT-TYPE
SYNTAX TimeTicks
MAX-ACCESS read-only
STATUS current
DESCRIPTION
"The time interval (in hundredths of a second) between
the most recent Access-Reply/Access-Challenge and the
Access-Request that matched it from this RADIUS
authentication server."
::= { cienaCesRadiusDot1xAcctEntry 9 }
cienaCesRadiusDot1xAcctRequests OBJECT-TYPE
SYNTAX Counter32
MAX-ACCESS read-only
STATUS current
DESCRIPTION
"The number of RADIUS Access-Request packets sent
to this server. This does not include retransmissions."
::= { cienaCesRadiusDot1xAcctEntry 10 }
cienaCesRadiusDot1xAcctRetransmissions OBJECT-TYPE
SYNTAX Counter32
MAX-ACCESS read-only
STATUS current
DESCRIPTION
"The number of RADIUS Access-Request packets
retransmitted to this RADIUS authentication server."
::= { cienaCesRadiusDot1xAcctEntry 11 }
cienaCesRadiusDot1xAcctAccessAccepts OBJECT-TYPE
SYNTAX Counter32
MAX-ACCESS read-only
STATUS current
DESCRIPTION
"The number of RADIUS Access-Accept packets
(valid or invalid) received from this server."
::= { cienaCesRadiusDot1xAcctEntry 12 }
cienaCesRadiusDot1xAcctAccessRejects OBJECT-TYPE
SYNTAX Counter32
MAX-ACCESS read-only
STATUS current
DESCRIPTION
"The number of RADIUS Access-Reject packets
(valid or invalid) received from this server."
::= { cienaCesRadiusDot1xAcctEntry 13 }
cienaCesRadiusDot1xAcctAccessChallenges OBJECT-TYPE
SYNTAX Counter32
MAX-ACCESS read-only
STATUS current
DESCRIPTION
"The number of RADIUS Access-Challenge packets
(valid or invalid) received from this server."
::= { cienaCesRadiusDot1xAcctEntry 14 }
cienaCesRadiusDot1xAcctAccountingResponses OBJECT-TYPE
SYNTAX Counter32
MAX-ACCESS read-only
STATUS current
DESCRIPTION
"The number of RADIUS Accounting-Response packets
(valid or invalid) received from this server."
::= { cienaCesRadiusDot1xAcctEntry 15 }
cienaCesRadiusDot1xAcctMalformedResponses OBJECT-TYPE
SYNTAX Counter32
MAX-ACCESS read-only
STATUS current
DESCRIPTION
"The number of malformed RADIUS Access-Response
packets received from this server.
Malformed packets include packets with
an invalid length. Bad authenticators or
signature attributes or unknown types are not
included as malformed access responses."
::= { cienaCesRadiusDot1xAcctEntry 16 }
cienaCesRadiusDot1xAcctBadAuthenticators OBJECT-TYPE
SYNTAX Counter32
MAX-ACCESS read-only
STATUS current
DESCRIPTION
"The number of RADIUS Access-Response packets
containing invalid authenticators or signature
attributes received from this server."
::= { cienaCesRadiusDot1xAcctEntry 17 }
cienaCesRadiusDot1xAcctTimeouts OBJECT-TYPE
SYNTAX Counter32
MAX-ACCESS read-only
STATUS current
DESCRIPTION
"The number of authentication timeouts to this server.
After a timeout the client may retry sending to the same
server, send to a different server, or
give up. A retry to the same server is counted as a
retransmit as well as a timeout. A send to a different
server is counted as a request as well as a timeout."
::= { cienaCesRadiusDot1xAcctEntry 18 }
cienaCesRadiusDot1xAcctUnknownTypes OBJECT-TYPE
SYNTAX Counter32
MAX-ACCESS read-only
STATUS current
DESCRIPTION
"The number of RADIUS packets of unknown type which
were received from this server on the authentication port."
::= { cienaCesRadiusDot1xAcctEntry 19 }
cienaCesRadiusDot1xAcctPacketsDropped OBJECT-TYPE
SYNTAX Counter32
MAX-ACCESS read-only
STATUS current
DESCRIPTION
"The number of RADIUS packets which were
received from this server on the authentication port
and dropped for some other reason."
::= { cienaCesRadiusDot1xAcctEntry 20 }
cienaCesRadiusDot1xAcctStatus OBJECT-TYPE
SYNTAX RowStatus
MAX-ACCESS read-create
STATUS current
DESCRIPTION
"To create a row in this table, a manager must specify
cienaCesRadiusDot1xAcctAddr and set this object to createAndGo(4).
The RADIUS server will initially be administratively disabled.
To administratively enable the RADIUS server, set this object to
active(1). To administratively disable the RADIUS server set this
object to notInService(2)."
::= { cienaCesRadiusDot1xAcctEntry 21 }
END
Reference in a new issue View git blame Copy permalink