-- This file was included in Ciena MIB release MIBS-CIENA-CES-08-07-00-024 -- -- CIENA-CES-TACACS-CLIENT-MIB.my -- -- CIENA-CES-TACACS-CLIENT-MIB DEFINITIONS ::= BEGIN IMPORTS IpAddress, Integer32, OBJECT-TYPE, MODULE-IDENTITY FROM SNMPv2-SMI DisplayString, RowStatus, TruthValue FROM SNMPv2-TC InetAddressType,InetAddress FROM INET-ADDRESS-MIB cienaCommon, cienaCesStatistics FROM CIENA-SMI CienaGlobalState, CienaStatsClear FROM CIENA-TC cienaGlobalSeverity, cienaGlobalMacAddress FROM CIENA-GLOBAL-MIB; cienaCesTacacsClientMIB MODULE-IDENTITY LAST-UPDATED "201706070000Z" ORGANIZATION "Ciena Corp." CONTACT-INFO " Mib Meister 7035 Ridge Road Hanover, Maryland 21076 USA Phone: +1 800 921 1144 Email: support@ciena.com" DESCRIPTION "Initial creation." REVISION "201706070000Z" DESCRIPTION "Updated contact info." REVISION "201705310000Z" DESCRIPTION "Removed references to unimplemented obects cienaCesTacacsClientGlobalAuthenticationPendingRequests and cienaCesTacacsClientAuthenticationServerPendingRequests." REVISION "201604250000Z" DESCRIPTION "Added cienaCesTacacsClientConnectionFailed to send out a notification when we cannot connect to a a tacacs server. Also added support for new IP types InetAddress and InetAddressType." REVISION "201602220000Z" DESCRIPTION "Deprecated cienaCesTacacsClientServerApplication, cienaCesTacacsClientAuthenticationServerApplication, cienaCesTacacsClientAuthorizationServerApplication, and cienaCesTacacsClientAccountingServerApplication, all of which were unused." REVISION "201405290000Z" DESCRIPTION "Corrected the range of cienaCesTacacsClientPrivilegeLevelAdmin from (2..14) to (1..13), and cienaCesTacacsClientPrivilegeLevelRW from (3..14) to (2..14)" ::= { cienaCesStatistics 2 } TacacsString ::= TEXTUAL-CONVENTION DISPLAY-HINT "255a" STATUS current DESCRIPTION "Used to repesent the TACACS authentication string" SYNTAX OCTET STRING (SIZE (2..127)) -- -- Node definitions -- cienaCesTacacsClientMIBObjects OBJECT IDENTIFIER ::= { cienaCesTacacsClientMIB 1 } cienaCesTacacsClient OBJECT IDENTIFIER ::= {cienaCesTacacsClientMIBObjects 1 } cienaCesTacacsClientGlobal OBJECT IDENTIFIER ::= {cienaCesTacacsClient 1} cienaCesTacacsClientServer OBJECT IDENTIFIER ::= {cienaCesTacacsClient 2} cienaCesTacacsClientGlobalStatistics OBJECT IDENTIFIER ::= { cienaCesTacacsClient 3} cienaCesTacacsClientAuthentication OBJECT IDENTIFIER ::= {cienaCesTacacsClient 4} cienaCesTacacsClientAuthorization OBJECT IDENTIFIER ::= {cienaCesTacacsClient 5} cienaCesTacacsClientAccounting OBJECT IDENTIFIER ::= {cienaCesTacacsClient 6} -- Notifications cienaCesTacacsClientMIBNotificationPrefix OBJECT IDENTIFIER ::= { cienaCesTacacsClientMIB 2 } cienaCesTacacsClientMIBNotifications OBJECT IDENTIFIER ::= { cienaCesTacacsClientMIBNotificationPrefix 0 } -- Conformance information cienaCesTacacsClientMIBConformance OBJECT IDENTIFIER ::= { cienaCesTacacsClientMIB 3 } cienaCesTacacsClientMIBCompliances OBJECT IDENTIFIER ::= { cienaCesTacacsClientMIBConformance 1 } cienaCesTacacsClientMIBGroups OBJECT IDENTIFIER ::= { cienaCesTacacsClientMIBConformance 2 } cienaCesTacacsClientAdminState OBJECT-TYPE SYNTAX CienaGlobalState MAX-ACCESS read-write STATUS current DESCRIPTION "Setting this object administratively enables or disables the TACACS client on the device." ::= { cienaCesTacacsClientGlobal 1 } cienaCesTacacsClientOperState OBJECT-TYPE SYNTAX CienaGlobalState MAX-ACCESS read-only STATUS current DESCRIPTION "This object specifies the operational state of the TACACS client." ::= { cienaCesTacacsClientGlobal 2 } cienaCesTacacsClientTimeout OBJECT-TYPE SYNTAX Integer32 (1..30) UNITS "seconds" MAX-ACCESS read-write STATUS current DESCRIPTION "This object is the time in seconds between retransmissions to the TACACS server." DEFVAL { 1 } ::= { cienaCesTacacsClientGlobal 3 } cienaCesTacacsClientRetries OBJECT-TYPE SYNTAX Integer32 (0..3) MAX-ACCESS read-write STATUS deprecated DESCRIPTION "Indicates the number of times the TACACS server should be tried before giving up on the server." DEFVAL { 3 } ::= { cienaCesTacacsClientGlobal 4 } cienaCesTacacsClientPrivilegeLevelAdmin OBJECT-TYPE SYNTAX Integer32 (1..13) MAX-ACCESS read-write STATUS current DESCRIPTION "Indicates the privilege level used for mapping a range of TACACS privilege levels to the SAOS administrative privilege level. A privilege level returned by a server is compared to cienaCesTacacsClientPrivilegeLevelRW. If the server privilege level is less than cienaCesTacacsClientPrivilegeLevelRW and greater than or equal to the cienaCesTacacsClientPrivilegeLevelAdmin, the SAOS privilege level is 'admin.'" DEFVAL { 2 } ::= { cienaCesTacacsClientGlobal 5 } cienaCesTacacsClientPrivilegeLevelRW OBJECT-TYPE SYNTAX Integer32 (2..14) MAX-ACCESS read-write STATUS current DESCRIPTION "Indicates the privilege level used for mapping a range of TACACS privilege levels to the SAOS super user privilege level. A privilege level returned by a server is compared to cienaCesTacacsClientPrivilegeLevelDiag. If the server privilege level is less than cienaCesTacacsClientPrivilegeLevelDiag and greater than or equal to the cienaCesTacacsClientPrivilegeLevelRW, the SAOS privilege level is 'superuser.'" DEFVAL { 10 } ::= { cienaCesTacacsClientGlobal 6 } cienaCesTacacsClientPrivilegeLevelDiag OBJECT-TYPE SYNTAX Integer32 (3..15) MAX-ACCESS read-write STATUS current DESCRIPTION "Indicates the privilege level used for mapping a range of TACACS privilege levels to SAOS diagnostic privilege level. A privilege level returned by a server is compared to this value. If the server privilege level is greater than or equal to the cienaCesTacacsClientDiagPrivilegeLevel,the SAOS privilege level is 'diag.'" DEFVAL { 15 } ::= { cienaCesTacacsClientGlobal 7 } cienaCesTacacsClientAuthKey OBJECT-TYPE SYNTAX TacacsString MAX-ACCESS read-write STATUS current DESCRIPTION "The authentication key to be used for TACACS Servers. Retrieving the value of this object via SNMP returns an empty string for security reasons." ::= { cienaCesTacacsClientGlobal 8 } cienaCesTacacsClientAuthenticationAdminState OBJECT-TYPE SYNTAX CienaGlobalState MAX-ACCESS read-write STATUS current DESCRIPTION "Setting this object administratively enables or disables TACACS authentication on the device." DEFVAL { enabled } ::= { cienaCesTacacsClientGlobal 9 } cienaCesTacacsClientAuthorizationAdminState OBJECT-TYPE SYNTAX CienaGlobalState MAX-ACCESS read-write STATUS current DESCRIPTION "Setting this object administratively enables or disables TACACS authorization on the device." DEFVAL { disabled } ::= { cienaCesTacacsClientGlobal 10 } cienaCesTacacsClientAccountingAdminState OBJECT-TYPE SYNTAX CienaGlobalState MAX-ACCESS read-write STATUS current DESCRIPTION "Setting this object administratively enables or disables TACACS accounting on the device." DEFVAL { disabled } ::= { cienaCesTacacsClientGlobal 11 } cienaCesTacacsClientSyslogAdminState OBJECT-TYPE SYNTAX CienaGlobalState MAX-ACCESS read-write STATUS current DESCRIPTION "Setting this object administratively enables or disables TACACS Syslog messages on the device." DEFVAL { disabled } ::= { cienaCesTacacsClientGlobal 12 } cienaCesTacacsClientAccountingSession OBJECT-TYPE SYNTAX INTEGER { off(1), on(2) } MAX-ACCESS read-write STATUS current DESCRIPTION "Setting this object enables or disables session logon and logoff logging with TACACS." DEFVAL { off } ::= { cienaCesTacacsClientGlobal 13 } cienaCesTacacsClientAccountingCommand OBJECT-TYPE SYNTAX INTEGER { off(1), on(2) } MAX-ACCESS read-write STATUS current DESCRIPTION "Setting this object enables or disables command start and stop logging." DEFVAL { off } ::= { cienaCesTacacsClientGlobal 14 } cienaCesTacacsClientGlobalServers OBJECT-TYPE SYNTAX INTEGER { off(1), on(2) } MAX-ACCESS read-write STATUS current DESCRIPTION "Setting this object enables or disables global servers." DEFVAL { off } ::= { cienaCesTacacsClientGlobal 15 } cienaCesTacacsClientSearchMethod OBJECT-TYPE SYNTAX INTEGER { priority(1), cached(2) } MAX-ACCESS read-write STATUS current DESCRIPTION "Setting this object selects the search method." DEFVAL { priority } ::= { cienaCesTacacsClientGlobal 16 } cienaCesTacacsClientAuthKeyUnset OBJECT-TYPE SYNTAX TruthValue MAX-ACCESS read-write STATUS current DESCRIPTION "Setting this object to true clears the value of cienaCesTacacsClientAuthKey. Reading this object always returns a value of false." ::= { cienaCesTacacsClientGlobal 17 } cienaCesTacacsClientKeyMinLen OBJECT-TYPE SYNTAX Integer32 (2..64) MAX-ACCESS read-write STATUS current DESCRIPTION "Setting this object defines the minimum length for TACACS secret key." DEFVAL { 8 } ::= { cienaCesTacacsClientGlobal 18 } cienaCesTacacsClientServerTable OBJECT-TYPE SYNTAX SEQUENCE OF CienaCesTacacsClientServerEntry MAX-ACCESS not-accessible STATUS current DESCRIPTION "Lists the possible TACACS servers. To create an entry, specify both cienaCesTacacsClientServerStatus and cienaCesTacacsClientServerAddr using the SNMP multiple set operation." ::= { cienaCesTacacsClientServer 1 } cienaCesTacacsClientServerEntry OBJECT-TYPE SYNTAX CienaCesTacacsClientServerEntry MAX-ACCESS not-accessible STATUS current DESCRIPTION "TACACS server entry." INDEX { cienaCesTacacsClientServerIndex} ::= { cienaCesTacacsClientServerTable 1 } CienaCesTacacsClientServerEntry ::= SEQUENCE { cienaCesTacacsClientServerIndex Integer32, cienaCesTacacsClientServerAddr DisplayString, cienaCesTacacsClientServerResolvedAddr IpAddress, cienaCesTacacsClientServerPriority Integer32, cienaCesTacacsClientServerAuthPort Integer32, cienaCesTacacsClientServerStatus RowStatus, cienaCesTacacsClientServerApplication INTEGER, cienaCesTacacsClientServerResolvedInetAddrType InetAddressType, cienaCesTacacsClientServerResolvedInetAddr InetAddress } cienaCesTacacsClientServerIndex OBJECT-TYPE SYNTAX Integer32 (1..8) MAX-ACCESS not-accessible STATUS current DESCRIPTION "Specifies the index of this table." ::= { cienaCesTacacsClientServerEntry 1 } cienaCesTacacsClientServerAddr OBJECT-TYPE SYNTAX DisplayString (SIZE (0..64)) MAX-ACCESS read-create STATUS current DESCRIPTION "Host name or IP address of the TACACS server." ::= { cienaCesTacacsClientServerEntry 2 } cienaCesTacacsClientServerResolvedAddr OBJECT-TYPE SYNTAX IpAddress MAX-ACCESS read-only STATUS current DESCRIPTION "Specifies the resolved IP address if cienaCesTacacsClientServerAddr is set to host name. If cienaCesTacacsClientServerAddr is set to IP address then cienaCesTacacsClientServerResolvedAddr contains the same information as cienaCesTacacsClientServerAddr." ::= { cienaCesTacacsClientServerEntry 3 } cienaCesTacacsClientServerPriority OBJECT-TYPE SYNTAX Integer32 (1..8) MAX-ACCESS read-create STATUS current DESCRIPTION "Specifies the priority of the TACACS servers configured on the device. This is the order in which the servers will accessed." ::= { cienaCesTacacsClientServerEntry 4 } cienaCesTacacsClientServerAuthPort OBJECT-TYPE SYNTAX Integer32 (0..65535) MAX-ACCESS read-create STATUS current DESCRIPTION "The destination TCP port number to which TACACS messages are sent. The TACACS server is not used for authentication if this port number is 0." DEFVAL { 49 } ::= { cienaCesTacacsClientServerEntry 5 } cienaCesTacacsClientServerApplication OBJECT-TYPE SYNTAX INTEGER { userLogin(1), dot1x(2), all(3) } MAX-ACCESS read-create STATUS deprecated DESCRIPTION "This object specifies how the TACACS server is used for authentication. Whether this TACACS server is used for userLogin authentication or dot1x authentication or both, is decided by the value of this MIB object. Dot1x is not supported on all platforms." DEFVAL {userLogin} ::= { cienaCesTacacsClientServerEntry 6} cienaCesTacacsClientServerStatus OBJECT-TYPE SYNTAX RowStatus MAX-ACCESS read-create STATUS current DESCRIPTION "To create a row in this table, set this object to createAndGo(4). To create an entry, specify both cienaCesTacacsClientServerStatus and cienaCesTacacsClientServerAddr with the SNMP multiple set operation. To disable a TACACS server, set cienaCesTacacsClientServerStatus object to the 'notInService' status." ::= { cienaCesTacacsClientServerEntry 7 } cienaCesTacacsClientServerResolvedInetAddrType OBJECT-TYPE SYNTAX InetAddressType MAX-ACCESS read-only STATUS current DESCRIPTION "Specifies the resolved IP address type. Used in conjunction with cienaCesTacacsClientServerResolvedInetAddr. When set to: ipv4: cienaCesTacacsClientServerResolvedInetAddr should be compliant with InetAddressIPv4 ipv6: cienaCesTacacsClientServerResolvedInetAddr should be compliant with InetAddressIPv6." ::= { cienaCesTacacsClientServerEntry 8 } cienaCesTacacsClientServerResolvedInetAddr OBJECT-TYPE SYNTAX InetAddress MAX-ACCESS read-only STATUS current DESCRIPTION "Specifies the resolved IP address if cienaCesTacacsClientServerAddr is set to host name. If cienaCesTacacsClientServerAddr is set to IP address then cienaCesTacacsClientServerResolvedInetAddress contains the same information as cienaCesTacacsClientServerAddr. This OID is used in conjunction with cienaCesTacacsClientServerResolvedInetAddrType." ::= { cienaCesTacacsClientServerEntry 9 } cienaCesTacacsClientGlobalStatisticsTable OBJECT-TYPE SYNTAX SEQUENCE OF CienaCesTacacsClientGlobalStatisticsEntry MAX-ACCESS not-accessible STATUS current DESCRIPTION "TACACS global statistics table." ::= {cienaCesTacacsClientGlobalStatistics 1} cienaCesTacacsClientGlobalStatisticsEntry OBJECT-TYPE SYNTAX CienaCesTacacsClientGlobalStatisticsEntry MAX-ACCESS not-accessible STATUS current DESCRIPTION "TACACS global statistics entry." INDEX { cienaCesTacacsClientServerIndex} ::= {cienaCesTacacsClientGlobalStatisticsTable 1} CienaCesTacacsClientGlobalStatisticsEntry ::= SEQUENCE{ cienaCesTacacsClientGlobalAuthenticationAccessRequests Counter32, cienaCesTacacsClientGlobalAuthenticationAccessRetransmissions Counter32, cienaCesTacacsClientGlobalAuthenticationAccessAccepts Counter32, cienaCesTacacsClientGlobalAuthenticationAccessRejects Counter32, cienaCesTacacsClientGlobalAuthenticationMalformedAccessResponses Counter32, cienaCesTacacsClientGlobalAuthenticationBadAuthenticators Counter32, cienaCesTacacsClientGlobalAuthenticationTimeouts Counter32, cienaCesTacacsClientGlobalAuthenticationUnknownTypes Counter32, cienaCesTacacsClientGlobalAuthenticationBadHeaderSequence Counter32, cienaCesTacacsClientGlobalAuthorizationAccessRequests Counter32, cienaCesTacacsClientGlobalAuthorizationAccessRetransmissions Counter32, cienaCesTacacsClientGlobalAuthorizationAccessAccepts Counter32, cienaCesTacacsClientGlobalAuthorizationAccessRejects Counter32, cienaCesTacacsClientGlobalAuthorizationMalformedAccessRespons Counter32, cienaCesTacacsClientGlobalAuthorizationBadAuthenticators Counter32, cienaCesTacacsClientGlobalAuthorizationTimeouts Counter32, cienaCesTacacsClientGlobalAuthorizationUnknownTypes Counter32, cienaCesTacacsClientGlobalAuthorizationBadHeaderSequence Counter32, cienaCesTacacsClientGlobalAccountingAccessRequests Counter32, cienaCesTacacsClientGlobalAccountingAccessRetransmissions Counter32, cienaCesTacacsClientGlobalAccountingAccessAccepts Counter32, cienaCesTacacsClientGlobalAccountingAccessRejects Counter32, cienaCesTacacsClientGlobalAccountingMalformedAccessResponses Counter32, cienaCesTacacsClientGlobalAccountingBadAuthenticators Counter32, cienaCesTacacsClientGlobalAccountingTimeouts Counter32, cienaCesTacacsClientGlobalAccountingUnknownTypes Counter32, cienaCesTacacsClientGlobalAccountingBadHeaderSequence Counter32, cienaCesTacacsClientGlobalServerClearStatistics CienaStatsClear } -- Request/Response statistics -- -- TotalIncomingPackets = Accepts + Rejects + UnknownTypes -- -- TotalIncomingPackets - MalformedResponses - BadAuthenticators - -- UnknownTypes - PacketsDropped = Successfully received -- -- AccessRequests + PendingRequests + ClientTimeouts = -- Successfully Received -- -- cienaCesTacacsClientGlobalAuthenticationAccessRequests OBJECT-TYPE SYNTAX Counter32 MAX-ACCESS read-only STATUS current DESCRIPTION "The number of TACACS Access-Request packets sent to this server not including retransmissions." ::= { cienaCesTacacsClientGlobalStatisticsEntry 1 } cienaCesTacacsClientGlobalAuthenticationAccessRetransmissions OBJECT-TYPE SYNTAX Counter32 MAX-ACCESS read-only STATUS current DESCRIPTION "The number of TACACS Access-Request packets retransmitted to this TACACS authentication server." ::= { cienaCesTacacsClientGlobalStatisticsEntry 2 } cienaCesTacacsClientGlobalAuthenticationAccessAccepts OBJECT-TYPE SYNTAX Counter32 MAX-ACCESS read-only STATUS current DESCRIPTION "The number of TACACS Access-Accept packets (valid or invalid) received from this server." ::= { cienaCesTacacsClientGlobalStatisticsEntry 3 } cienaCesTacacsClientGlobalAuthenticationAccessRejects OBJECT-TYPE SYNTAX Counter32 MAX-ACCESS read-only STATUS current DESCRIPTION "The number of TACACS Access-Reject packets (valid or invalid) received from this server." ::= { cienaCesTacacsClientGlobalStatisticsEntry 4 } -- "Access-Response" includes an Access-Accept, Access-Challenge -- or Access-Reject cienaCesTacacsClientGlobalAuthenticationMalformedAccessResponses OBJECT-TYPE SYNTAX Counter32 MAX-ACCESS read-only STATUS current DESCRIPTION "The number of malformed TACACS Access-Response packets received from this server. Malformed packets include packets with an invalid length. Bad authenticators or signature attributes or unknown types are not included as malformed access responses." ::= { cienaCesTacacsClientGlobalStatisticsEntry 5 } cienaCesTacacsClientGlobalAuthenticationBadAuthenticators OBJECT-TYPE SYNTAX Counter32 MAX-ACCESS read-only STATUS current DESCRIPTION "The number of TACACS Access-Response packets containing invalid authenticators or signature attributes received from this server." ::= { cienaCesTacacsClientGlobalStatisticsEntry 6 } cienaCesTacacsClientGlobalAuthenticationTimeouts OBJECT-TYPE SYNTAX Counter32 MAX-ACCESS read-only STATUS current DESCRIPTION "The number of authentication timeouts to this server. After a timeout the client may retry sending to the same server, send to a different server, or give up. A retry to the same server is counted as a retransmit as well as a timeout. A send to a different server is counted as a request as well as a timeout." ::= { cienaCesTacacsClientGlobalStatisticsEntry 7 } cienaCesTacacsClientGlobalAuthenticationUnknownTypes OBJECT-TYPE SYNTAX Counter32 MAX-ACCESS read-only STATUS current DESCRIPTION "The number of TACACS packets of unknown type which were received from this server on the authentication port." ::= { cienaCesTacacsClientGlobalStatisticsEntry 8 } cienaCesTacacsClientGlobalAuthenticationBadHeaderSequence OBJECT-TYPE SYNTAX Counter32 MAX-ACCESS read-only STATUS current DESCRIPTION "The number of TACACS packets which were received from this server on the authentication port and dropped for some other reason." ::= { cienaCesTacacsClientGlobalStatisticsEntry 9} -- ADDED EXTRA TWAMP STATS for Authorization------------------ cienaCesTacacsClientGlobalAuthorizationAccessRequests OBJECT-TYPE SYNTAX Counter32 MAX-ACCESS read-only STATUS current DESCRIPTION "The number of TACACS Access-Request packets sent to this server. This does not include retransmissions." ::= { cienaCesTacacsClientGlobalStatisticsEntry 10 } cienaCesTacacsClientGlobalAuthorizationAccessRetransmissions OBJECT-TYPE SYNTAX Counter32 MAX-ACCESS read-only STATUS current DESCRIPTION "The number of TACACS Access-Request packets retransmitted to this TACACS authentication server." ::= { cienaCesTacacsClientGlobalStatisticsEntry 11 } cienaCesTacacsClientGlobalAuthorizationAccessAccepts OBJECT-TYPE SYNTAX Counter32 MAX-ACCESS read-only STATUS current DESCRIPTION "The number of TACACS Access-Accept packets (valid or invalid) received from this server." ::= { cienaCesTacacsClientGlobalStatisticsEntry 12 } cienaCesTacacsClientGlobalAuthorizationAccessRejects OBJECT-TYPE SYNTAX Counter32 MAX-ACCESS read-only STATUS current DESCRIPTION "The number of TACACS Access-Reject packets (valid or invalid) received from this server." ::= { cienaCesTacacsClientGlobalStatisticsEntry 13 } -- "Access-Response" includes an Access-Accept, Access-Challenge -- or Access-Reject cienaCesTacacsClientGlobalAuthorizationMalformedAccessRespons OBJECT-TYPE SYNTAX Counter32 MAX-ACCESS read-only STATUS current DESCRIPTION "The number of malformed TACACS Access-Response packets received from this server. Malformed packets include packets with an invalid length. Bad authenticators or signature attributes or unknown types are not included as malformed access responses." ::= { cienaCesTacacsClientGlobalStatisticsEntry 14 } cienaCesTacacsClientGlobalAuthorizationBadAuthenticators OBJECT-TYPE SYNTAX Counter32 MAX-ACCESS read-only STATUS current DESCRIPTION "The number of TACACS Access-Response packets containing invalid authenticators or signature attributes received from this server." ::= { cienaCesTacacsClientGlobalStatisticsEntry 15 } cienaCesTacacsClientGlobalAuthorizationTimeouts OBJECT-TYPE SYNTAX Counter32 MAX-ACCESS read-only STATUS current DESCRIPTION "The number of authentication timeouts to this server. After a timeout the client may retry sending to the same server, send to a different server, or give up. A retry to the same server is counted as a retransmit as well as a timeout. A send to a different server is counted as a request as well as a timeout." ::= { cienaCesTacacsClientGlobalStatisticsEntry 16 } cienaCesTacacsClientGlobalAuthorizationUnknownTypes OBJECT-TYPE SYNTAX Counter32 MAX-ACCESS read-only STATUS current DESCRIPTION "The number of TACACS packets of unknown type which were received from this server on the authentication port." ::= { cienaCesTacacsClientGlobalStatisticsEntry 17 } cienaCesTacacsClientGlobalAuthorizationBadHeaderSequence OBJECT-TYPE SYNTAX Counter32 MAX-ACCESS read-only STATUS current DESCRIPTION "The number of TACACS packets which were received from this server on the authentication port and dropped for some other reason." ::= { cienaCesTacacsClientGlobalStatisticsEntry 18} -- ADDED EXTRA TWAMP STATS for Accounting------------------ cienaCesTacacsClientGlobalAccountingAccessRequests OBJECT-TYPE SYNTAX Counter32 MAX-ACCESS read-only STATUS current DESCRIPTION "The number of TACACS Access-Request packets sent to this server. This does not include retransmissions." ::= { cienaCesTacacsClientGlobalStatisticsEntry 19 } cienaCesTacacsClientGlobalAccountingAccessRetransmissions OBJECT-TYPE SYNTAX Counter32 MAX-ACCESS read-only STATUS current DESCRIPTION "The number of TACACS Access-Request packets retransmitted to this TACACS authentication server." ::= { cienaCesTacacsClientGlobalStatisticsEntry 20 } cienaCesTacacsClientGlobalAccountingAccessAccepts OBJECT-TYPE SYNTAX Counter32 MAX-ACCESS read-only STATUS current DESCRIPTION "The number of TACACS Access-Accept packets (valid or invalid) received from this server." ::= { cienaCesTacacsClientGlobalStatisticsEntry 21 } cienaCesTacacsClientGlobalAccountingAccessRejects OBJECT-TYPE SYNTAX Counter32 MAX-ACCESS read-only STATUS current DESCRIPTION "The number of TACACS Access-Reject packets (valid or invalid) received from this server." ::= { cienaCesTacacsClientGlobalStatisticsEntry 22 } -- "Access-Response" includes an Access-Accept, Access-Challenge -- or Access-Reject cienaCesTacacsClientGlobalAccountingMalformedAccessResponses OBJECT-TYPE SYNTAX Counter32 MAX-ACCESS read-only STATUS current DESCRIPTION "The number of malformed TACACS Access-Response packets received from this server. Malformed packets include packets with an invalid length. Bad authenticators or signature attributes or unknown types are not included as malformed access responses." ::= { cienaCesTacacsClientGlobalStatisticsEntry 23 } cienaCesTacacsClientGlobalAccountingBadAuthenticators OBJECT-TYPE SYNTAX Counter32 MAX-ACCESS read-only STATUS current DESCRIPTION "The number of TACACS Access-Response packets containing invalid authenticators or signature attributes received from this server." ::= { cienaCesTacacsClientGlobalStatisticsEntry 24 } cienaCesTacacsClientGlobalAccountingTimeouts OBJECT-TYPE SYNTAX Counter32 MAX-ACCESS read-only STATUS current DESCRIPTION "The number of authentication timeouts to this server. After a timeout the client may retry sending to the same server, send to a different server, or give up. A retry to the same server is counted as a retransmit as well as a timeout. A send to a different server is counted as a request as well as a timeout." ::= { cienaCesTacacsClientGlobalStatisticsEntry 25 } cienaCesTacacsClientGlobalAccountingUnknownTypes OBJECT-TYPE SYNTAX Counter32 MAX-ACCESS read-only STATUS current DESCRIPTION "The number of TACACS packets of unknown type which were received from this server on the authentication port." ::= { cienaCesTacacsClientGlobalStatisticsEntry 26} cienaCesTacacsClientGlobalAccountingBadHeaderSequence OBJECT-TYPE SYNTAX Counter32 MAX-ACCESS read-only STATUS current DESCRIPTION "The number of TACACS packets which were received from this server on the authentication port and dropped for some other reason." ::= { cienaCesTacacsClientGlobalStatisticsEntry 27} cienaCesTacacsClientGlobalServerClearStatistics OBJECT-TYPE SYNTAX CienaStatsClear MAX-ACCESS read-write STATUS current DESCRIPTION "This object clears the statistics for a server." DEFVAL { none } ::= { cienaCesTacacsClientGlobalStatisticsEntry 28 } -- END OF TWAMP STATS----------------- cienaCesTacacsClientAuthenticationServerTable OBJECT-TYPE SYNTAX SEQUENCE OF CienaCesTacacsClientAuthenticationServerEntry MAX-ACCESS not-accessible STATUS current DESCRIPTION "Lists the possible TACACS servers. To create an entry, specify both cienaCesTacacsClientAuthenticationServerStatus and cienaCesTacacsClientAuthenticationServerAddr with the SNMP multiple set operation." ::= { cienaCesTacacsClientAuthentication 1 } cienaCesTacacsClientAuthenticationServerEntry OBJECT-TYPE SYNTAX CienaCesTacacsClientAuthenticationServerEntry MAX-ACCESS not-accessible STATUS current DESCRIPTION "TACACS authentication server entry." INDEX { cienaCesTacacsClientAuthenticationServerIndex} ::= { cienaCesTacacsClientAuthenticationServerTable 1 } CienaCesTacacsClientAuthenticationServerEntry ::= SEQUENCE { cienaCesTacacsClientAuthenticationServerIndex Integer32, cienaCesTacacsClientAuthenticationServerAddr DisplayString, cienaCesTacacsClientAuthenticationServerResolvedAddr IpAddress, cienaCesTacacsClientAuthenticationServerPriority Integer32, cienaCesTacacsClientAuthenticationServerAuthPort Integer32, cienaCesTacacsClientAuthenticationServerAccessRequests Counter32, cienaCesTacacsClientAuthenticationServerAccessRetransmissions Counter32, cienaCesTacacsClientAuthenticationServerAccessAccepts Counter32, cienaCesTacacsClientAuthenticationServerAccessRejects Counter32, cienaCesTacacsClientAuthenticationServerMalformedAccessResponses Counter32, cienaCesTacacsClientAuthenticationServerBadAuthenticators Counter32, cienaCesTacacsClientAuthenticationServerTimeouts Counter32, cienaCesTacacsClientAuthenticationServerUnknownTypes Counter32, cienaCesTacacsClientAuthenticationServerBadHeaderSequence Counter32, cienaCesTacacsClientAuthenticationServerStatus RowStatus, cienaCesTacacsClientAuthenticationServerApplication INTEGER, cienaCesTacacsClientAuthenticationServerClearStatistics CienaStatsClear } cienaCesTacacsClientAuthenticationServerIndex OBJECT-TYPE SYNTAX Integer32 (1..8) MAX-ACCESS read-only STATUS current DESCRIPTION "Specifies the index of this table." ::= { cienaCesTacacsClientAuthenticationServerEntry 1 } cienaCesTacacsClientAuthenticationServerAddr OBJECT-TYPE SYNTAX DisplayString (SIZE (0..64)) MAX-ACCESS read-write STATUS current DESCRIPTION "Host name or IP address of the TACACS server." ::= { cienaCesTacacsClientAuthenticationServerEntry 2 } cienaCesTacacsClientAuthenticationServerResolvedAddr OBJECT-TYPE SYNTAX IpAddress MAX-ACCESS read-only STATUS current DESCRIPTION "Specifies the resolved IP address if cienaCesTacacsClientAuthenticationServerAddr is set to host name. If cienaCesTacacsClientAuthenticationServerAddr is set to IP address, then cienaCesTacacsClientAuthenticationServerResolvedAddr contains same information as cienaCesTacacsClientAuthenticationServerAddr." ::= { cienaCesTacacsClientAuthenticationServerEntry 3 } cienaCesTacacsClientAuthenticationServerPriority OBJECT-TYPE SYNTAX Integer32 (1..8) MAX-ACCESS read-write STATUS current DESCRIPTION "Specifies the priority of TACACS servers configured on the device. This is the order in which the servers are accessed." ::= { cienaCesTacacsClientAuthenticationServerEntry 4 } cienaCesTacacsClientAuthenticationServerAuthPort OBJECT-TYPE SYNTAX Integer32 (0..65535) MAX-ACCESS read-write STATUS current DESCRIPTION "The destination TCP port number to which TACACS messages are sent. The TACACS server is not used for authentication if this port number is 0." DEFVAL { 49 } ::= { cienaCesTacacsClientAuthenticationServerEntry 5 } -- Request/Response statistics -- -- TotalIncomingPackets = Accepts + Rejects + UnknownTypes -- -- TotalIncomingPackets - MalformedResponses - BadAuthenticators - -- UnknownTypes - PacketsDropped = Successfully received -- -- AccessRequests + PendingRequests + ClientTimeouts = -- Successfully Received -- -- cienaCesTacacsClientAuthenticationServerAccessRequests OBJECT-TYPE SYNTAX Counter32 MAX-ACCESS read-only STATUS current DESCRIPTION "The number of TACACS Access-Request packets sent to this server. This does not include retransmissions." ::= { cienaCesTacacsClientAuthenticationServerEntry 6 } cienaCesTacacsClientAuthenticationServerAccessRetransmissions OBJECT-TYPE SYNTAX Counter32 MAX-ACCESS read-only STATUS current DESCRIPTION "The number of TACACS Access-Request packets retransmitted to this TACACS authentication server." ::= { cienaCesTacacsClientAuthenticationServerEntry 7 } cienaCesTacacsClientAuthenticationServerAccessAccepts OBJECT-TYPE SYNTAX Counter32 MAX-ACCESS read-only STATUS current DESCRIPTION "The number of TACACS Access-Accept packets (valid or invalid) received from this server." ::= { cienaCesTacacsClientAuthenticationServerEntry 8 } cienaCesTacacsClientAuthenticationServerAccessRejects OBJECT-TYPE SYNTAX Counter32 MAX-ACCESS read-only STATUS current DESCRIPTION "The number of TACACS Access-Reject packets (valid or invalid) received from this server." ::= { cienaCesTacacsClientAuthenticationServerEntry 9 } -- "Access-Response" includes an Access-Accept, Access-Challenge -- or Access-Reject cienaCesTacacsClientAuthenticationServerMalformedAccessResponses OBJECT-TYPE SYNTAX Counter32 MAX-ACCESS read-only STATUS current DESCRIPTION "The number of malformed TACACS Access-Response packets received from this server. Malformed packets include packets with an invalid length. Bad authenticators or signature attributes or unknown types are not included as malformed access responses." ::= { cienaCesTacacsClientAuthenticationServerEntry 10 } cienaCesTacacsClientAuthenticationServerBadAuthenticators OBJECT-TYPE SYNTAX Counter32 MAX-ACCESS read-only STATUS current DESCRIPTION "The number of TACACS Access-Response packets containing invalid authenticators or signature attributes received from this server." ::= { cienaCesTacacsClientAuthenticationServerEntry 11 } cienaCesTacacsClientAuthenticationServerTimeouts OBJECT-TYPE SYNTAX Counter32 MAX-ACCESS read-only STATUS current DESCRIPTION "The number of authentication timeouts to this server. After a timeout the client may retry sending to the same server, send to a different server, or give up. A retry to the same server is counted as a retransmit as well as a timeout. A send to a different server is counted as a request as well as a timeout." ::= { cienaCesTacacsClientAuthenticationServerEntry 13 } cienaCesTacacsClientAuthenticationServerUnknownTypes OBJECT-TYPE SYNTAX Counter32 MAX-ACCESS read-only STATUS current DESCRIPTION "The number of TACACS packets of unknown type which were received from this server on the authentication port." ::= { cienaCesTacacsClientAuthenticationServerEntry 14 } cienaCesTacacsClientAuthenticationServerBadHeaderSequence OBJECT-TYPE SYNTAX Counter32 MAX-ACCESS read-only STATUS current DESCRIPTION "The number of TACACS packets which were received from this server on the authentication port and dropped for some other reason." ::= { cienaCesTacacsClientAuthenticationServerEntry 15} cienaCesTacacsClientAuthenticationServerStatus OBJECT-TYPE SYNTAX RowStatus MAX-ACCESS read-create STATUS current DESCRIPTION "To create a row in this table, a manager must set this object to either createAndGo(4). To create an entry, specify both cienaCesTacacsClientAuthenticationServerStatus and cienaCesTacacsClientAuthenticationServerAddr with the SNMP multiple set operation. To disable a TACACS server, the operator can set cienaCesTacacsClientAuthenticationServerStatus object to 'notInService' state." ::= { cienaCesTacacsClientAuthenticationServerEntry 16 } cienaCesTacacsClientAuthenticationServerApplication OBJECT-TYPE SYNTAX INTEGER { userLogin(1), dot1x(2), all(3) } MAX-ACCESS read-create STATUS deprecated DESCRIPTION "This object specifies how the TACACS server is used for authentication. Whether this TACACS server is used for userLogin authentication or dot1x authentication or both, is decided by the value of this MIB object. Dot1x is not supported on all platforms." DEFVAL {userLogin} ::= { cienaCesTacacsClientAuthenticationServerEntry 17} cienaCesTacacsClientAuthenticationServerClearStatistics OBJECT-TYPE SYNTAX CienaStatsClear MAX-ACCESS read-write STATUS current DESCRIPTION "This object clears the statistics for a server." DEFVAL { none } ::= { cienaCesTacacsClientAuthenticationServerEntry 18} cienaCesTacacsClientAuthorizationServerTable OBJECT-TYPE SYNTAX SEQUENCE OF CienaCesTacacsClientAuthorizationServerEntry MAX-ACCESS not-accessible STATUS current DESCRIPTION "Lists the possible TACACS servers. To create an entry, specify both cienaCesTacacsClientAuthorizationServerStatus and cienaCesTacacsClientAuthorizationServerAddr with the SNMP multiple set operation." ::= { cienaCesTacacsClientAuthorization 1 } cienaCesTacacsClientAuthorizationServerEntry OBJECT-TYPE SYNTAX CienaCesTacacsClientAuthorizationServerEntry MAX-ACCESS not-accessible STATUS current DESCRIPTION "TACACS authorization server entry." INDEX { cienaCesTacacsClientAuthorizationServerIndex} ::= { cienaCesTacacsClientAuthorizationServerTable 1 } CienaCesTacacsClientAuthorizationServerEntry ::= SEQUENCE { cienaCesTacacsClientAuthorizationServerIndex Integer32, cienaCesTacacsClientAuthorizationServerAddr DisplayString, cienaCesTacacsClientAuthorizationServerResolvedAddr IpAddress, cienaCesTacacsClientAuthorizationServerPriority Integer32, cienaCesTacacsClientAuthorizationServerAuthPort Integer32, cienaCesTacacsClientAuthorizationServerAccessRequests Counter32, cienaCesTacacsClientAuthorizationServerAccessRetransmissions Counter32, cienaCesTacacsClientAuthorizationServerAccessAccepts Counter32, cienaCesTacacsClientAuthorizationServerAccessRejects Counter32, cienaCesTacacsClientAuthorizationServerMalformedAccessResponses Counter32, cienaCesTacacsClientAuthorizationServerBadAuthenticators Counter32, cienaCesTacacsClientAuthorizationServerTimeouts Counter32, cienaCesTacacsClientAuthorizationServerUnknownTypes Counter32, cienaCesTacacsClientAuthorizationServerBadHeaderSequence Counter32, cienaCesTacacsClientAuthorizationServerStatus RowStatus, cienaCesTacacsClientAuthorizationServerApplication INTEGER, cienaCesTacacsClientAuthorizationServerClearStatistics CienaStatsClear } cienaCesTacacsClientAuthorizationServerIndex OBJECT-TYPE SYNTAX Integer32 (1..8) MAX-ACCESS read-only STATUS current DESCRIPTION "Specifies the index of this table." ::= { cienaCesTacacsClientAuthorizationServerEntry 1 } cienaCesTacacsClientAuthorizationServerAddr OBJECT-TYPE SYNTAX DisplayString (SIZE (0..64)) MAX-ACCESS read-write STATUS current DESCRIPTION "Host name or IP address of the TACACS server." ::= { cienaCesTacacsClientAuthorizationServerEntry 2 } cienaCesTacacsClientAuthorizationServerResolvedAddr OBJECT-TYPE SYNTAX IpAddress MAX-ACCESS read-only STATUS current DESCRIPTION "Specifies the resolved IP address if cienaCesTacacsClientAuthorizationServerAddr is set to host name. If cienaCesTacacsClientAuthorizationServerAddr is set to IP address, then cienaCesTacacsClientAuthorizationServerResolvedAddr contains the same information as cienaCesTacacsClientAuthorizationServerAddr." ::= { cienaCesTacacsClientAuthorizationServerEntry 3 } cienaCesTacacsClientAuthorizationServerPriority OBJECT-TYPE SYNTAX Integer32 (1..8) MAX-ACCESS read-write STATUS current DESCRIPTION "Specifies the priority of TACACS servers configured on the device. This is the order in which the servers are accessed." ::= { cienaCesTacacsClientAuthorizationServerEntry 4 } cienaCesTacacsClientAuthorizationServerAuthPort OBJECT-TYPE SYNTAX Integer32 (0..65535) MAX-ACCESS read-write STATUS current DESCRIPTION "The destination TCP port number to which TACACS messages are sent. The TACACS server is not used for authentication if this port number is 0." DEFVAL { 49 } ::= { cienaCesTacacsClientAuthorizationServerEntry 5 } -- Request/Response statistics -- -- TotalIncomingPackets = Accepts + Rejects + UnknownTypes -- -- TotalIncomingPackets - MalformedResponses - BadAuthenticators - -- UnknownTypes - PacketsDropped = Successfully received -- -- AccessRequests + PendingRequests + ClientTimeouts = -- Successfully Received -- -- cienaCesTacacsClientAuthorizationServerAccessRequests OBJECT-TYPE SYNTAX Counter32 MAX-ACCESS read-only STATUS current DESCRIPTION "The number of TACACS Access-Request packets sent to this server. This does not include retransmissions." ::= { cienaCesTacacsClientAuthorizationServerEntry 6 } cienaCesTacacsClientAuthorizationServerAccessRetransmissions OBJECT-TYPE SYNTAX Counter32 MAX-ACCESS read-only STATUS current DESCRIPTION "The number of TACACS Access-Request packets retransmitted to this TACACS authentication server." ::= { cienaCesTacacsClientAuthorizationServerEntry 7 } cienaCesTacacsClientAuthorizationServerAccessAccepts OBJECT-TYPE SYNTAX Counter32 MAX-ACCESS read-only STATUS current DESCRIPTION "The number of TACACS Access-Accept packets (valid or invalid) received from this server." ::= { cienaCesTacacsClientAuthorizationServerEntry 8 } cienaCesTacacsClientAuthorizationServerAccessRejects OBJECT-TYPE SYNTAX Counter32 MAX-ACCESS read-only STATUS current DESCRIPTION "The number of TACACS Access-Reject packets (valid or invalid) received from this server." ::= { cienaCesTacacsClientAuthorizationServerEntry 9 } -- "Access-Response" includes an Access-Accept, Access-Challenge -- or Access-Reject cienaCesTacacsClientAuthorizationServerMalformedAccessResponses OBJECT-TYPE SYNTAX Counter32 MAX-ACCESS read-only STATUS current DESCRIPTION "The number of malformed TACACS Access-Response packets received from this server. Malformed packets include packets with an invalid length. Bad authenticators or signature attributes or unknown types are not included as malformed access responses." ::= { cienaCesTacacsClientAuthorizationServerEntry 10 } cienaCesTacacsClientAuthorizationServerBadAuthenticators OBJECT-TYPE SYNTAX Counter32 MAX-ACCESS read-only STATUS current DESCRIPTION "The number of TACACS Access-Response packets containing invalid authenticators or signature attributes received from this server." ::= { cienaCesTacacsClientAuthorizationServerEntry 11 } cienaCesTacacsClientAuthorizationServerTimeouts OBJECT-TYPE SYNTAX Counter32 MAX-ACCESS read-only STATUS current DESCRIPTION "The number of authentication timeouts to this server. After a timeout the client may retry sending to the same server, send to a different server, or give up. A retry to the same server is counted as a retransmit as well as a timeout. A send to a different server is counted as a Request as well as a timeout." ::= { cienaCesTacacsClientAuthorizationServerEntry 12 } cienaCesTacacsClientAuthorizationServerUnknownTypes OBJECT-TYPE SYNTAX Counter32 MAX-ACCESS read-only STATUS current DESCRIPTION "The number of TACACS packets of unknown type which were received from this server on the authentication port." ::= { cienaCesTacacsClientAuthorizationServerEntry 13 } cienaCesTacacsClientAuthorizationServerBadHeaderSequence OBJECT-TYPE SYNTAX Counter32 MAX-ACCESS read-only STATUS current DESCRIPTION "The number of TACACS packets which were received from this server on the authentication port and dropped for some other reason." ::= { cienaCesTacacsClientAuthorizationServerEntry 14} cienaCesTacacsClientAuthorizationServerStatus OBJECT-TYPE SYNTAX RowStatus MAX-ACCESS read-create STATUS current DESCRIPTION "To create a row in this table, a manager must set this object to either createAndGo(4). To create an entry, specify both cienaCesTacacsClientAuthorizationServerStatus and cienaCesTacacsClientAuthorizationServerAddr with the SNMP multiple set operation. To disable a TACACS server, the operator can set the cienaCesTacacsClientAuthorizationServerStatus object to 'notInService' state." ::= { cienaCesTacacsClientAuthorizationServerEntry 15 } cienaCesTacacsClientAuthorizationServerApplication OBJECT-TYPE SYNTAX INTEGER { userLogin(1), dot1x(2), all(3) } MAX-ACCESS read-create STATUS deprecated DESCRIPTION "This object specifies how the TACACS server is used for authentication. Whether this TACACS server is used for userLogin authentication or dot1x authentication or both, is decided by the value of this MIB object. Dot1x is not supported on all platforms." DEFVAL {userLogin} ::= { cienaCesTacacsClientAuthorizationServerEntry 16} cienaCesTacacsClientAuthorizationServerClearStatistics OBJECT-TYPE SYNTAX CienaStatsClear MAX-ACCESS read-write STATUS current DESCRIPTION "This object clears the statistics for a server." DEFVAL { none } ::= { cienaCesTacacsClientAuthorizationServerEntry 17} cienaCesTacacsClientAccountingServerTable OBJECT-TYPE SYNTAX SEQUENCE OF CienaCesTacacsClientAccountingServerEntry MAX-ACCESS not-accessible STATUS current DESCRIPTION "Lists the possible TACACS servers. To create an entry, specify both cienaCesTacacsClientAccountingServerStatus and cienaCesTacacsClientAccountingServerAddr with the SNMP multiple set operation." ::= { cienaCesTacacsClientAccounting 1 } cienaCesTacacsClientAccountingServerEntry OBJECT-TYPE SYNTAX CienaCesTacacsClientAccountingServerEntry MAX-ACCESS not-accessible STATUS current DESCRIPTION "TACACS accounting server entry." INDEX { cienaCesTacacsClientAccountingServerIndex} ::= { cienaCesTacacsClientAccountingServerTable 1 } CienaCesTacacsClientAccountingServerEntry ::= SEQUENCE { cienaCesTacacsClientAccountingServerIndex Integer32, cienaCesTacacsClientAccountingServerAddr DisplayString, cienaCesTacacsClientAccountingServerResolvedAddr IpAddress, cienaCesTacacsClientAccountingServerPriority Integer32, cienaCesTacacsClientAccountingServerAuthPort Integer32, cienaCesTacacsClientAccountingServerAccessRequests Counter32, cienaCesTacacsClientAccountingServerAccessRetransmissions Counter32, cienaCesTacacsClientAccountingServerAccessAccepts Counter32, cienaCesTacacsClientAccountingServerAccessRejects Counter32, cienaCesTacacsClientAccountingServerMalformedAccessResponses Counter32, cienaCesTacacsClientAccountingServerBadAuthenticators Counter32, cienaCesTacacsClientAccountingServerTimeouts Counter32, cienaCesTacacsClientAccountingServerUnknownTypes Counter32, cienaCesTacacsClientAccountingServerBadHeaderSequence Counter32, cienaCesTacacsClientAccountingServerStatus RowStatus, cienaCesTacacsClientAccountingServerApplication INTEGER, cienaCesTacacsClientAccountingServerClearStatistics CienaStatsClear } cienaCesTacacsClientAccountingServerIndex OBJECT-TYPE SYNTAX Integer32 (1..8) MAX-ACCESS read-only STATUS current DESCRIPTION "Specifies the index of this table." ::= { cienaCesTacacsClientAccountingServerEntry 1 } cienaCesTacacsClientAccountingServerAddr OBJECT-TYPE SYNTAX DisplayString (SIZE (0..64)) MAX-ACCESS read-write STATUS current DESCRIPTION "Host name or IP address of the TACACS server." ::= { cienaCesTacacsClientAccountingServerEntry 2 } cienaCesTacacsClientAccountingServerResolvedAddr OBJECT-TYPE SYNTAX IpAddress MAX-ACCESS read-only STATUS current DESCRIPTION "Specifies the resolved IP address if cienaCesTacacsClientAccountingServerAddr is set to host name. If cienaCesTacacsClientAccountingServerAddr is set to IP address then cienaCesTacacsClientAccountingServerResolvedAddr contains the same information as cienaCesTacacsClientAccountingServerAddr." ::= { cienaCesTacacsClientAccountingServerEntry 3 } cienaCesTacacsClientAccountingServerPriority OBJECT-TYPE SYNTAX Integer32 (1..8) MAX-ACCESS read-write STATUS current DESCRIPTION "Specifies the priority of TACACS servers configured on the device. This is the order in which the servers are accessed." ::= { cienaCesTacacsClientAccountingServerEntry 4 } cienaCesTacacsClientAccountingServerAuthPort OBJECT-TYPE SYNTAX Integer32 (0..65535) MAX-ACCESS read-write STATUS current DESCRIPTION "The destination TCP port number to which TACACS messages are sent. The TACACS server is not used for authentication if this port number is 0." DEFVAL { 49 } ::= { cienaCesTacacsClientAccountingServerEntry 5 } -- Request/Response statistics -- -- TotalIncomingPackets = Accepts + Rejects + UnknownTypes -- -- TotalIncomingPackets - MalformedResponses - BadAuthenticators - -- UnknownTypes - PacketsDropped = Successfully received -- -- AccessRequests + PendingRequests + ClientTimeouts = -- Successfully Received -- -- cienaCesTacacsClientAccountingServerAccessRequests OBJECT-TYPE SYNTAX Counter32 MAX-ACCESS read-only STATUS current DESCRIPTION "The number of TACACS Access-Request packets sent to this server. This does not include retransmissions." ::= { cienaCesTacacsClientAccountingServerEntry 6 } cienaCesTacacsClientAccountingServerAccessRetransmissions OBJECT-TYPE SYNTAX Counter32 MAX-ACCESS read-only STATUS current DESCRIPTION "The number of TACACS Access-Request packets retransmitted to this TACACS authentication server." ::= { cienaCesTacacsClientAccountingServerEntry 7 } cienaCesTacacsClientAccountingServerAccessAccepts OBJECT-TYPE SYNTAX Counter32 MAX-ACCESS read-only STATUS current DESCRIPTION "The number of TACACS Access-Accept packets (valid or invalid) received from this server." ::= { cienaCesTacacsClientAccountingServerEntry 8 } cienaCesTacacsClientAccountingServerAccessRejects OBJECT-TYPE SYNTAX Counter32 MAX-ACCESS read-only STATUS current DESCRIPTION "The number of TACACS Access-Reject packets (valid or invalid) received from this server." ::= { cienaCesTacacsClientAccountingServerEntry 9 } -- "Access-Response" includes an Access-Accept, Access-Challenge -- or Access-Reject cienaCesTacacsClientAccountingServerMalformedAccessResponses OBJECT-TYPE SYNTAX Counter32 MAX-ACCESS read-only STATUS current DESCRIPTION "The number of malformed TACACS Access-Response packets received from this server. Malformed packets include packets with an invalid length. Bad authenticators or signature attributes or unknown types are not included as malformed access responses." ::= { cienaCesTacacsClientAccountingServerEntry 10 } cienaCesTacacsClientAccountingServerBadAuthenticators OBJECT-TYPE SYNTAX Counter32 MAX-ACCESS read-only STATUS current DESCRIPTION "The number of TACACS Access-Response packets containing invalid authenticators or signature attributes received from this server." ::= { cienaCesTacacsClientAccountingServerEntry 11 } cienaCesTacacsClientAccountingServerTimeouts OBJECT-TYPE SYNTAX Counter32 MAX-ACCESS read-only STATUS current DESCRIPTION "The number of authentication timeouts to this server. After a timeout the client may retry sending to the same server, send to a different server, or give up. A retry to the same server is counted as a retransmit as well as a timeout. A send to a different server is counted as a Request as well as a timeout." ::= { cienaCesTacacsClientAccountingServerEntry 12 } cienaCesTacacsClientAccountingServerUnknownTypes OBJECT-TYPE SYNTAX Counter32 MAX-ACCESS read-only STATUS current DESCRIPTION "The number of TACACS packets of unknown type which were received from this server on the authentication port." ::= { cienaCesTacacsClientAccountingServerEntry 13 } cienaCesTacacsClientAccountingServerBadHeaderSequence OBJECT-TYPE SYNTAX Counter32 MAX-ACCESS read-only STATUS current DESCRIPTION "The number of TACACS packets of which were received from this server on the authentication port and dropped for some other reason." ::= { cienaCesTacacsClientAccountingServerEntry 14} cienaCesTacacsClientAccountingServerStatus OBJECT-TYPE SYNTAX RowStatus MAX-ACCESS read-create STATUS current DESCRIPTION "To create a row in this table, a manager must set this object to either createAndGo(4). To create an entry, specify both cienaCesTacacsClientAccountingServerStatus, and cienaCesTacacsClientAccountingServerAddr with the SNMP multiple set operation. To disable a TACACS server, the operator can set cienaCesTacacsClientAccountingServerStatus object to the 'notInService' state." ::= { cienaCesTacacsClientAccountingServerEntry 15 } cienaCesTacacsClientAccountingServerApplication OBJECT-TYPE SYNTAX INTEGER { userLogin(1), dot1x(2), all(3) } MAX-ACCESS read-create STATUS deprecated DESCRIPTION "This object specifies how the TACACS server is used for authentication. Whether this TACACS server is used for userLogin authentication or dot1x authentication or both, is decided by the value of this MIB object. Dot1x is not supported on all platforms." DEFVAL {userLogin} ::= { cienaCesTacacsClientAccountingServerEntry 16} cienaCesTacacsClientAccountingServerClearStatistics OBJECT-TYPE SYNTAX CienaStatsClear MAX-ACCESS read-write STATUS current DESCRIPTION "This object clears the statistics for a server." DEFVAL { none } ::= { cienaCesTacacsClientAccountingServerEntry 17} cienaCesTacacsClientConnectionFailed NOTIFICATION-TYPE OBJECTS { cienaGlobalSeverity, cienaGlobalMacAddress, cienaCesTacacsClientServerResolvedInetAddrType, cienaCesTacacsClientServerResolvedInetAddr } STATUS current DESCRIPTION "A cienaCesTacacsClientConnectionFailed notification is sent if the TACACS client is unable to contact the TACACS server." ::= { cienaCesTacacsClientMIBNotifications 1 } END -- -- WWP-TACACS-CLIENT-MIB --