draft-ietf-radius-auth-clientmib-00.txt   draft-ietf-radius-auth-clientmib-01.txt 
RADIUS Working Group Bernard Aboba RADIUS Working Group Bernard Aboba
INTERNET-DRAFT Microsoft INTERNET-DRAFT Microsoft
Category: Standards Track Glen Zorn Category: Standards Track Glen Zorn
<draft-ietf-radius-auth-clientmib-00.txt> Microsoft <draft-ietf-radius-auth-clientmib-01.txt> Microsoft
9 August 1997 12 February 1998
RADIUS Authentication Client MIB RADIUS Authentication Client MIB
1. Status of this Memo 1. Status of this Memo
This document is an Internet-Draft. Internet-Drafts are working docu- This document is an Internet-Draft. Internet-Drafts are working docu-
ments of the Internet Engineering Task Force (IETF), its areas, and ments of the Internet Engineering Task Force (IETF), its areas, and
its working groups. Note that other groups may also distribute work- its working groups. Note that other groups may also distribute work-
ing documents as Internet-Drafts. ing documents as Internet-Drafts.
skipping to change at page 1, line 29 skipping to change at page 1, line 28
and may be updated, replaced, or obsoleted by other documents at any and may be updated, replaced, or obsoleted by other documents at any
time. It is inappropriate to use Internet-Drafts as reference mate- time. It is inappropriate to use Internet-Drafts as reference mate-
rial or to cite them other than as ``work in progress.'' rial or to cite them other than as ``work in progress.''
To learn the current status of any Internet-Draft, please check the To learn the current status of any Internet-Draft, please check the
``1id-abstracts.txt'' listing contained in the Internet-Drafts Shadow ``1id-abstracts.txt'' listing contained in the Internet-Drafts Shadow
Directories on ds.internic.net (US East Coast), nic.nordu.net Directories on ds.internic.net (US East Coast), nic.nordu.net
(Europe), ftp.isi.edu (US West Coast), or munnari.oz.au (Pacific Rim). (Europe), ftp.isi.edu (US West Coast), or munnari.oz.au (Pacific Rim).
The distribution of this memo is unlimited. It is filed as <draft- The distribution of this memo is unlimited. It is filed as <draft-
ietf-radius-auth-clientmib-00.txt>, and expires February 1, 1998. ietf-radius-auth-clientmib-01.txt>, and expires August 1, 1998.
Please send comments to the authors. Please send comments to the authors.
2. Abstract 2. Abstract
This memo defines a set of extensions which instrument RADIUS authen- This memo defines a set of extensions which instrument RADIUS authen-
tication client functions. These extensions represent a portion of the tication client functions. These extensions represent a portion of the
Management Information Base (MIB) for use with network management pro- Management Information Base (MIB) for use with network management pro-
tocols in the Internet community. Using these extensions IP-based tocols in the Internet community. Using these extensions IP-based
management stations can manage RADIUS authentication clients. management stations can manage RADIUS authentication clients.
skipping to change at page 3, line 22 skipping to change at page 3, line 22
entries presenting a view of the activity of the RADIUS authentication entries presenting a view of the activity of the RADIUS authentication
client. client.
6. Definitions 6. Definitions
RADIUS-AUTH-CLIENT-MIB DEFINITIONS ::= BEGIN RADIUS-AUTH-CLIENT-MIB DEFINITIONS ::= BEGIN
IMPORTS IMPORTS
MODULE-IDENTITY, OBJECT-TYPE, MODULE-IDENTITY, OBJECT-TYPE,
OBJECT-IDENTITY, experimental, OBJECT-IDENTITY, experimental,
Counter32, Gauge32, Integer32, Counter32, Integer32, Gauge32,
IpAddress, TimeTicks FROM SNMPv2-SMI IpAddress, TimeTicks FROM SNMPv2-SMI
TEXTUAL-CONVENTION, RowStatus, DisplayString FROM SNMPv2-TC
TruthValue, DisplayString FROM SNMPv2-TC
MODULE-COMPLIANCE, OBJECT-GROUP FROM SNMPv2-CONF; MODULE-COMPLIANCE, OBJECT-GROUP FROM SNMPv2-CONF;
radius OBJECT-IDENTITY
STATUS current
DESCRIPTION
"The OID assigned to RADIUS MIB work by the IANA."
::= { experimental 79 }
radiusAuthentication OBJECT-IDENTIFIER ::= {radius 1}
radiusAuthClientMIB MODULE-IDENTITY radiusAuthClientMIB MODULE-IDENTITY
LAST-UPDATED "9708211659Z" LAST-UPDATED "9802121659Z"
ORGANIZATION "IETF RADIUS Working Group." ORGANIZATION "IETF RADIUS Working Group."
CONTACT-INFO CONTACT-INFO
" Bernard Aboba " Bernard Aboba
Microsoft Microsoft
One Microsoft Way One Microsoft Way
Redmond, WA 98052 Redmond, WA 98052
US US
Phone: +1 425 936 6605 Phone: +1 425 936 6605
EMail: bernarda@microsoft.com" EMail: bernarda@microsoft.com"
DESCRIPTION DESCRIPTION
"The MIB module for entities implementing the client side of "The MIB module for entities implementing the client side of
the Remote Access Dialin User Service (RADIUS) authentication the Remote Access Dialin User Service (RADIUS) authentication
protocol." protocol."
::= { radiusAuthentication 2 } ::= { radiusAuthentication 2 }
radius OBJECT-IDENTITY
STATUS current
DESCRIPTION
"The OID assigned to RADIUS MIB work by the IANA."
::= { experimental 79 }
radiusAuthentication OBJECT IDENTIFIER ::= {radius 1}
radiusAuthClientMIBObjects OBJECT IDENTIFIER ::= { radiusAuthClientMIB 1 } radiusAuthClientMIBObjects OBJECT IDENTIFIER ::= { radiusAuthClientMIB 1 }
radiusAuthClient OBJECT IDENTIFIER ::= { radiusAuthClientMIBObjects 1 } radiusAuthClient OBJECT IDENTIFIER ::= { radiusAuthClientMIBObjects 1 }
radiusAuthClientInvalidServerAddresses OBJECT-TYPE radiusAuthClientInvalidServerAddresses OBJECT-TYPE
SYNTAX Counter32 SYNTAX Counter32
MAX-ACCESS read-only MAX-ACCESS read-only
STATUS current STATUS current
DESCRIPTION DESCRIPTION
"The total number of RADIUS Access-Response packets "The total number of RADIUS Access-Response packets
received from unknown addresses since client start-up." received from unknown addresses since client start-up."
::= { radiusAuthClient 1 } ::= { radiusAuthClient 1 }
radiusAuthClientIdentifier OBJECT-TYPE radiusAuthClientIdentifier OBJECT-TYPE
SYNTAX DisplayString SYNTAX DisplayString
MAX-ACCESS read-only MAX-ACCESS read-only
STATUS current STATUS current
DESCRIPTION DESCRIPTION
"The NAS-Identifier of the RADIUS authentication client." "The NAS-Identifier of the RADIUS authentication client.
This is not necessarily the same as sysName in MIB II."
::= { radiusAuthClient 2 } ::= { radiusAuthClient 2 }
radiusAuthServerTable OBJECT-TYPE radiusAuthServerTable OBJECT-TYPE
SYNTAX SEQUENCE OF RadiusAuthServerEntry SYNTAX SEQUENCE OF RadiusAuthServerEntry
MAX-ACCESS not-accessible MAX-ACCESS not-accessible
STATUS current STATUS current
DESCRIPTION DESCRIPTION
"The (conceptual) table listing the RADIUS authentication "The (conceptual) table listing the RADIUS authentication
servers with which the client shares a secret." servers with which the client shares a secret."
::= { radiusAuthClient 3 } ::= { radiusAuthClient 3 }
skipping to change at page 4, line 43 skipping to change at page 4, line 44
STATUS current STATUS current
DESCRIPTION DESCRIPTION
"An entry (conceptual row) representing a RADIUS "An entry (conceptual row) representing a RADIUS
authentication server with which the client shares a secret." authentication server with which the client shares a secret."
INDEX { radiusAuthServerIndex } INDEX { radiusAuthServerIndex }
::= { radiusAuthServerTable 1 } ::= { radiusAuthServerTable 1 }
RadiusAuthServerEntry ::= SEQUENCE { RadiusAuthServerEntry ::= SEQUENCE {
radiusAuthServerIndex Integer32, radiusAuthServerIndex Integer32,
radiusAuthServerAddress IpAddress, radiusAuthServerAddress IpAddress,
radiusAuthClientServerPortNumber Integer32,
radiusAuthClientRoundTripTime TimeTicks, radiusAuthClientRoundTripTime TimeTicks,
radiusAuthClientAccessRequests Counter32, radiusAuthClientAccessRequests Counter32,
radiusAuthClientAccessRetransmissions Counter32, radiusAuthClientAccessRetransmissions Counter32,
radiusAuthClientAccessAccepts Counter32, radiusAuthClientAccessAccepts Counter32,
radiusAuthClientAccessRejects Counter32, radiusAuthClientAccessRejects Counter32,
radiusAuthClientAccessChallenges Counter32, radiusAuthClientAccessChallenges Counter32,
radiusAuthClientMalformedAccessResponses Counter32, radiusAuthClientMalformedAccessResponses Counter32,
radiusAuthClientAuthenticationBadAuthenticators Counter32, radiusAuthClientBadAuthenticators Counter32,
radiusAuthClientAuthenticationPendingRequests Counter32, radiusAuthClientPendingRequests Gauge32,
radiusAuthClientAuthenticationTimeouts Counter32, radiusAuthClientTimeouts Counter32,
radiusAuthClientUnknownType Counter32 radiusAuthClientUnknownType Counter32
} }
radiusAuthServerIndex OBJECT-TYPE radiusAuthServerIndex OBJECT-TYPE
SYNTAX Integer32 SYNTAX Integer32 (0..MAX)
MAX-ACCESS not-accessible MAX-ACCESS not-accessible
STATUS current STATUS current
DESCRIPTION DESCRIPTION
"The RADIUS authentication server with which "A number uniquely identifying each RADIUS
the client interacts." Authentication server with which this client
communicates."
::= { radiusAuthServerEntry 1 } ::= { radiusAuthServerEntry 1 }
radiusAuthServerAddress OBJECT-TYPE radiusAuthServerAddress OBJECT-TYPE
SYNTAX IpAddress SYNTAX IpAddress
MAX-ACCESS read-only MAX-ACCESS read-only
STATUS current STATUS current
DESCRIPTION DESCRIPTION
"The IP address of the RADIUS authentication server "The IP address of the RADIUS authentication server
referred to in this table entry." referred to in this table entry."
::= { radiusAuthServerEntry 2 } ::= { radiusAuthServerEntry 2 }
radiusAuthClientServerPortNumber OBJECT-TYPE
SYNTAX Integer32
MAX-ACCESS read-only
STATUS current
DESCRIPTION
"The UDP port the client is using to send requests to
this server."
::= { radiusAuthServerEntry 3 }
radiusAuthClientRoundTripTime OBJECT-TYPE radiusAuthClientRoundTripTime OBJECT-TYPE
SYNTAX TimeTicks SYNTAX TimeTicks
MAX-ACCESS read-only MAX-ACCESS read-only
STATUS current STATUS current
DESCRIPTION DESCRIPTION
"The total roundtrip time of the last packet sent "The time interval between the most recent
between the authentication client and the RADIUS server Access-Reply/Access-Challenge and the Access-Request that
referred to in this table entry." matched it from this RADIUS authentication server."
::= { radiusAuthServerEntry 3 } ::= { radiusAuthServerEntry 4 }
-- Request/Response statistics
-- Ignoring Unknown Types, then
-- AccessRequests + AccesssRetransmissions = AccessAccepts +
-- AccessRejects + AccessChallenges + PendingRequests + Timeouts
radiusAuthClientAccessRequests OBJECT-TYPE radiusAuthClientAccessRequests OBJECT-TYPE
SYNTAX Counter32 SYNTAX Counter32
MAX-ACCESS read-only MAX-ACCESS read-only
STATUS current STATUS current
DESCRIPTION DESCRIPTION
"The total number of RADIUS Access-Request packets sent "The total number of RADIUS Access-Request packets sent
to this server since client start-up. This does not to this server since client start-up. This does not
include retransmissions." include retransmissions."
::= { radiusAuthServerEntry 4 } ::= { radiusAuthServerEntry 5 }
radiusAuthClientAccessRetransmissions OBJECT-TYPE radiusAuthClientAccessRetransmissions OBJECT-TYPE
SYNTAX Counter32 SYNTAX Counter32
MAX-ACCESS read-only MAX-ACCESS read-only
STATUS current STATUS current
DESCRIPTION DESCRIPTION
"The total number of RADIUS Access-Request packets "The total number of RADIUS Access-Request packets
retransmitted to the same server since client start-up." retransmitted to this RADIUS authentication server
::= { radiusAuthServerEntry 5 } since client start-up."
::= { radiusAuthServerEntry 6 }
radiusAuthClientAccessAccepts OBJECT-TYPE radiusAuthClientAccessAccepts OBJECT-TYPE
SYNTAX Counter32 SYNTAX Counter32
MAX-ACCESS read-only MAX-ACCESS read-only
STATUS current STATUS current
DESCRIPTION DESCRIPTION
"The total number of RADIUS Access-Accept packets "The total number of RADIUS Access-Accept packets
received from this server since client start-up." received from this server since client start-up."
::= { radiusAuthServerEntry 6 } ::= { radiusAuthServerEntry 7 }
radiusAuthClientAccessRejects OBJECT-TYPE radiusAuthClientAccessRejects OBJECT-TYPE
SYNTAX Counter32 SYNTAX Counter32
MAX-ACCESS read-only MAX-ACCESS read-only
STATUS current STATUS current
DESCRIPTION DESCRIPTION
"The total number of RADIUS Access-Reject packets "The total number of RADIUS Access-Reject packets
received from this server since client start-up." received from this server since client start-up."
::= { radiusAuthServerEntry 7 } ::= { radiusAuthServerEntry 8 }
radiusAuthClientAccessChallenges OBJECT-TYPE radiusAuthClientAccessChallenges OBJECT-TYPE
SYNTAX Counter32 SYNTAX Counter32
MAX-ACCESS read-only MAX-ACCESS read-only
STATUS current STATUS current
DESCRIPTION DESCRIPTION
"The total number of RADIUS Access-Challenge packets "The total number of RADIUS Access-Challenge packets
received from this server since client start-up." received from this server since client start-up."
::= { radiusAuthServerEntry 8 } ::= { radiusAuthServerEntry 9 }
-- "Access-Response" includes an Access-Accept, Access-Challenge -- "Access-Response" includes an Access-Accept, Access-Challenge
-- or Access-Reject -- or Access-Reject
radiusAuthClientMalformedAccessResponses OBJECT-TYPE radiusAuthClientMalformedAccessResponses OBJECT-TYPE
SYNTAX Counter32 SYNTAX Counter32
MAX-ACCESS read-only MAX-ACCESS read-only
STATUS current STATUS current
DESCRIPTION DESCRIPTION
"The total number of malformed RADIUS Access-Response "The total number of malformed RADIUS Access-Response
packets received from this server since client packets received from this server since client
start-up. Bad authenticators are not included as start-up. Malformed packets include packets with
malformed access responses." an invalid length. Bad authenticators or
::= { radiusAuthServerEntry 9 } Signature attributes are not
included as malformed access responses."
::= { radiusAuthServerEntry 10 }
radiusAuthClientAuthenticationBadAuthenticators OBJECT-TYPE radiusAuthClientBadAuthenticators OBJECT-TYPE
SYNTAX Counter32 SYNTAX Counter32
MAX-ACCESS read-only MAX-ACCESS read-only
STATUS current STATUS current
DESCRIPTION DESCRIPTION
"The total number of RADIUS Access-Response packets "The total number of RADIUS Access-Response packets
containing invalid authenticators received from this server containing invalid authenticators or Signature
since client start-up." attributes received from this server since client
::= { radiusAuthServerEntry 10 } start-up."
::= { radiusAuthServerEntry 11 }
radiusAuthClientAuthenticationPendingRequests OBJECT-TYPE radiusAuthClientPendingRequests OBJECT-TYPE
SYNTAX Counter32 SYNTAX Gauge32
MAX-ACCESS read-only MAX-ACCESS read-only
STATUS current STATUS current
DESCRIPTION DESCRIPTION
"The total number of RADIUS Access-Request packets "The total number of RADIUS Access-Request packets
destined for this server that have not yet timed out destined for this server that have not yet timed out
or received a response. This variable is incremented or received a response. This variable is incremented
when an Access-Request is sent and decremented due to when an Access-Request is sent and decremented due to
receipt of an Access-Reply or Access-Challenge,
a timeout or retransmission." a timeout or retransmission."
::= { radiusAuthServerEntry 11 } ::= { radiusAuthServerEntry 12 }
radiusAuthClientAuthenticationTimeouts OBJECT-TYPE
radiusAuthClientTimeouts OBJECT-TYPE
SYNTAX Counter32 SYNTAX Counter32
MAX-ACCESS read-only MAX-ACCESS read-only
STATUS current STATUS current
DESCRIPTION DESCRIPTION
"The total number of authentication timeouts to this server "The total number of authentication timeouts to this server
since client startup. After a timeout the client may since client startup. After a timeout the client may
retry to the same server, send to a different server, or retry to the same server, send to a different server, or
give up. A retry to the same server is counted as a give up. A retry to the same server is counted as a
retransmit as well as a timeout. A send to a different retransmit as well as a timeout. A send to a different
server is counted as a Request as well as a timeout." server is counted as a Request as well as a timeout."
::= { radiusAuthServerEntry 12 } ::= { radiusAuthServerEntry 13 }
radiusAuthClientUnknownType OBJECT-TYPE radiusAuthClientUnknownType OBJECT-TYPE
SYNTAX Counter32 SYNTAX Counter32
MAX-ACCESS read-only MAX-ACCESS read-only
STATUS current STATUS current
DESCRIPTION DESCRIPTION
"The total number of RADIUS packets of unknown type which "The total number of RADIUS packets of unknown type which
were received from this server on the authentication port were received from this server on the authentication port
since client start-up." since client start-up."
::= { radiusAuthServerEntry 13 } ::= { radiusAuthServerEntry 14 }
-- conformance information -- conformance information
radiusAuthClientMIBConformance radiusAuthClientMIBConformance
OBJECT IDENTIFIER ::= { radiusAuthClientMIB 2 } OBJECT IDENTIFIER ::= { radiusAuthClientMIB 2 }
radiusAuthClientMIBCompliances radiusAuthClientMIBCompliances
OBJECT IDENTIFIER ::= { radiusAuthClientMIBConformance 1 } OBJECT IDENTIFIER ::= { radiusAuthClientMIBConformance 1 }
radiusAuthClientMIBGroups radiusAuthClientMIBGroups
OBJECT IDENTIFIER ::= { radiusAuthClientMIBConformance 2 } OBJECT IDENTIFIER ::= { radiusAuthClientMIBConformance 2 }
-- compliance statements -- compliance statements
radiusAuthClientMIBCompliance MODULE-COMPLIANCE radiusAuthClientMIBCompliance MODULE-COMPLIANCE
STATUS current STATUS current
DESCRIPTION DESCRIPTION
"The compliance statement for authentication clients "The compliance statement for authentication clients
implementing the RADIUS Authentication Client MIB." implementing the RADIUS Authentication Client MIB."
MODULE -- this module MODULE -- this module
MANDATORY-GROUPS { radiusAuthClientMIBGroup } MANDATORY-GROUPS { radiusAuthClientMIBGroup }
skipping to change at page 7, line 51 skipping to change at page 8, line 19
"The compliance statement for authentication clients "The compliance statement for authentication clients
implementing the RADIUS Authentication Client MIB." implementing the RADIUS Authentication Client MIB."
MODULE -- this module MODULE -- this module
MANDATORY-GROUPS { radiusAuthClientMIBGroup } MANDATORY-GROUPS { radiusAuthClientMIBGroup }
::= { radiusAuthClientMIBCompliances 1 } ::= { radiusAuthClientMIBCompliances 1 }
-- units of conformance -- units of conformance
radiusAuthClientMIBGroup OBJECT-GROUP radiusAuthClientMIBGroup OBJECT-GROUP
OBJECTS { radiusAuthClientInvalidServerAddresses, OBJECTS { radiusAuthClientIdentifier,
radiusAuthClientInvalidServerAddresses,
radiusAuthServerAddress, radiusAuthServerAddress,
radiusAuthClientServerPortNumber,
radiusAuthClientRoundTripTime, radiusAuthClientRoundTripTime,
radiusAuthClientAccessRequests, radiusAuthClientAccessRequests,
radiusAuthClientAccessRetransmissions, radiusAuthClientAccessRetransmissions,
radiusAuthClientAccessAccepts, radiusAuthClientAccessAccepts,
radiusAuthClientAccessRejects, radiusAuthClientAccessRejects,
radiusAuthClientAccessChallenges, radiusAuthClientAccessChallenges,
radiusAuthClientMalformedAccessResponses, radiusAuthClientMalformedAccessResponses,
radiusAuthClientAuthenticationBadAuthenticators, radiusAuthClientBadAuthenticators,
radiusAuthClientAuthenticationPendingRequests, radiusAuthClientPendingRequests,
radiusAuthClientAuthenticationTimeouts, radiusAuthClientTimeouts,
radiusAuthClientUnknownType radiusAuthClientUnknownType
} }
STATUS current STATUS current
DESCRIPTION DESCRIPTION
"The basic collection of objects providing management of "The basic collection of objects providing management of
RADIUS Authentication Clients." RADIUS Authentication Clients."
::= { radiusAuthClientMIBGroups 1 } ::= { radiusAuthClientMIBGroups 1 }
END END
skipping to change at page 8, line 54 skipping to change at page 9, line 28
Specification of Abstract Syntax Notation One (ASN.1)", International Specification of Abstract Syntax Notation One (ASN.1)", International
Organization for Standardization, International Standard 8824, Decem- Organization for Standardization, International Standard 8824, Decem-
ber 1987. ber 1987.
[5] Case, J., McCloghrie, K., Rose, M., and S. Waldbusser, "Introduc- [5] Case, J., McCloghrie, K., Rose, M., and S. Waldbusser, "Introduc-
tion to Community-based SNMPv2", RFC 1901, SNMP Research, Inc., Cisco tion to Community-based SNMPv2", RFC 1901, SNMP Research, Inc., Cisco
Systems, Dover Beach Consulting, Inc., International Network Services, Systems, Dover Beach Consulting, Inc., International Network Services,
January, 1996. January, 1996.
[6] Case, J., McCloghrie, K., Rose, M., and S. Waldbusser, "Structure [6] Case, J., McCloghrie, K., Rose, M., and S. Waldbusser, "Structure
of Management Information for Version 2 of the Simple Network of Management Information for Version 2 of the Simple Network Manage-
Management Protocol (SNMPv2)", RFC 1902, SNMP Research, Inc., Cisco ment Protocol (SNMPv2)", RFC 1902, SNMP Research, Inc., Cisco Systems,
Systems, Dover Beach Consulting, Inc., International Network Services, Dover Beach Consulting, Inc., International Network Services, January,
January, 1996. 1996.
[7] Case, J., McCloghrie, K., Rose, M., and S. Waldbusser, "Textual [7] Case, J., McCloghrie, K., Rose, M., and S. Waldbusser, "Textual
Conventions for version 2 of the the Simple Network Management Proto- Conventions for version 2 of the the Simple Network Management Proto-
col (SNMPv2)", RFC 1903, SNMP Research, Inc., Cisco Systems, Dover col (SNMPv2)", RFC 1903, SNMP Research, Inc., Cisco Systems, Dover
Beach Consulting, Inc., International Network Services, January, 1996. Beach Consulting, Inc., International Network Services, January, 1996.
[8] Case, J., McCloghrie, K., Rose, M., and S. Waldbusser, "Confor- [8] Case, J., McCloghrie, K., Rose, M., and S. Waldbusser, "Confor-
mance Statements for version 2 of the the Simple Network Management mance Statements for version 2 of the the Simple Network Management
Protocol (SNMPv2)", RFC 1904, SNMP Research, Inc., Cisco Systems, Protocol (SNMPv2)", RFC 1904, SNMP Research, Inc., Cisco Systems,
Dover Beach Consulting, Inc., International Network Services, January, Dover Beach Consulting, Inc., International Network Services, January,
 End of changes. 34 change blocks. 
56 lines changed or deleted 78 lines changed or added

This html diff was produced by rfcdiff 1.34. The latest version is available from http://tools.ietf.org/tools/rfcdiff/