WWP-LEOS-TACACS-CLIENT-MIB: View SNMP OID List / Download MIB

The MIB module for the WWP Tacacs Server specific configuration and monitoring information.

Setting this object will administratively enable/disable tacacs client on the device. Enumeration: 'disabled': 1, 'enabled': 2.

This object returns the operational state of tacacs client. Enumeration: 'disabled': 1, 'enabled': 2.

This is the time in seconds between retransmissions to the TACACS server.

Indicates the number of times the TACACS server should be tried before giving up on the server.

Indicates the privilege level used for mapping a range of TACACS privilege levels to LE-OS R-W user privilege level. A privilege level returned by a server will be compared to wwpLeosTacacsClientPrivilegeLevelDiag. If the server privilege level is less than wwpLeosTacacsClientPrivilegeLevelDiag and greater than or equal to the wwpLeosTacacsClientPrivilegeLevelRW, the LE-OS privilege level is super-user.

Indicates the privilege level used for mapping a range of TACACS privilege levels to LE-OS TCE Admin user privilege level. A privilege level returned by a server will be compared to wwpLeosTacacsClientPrivilegeLevelRW. If the server privilege level is less than wwpLeosTacacsClientPrivilegeLevelRW and greater than or equal to the wwpLeosTacacsClientPrivilegeLevelAdmin, the LE-OS privilege level is Admin. Not supported on all platforms

Indicates the privilege level used for mapping a range of TACACS privilege levels to LE-OS Diagnostic user privilege level. A privilege level returned by a server will be compared to this value. If server privilege level is greater than or equal to the wwpLeosTacacsClientPrivilegeLevelDiag, the LE-OS privilege level is diag.

The Auth Key to be used for Tacacs Servers. Retrieving the value of this object via SNMP will return an empty string for security reasons.

Setting this object will administratively enable/disable tacacs authentication on the device. Enumeration: 'disabled': 1, 'enabled': 2.

Setting this object will administratively enable/disable tacacs authorization on the device. Enumeration: 'disabled': 1, 'enabled': 2.

Setting this object will administratively enable/disable tacacs accounting on the device. Enumeration: 'disabled': 1, 'enabled': 2.

Setting this object will administratively enable/disable tacacs syslog messages on the device. Enumeration: 'disabled': 1, 'enabled': 2.

Lists the possible TACACS servers. While creating entry following mib objects must be specified wwpLeosTacacsClientServerStatus, wwpLeosTacacsClientServerAddr. SNMP multiple set operation must be used to create entry.

Tacacs server entry.

Specifies the index of this table.

Host name or ip address of the TACACS server.

When wwpLeosTacacsClientServerAddr represents: Host name : The resolved address will either be Ipv4 address or Ipv6 address. Ipv4 address : The resolved address will be the same Ipv4 address. Ipv6 address : The resolved address will be the same Ipv6 address. When the resolved address represents: Ipv4 address : wwpLeosTacacsClientServerResolvedAddr will represent the resolved Ipv4 address. wwpLeosTacacsClientServerResolvedInetAddr used in conjunction with wwpLeosTacacsClientServerResolvedInetAddrType will represent the same Ipv4 address. Ipv6 address : wwpLeosTacacsClientServerResolvedAddr will represent 0.0.0.0. wwpLeosTacacsClientServerResolvedInetAddr used in conjunction with wwpLeosTacacsClientServerResolvedInetAddrType will represent the Ipv6 address.

Specifies the priority of tacacs servers configured on the device. This is the order in which the servers will accessed

The destination TCP port number to which TACACS messages should be sent. The TACACS server will not be used for authentication if this port number is 0.

The number of TACACS Access-Request packets sent to this server from the global TACACS client. This does not include retransmissions.

The number of TACACS Access-Retransmission packets retransmitted to this TACACS authentication server from the global TACACS client.

The number of TACACS Access-Accept packets (valid or invalid) received from this server by the global TACACS client.

The number of TACACS Access-Reject packets (valid or invalid) received from this server by the global TACACS client.

The number of malformed TACACS Access-Response packets received from this server by the global TACACS client. Malformed packets include packets with an invalid length. Bad authenticators or Signature attributes or unknown types are not included as malformed access responses.

The number of TACACS Access-BadAuthenticator packets containing invalid authenticators or Signature attributes received from this server by the global TACACS client.

The number of TACACS Access-PendingRequest packets destined for this server from the global TACACS client that have not yet timed out or received a response. This variable is incremented when an Access-Request is sent and decremented due to receipt of an Access-Accept, Access-Reject or Access-Challenge, a timeout or retransmission.

The number of authentication timeouts to this server on behalf of the global TACACS client. After a timeout the client may retry to the same server, send to a different server, or give up. A retry to the same server is counted as a retransmit as well as a timeout. A send to a different server is counted as a Request as well as a timeout.

The number of TACACS packets of unknown type which were received from this server on the authentication port by the global TACACS client.

The number of TACACS packets of which were received from this server on the authentication port by the global TACACS client and dropped for some other reason by the client.

To create a row in this table, a manager must set this object to either createAndGo(4). While creating entry following mib objects must be specified wwpLeosTacacsClientServerStatus, wwpLeosTacacsClientServerAddr. SNMP multiple set operation must be used to create entry. To disable a tacacs server, the operator can set wwpLeosTacacsClientServerStatus object to 'notInService' state.

This object specifies how the tacacs server should be used for authentication. Whether this tacacs server should be used for userLogin authentication or dot1x authentication or both is decided by the value of this mib object. Dot1x not supported on all platforms Enumeration: 'userLogin': 1, 'all': 3, 'dot1x': 2.

This object clears the statistics for a server

The number of TACACS Access-Request packets sent to this server. This does not include retransmissions.

The number of TACACS Access-Request packets retransmitted to this TACACS authentication server.

The number of TACACS Access-Accept packets (valid or invalid) received from this server.

The number of TACACS Access-Reject packets (valid or invalid) received from this server.

The number of malformed TACACS Access-Response packets received from this server. Malformed packets include packets with an invalid length. Bad authenticators or signature attributes or unknown types are not included as malformed access responses.

The number of TACACS Access-Response packets containing invalid authenticators or signature attributes received from this server.

The number of authentication timeouts to this server. After a timeout the client may retry sending to the same server, send to a different server, or give up. A retry to the same server is counted as a retransmit as well as a timeout. A send to a different server is counted as a request as well as a timeout.

The number of TACACS packets of unknown type which were received from this server on the authentication port.

The number of TACACS packets which were received from this server on the authentication port and dropped for some other reason.

The number of TACACS Access-Request packets sent to this server. This does not include retransmissions.

The number of TACACS Access-Request packets retransmitted to this TACACS authentication server.

The number of TACACS Access-Accept packets (valid or invalid) received from this server.

The number of TACACS Access-Reject packets (valid or invalid) received from this server.

The number of malformed TACACS Access-Response packets received from this server. Malformed packets include packets with an invalid length. Bad authenticators or signature attributes or unknown types are not included as malformed access responses.

The number of TACACS Access-Response packets containing invalid authenticators or signature attributes received from this server.

The number of authentication timeouts to this server. After a timeout the client may retry sending to the same server, send to a different server, or give up. A retry to the same server is counted as a retransmit as well as a timeout. A send to a different server is counted as a request as well as a timeout.

The number of TACACS packets of unknown type which were received from this server on the authentication port.

The number of TACACS packets which were received from this server on the authentication port and dropped for some other reason.

Specifies the resolved IP address type . Used in conjunction with wwpLeosTacacsClientServerResolvedInetAddr. When set to : ipv4 : wwpLeosTacacsClientServerResolvedInetAddr should be compliant with InetAddressIPv4 ipv6 : wwpLeosTacacsClientServerResolvedInetAddr should be compliant with InetAddressIPv6

Specifies the resolved IP address if wwpLeosTacacsClientServerAddr is set to host name. If wwpLeosTacacsClientServerAddr is set to ip address then wwpLeosTacacsClientServerResolvedInetAddress will contain same information as wwpLeosTacacsClientServerAddr. This OID should be used in conjuction with wwpLeosTacacsClientServerResolvedInetAddrType.

Lists the possible TACACS servers. While creating entry following mib objects must be specified wwpLeosTacacsClientAuthenticationServerStatus, wwpLeosTacacsClientAuthenticationServerAddr. SNMP multiple set operation must be used to create entry.

Tacacs server entry.

Specifies the index of this table.

Host name or ip address of the TACACS server.

When wwpLeosTacacsClientAuthenticationServerAddr represents: Host name : The resolved address will either be Ipv4 address or Ipv6 address. Ipv4 address : The resolved address will be the same Ipv4 address. Ipv6 address : The resolved address will be the same Ipv6 address. When the resolved address represents: Ipv4 address : wwpLeosTacacsClientAuthenticationServerResolvedAddr will represent the resolved Ipv4 address. wwpLeosTacacsClientAuthenticationServerResolvedInetAddr used in conjunction with wwpLeosTacacsClientAuthenticationServerResolvedInetAddrType will represent the same Ipv4 address. Ipv6 address : wwpLeosTacacsClientAuthenticationServerResolvedAddr will represent 0.0.0.0. wwpLeosTacacsClientAuthenticationServerResolvedInetAddr used in conjunction with wwpLeosTacacsClientAuthenticationServerResolvedInetAddrType will represent the Ipv6 address.

Specifies the priority of tacacs servers configured on the device. This is the order in which the servers will accessed

The destination TCP port number to which TACACS messages should be sent. The TACACS server will not be used for authentication if this port number is 0.

The number of TACACS Access-Request packets sent to this server. This does not include retransmissions.

The number of TACACS Access-Request packets retransmitted to this TACACS authentication server.

The number of TACACS Access-Accept packets (valid or invalid) received from this server.

The number of TACACS Access-Reject packets (valid or invalid) received from this server.

The number of malformed TACACS Access-Response packets received from this server. Malformed packets include packets with an invalid length. Bad authenticators or Signature attributes or unknown types are not included as malformed access responses.

The number of TACACS Access-Response packets containing invalid authenticators or Signature attributes received from this server.

The number of TACACS Access-Request packets destined for this server that have not yet timed out or received a response. This variable is incremented when an Access-Request is sent and decremented due to receipt of an Access-Accept, Access-Reject or Access-Challenge, a timeout or retransmission.

The number of authentication timeouts to this server. After a timeout the client may retry to the same server, send to a different server, or give up. A retry to the same server is counted as a retransmit as well as a timeout. A send to a different server is counted as a Request as well as a timeout.

The number of TACACS packets of unknown type which were received from this server on the authentication port.

The number of TACACS packets of which were received from this server on the authentication port and dropped for some other reason.

To create a row in this table, a manager must set this object to either createAndGo(4). While creating entry following mib objects must be specified wwpLeosTacacsClientAuthenticationServerStatus, wwpLeosTacacsClientAuthenticationServerAddr. SNMP multiple set operation must be used to create entry. To disable a tacacs server, the operator can set wwpLeosTacacsClientAuthenticationServerStatus object to 'notInService' state.

This object specifies how the tacacs server should be used for authentication. Whether this tacacs server should be used for userLogin authentication or dot1x authentication or both is decided by the value of this mib object. Dot1x not supported on all platforms Enumeration: 'userLogin': 1, 'all': 3, 'dot1x': 2.

This object clears the statistics for a server

Specifies the resolved IP address type. Used in conjunction with wwpLeosTacacsClientAuthenticationServerResolvedInetAddr. When set to : ipv4 : wwpLeosTacacsClientAuthenticationServerResolvedInetAddr should be compliant with InetAddressIPv4 ipv6 : wwpLeosTacacsClientAuthenticationServerResolvedInetAddr should be compliant with InetAddressIPv6

Specifies the resolved IP address if wwpLeosTacacsClientAuthenticationServerAddr is set to host name. If wwpLeosTacacsClientAuthenticationServerAddr is set to ip address then wwpLeosTacacsClientAuthenticationServerResolvedInetAddr will contain the same information as wwpLeosTacacsClientAuthenticationServerAddr. This OID should be used in conjuction with wwpLeosTacacsClientAuthenticationServerResolvedInetAddrType.

Lists the possible TACACS servers. While creating entry following mib objects must be specified wwpLeosTacacsClientAuthorizationServerStatus, wwpLeosTacacsClientAuthorizationServerAddr. SNMP multiple set operation must be used to create entry.

Tacacs server entry.

Specifies the index of this table.

Host name or ip address of the TACACS server.

When wwpLeosTacacsClientAuthorizationServerAddr represents: Host name : The resolved address will either be Ipv4 address or Ipv6 address. Ipv4 address : The resolved address will be the same Ipv4 address. Ipv6 address : The resolved address will be the same Ipv6 address. When the resolved address represents: Ipv4 address : wwpLeosTacacsClientAuthorizationServerResolvedAddr will represent the resolved Ipv4 address. wwpLeosTacacsClientAuthorizationServerResolvedInetAddr used in conjunction with wwpLeosTacacsClientAuthorizationServerResolvedInetAddrType will represent the same Ipv4 address. Ipv6 address : wwpLeosTacacsClientAuthorizationServerResolvedAddr will represent 0.0.0.0. wwpLeosTacacsClientAuthorizationServerResolvedInetAddr used in conjunction with wwpLeosTacacsClientAuthorizationServerResolvedInetAddrType will represent the Ipv6 address.

Specifies the priority of tacacs servers configured on the device. This is the order in which the servers will accessed

The destination TCP port number to which TACACS messages should be sent. The TACACS server will not be used for authentication if this port number is 0.

The number of TACACS Access-Request packets sent to this server. This does not include retransmissions.

The number of TACACS Access-Request packets retransmitted to this TACACS authentication server.

The number of TACACS Access-Accept packets (valid or invalid) received from this server.

The number of TACACS Access-Reject packets (valid or invalid) received from this server.

The number of malformed TACACS Access-Response packets received from this server. Malformed packets include packets with an invalid length. Bad authenticators or Signature attributes or unknown types are not included as malformed access responses.

The number of TACACS Access-Response packets containing invalid authenticators or Signature attributes received from this server.

The number of TACACS Access-Request packets destined for this server that have not yet timed out or received a response. This variable is incremented when an Access-Request is sent and decremented due to receipt of an Access-Accept, Access-Reject or Access-Challenge, a timeout or retransmission.

The number of authentication timeouts to this server. After a timeout the client may retry to the same server, send to a different server, or give up. A retry to the same server is counted as a retransmit as well as a timeout. A send to a different server is counted as a Request as well as a timeout.

The number of TACACS packets of unknown type which were received from this server on the authentication port.

The number of TACACS packets of which were received from this server on the authentication port and dropped for some other reason.

To create a row in this table, a manager must set this object to either createAndGo(4). While creating entry following mib objects must be specified wwpLeosTacacsClientAuthorizationServerStatus, wwpLeosTacacsClientAuthorizationServerAddr. SNMP multiple set operation must be used to create entry. To disable a tacacs server, the operator can set wwpLeosTacacsClientAuthorizationServerStatus object to 'notInService' state.

This object specifies how the tacacs server should be used for authentication. Whether this tacacs server should be used for userLogin authentication or dot1x authentication or both is decided by the value of this mib object. Dot1x not supported on all platforms Enumeration: 'userLogin': 1, 'all': 3, 'dot1x': 2.

This object clears the statistics for a server

Specifies the resolved IP address type. Used in conjunction with wwpLeosTacacsClientAuthorizationServerResolvedInetAddr. When set to : ipv4 : wwpLeosTacacsClientAuthorizationServerResolvedInetAddr should be compliant with InetAddressIPv4 ipv6 : wwpLeosTacacsClientAuthorizationServerResolvedInetAddr should be compliant with InetAddressIPv6.

Specifies the resolved IP address if wwpLeosTacacsClientAuthorizationServerAddr is set to host name. If wwpLeosTacacsClientAuthorizationServerAddr is set to ip address then wwpLeosTacacsClientAuthorizationServerResolvedInetAddr will contain same information as wwpLeosTacacsClientAuthorizationServerAddr. This OID is used in conjunction with wwpLeosTacacsClientAuthorizationServerResolvedInetAddr.

Lists the possible TACACS servers. While creating entry following mib objects must be specified wwpLeosTacacsClientAccountingServerStatus, wwpLeosTacacsClientAccountingServerAddr. SNMP multiple set operation must be used to create entry.

Tacacs server entry.

Specifies the index of this table.

Host name or ip address of the TACACS server.

When wwpLeosTacacsClientAccountingServerAddr represents: Host name : The resolved address will either be Ipv4 address or Ipv6 address. Ipv4 address : The resolved address will be the same Ipv4 address. Ipv6 address : The resolved address will be the same Ipv6 address. When the resolved address represents: Ipv4 address : wwpLeosTacacsClientAccountingServerResolvedAddr will represent the resolved Ipv4 address. wwpLeosTacacsClientAccountingServerResolvedInetAddr used in conjunction with wwpLeosTacacsClientAccountingServerResolvedInetAddrType will represent the same Ipv4 address. Ipv6 address : wwpLeosTacacsClientAccountingServerResolvedAddr will represent 0.0.0.0. wwpLeosTacacsClientAccountingServerResolvedInetAddr used in conjunction with wwpLeosTacacsClientAccountingServerResolvedInetAddrType will represent the Ipv6 address.

Specifies the priority of tacacs servers configured on the device. This is the order in which the servers will accessed

The destination TCP port number to which TACACS messages should be sent. The TACACS server will not be used for authentication if this port number is 0.

The number of TACACS Access-Request packets sent to this server. This does not include retransmissions.

The number of TACACS Access-Request packets retransmitted to this TACACS authentication server.

The number of TACACS Access-Accept packets (valid or invalid) received from this server.

The number of TACACS Access-Reject packets (valid or invalid) received from this server.

The number of malformed TACACS Access-Response packets received from this server. Malformed packets include packets with an invalid length. Bad authenticators or Signature attributes or unknown types are not included as malformed access responses.

The number of TACACS Access-Response packets containing invalid authenticators or Signature attributes received from this server.

The number of TACACS Access-Request packets destined for this server that have not yet timed out or received a response. This variable is incremented when an Access-Request is sent and decremented due to receipt of an Access-Accept, Access-Reject or Access-Challenge, a timeout or retransmission.

The number of authentication timeouts to this server. After a timeout the client may retry to the same server, send to a different server, or give up. A retry to the same server is counted as a retransmit as well as a timeout. A send to a different server is counted as a Request as well as a timeout.

The number of TACACS packets of unknown type which were received from this server on the authentication port.

The number of TACACS packets of which were received from this server on the authentication port and dropped for some other reason.

To create a row in this table, a manager must set this object to either createAndGo(4). While creating entry following mib objects must be specified wwpLeosTacacsClientAccountingServerStatus, wwpLeosTacacsClientAccountingServerAddr. SNMP multiple set operation must be used to create entry. To disable a tacacs server, the operator can set wwpLeosTacacsClientAccountingServerStatus object to 'notInService' state.

This object specifies how the tacacs server should be used for authentication. Whether this tacacs server should be used for userLogin authentication or dot1x authentication or both is decided by the value of this mib object. Dot1x not supported on all platforms Enumeration: 'userLogin': 1, 'all': 3, 'dot1x': 2.

This object clears the statistics for a server

Specifies the resolved IP address type. Used in conjunction with wwpLeosTacacsClientAccountingServerResolvedInetAddr. When set to : ipv4 : wwpLeosTacacsClientAccountingServerResolvedInetAddr should be compliant with InetAddressIPv4 ipv6 : wwpLeosTacacsClientAccountingServerResolvedInetAddr should be compliant with InetAddressIPv6.

Specifies the resolved IP address if wwpLeosTacacsClientAccountingServerAddr is set to host name. If wwpLeosTacacsClientAccountingServerAddr is set to ip address then wwpLeosTacacsClientAccountingServerResolvedInetAddr will contain the same information as wwpLeosTacacsClientAccountingServerAddr. This OID is used in conjunction with wwpLeosTacacsClientAccountingServerResolvedInetAddrType.

Setting this object will turn on session logon/logoff logging with tacacs. Enumeration: 'on': 2, 'off': 1.

Setting this object will turn on command start/stop logging. Enumeration: 'on': 2, 'off': 1.

Setting this object will turn off global servers. Enumeration: 'on': 2, 'off': 1.

Setting this object will set the search method. Enumeration: 'priority': 1, 'cached': 2.

Setting this object will set the minimum length for TACACS secret key