ENTERASYS-RADIUS-AUTH-CLIENT-MIB

This indicates which method is being used for authentication.

mac(1) - indicates MAC address authentication

eapol(2) - indicates EAPOL authentication

This list of enumeration constants is subject to change. This parameter value is maintained across system reboots.

A number uniquely identifying each conceptual row in the etsysRadiusAuthServerTable.

etsysRadiusAuthServerIndices with range between 2147483642 and 2147483647 indicate the highest priority servers stored for backwards compatibility. After consideration of these special indice values this value indicates the relative priority of the servers.

Relative priority of the servers is used when using the standard authentication retransmission algorithm. Maintaining the value of etsysRadiusAuthServerIndex for all active(1) entries across agent reboots is REQUIRED.

This object is the secret shared between the RADIUS authentication server and the RADIUS client.

On a read operation this object MUST return a zero length string.

Writing this object with a zero length string clears the secret.

true(1) - Indicates that etsysRadiusAuthClientServerSecret was last set with some value other than the empty string.

false(2) - Indicates that etsysRadiusAuthClientServerSecret has never been set, or was last set to the empty string."

The number of seconds elapsed since the counters were last cleared.

Writing the value zero will cause the servers counters to be cleared and the clear time will be set to zero. Writing any value other than zero will have no effect.

The row status of this conceptual row in the table.

active - The server is available for performing RADIUS operations. Other writable leaves in this row MUST NOT be modified while the row is in the active state.

notInService - The entry is fully configured but is not available for performing RADIUS operations. Conceptual rows with this status MAY be deleted at the discretion of the agent, at which time it will be treated as if destroy(6) was SET to this object.

notReady - The entry exists in the agent, but is missing information necessary in order to be available for use by the managed device (i.e., one or more required columns in the conceptual row have not been instantiated);

createAndGo - Not possible. createAndWait - Creates a new instance of a conceptual row, but does not make it available for use by the managed device.

destroy - This will remove the conceptual row from the table and make it unavailable for RADIUS client operations. This MUST also cause any persistent data related to this row to be removed from the system. Maintaining active(1) entries across agent reboots is REQUIRED.

This object allows a server to be restricted to providing authentication services to certain classes of access methods.

any(1) - the server will be available to authenticate users originating from either the mgmtAccess or networkAccess realms.

mgmtAccess(2) - the server will only be available for authenticating users that have requested management access via the console, telnet, SSH, HTTP, etc.

networkAccess(3) - the server will only be available for authenticating users that are attempting to gain access to the network via 802.1X, Port Web Authentication, MAC Authentication, etc.

nms(4) - the server will only be available for authenticating users that are attempting to gain access to the network via network virtualization or virtual machine tracking using a network management system. This realm type is only allowed for backwards compatibility and is not included when any is specified.

Non-default values for this object should be used when there is a desire to have one set of servers used for authenticating management access requests and a different set used for authenticating network access requests. When this object has the value of any(1) then the associated server will be in each of the mgmtAccess and networkAccess sets. The precedence order defined by the relative value of the etsysRadiusAuthServerIndex will be maintained within each set of servers."

The maximum number of sessions associated with this server when using the sticky round robin authentication retransmission algorithm. This value is not used when other retransmission algorithms are being utilized.

Sessions that are successfully authenticated with this server are considered associated. Maintaining the value of this object across agent reboots is REQUIRED.

The current number of sessions associated with this server when using the sticky round robin authentication retransmission algorithm. This value is not used when other retransmission algorithms are being utilized.

Sessions that are successfully authenticated with this server are considered associated.

The name of the local system virtual router that traffic sent to this RADIUS server should be associated with.

Writing this object with a zero length string clears the virtual router name for this server.

This value indicates which method is being used to send management access passwords to the RADIUS server.

standard(1) - Use the User-Password attribute at defined in RFC2865

mschapv2(2) - Use the MS-CHAP2-Response attribute as defined in RFC2548

This parameter value is maintained across system reboots.

This indicates which method is being used for the authentication retransmission algorithm.

standard(1) - this is the legacy Enterasys authentication retransmission algorithm. It is a combination of back off where the highest priority server is always used first for every authentication transaction and round robin where if the highest priority server is unable to respond within the configured timeout period the software immediately moves to the next highest priority server in the list.

roundRobin(2) - Each new authentication transaction uses the next highest priority server from the server that was initially used for the transaction prior. After the lowest priority server in the list is used the next transaction will use the highest priority server.

stickyRoundRobin(3) - Each new authentication transaction uses the next highest priority server as in roundRobin except when that session is either currently associated with a server already or has been associated with a server in the past. etsysRadiusAuthClientServerStickyMaxSessions and etsysRadiusAuthClientServerStickyCurSessions values are used to determine when previously associated sessions need to be associated with less used servers.

This list of enumeration constants is subject to change. This parameter value is maintained across system reboots.