Network Working Group D. Nelson
Request for Comments: 4670 Enterasys Networks
Obsoletes: 2620 August 2006
Category: Informational
Network Working Group D. Nelson
Request for Comments: 4670 Enterasys Networks
Obsoletes: 2620 August 2006
Category: Informational
RADIUS Accounting Client MIB for IPv6
用于IPv6的RADIUS计费客户端MIB
Status of This Memo
关于下段备忘
This memo provides information for the Internet community. It does not specify an Internet standard of any kind. Distribution of this memo is unlimited.
本备忘录为互联网社区提供信息。它没有规定任何类型的互联网标准。本备忘录的分发不受限制。
Copyright Notice
版权公告
Copyright (C) The Internet Society (2006).
版权所有（C）互联网协会（2006年）。
Abstract
摘要
This memo defines a set of extensions that instrument RADIUS accounting client functions. These extensions represent a portion of the Management Information Base (MIB) for use with network management protocols in the Internet community. Using these extensions, IP-based management stations can manage RADIUS accounting clients.
此备忘录定义了一组用于instrument RADIUS accounting客户端功能的扩展。这些扩展代表管理信息库（MIB）的一部分，用于Internet社区中的网络管理协议。使用这些扩展，基于IP的管理站可以管理RADIUS记帐客户端。
This memo obsoletes RFC 2620 by deprecating the MIB table containing IPv4-only address formats and defining a new table to add support for version-neutral IP address formats. The remaining MIB objects from RFC 2620 are carried forward into this document. This memo also adds UNITS and REFERENCE clauses to selected objects.
此备忘录通过弃用包含仅IPv4地址格式的MIB表，并定义一个新表来添加对版本无关IP地址格式的支持，从而淘汰了RFC 2620。RFC 2620中剩余的MIB对象将转入本文档。此备忘录还向选定对象添加单位和引用子句。
Table of Contents
目录
1. Introduction ....................................................3
2. Terminology .....................................................3
3. The Internet-Standard Management Framework ......................3
4. Scope of Changes ................................................3
5. Structure of the MIB Module .....................................4
6. Deprecated Objects ..............................................5
7. Definitions .....................................................5
8. Security Considerations ........................................19
9. References .....................................................20
9.1. Normative References ......................................20
9.2. Informative References ....................................21
Appendix A. Acknowledgements ......................................22
1. Introduction ....................................................3
2. Terminology .....................................................3
3. The Internet-Standard Management Framework ......................3
4. Scope of Changes ................................................3
5. Structure of the MIB Module .....................................4
6. Deprecated Objects ..............................................5
7. Definitions .....................................................5
8. Security Considerations ........................................19
9. References .....................................................20
9.1. Normative References ......................................20
9.2. Informative References ....................................21
Appendix A. Acknowledgements ......................................22
This memo defines a portion of the Management Information Base (MIB) for use with network management protocols in the Internet community. The objects defined within this memo relate to the Remote Authentication Dial-In User Service (RADIUS) Accounting Client as defined in RFC 2866 [RFC2866].
此备忘录定义了管理信息库（MIB）的一部分，用于Internet社区中的网络管理协议。本备忘录中定义的对象与RFC 2866[RFC2866]中定义的远程身份验证拨入用户服务（RADIUS）记帐客户端相关。
The key words "MUST", "MUST NOT", "REQUIRED", "SHALL", "SHALL NOT", "SHOULD", "SHOULD NOT", "RECOMMENDED", "MAY", and "OPTIONAL" in this document are to be interpreted as described in RFC 2119 [RFC2119].
本文件中的关键词“必须”、“不得”、“要求”、“应”、“不应”、“应”、“不应”、“建议”、“可”和“可选”应按照RFC 2119[RFC2119]中所述进行解释。
This document uses terminology from RFC 2865 [RFC2865] and RFC 2866 [RFC2866].
本文件使用RFC 2865[RFC2865]和RFC 2866[RFC2866]中的术语。
This document uses the word "malformed" with respect to RADIUS packets, particularly in the context of counters of "malformed packets". While RFC 2866 does not provide an explicit definition of "malformed", malformed generally means that the implementation has determined the packet does not match the format defined in RFC 2866. Those implementations are used in deployments today, and thus set the de facto definition of "malformed".
This document uses the word "malformed" with respect to RADIUS packets, particularly in the context of counters of "malformed packets". While RFC 2866 does not provide an explicit definition of "malformed", malformed generally means that the implementation has determined the packet does not match the format defined in RFC 2866. Those implementations are used in deployments today, and thus set the de facto definition of "malformed".translate error, please retry
For a detailed overview of the documents that describe the current Internet-Standard Management Framework, please refer to section 7 of RFC 3410 [RFC3410].
有关描述当前互联网标准管理框架的文件的详细概述，请参阅RFC 3410[RFC3410]第7节。
Managed objects are accessed via a virtual information store, termed the Management Information Base or MIB. MIB objects are generally accessed through the Simple Network Management Protocol (SNMP). Objects in the MIB are defined using the mechanisms defined in the Structure of Management Information (SMI). This memo specifies a MIB module that is compliant to the SMIv2, which is described in STD 58, RFC 2578 [RFC2578], STD 58, RFC 2579 [RFC2579] and STD 58, RFC 2580 [RFC2580].
托管对象通过虚拟信息存储（称为管理信息库或MIB）进行访问。MIB对象通常通过简单网络管理协议（SNMP）进行访问。MIB中的对象是使用管理信息结构（SMI）中定义的机制定义的。本备忘录规定了符合SMIv2的MIB模块，如STD 58、RFC 2578[RFC2578]、STD 58、RFC 2579[RFC2579]和STD 58、RFC 2580[RFC2580]所述。
This document obsoletes RFC 2620 [RFC2620], RADIUS Accounting Client MIB, by deprecating the radiusAccServerTable table and adding a new table, radiusAccServerExtTable, containing radiusAccServerInetAddressType, radiusAccServerInetAddress, and radiusAccClientServerInetPortNumber. The purpose of these added MIB objects is to support version-neutral IP addressing formats. The
本文档通过弃用radiusAccServerTable表并添加一个新表radiusAccServerExtTable（包含radiusAccServerInetAddressType、radiusAccServerInetAddress和radiusAccClientServerInetPortNumber），淘汰了RADIUS记帐客户机MIB RFC 2620[RFC2620]。这些添加的MIB对象的目的是支持版本无关的IP寻址格式。这个
existing table containing radiusAuthServerAddress and radiusAuthClientServerPortNumber is deprecated. The remaining MIB objects from RFC 2620 are carried forward into this document.
不推荐使用包含radiusAuthServerAddress和radiusAuthClientServerPortNumber的现有表。RFC 2620中剩余的MIB对象将转入本文档。
RFC 4001 [RFC4001], which defines the SMI Textual Conventions for IPv6 addresses, contains the following recommendation.
RFC 4001[RFC4001]定义了IPv6地址的SMI文本约定，其中包含以下建议。
'In particular, when revising a MIB module that contains IPv4 specific tables, it is suggested to define new tables using the textual conventions defined in this memo [RFC4001] that support all versions of IP. The status of the new tables SHOULD be "current", whereas the status of the old IP version specific tables SHOULD be changed to "deprecated". The other approach, of having multiple similar tables for different IP versions, is strongly discouraged.'
'特别是，当修改包含IPv4特定表的MIB模块时，建议使用本备忘录[RFC4001]中定义的支持所有IP版本的文本约定定义新表。新表的状态应为“当前”，而旧IP版本特定表的状态应更改为“已弃用”。另一种方法是为不同的IP版本提供多个类似的表，这是强烈反对的。”
The RADIUS accounting protocol, described in RFC 2866 [RFC2866], distinguishes between the client function and the server function. In RADIUS accounting, clients send Accounting-Requests, and servers reply with Accounting-Responses. Typically, Network Access Server (NAS) devices implement the client function, and thus would be expected to implement the RADIUS accounting client MIB, while RADIUS accounting servers implement the server function, and thus would be expected to implement the RADIUS accounting server MIB.
RFC 2866[RFC2866]中描述的RADIUS记帐协议区分了客户端功能和服务器功能。在RADIUS记帐中，客户端发送记帐请求，服务器用记帐响应进行答复。通常，网络访问服务器（NAS）设备实现客户端功能，因此预期将实现RADIUS记帐客户端MIB，而RADIUS记帐服务器实现服务器功能，因此预期将实现RADIUS记帐服务器MIB。
However, it is possible for a RADIUS accounting entity to perform both client and server functions. For example, a RADIUS proxy may act as a server to one or more RADIUS accounting clients, while simultaneously acting as an accounting client to one or more accounting servers. In such situations, it is expected that RADIUS entities combining client and server functionality will support both the client and server MIBs. The client MIB is defined in this document, and the server MIB is defined in [RFC4671].
但是，RADIUS记帐实体可以同时执行客户端和服务器功能。例如，RADIUS代理可以充当一个或多个RADIUS记帐客户端的服务器，同时充当一个或多个记帐服务器的记帐客户端。在这种情况下，结合客户端和服务器功能的RADIUS实体预计将同时支持客户端和服务器MIB。客户机MIB在本文档中定义，服务器MIB在[RFC4671]中定义。
This MIB module contains two scalars as well as a single table, the RADIUS Accounting Server Table, which contains one row for each RADIUS server with which the client shares a secret. Each entry in the RADIUS Accounting Server Table includes fifteen columns presenting a view of the activity of the RADIUS client.
此MIB模块包含两个标量以及一个表RADIUS Accounting Server表，该表为每个RADIUS服务器包含一行，客户机与之共享一个秘密。RADIUS Accounting Server表中的每个条目包括十五列，显示RADIUS客户端活动的视图。
This MIB imports from [RFC2578], [RFC2580], [RFC3411], and [RFC4001].
此MIB从[RFC2578]、[RFC2580]、[RFC3411]和[RFC4001]导入。
The deprecated table in this MIB is carried forward from RFC 2620 [RFC2620]. There are two conditions under which it MAY be desirable for managed entities to continue to support the deprecated table:
此MIB中不推荐使用的表从RFC 2620[RFC2620]结转。在两种情况下，托管实体可能需要继续支持不推荐使用的表：
1. The managed entity only supports IPv4 address formats.
1. 托管实体仅支持IPv4地址格式。
2. The managed entity supports both IPv4 and IPv6 address formats, and the deprecated table is supported for backwards compatibility with older management stations. This option SHOULD only be used when the IP addresses in the new table are in IPv4 format and can accurately be represented in both the new table and the deprecated table.
2. 受管实体支持IPv4和IPv6地址格式，不推荐使用的表支持与旧的管理站向后兼容。仅当新表中的IP地址为IPv4格式并且可以在新表和弃用表中准确表示时，才应使用此选项。
Managed entities SHOULD NOT instantiate row entries in the deprecated table, containing IPv4-only address objects, when the RADIUS accounting server address represented in such a table row is not an IPv4 address. Managed entities SHOULD NOT return inaccurate values of IP address or SNMP object access errors for IPv4-only address objects in otherwise populated tables. When row entries exist in both the deprecated IPv4-only table and the new IP-version-neutral table that describe the same RADIUS accounting server, the row indexes SHOULD be the same for the corresponding rows in each table, to facilitate correlation of these related rows by management applications.
当不推荐使用的表行中表示的RADIUS记帐服务器地址不是IPv4地址时，托管实体不应实例化该表中的行条目（仅包含IPv4地址对象）。对于以其他方式填充的表中仅IPv4地址对象，托管实体不应返回不准确的IP地址值或SNMP对象访问错误。当不推荐的仅IPv4表和描述同一RADIUS记帐服务器的新IP版本中立表中都存在行条目时，每个表中相应行的行索引应相同，以便于管理应用程序关联这些相关行。
RADIUS-ACC-CLIENT-MIB DEFINITIONS ::= BEGIN
RADIUS-ACC-CLIENT-MIB DEFINITIONS ::= BEGIN
IMPORTS MODULE-IDENTITY, OBJECT-TYPE, OBJECT-IDENTITY, Counter32, Integer32, Gauge32, IpAddress, TimeTicks, mib-2 FROM SNMPv2-SMI SnmpAdminString FROM SNMP-FRAMEWORK-MIB InetAddressType, InetAddress, InetPortNumber FROM INET-ADDRESS-MIB MODULE-COMPLIANCE, OBJECT-GROUP FROM SNMPv2-CONF;
从SNMPv2 SMI导入模块标识、对象类型、对象标识、计数器32、整数32、仪表32、IP地址、时间刻度、mib-2，从SNMP-FRAMEWORK-mib InetAddressType导入SNMPAdministring，从INET-ADDRESS-mib MODULE-COMPLIANCE导入InetAddress、InetPortNumber，从SNMPv2 CONF导入对象组；
radiusAccClientMIB MODULE-IDENTITY LAST-UPDATED "200608210000Z" -- 21 August 2006 ORGANIZATION "IETF RADIUS Extensions Working Group." CONTACT-INFO " Bernard Aboba Microsoft One Microsoft Way
radiusAccClientMIB模块标识最后更新“2006082100Z”-2006年8月21日组织“IETF RADIUS扩展工作组”。联系方式“Bernard Aboba Microsoft One Microsoft Way”
Redmond, WA 98052
US
Phone: +1 425 936 6605
EMail: bernarda@microsoft.com"
DESCRIPTION
"The MIB module for entities implementing the client
side of the Remote Authentication Dial-In User Service
(RADIUS) accounting protocol. Copyright (C) The
Internet Society (2006). This version of this MIB
module is part of RFC 4670; see the RFC itself for
full legal notices."
REVISION "200608210000Z" -- 21 August 2006
DESCRIPTION
"Revised version as published in RFC 4670.
This version obsoletes that of RFC 2620 by
deprecating the MIB table containing IPv4-only
address formats and defining a new table to add support
for version-neutral IP address formats. The remaining
MIB objects from RFC 2620 are carried forward into this
version."
REVISION "199906110000Z" -- 11 Jun 1999
DESCRIPTION "Initial version as published in RFC 2620."
::= { radiusAccounting 2 }
Redmond, WA 98052
US
Phone: +1 425 936 6605
EMail: bernarda@microsoft.com"
DESCRIPTION
"The MIB module for entities implementing the client
side of the Remote Authentication Dial-In User Service
(RADIUS) accounting protocol. Copyright (C) The
Internet Society (2006). This version of this MIB
module is part of RFC 4670; see the RFC itself for
full legal notices."
REVISION "200608210000Z" -- 21 August 2006
DESCRIPTION
"Revised version as published in RFC 4670.
This version obsoletes that of RFC 2620 by
deprecating the MIB table containing IPv4-only
address formats and defining a new table to add support
for version-neutral IP address formats. The remaining
MIB objects from RFC 2620 are carried forward into this
version."
REVISION "199906110000Z" -- 11 Jun 1999
DESCRIPTION "Initial version as published in RFC 2620."
::= { radiusAccounting 2 }
radiusMIB OBJECT-IDENTITY
STATUS current
DESCRIPTION
"The OID assigned to RADIUS MIB work by the IANA."
::= { mib-2 67 }
radiusMIB OBJECT-IDENTITY
STATUS current
DESCRIPTION
"The OID assigned to RADIUS MIB work by the IANA."
::= { mib-2 67 }
radiusAccounting OBJECT IDENTIFIER ::= {radiusMIB 2}
radiusAccounting OBJECT IDENTIFIER ::= {radiusMIB 2}
radiusAccClientMIBObjects OBJECT IDENTIFIER
::= { radiusAccClientMIB 1 }
radiusAccClientMIBObjects OBJECT IDENTIFIER
::= { radiusAccClientMIB 1 }
radiusAccClient OBJECT IDENTIFIER
::= { radiusAccClientMIBObjects 1 }
radiusAccClient OBJECT IDENTIFIER
::= { radiusAccClientMIBObjects 1 }
radiusAccClientInvalidServerAddresses OBJECT-TYPE
SYNTAX Counter32
UNITS "packets"
MAX-ACCESS read-only
STATUS current
DESCRIPTION
"The number of RADIUS Accounting-Response packets
received from unknown addresses."
::= { radiusAccClient 1 }
radiusAccClientInvalidServerAddresses OBJECT-TYPE
SYNTAX Counter32
UNITS "packets"
MAX-ACCESS read-only
STATUS current
DESCRIPTION
"The number of RADIUS Accounting-Response packets
received from unknown addresses."
::= { radiusAccClient 1 }
radiusAccClientIdentifier OBJECT-TYPE
SYNTAX SnmpAdminString
MAX-ACCESS read-only
STATUS current
DESCRIPTION
"The NAS-Identifier of the RADIUS accounting client.
This is not necessarily the same as sysName in MIB
II."
REFERENCE "RFC 2865 section 5.32"
::= { radiusAccClient 2 }
radiusAccClientIdentifier OBJECT-TYPE
SYNTAX SnmpAdminString
MAX-ACCESS read-only
STATUS current
DESCRIPTION
"The NAS-Identifier of the RADIUS accounting client.
This is not necessarily the same as sysName in MIB
II."
REFERENCE "RFC 2865 section 5.32"
::= { radiusAccClient 2 }
radiusAccServerTable OBJECT-TYPE
SYNTAX SEQUENCE OF RadiusAccServerEntry
MAX-ACCESS not-accessible
STATUS deprecated
DESCRIPTION
"The (conceptual) table listing the RADIUS accounting
servers with which the client shares a secret."
::= { radiusAccClient 3 }
radiusAccServerTable OBJECT-TYPE
SYNTAX SEQUENCE OF RadiusAccServerEntry
MAX-ACCESS not-accessible
STATUS deprecated
DESCRIPTION
"The (conceptual) table listing the RADIUS accounting
servers with which the client shares a secret."
::= { radiusAccClient 3 }
radiusAccServerEntry OBJECT-TYPE
SYNTAX RadiusAccServerEntry
MAX-ACCESS not-accessible
STATUS deprecated
DESCRIPTION
"An entry (conceptual row) representing a RADIUS
accounting server with which the client shares a
secret."
INDEX { radiusAccServerIndex }
::= { radiusAccServerTable 1 }
radiusAccServerEntry OBJECT-TYPE
SYNTAX RadiusAccServerEntry
MAX-ACCESS not-accessible
STATUS deprecated
DESCRIPTION
"An entry (conceptual row) representing a RADIUS
accounting server with which the client shares a
secret."
INDEX { radiusAccServerIndex }
::= { radiusAccServerTable 1 }
RadiusAccServerEntry ::= SEQUENCE {
radiusAccServerIndex Integer32,
radiusAccServerAddress IpAddress,
radiusAccClientServerPortNumber Integer32,
radiusAccClientRoundTripTime TimeTicks,
radiusAccClientRequests Counter32,
radiusAccClientRetransmissions Counter32,
radiusAccClientResponses Counter32,
radiusAccClientMalformedResponses Counter32,
radiusAccClientBadAuthenticators Counter32,
radiusAccClientPendingRequests Gauge32,
radiusAccClientTimeouts Counter32,
radiusAccClientUnknownTypes Counter32,
radiusAccClientPacketsDropped Counter32
}
RadiusAccServerEntry ::= SEQUENCE {
radiusAccServerIndex Integer32,
radiusAccServerAddress IpAddress,
radiusAccClientServerPortNumber Integer32,
radiusAccClientRoundTripTime TimeTicks,
radiusAccClientRequests Counter32,
radiusAccClientRetransmissions Counter32,
radiusAccClientResponses Counter32,
radiusAccClientMalformedResponses Counter32,
radiusAccClientBadAuthenticators Counter32,
radiusAccClientPendingRequests Gauge32,
radiusAccClientTimeouts Counter32,
radiusAccClientUnknownTypes Counter32,
radiusAccClientPacketsDropped Counter32
}
radiusAccServerIndex OBJECT-TYPE
SYNTAX Integer32 (1..2147483647)
MAX-ACCESS not-accessible
STATUS deprecated
DESCRIPTION
"A number uniquely identifying each RADIUS
Accounting server with which this client
communicates."
::= { radiusAccServerEntry 1 }
radiusAccServerIndex OBJECT-TYPE
SYNTAX Integer32 (1..2147483647)
MAX-ACCESS not-accessible
STATUS deprecated
DESCRIPTION
"A number uniquely identifying each RADIUS
Accounting server with which this client
communicates."
::= { radiusAccServerEntry 1 }
radiusAccServerAddress OBJECT-TYPE
SYNTAX IpAddress
MAX-ACCESS read-only
STATUS deprecated
DESCRIPTION
"The IP address of the RADIUS accounting server
referred to in this table entry."
::= { radiusAccServerEntry 2 }
radiusAccServerAddress OBJECT-TYPE
SYNTAX IpAddress
MAX-ACCESS read-only
STATUS deprecated
DESCRIPTION
"The IP address of the RADIUS accounting server
referred to in this table entry."
::= { radiusAccServerEntry 2 }
radiusAccClientServerPortNumber OBJECT-TYPE
SYNTAX Integer32 (0..65535)
MAX-ACCESS read-only
STATUS deprecated
DESCRIPTION
"The UDP port the client is using to send requests to
this server."
REFERENCE "RFC 2866 section 3"
::= { radiusAccServerEntry 3 }
radiusAccClientServerPortNumber OBJECT-TYPE
SYNTAX Integer32 (0..65535)
MAX-ACCESS read-only
STATUS deprecated
DESCRIPTION
"The UDP port the client is using to send requests to
this server."
REFERENCE "RFC 2866 section 3"
::= { radiusAccServerEntry 3 }
radiusAccClientRoundTripTime OBJECT-TYPE
SYNTAX TimeTicks
MAX-ACCESS read-only
STATUS deprecated
DESCRIPTION
"The time interval between the most recent
Accounting-Response and the Accounting-Request that
matched it from this RADIUS accounting server."
REFERENCE "RFC 2866 section 2"
::= { radiusAccServerEntry 4 }
radiusAccClientRoundTripTime OBJECT-TYPE
SYNTAX TimeTicks
MAX-ACCESS read-only
STATUS deprecated
DESCRIPTION
"The time interval between the most recent
Accounting-Response and the Accounting-Request that
matched it from this RADIUS accounting server."
REFERENCE "RFC 2866 section 2"
::= { radiusAccServerEntry 4 }
-- Request/Response statistics
--
-- Requests = Responses + PendingRequests + ClientTimeouts
--
-- Responses - MalformedResponses - BadAuthenticators -
-- UnknownTypes - PacketsDropped = Successfully received
-- Request/Response statistics
--
-- Requests = Responses + PendingRequests + ClientTimeouts
--
-- Responses - MalformedResponses - BadAuthenticators -
-- UnknownTypes - PacketsDropped = Successfully received
radiusAccClientRequests OBJECT-TYPE
SYNTAX Counter32
UNITS "packets"
MAX-ACCESS read-only
STATUS deprecated
DESCRIPTION
"The number of RADIUS Accounting-Request packets
sent. This does not include retransmissions."
REFERENCE "RFC 2866 section 4.1"
::= { radiusAccServerEntry 5 }
radiusAccClientRequests OBJECT-TYPE
SYNTAX Counter32
UNITS "packets"
MAX-ACCESS read-only
STATUS deprecated
DESCRIPTION
"The number of RADIUS Accounting-Request packets
sent. This does not include retransmissions."
REFERENCE "RFC 2866 section 4.1"
::= { radiusAccServerEntry 5 }
radiusAccClientRetransmissions OBJECT-TYPE
SYNTAX Counter32
UNITS "packets"
MAX-ACCESS read-only
STATUS deprecated
DESCRIPTION
"The number of RADIUS Accounting-Request packets
retransmitted to this RADIUS accounting server.
Retransmissions include retries where the
Identifier and Acct-Delay have been updated, as
well as those in which they remain the same."
REFERENCE "RFC 2866 section 2"
::= { radiusAccServerEntry 6 }
radiusAccClientRetransmissions OBJECT-TYPE
SYNTAX Counter32
UNITS "packets"
MAX-ACCESS read-only
STATUS deprecated
DESCRIPTION
"The number of RADIUS Accounting-Request packets
retransmitted to this RADIUS accounting server.
Retransmissions include retries where the
Identifier and Acct-Delay have been updated, as
well as those in which they remain the same."
REFERENCE "RFC 2866 section 2"
::= { radiusAccServerEntry 6 }
radiusAccClientResponses OBJECT-TYPE
SYNTAX Counter32
UNITS "packets"
MAX-ACCESS read-only
STATUS deprecated
DESCRIPTION
"The number of RADIUS packets received on the
accounting port from this server."
REFERENCE "RFC 2866 section 4.2"
::= { radiusAccServerEntry 7 }
radiusAccClientResponses OBJECT-TYPE
SYNTAX Counter32
UNITS "packets"
MAX-ACCESS read-only
STATUS deprecated
DESCRIPTION
"The number of RADIUS packets received on the
accounting port from this server."
REFERENCE "RFC 2866 section 4.2"
::= { radiusAccServerEntry 7 }
radiusAccClientMalformedResponses OBJECT-TYPE SYNTAX Counter32 UNITS "packets" MAX-ACCESS read-only STATUS deprecated DESCRIPTION "The number of malformed RADIUS Accounting-Response packets received from this server. Malformed packets include packets with an invalid length. Bad authenticators and unknown types are not included as malformed accounting responses." REFERENCE "RFC 2866 section 3"
RadiusaccClientMalformedResponse对象类型语法计数器32个单位“数据包”最大访问只读状态不推荐的说明“从此服务器接收的格式错误的RADIUS记帐响应数据包数。格式错误的数据包包括长度无效的数据包。错误的验证器和未知类型不包括在格式错误的会计响应中。“参考“RFC 2866第3节”
::= { radiusAccServerEntry 8 }
::= { radiusAccServerEntry 8 }
radiusAccClientBadAuthenticators OBJECT-TYPE
SYNTAX Counter32
UNITS "packets"
MAX-ACCESS read-only
STATUS deprecated
DESCRIPTION
"The number of RADIUS Accounting-Response
packets that contained invalid authenticators
received from this server."
REFERENCE "RFC 2866 section 3"
::= { radiusAccServerEntry 9 }
radiusAccClientBadAuthenticators OBJECT-TYPE
SYNTAX Counter32
UNITS "packets"
MAX-ACCESS read-only
STATUS deprecated
DESCRIPTION
"The number of RADIUS Accounting-Response
packets that contained invalid authenticators
received from this server."
REFERENCE "RFC 2866 section 3"
::= { radiusAccServerEntry 9 }
radiusAccClientPendingRequests OBJECT-TYPE
SYNTAX Gauge32
UNITS "packets"
MAX-ACCESS read-only
STATUS deprecated
DESCRIPTION
"The number of RADIUS Accounting-Request packets
sent to this server that have not yet timed out or
received a response. This variable is incremented
when an Accounting-Request is sent and decremented
due to receipt of an Accounting-Response, a timeout,
or a retransmission."
REFERENCE "RFC 2866 section 2"
::= { radiusAccServerEntry 10 }
radiusAccClientPendingRequests OBJECT-TYPE
SYNTAX Gauge32
UNITS "packets"
MAX-ACCESS read-only
STATUS deprecated
DESCRIPTION
"The number of RADIUS Accounting-Request packets
sent to this server that have not yet timed out or
received a response. This variable is incremented
when an Accounting-Request is sent and decremented
due to receipt of an Accounting-Response, a timeout,
or a retransmission."
REFERENCE "RFC 2866 section 2"
::= { radiusAccServerEntry 10 }
radiusAccClientTimeouts OBJECT-TYPE
SYNTAX Counter32
UNITS "timeouts"
MAX-ACCESS read-only
STATUS deprecated
DESCRIPTION
"The number of accounting timeouts to this server.
After a timeout, the client may retry to the same
server, send to a different server, or give up.
A retry to the same server is counted as a
retransmit as well as a timeout. A send to a different
server is counted as an Accounting-Request as well as
a timeout."
REFERENCE "RFC 2866 section 2"
::= { radiusAccServerEntry 11 }
radiusAccClientTimeouts OBJECT-TYPE
SYNTAX Counter32
UNITS "timeouts"
MAX-ACCESS read-only
STATUS deprecated
DESCRIPTION
"The number of accounting timeouts to this server.
After a timeout, the client may retry to the same
server, send to a different server, or give up.
A retry to the same server is counted as a
retransmit as well as a timeout. A send to a different
server is counted as an Accounting-Request as well as
a timeout."
REFERENCE "RFC 2866 section 2"
::= { radiusAccServerEntry 11 }
radiusAccClientUnknownTypes OBJECT-TYPE SYNTAX Counter32 UNITS "packets"
radiusAccClientUnknownTypes对象类型语法计数器32个单位“数据包”
MAX-ACCESS read-only
STATUS deprecated
DESCRIPTION
"The number of RADIUS packets of unknown type that
were received from this server on the accounting port."
REFERENCE "RFC 2866 section 4"
::= { radiusAccServerEntry 12 }
MAX-ACCESS read-only
STATUS deprecated
DESCRIPTION
"The number of RADIUS packets of unknown type that
were received from this server on the accounting port."
REFERENCE "RFC 2866 section 4"
::= { radiusAccServerEntry 12 }
radiusAccClientPacketsDropped OBJECT-TYPE
SYNTAX Counter32
UNITS "packets"
MAX-ACCESS read-only
STATUS deprecated
DESCRIPTION
"The number of RADIUS packets that were received from
this server on the accounting port and dropped for some
other reason."
::= { radiusAccServerEntry 13 }
radiusAccClientPacketsDropped OBJECT-TYPE
SYNTAX Counter32
UNITS "packets"
MAX-ACCESS read-only
STATUS deprecated
DESCRIPTION
"The number of RADIUS packets that were received from
this server on the accounting port and dropped for some
other reason."
::= { radiusAccServerEntry 13 }
-- New MIB objects added in this revision
--此修订版中添加的新MIB对象
radiusAccServerExtTable OBJECT-TYPE
SYNTAX SEQUENCE OF RadiusAccServerExtEntry
MAX-ACCESS not-accessible
STATUS current
DESCRIPTION
"The (conceptual) table listing the RADIUS accounting
servers with which the client shares a secret."
::= { radiusAccClient 4 }
radiusAccServerExtTable OBJECT-TYPE
SYNTAX SEQUENCE OF RadiusAccServerExtEntry
MAX-ACCESS not-accessible
STATUS current
DESCRIPTION
"The (conceptual) table listing the RADIUS accounting
servers with which the client shares a secret."
::= { radiusAccClient 4 }
radiusAccServerExtEntry OBJECT-TYPE
SYNTAX RadiusAccServerExtEntry
MAX-ACCESS not-accessible
STATUS current
DESCRIPTION
"An entry (conceptual row) representing a RADIUS
accounting server with which the client shares a
secret."
INDEX { radiusAccServerExtIndex }
::= { radiusAccServerExtTable 1 }
radiusAccServerExtEntry OBJECT-TYPE
SYNTAX RadiusAccServerExtEntry
MAX-ACCESS not-accessible
STATUS current
DESCRIPTION
"An entry (conceptual row) representing a RADIUS
accounting server with which the client shares a
secret."
INDEX { radiusAccServerExtIndex }
::= { radiusAccServerExtTable 1 }
RadiusAccServerExtEntry ::= SEQUENCE {
radiusAccServerExtIndex Integer32,
radiusAccServerInetAddressType InetAddressType,
radiusAccServerInetAddress InetAddress,
radiusAccClientServerInetPortNumber InetPortNumber,
radiusAccClientExtRoundTripTime TimeTicks,
RadiusAccServerExtEntry ::= SEQUENCE {
radiusAccServerExtIndex Integer32,
radiusAccServerInetAddressType InetAddressType,
radiusAccServerInetAddress InetAddress,
radiusAccClientServerInetPortNumber InetPortNumber,
radiusAccClientExtRoundTripTime TimeTicks,
radiusAccClientExtRequests Counter32, radiusAccClientExtRetransmissions Counter32, radiusAccClientExtResponses Counter32, radiusAccClientExtMalformedResponses Counter32, radiusAccClientExtBadAuthenticators Counter32, radiusAccClientExtPendingRequests Gauge32, radiusAccClientExtTimeouts Counter32, radiusAccClientExtUnknownTypes Counter32, radiusAccClientExtPacketsDropped Counter32, radiusAccClientCounterDiscontinuity TimeTicks }
RadiusacClientExtRequests计数器32，RadiusacClientExtRetransmissions计数器32，RadiusacClientExtResponses计数器32，RadiusacClientExtBadAuthenticators计数器32，RadiusacClientExtPendingRequests量表32，RadiusacClientExtTimeouts计数器32，RadiusacClientExtKnowntPes计数器32，radiusAccClientExtPacketsDropped计数器32，RADIUSACCCLIENT计数器不连续时间标记}
radiusAccServerExtIndex OBJECT-TYPE
SYNTAX Integer32 (1..2147483647)
MAX-ACCESS not-accessible
STATUS current
DESCRIPTION
"A number uniquely identifying each RADIUS
Accounting server with which this client
communicates."
::= { radiusAccServerExtEntry 1 }
radiusAccServerExtIndex OBJECT-TYPE
SYNTAX Integer32 (1..2147483647)
MAX-ACCESS not-accessible
STATUS current
DESCRIPTION
"A number uniquely identifying each RADIUS
Accounting server with which this client
communicates."
::= { radiusAccServerExtEntry 1 }
radiusAccServerInetAddressType OBJECT-TYPE
SYNTAX InetAddressType
MAX-ACCESS read-only
STATUS current
DESCRIPTION
"The type of address format used for the
radiusAccServerInetAddress object."
::= { radiusAccServerExtEntry 2 }
radiusAccServerInetAddressType OBJECT-TYPE
SYNTAX InetAddressType
MAX-ACCESS read-only
STATUS current
DESCRIPTION
"The type of address format used for the
radiusAccServerInetAddress object."
::= { radiusAccServerExtEntry 2 }
radiusAccServerInetAddress OBJECT-TYPE
SYNTAX InetAddress
MAX-ACCESS read-only
STATUS current
DESCRIPTION
"The IP address of the RADIUS accounting
server referred to in this table entry, using
the version-neutral IP address format."
::= { radiusAccServerExtEntry 3 }
radiusAccServerInetAddress OBJECT-TYPE
SYNTAX InetAddress
MAX-ACCESS read-only
STATUS current
DESCRIPTION
"The IP address of the RADIUS accounting
server referred to in this table entry, using
the version-neutral IP address format."
::= { radiusAccServerExtEntry 3 }
radiusAccClientServerInetPortNumber OBJECT-TYPE SYNTAX InetPortNumber ( 1..65535 ) MAX-ACCESS read-only STATUS current DESCRIPTION
radiusAccClientServerInetPortNumber对象类型语法InetPortNumber（1..65535）最大访问只读状态当前说明
"The UDP port the client is using to send requests
to this accounting server. The value zero (0) is
invalid."
REFERENCE "RFC 2866 section 3"
::= { radiusAccServerExtEntry 4 }
"The UDP port the client is using to send requests
to this accounting server. The value zero (0) is
invalid."
REFERENCE "RFC 2866 section 3"
::= { radiusAccServerExtEntry 4 }
radiusAccClientExtRoundTripTime OBJECT-TYPE
SYNTAX TimeTicks
MAX-ACCESS read-only
STATUS current
DESCRIPTION
"The time interval between the most recent
Accounting-Response and the Accounting-Request that
matched it from this RADIUS accounting server."
REFERENCE "RFC 2866 section 2"
::= { radiusAccServerExtEntry 5 }
radiusAccClientExtRoundTripTime OBJECT-TYPE
SYNTAX TimeTicks
MAX-ACCESS read-only
STATUS current
DESCRIPTION
"The time interval between the most recent
Accounting-Response and the Accounting-Request that
matched it from this RADIUS accounting server."
REFERENCE "RFC 2866 section 2"
::= { radiusAccServerExtEntry 5 }
-- Request/Response statistics
--
-- Requests = Responses + PendingRequests + ClientTimeouts
--
-- Responses - MalformedResponses - BadAuthenticators -
-- UnknownTypes - PacketsDropped = Successfully received
-- Request/Response statistics
--
-- Requests = Responses + PendingRequests + ClientTimeouts
--
-- Responses - MalformedResponses - BadAuthenticators -
-- UnknownTypes - PacketsDropped = Successfully received
radiusAccClientExtRequests OBJECT-TYPE
SYNTAX Counter32
UNITS "packets"
MAX-ACCESS read-only
STATUS current
DESCRIPTION
"The number of RADIUS Accounting-Request packets
sent. This does not include retransmissions.
This counter may experience a discontinuity when the
RADIUS Accounting Client module within the managed
entity is reinitialized, as indicated by the current
value of radiusAccClientCounterDiscontinuity."
REFERENCE "RFC 2866 section 4.1"
::= { radiusAccServerExtEntry 6 }
radiusAccClientExtRequests OBJECT-TYPE
SYNTAX Counter32
UNITS "packets"
MAX-ACCESS read-only
STATUS current
DESCRIPTION
"The number of RADIUS Accounting-Request packets
sent. This does not include retransmissions.
This counter may experience a discontinuity when the
RADIUS Accounting Client module within the managed
entity is reinitialized, as indicated by the current
value of radiusAccClientCounterDiscontinuity."
REFERENCE "RFC 2866 section 4.1"
::= { radiusAccServerExtEntry 6 }
radiusAccClientExtRetransmissions OBJECT-TYPE SYNTAX Counter32 UNITS "packets" MAX-ACCESS read-only STATUS current DESCRIPTION "The number of RADIUS Accounting-Request packets retransmitted to this RADIUS accounting server.
radiusAccClientExtRetransmissions对象类型语法计数器32个单位“数据包”最大访问只读状态当前描述“重新传输到此RADIUS记帐服务器的RADIUS记帐请求数据包数。
Retransmissions include retries where the
Identifier and Acct-Delay have been updated, as
well as those in which they remain the same.
This counter may experience a discontinuity when the
RADIUS Accounting Client module within the managed
entity is reinitialized, as indicated by the current
value of radiusAccClientCounterDiscontinuity."
REFERENCE "RFC 2866 section 2"
::= { radiusAccServerExtEntry 7 }
Retransmissions include retries where the
Identifier and Acct-Delay have been updated, as
well as those in which they remain the same.
This counter may experience a discontinuity when the
RADIUS Accounting Client module within the managed
entity is reinitialized, as indicated by the current
value of radiusAccClientCounterDiscontinuity."
REFERENCE "RFC 2866 section 2"
::= { radiusAccServerExtEntry 7 }
radiusAccClientExtResponses OBJECT-TYPE
SYNTAX Counter32
UNITS "packets"
MAX-ACCESS read-only
STATUS current
DESCRIPTION
"The number of RADIUS packets received on the
accounting port from this server. This counter
may experience a discontinuity when the RADIUS
Accounting Client module within the managed entity is
reinitialized, as indicated by the current value of
radiusAccClientCounterDiscontinuity."
REFERENCE "RFC 2866 section 4.2"
::= { radiusAccServerExtEntry 8 }
radiusAccClientExtResponses OBJECT-TYPE
SYNTAX Counter32
UNITS "packets"
MAX-ACCESS read-only
STATUS current
DESCRIPTION
"The number of RADIUS packets received on the
accounting port from this server. This counter
may experience a discontinuity when the RADIUS
Accounting Client module within the managed entity is
reinitialized, as indicated by the current value of
radiusAccClientCounterDiscontinuity."
REFERENCE "RFC 2866 section 4.2"
::= { radiusAccServerExtEntry 8 }
radiusAccClientExtMalformedResponses OBJECT-TYPE
SYNTAX Counter32
UNITS "packets"
MAX-ACCESS read-only
STATUS current
DESCRIPTION
"The number of malformed RADIUS Accounting-Response
packets received from this server. Malformed packets
include packets with an invalid length. Bad
authenticators and unknown types are not included as
malformed accounting responses. This counter may
experience a discontinuity when the RADIUS Accounting
Client module within the managed entity is
reinitialized, as indicated by the current
value of radiusAccClientCounterDiscontinuity."
REFERENCE "RFC 2866 section 3"
::= { radiusAccServerExtEntry 9 }
radiusAccClientExtMalformedResponses OBJECT-TYPE
SYNTAX Counter32
UNITS "packets"
MAX-ACCESS read-only
STATUS current
DESCRIPTION
"The number of malformed RADIUS Accounting-Response
packets received from this server. Malformed packets
include packets with an invalid length. Bad
authenticators and unknown types are not included as
malformed accounting responses. This counter may
experience a discontinuity when the RADIUS Accounting
Client module within the managed entity is
reinitialized, as indicated by the current
value of radiusAccClientCounterDiscontinuity."
REFERENCE "RFC 2866 section 3"
::= { radiusAccServerExtEntry 9 }
radiusAccClientExtBadAuthenticators OBJECT-TYPE SYNTAX Counter32 UNITS "packets" MAX-ACCESS read-only STATUS current
radiusAccClientExtBadAuthenticators对象类型语法计数器32个单元“数据包”最大访问只读状态当前
DESCRIPTION
"The number of RADIUS Accounting-Response
packets that contained invalid authenticators
received from this server. This counter may
experience a discontinuity when the RADIUS
Accounting Client module within the managed
entity is reinitialized, as indicated by the
current value of
radiusAccClientCounterDiscontinuity."
REFERENCE "RFC 2866 section 3"
::= { radiusAccServerExtEntry 10 }
DESCRIPTION
"The number of RADIUS Accounting-Response
packets that contained invalid authenticators
received from this server. This counter may
experience a discontinuity when the RADIUS
Accounting Client module within the managed
entity is reinitialized, as indicated by the
current value of
radiusAccClientCounterDiscontinuity."
REFERENCE "RFC 2866 section 3"
::= { radiusAccServerExtEntry 10 }
radiusAccClientExtPendingRequests OBJECT-TYPE
SYNTAX Gauge32
UNITS "packets"
MAX-ACCESS read-only
STATUS current
DESCRIPTION
"The number of RADIUS Accounting-Request packets
sent to this server that have not yet timed out or
received a response. This variable is incremented
when an Accounting-Request is sent and decremented
due to receipt of an Accounting-Response, a timeout,
or a retransmission. This counter may experience a
discontinuity when the RADIUS Accounting Client module
within the managed entity is reinitialized, as
indicated by the current value of
radiusAccClientCounterDiscontinuity."
REFERENCE "RFC 2866 section 2"
::= { radiusAccServerExtEntry 11 }
radiusAccClientExtPendingRequests OBJECT-TYPE
SYNTAX Gauge32
UNITS "packets"
MAX-ACCESS read-only
STATUS current
DESCRIPTION
"The number of RADIUS Accounting-Request packets
sent to this server that have not yet timed out or
received a response. This variable is incremented
when an Accounting-Request is sent and decremented
due to receipt of an Accounting-Response, a timeout,
or a retransmission. This counter may experience a
discontinuity when the RADIUS Accounting Client module
within the managed entity is reinitialized, as
indicated by the current value of
radiusAccClientCounterDiscontinuity."
REFERENCE "RFC 2866 section 2"
::= { radiusAccServerExtEntry 11 }
radiusAccClientExtTimeouts OBJECT-TYPE SYNTAX Counter32 UNITS "timeouts" MAX-ACCESS read-only STATUS current DESCRIPTION "The number of accounting timeouts to this server. After a timeout, the client may retry to the same server, send to a different server, or give up. A retry to the same server is counted as a retransmit as well as a timeout. A send to a different server is counted as an Accounting-Request as well as a timeout. This counter may experience a discontinuity when the RADIUS Accounting Client module within the managed entity is reinitialized, as indicated by the current value of radiusAccClientCounterDiscontinuity." REFERENCE "RFC 2866 section 2"
radiusAccClientExtTimeouts对象类型语法计数器32个单位“超时”最大访问只读状态当前说明“此服务器的记帐超时数。超时后，客户端可能会重试到同一服务器、发送到其他服务器或放弃。对同一服务器的重试被视为重新传输和超时。发送到另一台服务器被视为记帐请求和超时。当托管实体内的RADIUS Accounting Client模块重新初始化时，该计数器可能会出现中断，如RADIUSAcclientCounterIntercontinuction的当前值所示。“参考“RFC 2866第2节”
::= { radiusAccServerExtEntry 12 }
::= { radiusAccServerExtEntry 12 }
radiusAccClientExtUnknownTypes OBJECT-TYPE
SYNTAX Counter32
UNITS "packets"
MAX-ACCESS read-only
STATUS current
DESCRIPTION
"The number of RADIUS packets of unknown type that
were received from this server on the accounting port.
This counter may experience a discontinuity when the
RADIUS Accounting Client module within the managed
entity is reinitialized, as indicated by the current
value of radiusAccClientCounterDiscontinuity."
REFERENCE "RFC 2866 section 4"
::= { radiusAccServerExtEntry 13 }
radiusAccClientExtUnknownTypes OBJECT-TYPE
SYNTAX Counter32
UNITS "packets"
MAX-ACCESS read-only
STATUS current
DESCRIPTION
"The number of RADIUS packets of unknown type that
were received from this server on the accounting port.
This counter may experience a discontinuity when the
RADIUS Accounting Client module within the managed
entity is reinitialized, as indicated by the current
value of radiusAccClientCounterDiscontinuity."
REFERENCE "RFC 2866 section 4"
::= { radiusAccServerExtEntry 13 }
radiusAccClientExtPacketsDropped OBJECT-TYPE
SYNTAX Counter32
UNITS "packets"
MAX-ACCESS read-only
STATUS current
DESCRIPTION
"The number of RADIUS packets that were received from
this server on the accounting port and dropped for some
other reason. This counter may experience a
discontinuity when the RADIUS Accounting Client module
within the managed entity is reinitialized, as indicated
by the current value of
radiusAccClientCounterDiscontinuity."
::= { radiusAccServerExtEntry 14 }
radiusAccClientExtPacketsDropped OBJECT-TYPE
SYNTAX Counter32
UNITS "packets"
MAX-ACCESS read-only
STATUS current
DESCRIPTION
"The number of RADIUS packets that were received from
this server on the accounting port and dropped for some
other reason. This counter may experience a
discontinuity when the RADIUS Accounting Client module
within the managed entity is reinitialized, as indicated
by the current value of
radiusAccClientCounterDiscontinuity."
::= { radiusAccServerExtEntry 14 }
radiusAccClientCounterDiscontinuity OBJECT-TYPE
SYNTAX TimeTicks
UNITS "centiseconds"
MAX-ACCESS read-only
STATUS current
DESCRIPTION
"The number of centiseconds since the last
discontinuity in the RADIUS Accounting Client
counters. A discontinuity may be the result of a
reinitialization of the RADIUS Accounting Client
module within the managed entity."
::= { radiusAccServerExtEntry 15 }
radiusAccClientCounterDiscontinuity OBJECT-TYPE
SYNTAX TimeTicks
UNITS "centiseconds"
MAX-ACCESS read-only
STATUS current
DESCRIPTION
"The number of centiseconds since the last
discontinuity in the RADIUS Accounting Client
counters. A discontinuity may be the result of a
reinitialization of the RADIUS Accounting Client
module within the managed entity."
::= { radiusAccServerExtEntry 15 }
-- conformance information
--一致性信息
radiusAccClientMIBConformance OBJECT IDENTIFIER
::= { radiusAccClientMIB 2 }
radiusAccClientMIBConformance OBJECT IDENTIFIER
::= { radiusAccClientMIB 2 }
radiusAccClientMIBCompliances OBJECT IDENTIFIER
::= { radiusAccClientMIBConformance 1 }
radiusAccClientMIBCompliances OBJECT IDENTIFIER
::= { radiusAccClientMIBConformance 1 }
radiusAccClientMIBGroups OBJECT IDENTIFIER
::= { radiusAccClientMIBConformance 2 }
radiusAccClientMIBGroups OBJECT IDENTIFIER
::= { radiusAccClientMIBConformance 2 }
-- units of conformance
--一致性单位
radiusAccClientMIBCompliance MODULE-COMPLIANCE STATUS deprecated DESCRIPTION "The compliance statement for accounting clients implementing the RADIUS Accounting Client MIB. Implementation of this module is for IPv4-only entities, or for backwards compatibility use with entities that support both IPv4 and IPv6." MODULE -- this module MANDATORY-GROUPS { radiusAccClientMIBGroup }
RADIUSACCCLIENTMIB COMPLIANCE MODULE-COMPLIANCE STATUS不推荐使用说明“用于实现RADIUS记帐客户端MIB的记帐客户端的符合性声明。此模块的实现仅适用于IPv4实体，或用于与同时支持IPv4和IPv6的实体的向后兼容性使用。”MODULE--此模块是必需的-GROUPS{radiusAccClientMIBGroup}
::= { radiusAccClientMIBCompliances 1 }
::= { radiusAccClientMIBCompliances 1 }
radiusAccClientExtMIBCompliance MODULE-COMPLIANCE STATUS current DESCRIPTION "The compliance statement for accounting clients implementing the RADIUS Accounting Client IPv6 Extensions MIB. Implementation of this module is for entities that support IPv6, or support IPv4 and IPv6." MODULE -- this module MANDATORY-GROUPS { radiusAccClientExtMIBGroup }
RADIUSACCCLIENTEXTMIB COMPLIANCE MODULE-COMPLIANCE STATUS current DESCRIPTION“用于实现RADIUS核算客户端IPv6扩展MIB的核算客户端的符合性声明。此模块的实现适用于支持IPv6或支持IPv4和IPv6的实体。”模块--此模块为必填项-组{RADIUSACCCLIENTEXTMIBROUP}
OBJECT radiusAccServerInetAddressType SYNTAX InetAddressType { ipv4(1), ipv6(2) } DESCRIPTION "An implementation is only required to support IPv4 and globally unique IPv6 addresses."
OBJECT radiusAccServerInetAddressType语法InetAddressType{ipv4（1），ipv6（2）}说明“仅需要实现来支持ipv4和全局唯一的ipv6地址。”
OBJECT radiusAccServerInetAddress SYNTAX InetAddress ( SIZE (4|16) ) DESCRIPTION
对象半径accserverinetaddress语法InetAddress（大小（4 | 16））说明
"An implementation is only required to support IPv4 and globally unique IPv6 addresses."
“仅支持IPv4和全局唯一IPv6地址时才需要实现。”
::= { radiusAccClientMIBCompliances 2 }
::= { radiusAccClientMIBCompliances 2 }
-- units of conformance
--一致性单位
radiusAccClientMIBGroup OBJECT-GROUP
OBJECTS { radiusAccClientIdentifier,
radiusAccClientInvalidServerAddresses,
radiusAccServerAddress,
radiusAccClientServerPortNumber,
radiusAccClientRoundTripTime,
radiusAccClientRequests,
radiusAccClientRetransmissions,
radiusAccClientResponses,
radiusAccClientMalformedResponses,
radiusAccClientBadAuthenticators,
radiusAccClientPendingRequests,
radiusAccClientTimeouts,
radiusAccClientUnknownTypes,
radiusAccClientPacketsDropped
}
STATUS deprecated
DESCRIPTION
"The basic collection of objects providing management of
RADIUS Accounting Clients."
::= { radiusAccClientMIBGroups 1 }
radiusAccClientMIBGroup OBJECT-GROUP
OBJECTS { radiusAccClientIdentifier,
radiusAccClientInvalidServerAddresses,
radiusAccServerAddress,
radiusAccClientServerPortNumber,
radiusAccClientRoundTripTime,
radiusAccClientRequests,
radiusAccClientRetransmissions,
radiusAccClientResponses,
radiusAccClientMalformedResponses,
radiusAccClientBadAuthenticators,
radiusAccClientPendingRequests,
radiusAccClientTimeouts,
radiusAccClientUnknownTypes,
radiusAccClientPacketsDropped
}
STATUS deprecated
DESCRIPTION
"The basic collection of objects providing management of
RADIUS Accounting Clients."
::= { radiusAccClientMIBGroups 1 }
radiusAccClientExtMIBGroup OBJECT-GROUP
OBJECTS { radiusAccClientIdentifier,
radiusAccClientInvalidServerAddresses,
radiusAccServerInetAddressType,
radiusAccServerInetAddress,
radiusAccClientServerInetPortNumber,
radiusAccClientExtRoundTripTime,
radiusAccClientExtRequests,
radiusAccClientExtRetransmissions,
radiusAccClientExtResponses,
radiusAccClientExtMalformedResponses,
radiusAccClientExtBadAuthenticators,
radiusAccClientExtPendingRequests,
radiusAccClientExtTimeouts,
radiusAccClientExtUnknownTypes,
radiusAccClientExtPacketsDropped,
radiusAccClientCounterDiscontinuity
radiusAccClientExtMIBGroup OBJECT-GROUP
OBJECTS { radiusAccClientIdentifier,
radiusAccClientInvalidServerAddresses,
radiusAccServerInetAddressType,
radiusAccServerInetAddress,
radiusAccClientServerInetPortNumber,
radiusAccClientExtRoundTripTime,
radiusAccClientExtRequests,
radiusAccClientExtRetransmissions,
radiusAccClientExtResponses,
radiusAccClientExtMalformedResponses,
radiusAccClientExtBadAuthenticators,
radiusAccClientExtPendingRequests,
radiusAccClientExtTimeouts,
radiusAccClientExtUnknownTypes,
radiusAccClientExtPacketsDropped,
radiusAccClientCounterDiscontinuity
}
STATUS current
DESCRIPTION
"The basic collection of objects providing management of
RADIUS Accounting Clients."
::= { radiusAccClientMIBGroups 2 }
}
STATUS current
DESCRIPTION
"The basic collection of objects providing management of
RADIUS Accounting Clients."
::= { radiusAccClientMIBGroups 2 }
END
终止
There are no management objects defined in this MIB that have a MAX-ACCESS clause of read-write and/or read-create. So, if this MIB is implemented correctly, then there is no risk that an intruder can alter or create any management objects of this MIB via direct SNMP SET operations.
此MIB中未定义具有读写和/或读创建MAX-ACCESS子句的管理对象。因此，如果此MIB正确实现，则入侵者不会通过直接的SNMP集操作更改或创建此MIB的任何管理对象。
There are a number of managed objects in this MIB that may contain sensitive information. These are:
此MIB中有许多托管对象可能包含敏感信息。这些是：
radiusAcctServerIPAddress This can be used to determine the address of the RADIUS accounting server with which the client is communicating. This information could be useful in mounting an attack on the accounting server.
radiusAcctServerIPAddress可用于确定客户端与之通信的RADIUS记帐服务器的地址。此信息有助于对记帐服务器发起攻击。
radiusAcctServerInetAddress This can be used to determine the address of the RADIUS accounting server with which the client is communicating. This information could be useful in mounting an attack on the accounting server.
radiusAcctServerInetAddress可用于确定客户端与之通信的RADIUS记帐服务器的地址。此信息有助于对记帐服务器发起攻击。
radiusAcctClientServerPortNumber This can be used to determine the port number on which the RADIUS accounting client is sending. This information could be useful in impersonating the client in order to send data to the accounting server.
radiusAcctClientServerPortNumber可用于确定RADIUS记帐客户端正在发送的端口号。此信息在模拟客户端以便将数据发送到记帐服务器时非常有用。
radiusAcctClientServerInetPortNumber This can be used to determine the port number on which the RADIUS accounting client is sending. This information could be useful in impersonating the client in order to send data to the accounting server.
radiusAcctClientServerInetPortNumber可用于确定RADIUS记帐客户端正在发送的端口号。此信息在模拟客户端以便将数据发送到记帐服务器时非常有用。
It is thus important to control even GET access to these objects and possibly to even encrypt the values of these object when sending them over the network via SNMP. Not all versions of SNMP provide features for such a secure environment.
因此，在通过SNMP通过网络发送这些对象时，控制甚至访问这些对象，甚至可能加密这些对象的值，这一点非常重要。并非所有版本的SNMP都为这种安全环境提供功能。
SNMP versions prior to SNMPv3 do not provide a secure environment. Even if the network itself is secure (for example by using IPsec), there is no control as to who on the secure network is allowed to access and GET/SET (read/change/create/delete) the objects in this MIB.
SNMPv3之前的SNMP版本不提供安全环境。即使网络本身是安全的（例如通过使用IPsec），也无法控制安全网络上的谁可以访问和获取/设置（读取/更改/创建/删除）此MIB中的对象。
It is RECOMMENDED that implementers consider the security features as provided by the SNMPv3 framework (see [RFC3410], section 8), including full support for the SNMPv3 cryptographic mechanisms (for authentication and privacy).
建议实施者考虑SNMPv3框架所提供的安全特性（参见[RCFC310]，第8节），包括对SNMPv3加密机制的完全支持（用于身份验证和隐私）。
Further, deployment of SNMP versions prior to SNMPv3 is NOT RECOMMENDED. Instead, it is RECOMMENDED to deploy SNMPv3 and to enable cryptographic security. It is then a customer/operator responsibility to ensure that the SNMP entity giving access to an instance of this MIB module is properly configured to give access to the objects only to those principals (users) that have legitimate rights to indeed GET or SET (change/create/delete) them.
此外，不建议部署SNMPv3之前的SNMP版本。相反，建议部署SNMPv3并启用加密安全性。然后，客户/运营商应负责确保授予访问此MIB模块实例权限的SNMP实体已正确配置为仅授予那些拥有确实获取或设置（更改/创建/删除）对象的合法权限的主体（用户）访问对象。
[RFC2119] Bradner, S., "Key words for use in RFCs to Indicate Requirement Levels", BCP 14, RFC 2119, March 1997.
[RFC2119]Bradner，S.，“RFC中用于表示需求水平的关键词”，BCP 14，RFC 2119，1997年3月。
[RFC2578] McCloghrie, K., Ed., Perkins, D., Ed., and J. Schoenwaelder, Ed., "Structure of Management Information Version 2 (SMIv2)", STD 58, RFC 2578, April 1999.
[RFC2578]McCloghrie，K.，Ed.，Perkins，D.，Ed.，和J.Schoenwaeld，Ed.“管理信息的结构版本2（SMIv2）”，STD 58，RFC 2578，1999年4月。
[RFC2579] McCloghrie, K., Ed., Perkins, D., Ed., and J. Schoenwaelder, Ed., "Textual Conventions for SMIv2", STD 58, RFC 2579, April 1999.
[RFC2579]McCloghrie，K.，Ed.，Perkins，D.，Ed.，和J.Schoenwaeld，Ed.“SMIv2的文本约定”，STD 58，RFC 2579，1999年4月。
[RFC2580] McCloghrie, K., Perkins, D., and J. Schoenwaelder, "Conformance Statements for SMIv2", STD 58, RFC 2580, April 1999.
[RFC2580]McCloghrie，K.，Perkins，D.，和J.Schoenwaeld，“SMIv2的一致性声明”，STD 58，RFC 25801999年4月。
[RFC2866] Rigney, C., "RADIUS Accounting", RFC 2866, June 2000.
[RFC2866]Rigney，C.，“半径会计”，RFC 28662000年6月。
[RFC3411] Harrington, D., Presuhn, R., and B. Wijnen, "An Architecture for Describing Simple Network Management Protocol (SNMP) Management Frameworks", STD 62, RFC 3411, December 2002.
[RFC3411]Harrington，D.，Presohn，R.，和B.Wijnen，“描述简单网络管理协议（SNMP）管理框架的体系结构”，STD 62，RFC 3411，2002年12月。
[RFC4001] Daniele, M., Haberman, B., Routhier, S., and J. Schoenwaelder, "Textual Conventions for Internet Network Addresses", RFC 4001, February 2005.
[RFC4001]Daniele，M.，Haberman，B.，Routhier，S.，和J.Schoenwaeld，“互联网网络地址的文本约定”，RFC 4001，2005年2月。
[RFC2620] Aboba, B. and G. Zorn, "RADIUS Accounting Client MIB", RFC 2620, June 1999.
[RFC2620]Aboba，B.和G.Zorn，“RADIUS会计客户MIB”，RFC 262012999年6月。
[RFC2865] Rigney, C., Willens, S., Rubens, A., and W. Simpson, "Remote Authentication Dial In User Service (RADIUS)", RFC 2865, June 2000.
[RFC2865]Rigney，C.，Willens，S.，Rubens，A.，和W.Simpson，“远程认证拨入用户服务（RADIUS）”，RFC 28652000年6月。
[RFC3410] Case, J., Mundy, R., Partain, D., and B. Stewart, "Introduction and Applicability Statements for Internet-Standard Management Framework", RFC 3410, December 2002.
[RFC3410]Case，J.，Mundy，R.，Partain，D.，和B.Stewart，“互联网标准管理框架的介绍和适用性声明”，RFC 34102002年12月。
[RFC4671] Nelson, D., "RADIUS Accounting Server MIB for IPv6", RFC 4671, August 2006.
[RFC4671]Nelson，D.，“IPv6的RADIUS计费服务器MIB”，RFC 46712006年8月。
The authors of the original MIB are Bernard Aboba and Glen Zorn.
原始MIB的作者是Bernard Aboba和Glen Zorn。
Many thanks to all reviewers, especially to Dave Harrington, Dan Romascanu, C.M. Heard, Bruno Pape, Greg Weber, and Bert Wijnen.
非常感谢所有评论家，特别是戴夫·哈林顿、丹·罗马斯坎努、C.M.赫德、布鲁诺·帕普、格雷格·韦伯和伯特·维恩。
Author's Address
作者地址
David B. Nelson Enterasys Networks 50 Minuteman Road Andover, MA 01810 USA
David B.Nelson Enterasys Networks美国马萨诸塞州安多弗市Minuteman路50号01810
EMail: dnelson@enterasys.com
EMail: dnelson@enterasys.com
Full Copyright Statement
完整版权声明
Copyright (C) The Internet Society (2006).
版权所有（C）互联网协会（2006年）。
This document is subject to the rights, licenses and restrictions contained in BCP 78, and except as set forth therein, the authors retain all their rights.
本文件受BCP 78中包含的权利、许可和限制的约束，除其中规定外，作者保留其所有权利。
This document and the information contained herein are provided on an "AS IS" basis and THE CONTRIBUTOR, THE ORGANIZATION HE/SHE REPRESENTS OR IS SPONSORED BY (IF ANY), THE INTERNET SOCIETY AND THE INTERNET ENGINEERING TASK FORCE DISCLAIM ALL WARRANTIES, EXPRESS OR IMPLIED, INCLUDING BUT NOT LIMITED TO ANY WARRANTY THAT THE USE OF THE INFORMATION HEREIN WILL NOT INFRINGE ANY RIGHTS OR ANY IMPLIED WARRANTIES OF MERCHANTABILITY OR FITNESS FOR A PARTICULAR PURPOSE.
本文件及其包含的信息是按“原样”提供的，贡献者、他/她所代表或赞助的组织（如有）、互联网协会和互联网工程任务组不承担任何明示或暗示的担保，包括但不限于任何保证，即使用本文中的信息不会侵犯任何权利，或对适销性或特定用途适用性的任何默示保证。
Intellectual Property
知识产权
The IETF takes no position regarding the validity or scope of any Intellectual Property Rights or other rights that might be claimed to pertain to the implementation or use of the technology described in this document or the extent to which any license under such rights might or might not be available; nor does it represent that it has made any independent effort to identify any such rights. Information on the procedures with respect to rights in RFC documents can be found in BCP 78 and BCP 79.
IETF对可能声称与本文件所述技术的实施或使用有关的任何知识产权或其他权利的有效性或范围，或此类权利下的任何许可可能或可能不可用的程度，不采取任何立场；它也不表示它已作出任何独立努力来确定任何此类权利。有关RFC文件中权利的程序信息，请参见BCP 78和BCP 79。
Copies of IPR disclosures made to the IETF Secretariat and any assurances of licenses to be made available, or the result of an attempt made to obtain a general license or permission for the use of such proprietary rights by implementers or users of this specification can be obtained from the IETF on-line IPR repository at http://www.ietf.org/ipr.
向IETF秘书处披露的知识产权副本和任何许可证保证，或本规范实施者或用户试图获得使用此类专有权利的一般许可证或许可的结果，可从IETF在线知识产权存储库获取，网址为http://www.ietf.org/ipr.
The IETF invites any interested party to bring to its attention any copyrights, patents or patent applications, or other proprietary rights that may cover technology that may be required to implement this standard. Please address the information to the IETF at ietf-ipr@ietf.org.
IETF邀请任何相关方提请其注意任何版权、专利或专利申请，或其他可能涵盖实施本标准所需技术的专有权利。请将信息发送至IETF的IETF-ipr@ietf.org.
Acknowledgement
确认
Funding for the RFC Editor function is provided by the IETF Administrative Support Activity (IASA).
RFC编辑器功能的资金由IETF行政支持活动（IASA）提供。