Re: [Help-gnu-radius] monitoring radius using snmp

[Sergey Poznyakoff]

Hi Macram,

> But i did not find which oid (MIB) should i use to do the following
> tasks

You will find the necessary MIBs in the directory mibs/ in the
distribution. The files are:

RADIUS-AUTH-SERVER-MIB.txt      MIBs for the authentication server
RADIUS-ACC-SERVER-MIB.txt       MIBs for the accounting server
GNU-RADIUS-SERVER-MIB.txt       Private enterprise MIBs for GNU
                                Radius.

The exact use of these depends on what SNMP client you are using.
For ucd-snmp, copy these files to the system MIB directory
(usually, $prefix/share/snmp/mibs), set and export the
environment variable MIBS=ALL. Now, invoking

snmpwalk -p PORT SERVER COMMUNITY

will return you the auth and acct mibs. Running

snmpwalk -p PORT SERVER COMMUNITY \
.iso.org.dod.internet.private.enterprises.gnu.radius 

will return you the private MIBs.

> 1-restart radius using snmp

snmpset -p PORT SERVER COMMUNITY \
.iso.org.dod.internet.private.enterprises.gnu.radius.radiusServerMIB.radiusServerState
 i VALUE

VALUE is one of the following:

2     reread the configuration files. Similar to `radctl reload'
3     restart the server. Similar to `radctl restart'. Be careful with this.
4     wake up the suspended server
5     suspend the server
6     shutdown the server

COMMUNITY should be declared as "rw" in the configuration files.
Do not forget to properly configure your SNMP ACLs!

> 2-know how many users are logged in

snmpget -p PORT SERVER COMMUNITY \
enterprises.gnu-radius.radiusStatistics.radiusStatMIB.radiusStatTotalLinesInUse 
There are plenty of other useful info in these MIBS. See 
mibs/GNU-RADIUS-SERVER-MIB.txt for details.


> 3-Know if there are errors 

What kind of errors? For authentication errors examine
radiusMIB.radiusAuthentication.radiusAuthServMIB.radiusAuthServMIBObjects.radiusAuthServ

for accounting errors examine

radiusMIB.radiusAccounting.radiusAccServMIB.radiusAccServMIBObjects.radiusAccServ

The full description of the standard MIBs is in the files doc/rfc/rfc2619.txt
and doc/rfc/rfc2621.txt. The GNU Radius MIBs are documented in the file
mibs/GNU-RADIUS-SERVER-MIB.txt

Regards,
Sergey