path: root/MIBS/ciena/CIENA-CES-RADIUS-CLIENT-MIB

-- This file was included in WWP MIB release 04-16-00-0047
 --
 -- CIENA-CES-TCE-RADIUS-CLIENT-MIB.my
 --
 --

 CIENA-CES-RADIUS-CLIENT-MIB DEFINITIONS ::= BEGIN

 IMPORTS       
   Counter32, Gauge32, IpAddress, Unsigned32, Integer32, TimeTicks, OBJECT-TYPE, MODULE-IDENTITY       
       FROM SNMPv2-SMI        
   DisplayString, RowStatus, TruthValue, TEXTUAL-CONVENTION
       FROM SNMPv2-TC                  
   cienaCesStatistics
       FROM CIENA-SMI
   CienaGlobalState
   	 FROM CIENA-TC
   InetAddressType, InetAddress
       FROM INET-ADDRESS-MIB;
   
 cienaCesRadiusClientMIB MODULE-IDENTITY
        LAST-UPDATED "201602170000Z"
            ORGANIZATION "Ciena Corp."
            CONTACT-INFO
        	"  Mib Meister
               115 North Sullivan Road
               Spokane Valley, WA 99037
               USA            
               Phone:  +1 509 242 9000
               Email:  support@ciena.com"
            DESCRIPTION
               "This module defines the objects used by the RADIUS client."

            REVISION "201602170000Z"
            DESCRIPTION
               "Updated DESCRIPTION of cienaCesRadiusUserLoginStatus, 
               cienaCesRadiusUserLoginAcctStatus, cienaCesRadiusDot1xAuthStatus,
               and cienaCesRadiusDot1xAcctStatus."

            REVISION "201507220000Z"
            DESCRIPTION
               "Changed the RADIUS authentication string range to accept a zero length string."

            REVISION "201506220000Z"
            DESCRIPTION
               "Added cienaCesRadiusUserLoginAuthSecret, cienaCesRadiusUserLoginAcctAuthSecret,
	        cienaCesRadiusDot1xAuthAuthSecret, cienaCesRadiusDot1xAcctAuthSecret"

            REVISION "201406120000Z"
            DESCRIPTION
               "Added cienaCesRadiusUserLoginAcct"

            REVISION "201401020000Z"
            DESCRIPTION
               "Added independent Inet addressing and Unsigned32 imports.
                Deprecated cienaCesRadiusClientTimeout, cienaCesRadiusClientRetries, cienaCesRadiusClientAuthKey, 
                cienaCesRadiusClientAuthKeyUnset, cienaCesRadiusClientSearchType, and cienaCesRadiusClientServerTable.  
                Added cienaCesRadiusUserLoginTable, cienaCesRadiusDot1XAuthTable, cienaCesRadiusDot1XAcctTable"

            REVISION "201204170000Z"
            DESCRIPTION
               "Corrected the maximum RADIUS authentication string length from 127 to 64 characters."

            REVISION "201005180000Z"
            DESCRIPTION
                    "Initial creation."
            ::= { cienaCesStatistics 3 }
 


 RadiusString ::= TEXTUAL-CONVENTION
    DISPLAY-HINT "255a"
    STATUS       current
    DESCRIPTION
            "Used to represent the RADIUS authentication string."
    SYNTAX       OCTET STRING (SIZE (0 | 8..64))

 --
 -- Node definitions
 --
 
 cienaCesRadiusClientMIBObjects OBJECT IDENTIFIER ::= { cienaCesRadiusClientMIB 1 }
 
 cienaCesRadiusClient OBJECT IDENTIFIER ::= {cienaCesRadiusClientMIBObjects 1 } 
 cienaCesRadiusClientGlobal OBJECT IDENTIFIER ::= {cienaCesRadiusClient 1 }
 cienaCesRadiusClientServer OBJECT IDENTIFIER ::= {cienaCesRadiusClient 2 }

 cienaCesRadiusUserLogin OBJECT IDENTIFIER ::= {cienaCesRadiusClient 3 }
 cienaCesRadiusUserLoginGlobal OBJECT IDENTIFIER ::= {cienaCesRadiusUserLogin 1 }

 cienaCesRadiusDot1xAuth OBJECT IDENTIFIER ::= {cienaCesRadiusClient 4 }
 cienaCesRadiusDot1xAuthGlobal OBJECT IDENTIFIER ::= {cienaCesRadiusDot1xAuth 1 }

 cienaCesRadiusDot1xAcct OBJECT IDENTIFIER ::= {cienaCesRadiusClient 5 }
 cienaCesRadiusDot1xAcctGlobal OBJECT IDENTIFIER ::= {cienaCesRadiusDot1xAcct 1 }

 cienaCesRadiusUserLoginAcct OBJECT IDENTIFIER ::= {cienaCesRadiusClient 6 }
 cienaCesRadiusUserLoginAcctGlobal OBJECT IDENTIFIER ::= {cienaCesRadiusUserLoginAcct 1 }

 -- Notifications 
  
 cienaCesRadiusClientMIBNotificationPrefix  OBJECT IDENTIFIER ::= { cienaCesRadiusClientMIB 2 } 
 cienaCesRadiusClientMIBNotifications       OBJECT IDENTIFIER ::=  
                       { cienaCesRadiusClientMIBNotificationPrefix 0 }

 -- Conformance information 
 
 cienaCesRadiusClientMIBConformance OBJECT IDENTIFIER ::= { cienaCesRadiusClientMIB 3 } 
 cienaCesRadiusClientMIBCompliances OBJECT IDENTIFIER ::= { cienaCesRadiusClientMIBConformance 1 }      
 cienaCesRadiusClientMIBGroups      OBJECT IDENTIFIER ::= { cienaCesRadiusClientMIBConformance 2 }
         
 
 cienaCesRadiusAdminState OBJECT-TYPE     
     SYNTAX       CienaGlobalState
     MAX-ACCESS    read-write
     STATUS        current
     DESCRIPTION
        "Setting this object administratively enables or disables the RADIUS client."
     ::= { cienaCesRadiusClientGlobal 1 }

 cienaCesRadiusOperState OBJECT-TYPE     
     SYNTAX        CienaGlobalState
     MAX-ACCESS    read-only
     STATUS        current
     DESCRIPTION
        "This object returns the operational state of the RADIUS client."
     ::= { cienaCesRadiusClientGlobal 2 }

 cienaCesRadiusClientTimeout OBJECT-TYPE
     SYNTAX       Integer32 (1..30)
     UNITS        "seconds"
     MAX-ACCESS   read-write
     STATUS       deprecated
     DESCRIPTION
        "This is the time in seconds between re-transmissions
         to the RADIUS server."
     DEFVAL { 1 }
     ::= { cienaCesRadiusClientGlobal 3 }
      
 cienaCesRadiusClientRetries   OBJECT-TYPE
     SYNTAX         Integer32 (0..3)
     MAX-ACCESS     read-write
     STATUS         deprecated
     DESCRIPTION
        "Indicates the number of times the RADIUS server should be
         tried before giving up on the server."
     DEFVAL { 3 }
     ::= { cienaCesRadiusClientGlobal 4 } 
 
 cienaCesRadiusClientAuthKey OBJECT-TYPE
     SYNTAX        RadiusString
     MAX-ACCESS    read-write
     STATUS        deprecated
     DESCRIPTION
        "The authenticaion key to be used for RADIUS servers.
        Retrieving the value of this object via SNMP returns 
        an empty string for security reasons."
     ::= { cienaCesRadiusClientGlobal 5 }
  
  cienaCesRadiusClientAuthKeyUnset OBJECT-TYPE
     SYNTAX        TruthValue
     MAX-ACCESS    read-write
     STATUS        deprecated
     DESCRIPTION
        "Setting this object to true clears the value of 
         cienaCesRadiusClientAuthKey.
         Reading this object always returns a value of false."
     ::= { cienaCesRadiusClientGlobal 6 }

  cienaCesRadiusClientSearchType OBJECT-TYPE     
     SYNTAX        INTEGER {
                        cached(1),
                        priority(2)
                   }
     MAX-ACCESS    read-write
     STATUS        deprecated
     DESCRIPTION
             "This object sets the search type of the RADIUS client."
     ::= { cienaCesRadiusClientGlobal 7 }

--
-- Radius Client Server Table
--     

 cienaCesRadiusClientServerTable OBJECT-TYPE
     SYNTAX         SEQUENCE OF CienaCesRadiusClientServerEntry
     MAX-ACCESS     not-accessible
     STATUS         deprecated
     DESCRIPTION
        "Lists the possible RADIUS servers. 
         While creating an entry, cienaCesRadiusRadiusClientServerStatus and 
         cienaCesRadiusClientServerAddr must be specified. The SNMP multiple 
         set operation must be used to create an entry."
     ::= { cienaCesRadiusClientServer 1 }
      
  
 cienaCesRadiusClientServerEntry OBJECT-TYPE
     SYNTAX       CienaCesRadiusClientServerEntry
     MAX-ACCESS   not-accessible
     STATUS       deprecated
     DESCRIPTION
        "RADIUS server entry."
     INDEX { cienaCesRadiusClientServerIndex}
     ::= { cienaCesRadiusClientServerTable 1 }
      
 CienaCesRadiusClientServerEntry ::= SEQUENCE {
     cienaCesRadiusClientServerIndex             				   Integer32,     
     cienaCesRadiusClientServerAddr                            DisplayString,     
     cienaCesRadiusClientServerResolvedAddr                    IpAddress,
     cienaCesRadiusClientServerPriority             			   Integer32,
     cienaCesRadiusClientServerAuthPort                        Integer32,     
     cienaCesRadiusClientServerRoundTripTime                   TimeTicks,
     cienaCesRadiusClientServerAccessRequests                  Counter32,
     cienaCesRadiusClientServerAccessRetransmissions           Counter32,
     cienaCesRadiusClientServerAccessAccepts                   Counter32,
     cienaCesRadiusClientServerAccessRejects                   Counter32,
     cienaCesRadiusClientServerAccessChallenges                Counter32,
     cienaCesRadiusClientServerMalformedAccessResponses        Counter32,
     cienaCesRadiusClientServerBadAuthenticators               Counter32,
     cienaCesRadiusClientServerPendingRequests                 Gauge32,
     cienaCesRadiusClientServerTimeouts                        Counter32,
     cienaCesRadiusClientServerUnknownTypes                    Counter32,
     cienaCesRadiusClientServerPacketsDropped                  Counter32,
     cienaCesRadiusClientServerApplication                   	INTEGER,
     cienaCesRadiusClientServerStatus                          RowStatus     
	}

 cienaCesRadiusClientServerIndex OBJECT-TYPE
     SYNTAX       Integer32 (1..8)
     MAX-ACCESS   not-accessible
     STATUS       deprecated
     DESCRIPTION
        "Specifies the index of this table."
     ::= { cienaCesRadiusClientServerEntry 1 }
   
 cienaCesRadiusClientServerAddr OBJECT-TYPE
     SYNTAX       DisplayString
     MAX-ACCESS   read-create
     STATUS       deprecated
     DESCRIPTION
        "Host name or IP address of the RADIUS server."
     ::= { cienaCesRadiusClientServerEntry 2 }

 cienaCesRadiusClientServerResolvedAddr OBJECT-TYPE
     SYNTAX       IpAddress
     MAX-ACCESS   read-only
     STATUS       deprecated
     DESCRIPTION
        "Specifies the resolved IP address if cienaCesRadiusClientServerAddr is set to
         host name. If cienaCesRadiusClientServerAddr is set to IP address, 
         then cienaCesRadiusClientServerResolvedAddr contains the same 
         information as cienaCesRadiusClientServerAddr."
     ::= { cienaCesRadiusClientServerEntry 3 }
 
  cienaCesRadiusClientServerPriority OBJECT-TYPE
     SYNTAX       Integer32
     MAX-ACCESS   read-create
     STATUS       deprecated
     DESCRIPTION
        "Specifies the priority of RADIUS servers configured on the device."
     ::= { cienaCesRadiusClientServerEntry 4 } 

 cienaCesRadiusClientServerAuthPort OBJECT-TYPE
      SYNTAX      Integer32 (1..65535)
      MAX-ACCESS  read-create
      STATUS      deprecated
      DESCRIPTION
         "The destination UDP port number to which RADIUS
         messages should be sent. The RADIUS server is not 
         used for authentication if this port number is 0."
      DEFVAL { 1812 }
      ::= { cienaCesRadiusClientServerEntry 5 }

 cienaCesRadiusClientServerRoundTripTime  OBJECT-TYPE
      SYNTAX TimeTicks
      MAX-ACCESS read-only
      STATUS deprecated
      DESCRIPTION
            "The time interval (in hundredths of a second) between
             the most recent Access-Reply/Access-Challenge and the
             Access-Request that matched it from this RADIUS
             authentication server."
      ::= { cienaCesRadiusClientServerEntry 6 }

 cienaCesRadiusClientServerAccessRequests OBJECT-TYPE
      SYNTAX Counter32
      MAX-ACCESS read-only
      STATUS deprecated
      DESCRIPTION
            "The number of RADIUS Access-Request packets sent
             to this server. This does not include retransmissions."
      ::= { cienaCesRadiusClientServerEntry 7 }

 cienaCesRadiusClientServerAccessRetransmissions OBJECT-TYPE
      SYNTAX Counter32
      MAX-ACCESS read-only
      STATUS deprecated
      DESCRIPTION
            "The number of RADIUS Access-Request packets
             retransmitted to this RADIUS authentication server."
      ::= { cienaCesRadiusClientServerEntry 8 }

 cienaCesRadiusClientServerAccessAccepts OBJECT-TYPE
      SYNTAX Counter32
      MAX-ACCESS read-only
      STATUS deprecated
      DESCRIPTION
            "The number of RADIUS Access-Accept packets
             (valid or invalid) received from this server."
      ::= { cienaCesRadiusClientServerEntry 9 }

 cienaCesRadiusClientServerAccessRejects OBJECT-TYPE
      SYNTAX Counter32
      MAX-ACCESS read-only
      STATUS deprecated
      DESCRIPTION
            "The number of RADIUS Access-Reject packets
             (valid or invalid) received from this server."
      ::= { cienaCesRadiusClientServerEntry  10 }

 cienaCesRadiusClientServerAccessChallenges OBJECT-TYPE
      SYNTAX Counter32
      MAX-ACCESS read-only
      STATUS deprecated
      DESCRIPTION
            "The number of RADIUS Access-Challenge packets
             (valid or invalid) received from this server."
      ::= { cienaCesRadiusClientServerEntry 11 }

 cienaCesRadiusClientServerMalformedAccessResponses OBJECT-TYPE
      SYNTAX Counter32
      MAX-ACCESS read-only
      STATUS deprecated
      DESCRIPTION
            "The number of malformed RADIUS Access-Response
             packets received from this server.
             Malformed packets include packets with
             an invalid length. Bad authenticators or
             signature attributes or unknown types are not
             included as malformed access responses."
      ::= { cienaCesRadiusClientServerEntry 12 }

 cienaCesRadiusClientServerBadAuthenticators OBJECT-TYPE
      SYNTAX Counter32
      MAX-ACCESS read-only
      STATUS deprecated
      DESCRIPTION
            "The number of RADIUS Access-Response packets
             containing invalid authenticators or signature
             attributes received from this server."
      ::= { cienaCesRadiusClientServerEntry 13 }

 cienaCesRadiusClientServerPendingRequests OBJECT-TYPE
      SYNTAX Gauge32
      MAX-ACCESS read-only
      STATUS deprecated
      DESCRIPTION
            "The number of RADIUS Access-Request packets
             destined for this server that have not yet timed out
             or received a response. This variable is incremented
             when an Access-Request is sent and decremented due to
             receipt of an Access-Accept, Access-Reject, 
             Access-Challenge, a timeout, or retransmission."
      ::= { cienaCesRadiusClientServerEntry 14 }

 cienaCesRadiusClientServerTimeouts OBJECT-TYPE
     SYNTAX Counter32
     MAX-ACCESS read-only
     STATUS deprecated
     DESCRIPTION
            "The number of authentication timeouts to this server.
             After a timeout the client may retry sending to the same
             server, send to a different server, or
             give up. A retry to the same server is counted as a
             retransmit as well as a timeout. A send to a different
             server is counted as a request as well as a timeout."
      ::= { cienaCesRadiusClientServerEntry  15 }

 cienaCesRadiusClientServerUnknownTypes OBJECT-TYPE
      SYNTAX Counter32
      MAX-ACCESS read-only
      STATUS deprecated
      DESCRIPTION
            "The number of RADIUS packets of unknown type which
             were received from this server on the authentication port."
      ::= { cienaCesRadiusClientServerEntry  16 }

 cienaCesRadiusClientServerPacketsDropped OBJECT-TYPE
      SYNTAX Counter32
      MAX-ACCESS read-only
      STATUS deprecated
      DESCRIPTION
            "The number of RADIUS packets which were
             received from this server on the authentication port
             and dropped for some other reason."
      ::= { cienaCesRadiusClientServerEntry  17}
 
  cienaCesRadiusClientServerApplication OBJECT-TYPE
      SYNTAX      INTEGER {
                     userLogin(1),
                     all(2)
               }
      MAX-ACCESS  read-create
      STATUS      deprecated
      DESCRIPTION
            "This object specifies how the RADIUS server should be used for authentication."
      DEFVAL   {all}
      ::= { cienaCesRadiusClientServerEntry  18}
      
     
 cienaCesRadiusClientServerStatus OBJECT-TYPE
      SYNTAX        RowStatus
      MAX-ACCESS    read-create
      STATUS        deprecated
      DESCRIPTION
            "To create a row in this table, a manager must
            set this object to createAndGo(4).

            To create an entry, cienaCesRadiusClientServerStatus and 
            cienaCesRadiusClientServerAddr must be specified. The SNMP 
            multiple set operation must be used to create the entry.

            To disable a RADIUS server, set the 
            cienaCesRadiusClientServerStatus object to 'notInService' state."
      ::= { cienaCesRadiusClientServerEntry 19 } 


--
-- Radius User Login Global
--

 cienaCesRadiusUserLoginTimeout OBJECT-TYPE
     SYNTAX       Integer32 (1..30)
     UNITS        "seconds"
     MAX-ACCESS   read-write
     STATUS       current
     DESCRIPTION
        "This is the time in seconds between re-transmissions
         to the RADIUS server."
     DEFVAL { 1 }
     ::= { cienaCesRadiusUserLoginGlobal 1 }
      
 cienaCesRadiusUserLoginRetries   OBJECT-TYPE
     SYNTAX         Integer32 (0..3)
     MAX-ACCESS     read-write
     STATUS         current
     DESCRIPTION
        "Indicates the number of times the RADIUS server should be
         tried before giving up on the server."
     DEFVAL { 3 }
     ::= { cienaCesRadiusUserLoginGlobal 2 } 
 
 cienaCesRadiusUserLoginAuthKey OBJECT-TYPE
     SYNTAX        RadiusString
     MAX-ACCESS    read-write
     STATUS        current
     DESCRIPTION
        "The authenticaion key to be used for RADIUS servers.
        Retrieving the value of this object via SNMP returns 
        an empty string for security reasons."
     ::= { cienaCesRadiusUserLoginGlobal 3 }
  
  cienaCesRadiusUserLoginSearchType OBJECT-TYPE     
     SYNTAX        INTEGER {
                        cached(1),
                        priority(2)
                   }
     MAX-ACCESS    read-write
     STATUS        current
     DESCRIPTION
             "This object sets the search type of the RADIUS client."
     ::= { cienaCesRadiusUserLoginGlobal 4 }

   cienaCesRadiusUserLoginAuthSecret OBJECT-TYPE
     SYNTAX       OCTET STRING(SIZE(0..259))
     MAX-ACCESS   read-write
     STATUS       current
     DESCRIPTION
        "Used to set the pre-encrypted secret for user-login auth.
         When read, this object returns the encrypted secret."
     ::= { cienaCesRadiusUserLoginGlobal 5 }
--
-- Radius User Login Table
--

 cienaCesRadiusUserLoginTable OBJECT-TYPE
     SYNTAX         SEQUENCE OF CienaCesRadiusUserLoginEntry
     MAX-ACCESS     not-accessible
     STATUS         current
     DESCRIPTION
        "Lists the possible RADIUS user login servers. 
         While creating an entry, cienaCesRadiusUserLoginStatus and 
         cienaCesRadiusUserLoginAddr must be specified. The SNMP multiple 
         set operation must be used to create an entry."
     ::= { cienaCesRadiusUserLogin 2 }
      
  
 cienaCesRadiusUserLoginEntry OBJECT-TYPE
     SYNTAX       CienaCesRadiusUserLoginEntry
     MAX-ACCESS   not-accessible
     STATUS       current
     DESCRIPTION
        "RADIUS user login entry."
     INDEX { cienaCesRadiusUserLoginIndex }
     ::= { cienaCesRadiusUserLoginTable 1 }
      
 CienaCesRadiusUserLoginEntry ::= SEQUENCE {
     cienaCesRadiusUserLoginIndex                  			Integer32,
     cienaCesRadiusUserLoginResolvedInetAddrType            InetAddressType,
     cienaCesRadiusUserLoginResolvedInetAddress             InetAddress,
     cienaCesRadiusUserLoginAddr                            DisplayString,
     cienaCesRadiusUserLoginPriority             			   Integer32,
     cienaCesRadiusUserLoginAuthPort                        Integer32,
     cienaCesRadiusUserLoginClearStatistics                 TruthValue,
     cienaCesRadiusUserLoginRoundTripTime                   TimeTicks,
     cienaCesRadiusUserLoginRequests                        Counter32,
     cienaCesRadiusUserLoginRetransmissions                 Counter32,
     cienaCesRadiusUserLoginAccessAccepts                   Counter32,
     cienaCesRadiusUserLoginAccessRejects                   Counter32,
     cienaCesRadiusUserLoginAccessChallenges                Counter32,
     cienaCesRadiusUserLoginAccountingResponses             Counter32,
     cienaCesRadiusUserLoginMalformedResponses              Counter32,
     cienaCesRadiusUserLoginBadAuthenticators               Counter32,
     cienaCesRadiusUserLoginTimeouts                        Counter32,
     cienaCesRadiusUserLoginUnknownTypes                    Counter32,
     cienaCesRadiusUserLoginPacketsDropped                  Counter32,
     cienaCesRadiusUserLoginStatus                          RowStatus     
	}

 cienaCesRadiusUserLoginIndex OBJECT-TYPE
     SYNTAX       Integer32 (1..8)
     MAX-ACCESS   not-accessible
     STATUS       current
     DESCRIPTION
        "Specifies the index of this table."
     ::= { cienaCesRadiusUserLoginEntry 1 }

 cienaCesRadiusUserLoginResolvedInetAddrType OBJECT-TYPE
     SYNTAX       InetAddressType
     MAX-ACCESS   read-only
     STATUS       current
     DESCRIPTION
           "Specifies the resolved IP address type.  This OID is used in conjunction 
            with cienaCesRadiusUserLoginInetAddrress.
            When set to :
            ipv4 : cienaCesRadiusUserLoginResolvedInetAddress should be compliant with InetAddressIPv4 
            ipv6 : cienaCesRadiusUserLoginResolvedInetAddress should be compliant with InetAddressIPv6 "
     ::= { cienaCesRadiusUserLoginEntry 2 }
 
 cienaCesRadiusUserLoginResolvedInetAddress OBJECT-TYPE
     SYNTAX       InetAddress
     MAX-ACCESS   read-only
     STATUS       current
     DESCRIPTION
	   "Specifies the resolved IP address if cienaCesRadiusUserLoginAddr is set to host name.
            If cienaCesRadiusUserLoginAddr is set to ip address then 
            cienaCesRadiusUserLoginResolvedInetAddress will contain same information as 
            cienaCesRadiusUserLoginAddr.
            This OID should be used in conjuction with cienaCesRadiusUserLoginResolvedInetAddrType."
     ::= { cienaCesRadiusUserLoginEntry 3 }

 cienaCesRadiusUserLoginAddr OBJECT-TYPE
     SYNTAX       DisplayString
     MAX-ACCESS   read-create
     STATUS       current
     DESCRIPTION
        "Host name or IP address of the RADIUS server."
     ::= { cienaCesRadiusUserLoginEntry 4 }
 
  cienaCesRadiusUserLoginPriority OBJECT-TYPE
     SYNTAX       Integer32
     MAX-ACCESS   read-create
     STATUS       current
     DESCRIPTION
        "Specifies the priority of RADIUS servers configured on the device."
     ::= { cienaCesRadiusUserLoginEntry 5 } 

 cienaCesRadiusUserLoginAuthPort OBJECT-TYPE
      SYNTAX      Integer32 (1..65535)
      MAX-ACCESS  read-create
      STATUS      current
      DESCRIPTION
         "The destination UDP port number to which RADIUS
         messages should be sent. The RADIUS server is not 
         used for authentication if this port number is 0."
      DEFVAL { 1812 }
      ::= { cienaCesRadiusUserLoginEntry 6 }

 cienaCesRadiusUserLoginClearStatistics OBJECT-TYPE
     SYNTAX         TruthValue
     MAX-ACCESS     read-write
     STATUS         current
     DESCRIPTION
           "This object clears the statistics for a server."

     ::= { cienaCesRadiusUserLoginEntry 7 }

 cienaCesRadiusUserLoginRoundTripTime  OBJECT-TYPE
      SYNTAX TimeTicks
      MAX-ACCESS read-only
      STATUS current
      DESCRIPTION
            "The time interval (in hundredths of a second) between
             the most recent Access-Reply/Access-Challenge and the
             Access-Request that matched it from this RADIUS
             authentication server."
      ::= { cienaCesRadiusUserLoginEntry 8 }

 cienaCesRadiusUserLoginRequests OBJECT-TYPE
      SYNTAX Counter32
      MAX-ACCESS read-only
      STATUS current
      DESCRIPTION
            "The number of RADIUS Access-Request packets sent
             to this server. This does not include retransmissions."
      ::= { cienaCesRadiusUserLoginEntry 9 }

 cienaCesRadiusUserLoginRetransmissions OBJECT-TYPE
      SYNTAX Counter32
      MAX-ACCESS read-only
      STATUS current
      DESCRIPTION
            "The number of RADIUS Access-Request packets
             retransmitted to this RADIUS authentication server."
      ::= { cienaCesRadiusUserLoginEntry 10 }

 cienaCesRadiusUserLoginAccessAccepts OBJECT-TYPE
      SYNTAX Counter32
      MAX-ACCESS read-only
      STATUS current
      DESCRIPTION
            "The number of RADIUS Access-Accept packets
             (valid or invalid) received from this server."
      ::= { cienaCesRadiusUserLoginEntry 11 }

 cienaCesRadiusUserLoginAccessRejects OBJECT-TYPE
      SYNTAX Counter32
      MAX-ACCESS read-only
      STATUS current
      DESCRIPTION
            "The number of RADIUS Access-Reject packets
             (valid or invalid) received from this server."
      ::= { cienaCesRadiusUserLoginEntry  12 }

 cienaCesRadiusUserLoginAccessChallenges OBJECT-TYPE
      SYNTAX Counter32
      MAX-ACCESS read-only
      STATUS current
      DESCRIPTION
            "The number of RADIUS Access-Challenge packets
             (valid or invalid) received from this server."
      ::= { cienaCesRadiusUserLoginEntry 13 }

 cienaCesRadiusUserLoginAccountingResponses OBJECT-TYPE
      SYNTAX Counter32
      MAX-ACCESS read-only
      STATUS current
      DESCRIPTION
            "The number of RADIUS Accounting-Response packets
             (valid or invalid) received from this server."
      ::= { cienaCesRadiusUserLoginEntry 14 }

 cienaCesRadiusUserLoginMalformedResponses OBJECT-TYPE
      SYNTAX Counter32
      MAX-ACCESS read-only
      STATUS current
      DESCRIPTION
            "The number of malformed RADIUS Access-Response
             packets received from this server.
             Malformed packets include packets with
             an invalid length. Bad authenticators or
             signature attributes or unknown types are not
             included as malformed access responses."
      ::= { cienaCesRadiusUserLoginEntry 15 }

 cienaCesRadiusUserLoginBadAuthenticators OBJECT-TYPE
      SYNTAX Counter32
      MAX-ACCESS read-only
      STATUS current
      DESCRIPTION
            "The number of RADIUS Access-Response packets
             containing invalid authenticators or signature
             attributes received from this server."
      ::= { cienaCesRadiusUserLoginEntry 16 }

 cienaCesRadiusUserLoginTimeouts OBJECT-TYPE
     SYNTAX Counter32
     MAX-ACCESS read-only
     STATUS current
     DESCRIPTION
            "The number of authentication timeouts to this server.
             After a timeout the client may retry sending to the same
             server, send to a different server, or
             give up. A retry to the same server is counted as a
             retransmit as well as a timeout. A send to a different
             server is counted as a request as well as a timeout."
      ::= { cienaCesRadiusUserLoginEntry  17 }

 cienaCesRadiusUserLoginUnknownTypes OBJECT-TYPE
      SYNTAX Counter32
      MAX-ACCESS read-only
      STATUS current
      DESCRIPTION
            "The number of RADIUS packets of unknown type which
             were received from this server on the authentication port."
      ::= { cienaCesRadiusUserLoginEntry  18 }

 cienaCesRadiusUserLoginPacketsDropped OBJECT-TYPE
      SYNTAX Counter32
      MAX-ACCESS read-only
      STATUS current
      DESCRIPTION
            "The number of RADIUS packets which were
             received from this server on the authentication port
             and dropped for some other reason."
      ::= { cienaCesRadiusUserLoginEntry  19 }
      
 cienaCesRadiusUserLoginStatus OBJECT-TYPE
      SYNTAX        RowStatus
      MAX-ACCESS    read-create
      STATUS        current
      DESCRIPTION
           "To create a row in this table, a manager must specify
            cienaCesRadiusUserLoginAddr and set this object to createAndGo(4).
            The RADIUS server will initially be administratively disabled.

            To administratively enable the RADIUS server, set this object to
            active(1). To administratively disable the RADIUS server set this
            object to notInService(2)."
      ::= { cienaCesRadiusUserLoginEntry 20 } 

--
-- Radius User Login Acct Global
--

 cienaCesRadiusUserLoginAcctAdminState OBJECT-TYPE     
     SYNTAX        INTEGER {
			disabled(1),
			enabled(2)
                   }
     MAX-ACCESS    read-write
     STATUS        current
     DESCRIPTION
	     "Setting this object administratively enables/disables the RADIUS user login accounting client on the device."
     ::= { cienaCesRadiusUserLoginAcctGlobal 1 }

 cienaCesRadiusUserLoginAcctTimeout OBJECT-TYPE
     SYNTAX       Integer32 (1..30)
     UNITS        "seconds"
     MAX-ACCESS   read-write
     STATUS       current
     DESCRIPTION
        "This is the time in seconds between re-transmissions
         to the RADIUS server."
     DEFVAL { 1 }
     ::= { cienaCesRadiusUserLoginAcctGlobal 2 }
      
 cienaCesRadiusUserLoginAcctRetries   OBJECT-TYPE
     SYNTAX         Integer32 (0..3)
     MAX-ACCESS     read-write
     STATUS         current
     DESCRIPTION
        "Indicates the number of times the RADIUS server should be
         tried before giving up on the server."
     DEFVAL { 3 }
     ::= { cienaCesRadiusUserLoginAcctGlobal 3 } 
 
 cienaCesRadiusUserLoginAcctAuthKey OBJECT-TYPE
     SYNTAX        RadiusString
     MAX-ACCESS    read-write
     STATUS        current
     DESCRIPTION
        "The authenticaion key to be used for RADIUS servers.
        Retrieving the value of this object via SNMP returns 
        an empty string for security reasons."
     ::= { cienaCesRadiusUserLoginAcctGlobal 4 }
  
  cienaCesRadiusUserLoginAcctSearchType OBJECT-TYPE     
     SYNTAX        INTEGER {
                        cached(1),
                        priority(2)
                   }
     MAX-ACCESS    read-write
     STATUS        current
     DESCRIPTION
             "This object sets the search type of the RADIUS client."
     ::= { cienaCesRadiusUserLoginAcctGlobal 5 }

   cienaCesRadiusUserLoginAcctAuthSecret OBJECT-TYPE
     SYNTAX       OCTET STRING(SIZE(0..259))
     MAX-ACCESS   read-write
     STATUS       current
     DESCRIPTION
        "Used to set the pre-encrypted secret for user-login accounting
         auth. When read, this object returns the encrypted secret."
     ::= { cienaCesRadiusUserLoginAcctGlobal 6 }

--
-- Radius User Login Acct Table
--

 cienaCesRadiusUserLoginAcctTable OBJECT-TYPE
     SYNTAX         SEQUENCE OF CienaCesRadiusUserLoginAcctEntry
     MAX-ACCESS     not-accessible
     STATUS         current
     DESCRIPTION
        "Lists the possible RADIUS user login servers. 
         While creating an entry, cienaCesRadiusUserLoginAcctStatus and 
         cienaCesRadiusUserLoginAcctAddr must be specified. The SNMP multiple 
         set operation must be used to create an entry."
     ::= { cienaCesRadiusUserLoginAcct 2 }
      
  
 cienaCesRadiusUserLoginAcctEntry OBJECT-TYPE
     SYNTAX       CienaCesRadiusUserLoginAcctEntry
     MAX-ACCESS   not-accessible
     STATUS       current
     DESCRIPTION
        "RADIUS user login entry."
     INDEX { cienaCesRadiusUserLoginAcctIndex }
     ::= { cienaCesRadiusUserLoginAcctTable 1 }
      
 CienaCesRadiusUserLoginAcctEntry ::= SEQUENCE {
     cienaCesRadiusUserLoginAcctIndex                  			Integer32,
     cienaCesRadiusUserLoginAcctResolvedInetAddrType            InetAddressType,
     cienaCesRadiusUserLoginAcctResolvedInetAddress             InetAddress,
     cienaCesRadiusUserLoginAcctAddr                            DisplayString,
     cienaCesRadiusUserLoginAcctPriority             			   Integer32,
     cienaCesRadiusUserLoginAcctAuthPort                        Integer32,
     cienaCesRadiusUserLoginAcctClearStatistics                 TruthValue,
     cienaCesRadiusUserLoginAcctRoundTripTime                   TimeTicks,
     cienaCesRadiusUserLoginAcctRequests                        Counter32,
     cienaCesRadiusUserLoginAcctRetransmissions                 Counter32,
     cienaCesRadiusUserLoginAcctAccessAccepts                   Counter32,
     cienaCesRadiusUserLoginAcctAccessRejects                   Counter32,
     cienaCesRadiusUserLoginAcctAccessChallenges                Counter32,
     cienaCesRadiusUserLoginAcctAccountingResponses             Counter32,
     cienaCesRadiusUserLoginAcctMalformedResponses              Counter32,
     cienaCesRadiusUserLoginAcctBadAuthenticators               Counter32,
     cienaCesRadiusUserLoginAcctTimeouts                        Counter32,
     cienaCesRadiusUserLoginAcctUnknownTypes                    Counter32,
     cienaCesRadiusUserLoginAcctPacketsDropped                  Counter32,
     cienaCesRadiusUserLoginAcctStatus                          RowStatus     
	}

 cienaCesRadiusUserLoginAcctIndex OBJECT-TYPE
     SYNTAX       Integer32 (1..8)
     MAX-ACCESS   not-accessible
     STATUS       current
     DESCRIPTION
        "Specifies the index of this table."
     ::= { cienaCesRadiusUserLoginAcctEntry 1 }

 cienaCesRadiusUserLoginAcctResolvedInetAddrType OBJECT-TYPE
     SYNTAX       InetAddressType
     MAX-ACCESS   read-only
     STATUS       current
     DESCRIPTION
           "Specifies the resolved IP address type.  This OID is used in conjunction 
            with cienaCesRadiusUserLoginAcctInetAddrress.
            When set to :
            ipv4 : cienaCesRadiusUserLoginAcctResolvedInetAddress should be compliant with InetAddressIPv4 
            ipv6 : cienaCesRadiusUserLoginAcctResolvedInetAddress should be compliant with InetAddressIPv6 "
     ::= { cienaCesRadiusUserLoginAcctEntry 2 }
 
 cienaCesRadiusUserLoginAcctResolvedInetAddress OBJECT-TYPE
     SYNTAX       InetAddress
     MAX-ACCESS   read-only
     STATUS       current
     DESCRIPTION
	   "Specifies the resolved IP address if cienaCesRadiusUserLoginAcctAddr is set to host name.
            If cienaCesRadiusUserLoginAcctAddr is set to ip address then 
            cienaCesRadiusUserLoginAcctResolvedInetAddress will contain same information as 
            cienaCesRadiusUserLoginAcctAddr.
            This OID should be used in conjuction with cienaCesRadiusUserLoginAcctResolvedInetAddrType."
     ::= { cienaCesRadiusUserLoginAcctEntry 3 }

 cienaCesRadiusUserLoginAcctAddr OBJECT-TYPE
     SYNTAX       DisplayString
     MAX-ACCESS   read-create
     STATUS       current
     DESCRIPTION
        "Host name or IP address of the RADIUS server."
     ::= { cienaCesRadiusUserLoginAcctEntry 4 }
 
  cienaCesRadiusUserLoginAcctPriority OBJECT-TYPE
     SYNTAX       Integer32
     MAX-ACCESS   read-create
     STATUS       current
     DESCRIPTION
        "Specifies the priority of RADIUS servers configured on the device."
     ::= { cienaCesRadiusUserLoginAcctEntry 5 } 

 cienaCesRadiusUserLoginAcctAuthPort OBJECT-TYPE
      SYNTAX      Integer32 (1..65535)
      MAX-ACCESS  read-create
      STATUS      current
      DESCRIPTION
         "The destination UDP port number to which RADIUS
         messages should be sent. The RADIUS server is not 
         used for authentication if this port number is 0."
      DEFVAL { 1812 }
      ::= { cienaCesRadiusUserLoginAcctEntry 6 }

 cienaCesRadiusUserLoginAcctClearStatistics OBJECT-TYPE
     SYNTAX         TruthValue
     MAX-ACCESS     read-write
     STATUS         current
     DESCRIPTION
           "This object clears the statistics for a server."

     ::= { cienaCesRadiusUserLoginAcctEntry 7 }

 cienaCesRadiusUserLoginAcctRoundTripTime  OBJECT-TYPE
      SYNTAX TimeTicks
      MAX-ACCESS read-only
      STATUS current
      DESCRIPTION
            "The time interval (in hundredths of a second) between
             the most recent Access-Reply/Access-Challenge and the
             Access-Request that matched it from this RADIUS
             authentication server."
      ::= { cienaCesRadiusUserLoginAcctEntry 8 }

 cienaCesRadiusUserLoginAcctRequests OBJECT-TYPE
      SYNTAX Counter32
      MAX-ACCESS read-only
      STATUS current
      DESCRIPTION
            "The number of RADIUS Access-Request packets sent
             to this server. This does not include retransmissions."
      ::= { cienaCesRadiusUserLoginAcctEntry 9 }

 cienaCesRadiusUserLoginAcctRetransmissions OBJECT-TYPE
      SYNTAX Counter32
      MAX-ACCESS read-only
      STATUS current
      DESCRIPTION
            "The number of RADIUS Access-Request packets
             retransmitted to this RADIUS authentication server."
      ::= { cienaCesRadiusUserLoginAcctEntry 10 }

 cienaCesRadiusUserLoginAcctAccessAccepts OBJECT-TYPE
      SYNTAX Counter32
      MAX-ACCESS read-only
      STATUS current
      DESCRIPTION
            "The number of RADIUS Access-Accept packets
             (valid or invalid) received from this server."
      ::= { cienaCesRadiusUserLoginAcctEntry 11 }

 cienaCesRadiusUserLoginAcctAccessRejects OBJECT-TYPE
      SYNTAX Counter32
      MAX-ACCESS read-only
      STATUS current
      DESCRIPTION
            "The number of RADIUS Access-Reject packets
             (valid or invalid) received from this server."
      ::= { cienaCesRadiusUserLoginAcctEntry  12 }

 cienaCesRadiusUserLoginAcctAccessChallenges OBJECT-TYPE
      SYNTAX Counter32
      MAX-ACCESS read-only
      STATUS current
      DESCRIPTION
            "The number of RADIUS Access-Challenge packets
             (valid or invalid) received from this server."
      ::= { cienaCesRadiusUserLoginAcctEntry 13 }

 cienaCesRadiusUserLoginAcctAccountingResponses OBJECT-TYPE
      SYNTAX Counter32
      MAX-ACCESS read-only
      STATUS current
      DESCRIPTION
            "The number of RADIUS Accounting-Response packets
             (valid or invalid) received from this server."
      ::= { cienaCesRadiusUserLoginAcctEntry 14 }

 cienaCesRadiusUserLoginAcctMalformedResponses OBJECT-TYPE
      SYNTAX Counter32
      MAX-ACCESS read-only
      STATUS current
      DESCRIPTION
            "The number of malformed RADIUS Access-Response
             packets received from this server.
             Malformed packets include packets with
             an invalid length. Bad authenticators or
             signature attributes or unknown types are not
             included as malformed access responses."
      ::= { cienaCesRadiusUserLoginAcctEntry 15 }

 cienaCesRadiusUserLoginAcctBadAuthenticators OBJECT-TYPE
      SYNTAX Counter32
      MAX-ACCESS read-only
      STATUS current
      DESCRIPTION
            "The number of RADIUS Access-Response packets
             containing invalid authenticators or signature
             attributes received from this server."
      ::= { cienaCesRadiusUserLoginAcctEntry 16 }

 cienaCesRadiusUserLoginAcctTimeouts OBJECT-TYPE
     SYNTAX Counter32
     MAX-ACCESS read-only
     STATUS current
     DESCRIPTION
            "The number of authentication timeouts to this server.
             After a timeout the client may retry sending to the same
             server, send to a different server, or
             give up. A retry to the same server is counted as a
             retransmit as well as a timeout. A send to a different
             server is counted as a request as well as a timeout."
      ::= { cienaCesRadiusUserLoginAcctEntry  17 }

 cienaCesRadiusUserLoginAcctUnknownTypes OBJECT-TYPE
      SYNTAX Counter32
      MAX-ACCESS read-only
      STATUS current
      DESCRIPTION
            "The number of RADIUS packets of unknown type which
             were received from this server on the authentication port."
      ::= { cienaCesRadiusUserLoginAcctEntry  18 }

 cienaCesRadiusUserLoginAcctPacketsDropped OBJECT-TYPE
      SYNTAX Counter32
      MAX-ACCESS read-only
      STATUS current
      DESCRIPTION
            "The number of RADIUS packets which were
             received from this server on the authentication port
             and dropped for some other reason."
      ::= { cienaCesRadiusUserLoginAcctEntry  19 }
      
 cienaCesRadiusUserLoginAcctStatus OBJECT-TYPE
      SYNTAX        RowStatus
      MAX-ACCESS    read-create
      STATUS        current
      DESCRIPTION
           "To create a row in this table, a manager must specify
            cienaCesRadiusUserLoginAcctAddr and set this object to createAndGo(4).
            The RADIUS server will initially be administratively disabled.

            To administratively enable the RADIUS server, set this object to
            active(1). To administratively disable the RADIUS server set this
            object to notInService(2)."
      ::= { cienaCesRadiusUserLoginAcctEntry 20 } 

--
-- Radius Dot1x Auth Global
--

 cienaCesRadiusDot1xAuthTimeout OBJECT-TYPE
     SYNTAX       Integer32 (1..30)
     UNITS        "seconds"
     MAX-ACCESS   read-write
     STATUS       current
     DESCRIPTION
        "This is the time in seconds between re-transmissions
         to the RADIUS server."
     DEFVAL { 1 }
     ::= { cienaCesRadiusDot1xAuthGlobal 1 }
      
 cienaCesRadiusDot1xAuthRetries   OBJECT-TYPE
     SYNTAX         Integer32 (0..3)
     MAX-ACCESS     read-write
     STATUS         current
     DESCRIPTION
        "Indicates the number of times the RADIUS server should be
         tried before giving up on the server."
     DEFVAL { 3 }
     ::= { cienaCesRadiusDot1xAuthGlobal 2 } 
 
 cienaCesRadiusDot1xAuthAuthKey OBJECT-TYPE
     SYNTAX        RadiusString
     MAX-ACCESS    read-write
     STATUS        current
     DESCRIPTION
        "The authenticaion key to be used for RADIUS servers.
        Retrieving the value of this object via SNMP returns 
        an empty string for security reasons."
     ::= { cienaCesRadiusDot1xAuthGlobal 3 }
  
  cienaCesRadiusDot1xAuthSearchType OBJECT-TYPE     
     SYNTAX        INTEGER {
                        priority(1),
                        loadBalance(2)
                   }
     MAX-ACCESS    read-write
     STATUS        current
     DESCRIPTION
             "This object sets the search type of the RADIUS client."
     ::= { cienaCesRadiusDot1xAuthGlobal 4 }

 cienaCesRadiusDot1xAuthGreylistTimeout   OBJECT-TYPE
     SYNTAX         Unsigned32 (60..14400)
     UNITS          "seconds"
     MAX-ACCESS     read-write
     STATUS         current
     DESCRIPTION
        "The max greylist timeout for a RADIUS Dot1x Auth server between
         1 minute and 4 hours."
     DEFVAL { 600 }
     ::= { cienaCesRadiusDot1xAuthGlobal 5 } 

   cienaCesRadiusDot1xAuthAuthSecret OBJECT-TYPE
     SYNTAX       OCTET STRING(SIZE(0..259))
     MAX-ACCESS   read-write
     STATUS       current
     DESCRIPTION
        "Used to set the pre-encrypted secret for dot1x auth.
         When read, this object returns the encrypted secret."
     ::= { cienaCesRadiusDot1xAuthGlobal 6 }
 
--
-- Radius Dot1x Auth Table
--

 cienaCesRadiusDot1xAuthTable OBJECT-TYPE
     SYNTAX         SEQUENCE OF CienaCesRadiusDot1xAuthEntry
     MAX-ACCESS     not-accessible
     STATUS         current
     DESCRIPTION
        "Lists the possible RADIUS Dot1x auth servers. 
         While creating an entry, cienaCesRadiusDot1xAuthStatus and 
         cienaCesRadiusDot1xAuthAddr must be specified. The SNMP multiple 
         set operation must be used to create an entry."
     ::= { cienaCesRadiusDot1xAuth 2 }
      
  
 cienaCesRadiusDot1xAuthEntry OBJECT-TYPE
     SYNTAX       CienaCesRadiusDot1xAuthEntry
     MAX-ACCESS   not-accessible
     STATUS       current
     DESCRIPTION
        "RADIUS user login entry."
     INDEX { cienaCesRadiusDot1xAuthIndex }
     ::= { cienaCesRadiusDot1xAuthTable 1 }
      
 CienaCesRadiusDot1xAuthEntry ::= SEQUENCE {
     cienaCesRadiusDot1xAuthIndex                  			Integer32,
     cienaCesRadiusDot1xAuthResolvedInetAddrType            InetAddressType,
     cienaCesRadiusDot1xAuthResolvedInetAddress             InetAddress,
     cienaCesRadiusDot1xAuthAddr                            DisplayString,
     cienaCesRadiusDot1xAuthPriority             			   Integer32,
     cienaCesRadiusDot1xAuthAuthPort                        Integer32,
     cienaCesRadiusDot1xAuthClearStatistics                 TruthValue,
     cienaCesRadiusDot1xAuthGreylistTimeRemaining           Unsigned32,
     cienaCesRadiusDot1xAuthRoundTripTime                   TimeTicks,
     cienaCesRadiusDot1xAuthRequests                        Counter32,
     cienaCesRadiusDot1xAuthRetransmissions                 Counter32,
     cienaCesRadiusDot1xAuthAccessAccepts                   Counter32,
     cienaCesRadiusDot1xAuthAccessRejects                   Counter32,
     cienaCesRadiusDot1xAuthAccessChallenges                Counter32,
     cienaCesRadiusDot1xAuthAccountingResponses             Counter32,
     cienaCesRadiusDot1xAuthMalformedResponses              Counter32,
     cienaCesRadiusDot1xAuthBadAuthenticators               Counter32,
     cienaCesRadiusDot1xAuthTimeouts                        Counter32,
     cienaCesRadiusDot1xAuthUnknownTypes                    Counter32,
     cienaCesRadiusDot1xAuthPacketsDropped                  Counter32,
     cienaCesRadiusDot1xAuthStatus                          RowStatus
	}

 cienaCesRadiusDot1xAuthIndex OBJECT-TYPE
     SYNTAX       Integer32 (1..8)
     MAX-ACCESS   not-accessible
     STATUS       current
     DESCRIPTION
        "Specifies the index of this table."
     ::= { cienaCesRadiusDot1xAuthEntry 1 }

 cienaCesRadiusDot1xAuthResolvedInetAddrType OBJECT-TYPE
     SYNTAX       InetAddressType
     MAX-ACCESS   read-only
     STATUS       current
     DESCRIPTION
           "Specifies the resolved IP address type.  This OID is used in conjunction 
            with cienaCesRadiusDot1xAuthInetAddrress.
            When set to :
            ipv4 : cienaCesRadiusDot1xAuthResolvedInetAddress should be compliant with InetAddressIPv4 
            ipv6 : cienaCesRadiusDot1xAuthResolvedInetAddress should be compliant with InetAddressIPv6 "
     ::= { cienaCesRadiusDot1xAuthEntry 2 }
 
 cienaCesRadiusDot1xAuthResolvedInetAddress OBJECT-TYPE
     SYNTAX       InetAddress
     MAX-ACCESS   read-only
     STATUS       current
     DESCRIPTION
	   "Specifies the resolved IP address if cienaCesRadiusDot1xAuthAddr is set to host name.
            If cienaCesRadiusDot1xAuthAddr is set to ip address then 
            cienaCesRadiusDot1xAuthResolvedInetAddress will contain same information as 
            cienaCesRadiusDot1xAuthAddr.
            This OID should be used in conjuction with cienaCesRadiusDot1xAuthResolvedInetAddrType."
     ::= { cienaCesRadiusDot1xAuthEntry 3 }

 cienaCesRadiusDot1xAuthAddr OBJECT-TYPE
     SYNTAX       DisplayString
     MAX-ACCESS   read-create
     STATUS       current
     DESCRIPTION
        "Host name or IP address of the RADIUS server."
     ::= { cienaCesRadiusDot1xAuthEntry 4 }
 
 cienaCesRadiusDot1xAuthPriority  OBJECT-TYPE
     SYNTAX       Integer32
     MAX-ACCESS   read-create
     STATUS       current
     DESCRIPTION
        "Specifies the priority of RADIUS servers configured on the device."
     ::= { cienaCesRadiusDot1xAuthEntry 5 } 

 cienaCesRadiusDot1xAuthAuthPort OBJECT-TYPE
      SYNTAX      Integer32 (1..65535)
      MAX-ACCESS  read-create
      STATUS      current
      DESCRIPTION
         "The destination UDP port number to which RADIUS
         messages should be sent. The RADIUS server is not 
         used for authentication if this port number is 0."
      DEFVAL { 1812 }
      ::= { cienaCesRadiusDot1xAuthEntry 6 }

 cienaCesRadiusDot1xAuthClearStatistics OBJECT-TYPE
     SYNTAX         TruthValue
     MAX-ACCESS     read-write
     STATUS         current
     DESCRIPTION
           "This object clears the statistics for a server."
     ::= { cienaCesRadiusDot1xAuthEntry 7 }

 cienaCesRadiusDot1xAuthGreylistTimeRemaining OBJECT-TYPE
     SYNTAX         Unsigned32 (0..14400)
     UNITS          "seconds"
     MAX-ACCESS     read-only
     STATUS         current
     DESCRIPTION
           "Reflects the remaining time before the server removed from the greylist. 
            A value of '0' (zero) indicates the current server is not greylisted"
     ::= { cienaCesRadiusDot1xAuthEntry 8 }

 cienaCesRadiusDot1xAuthRoundTripTime  OBJECT-TYPE
      SYNTAX TimeTicks
      MAX-ACCESS read-only
      STATUS current
      DESCRIPTION
            "The time interval (in hundredths of a second) between
             the most recent Access-Reply/Access-Challenge and the
             Access-Request that matched it from this RADIUS
             authentication server."
      ::= { cienaCesRadiusDot1xAuthEntry 9 }

 cienaCesRadiusDot1xAuthRequests OBJECT-TYPE
      SYNTAX Counter32
      MAX-ACCESS read-only
      STATUS current
      DESCRIPTION
            "The number of RADIUS Access-Request packets sent
             to this server. This does not include retransmissions."
      ::= { cienaCesRadiusDot1xAuthEntry 10 }

 cienaCesRadiusDot1xAuthRetransmissions OBJECT-TYPE
      SYNTAX Counter32
      MAX-ACCESS read-only
      STATUS current
      DESCRIPTION
            "The number of RADIUS Access-Request packets
             retransmitted to this RADIUS authentication server."
      ::= { cienaCesRadiusDot1xAuthEntry 11 }

 cienaCesRadiusDot1xAuthAccessAccepts OBJECT-TYPE
      SYNTAX Counter32
      MAX-ACCESS read-only
      STATUS current
      DESCRIPTION
            "The number of RADIUS Access-Accept packets
             (valid or invalid) received from this server."
      ::= { cienaCesRadiusDot1xAuthEntry 12 }

 cienaCesRadiusDot1xAuthAccessRejects OBJECT-TYPE
      SYNTAX Counter32
      MAX-ACCESS read-only
      STATUS current
      DESCRIPTION
            "The number of RADIUS Access-Reject packets
             (valid or invalid) received from this server."
      ::= { cienaCesRadiusDot1xAuthEntry  13 }

 cienaCesRadiusDot1xAuthAccessChallenges OBJECT-TYPE
      SYNTAX Counter32
      MAX-ACCESS read-only
      STATUS current
      DESCRIPTION
            "The number of RADIUS Access-Challenge packets
             (valid or invalid) received from this server."
      ::= { cienaCesRadiusDot1xAuthEntry 14 }

 cienaCesRadiusDot1xAuthAccountingResponses OBJECT-TYPE
      SYNTAX Counter32
      MAX-ACCESS read-only
      STATUS current
      DESCRIPTION
            "The number of RADIUS Accounting-Response packets
             (valid or invalid) received from this server."
      ::= { cienaCesRadiusDot1xAuthEntry 15 }

 cienaCesRadiusDot1xAuthMalformedResponses OBJECT-TYPE
      SYNTAX Counter32
      MAX-ACCESS read-only
      STATUS current
      DESCRIPTION
            "The number of malformed RADIUS Access-Response
             packets received from this server.
             Malformed packets include packets with
             an invalid length. Bad authenticators or
             signature attributes or unknown types are not
             included as malformed access responses."
      ::= { cienaCesRadiusDot1xAuthEntry 16 }

 cienaCesRadiusDot1xAuthBadAuthenticators OBJECT-TYPE
      SYNTAX Counter32
      MAX-ACCESS read-only
      STATUS current
      DESCRIPTION
            "The number of RADIUS Access-Response packets
             containing invalid authenticators or signature
             attributes received from this server."
      ::= { cienaCesRadiusDot1xAuthEntry 17 }

 cienaCesRadiusDot1xAuthTimeouts OBJECT-TYPE
     SYNTAX Counter32
     MAX-ACCESS read-only
     STATUS current
     DESCRIPTION
            "The number of authentication timeouts to this server.
             After a timeout the client may retry sending to the same
             server, send to a different server, or
             give up. A retry to the same server is counted as a
             retransmit as well as a timeout. A send to a different
             server is counted as a request as well as a timeout."
      ::= { cienaCesRadiusDot1xAuthEntry  18 }

 cienaCesRadiusDot1xAuthUnknownTypes OBJECT-TYPE
      SYNTAX Counter32
      MAX-ACCESS read-only
      STATUS current
      DESCRIPTION
            "The number of RADIUS packets of unknown type which
             were received from this server on the authentication port."
      ::= { cienaCesRadiusDot1xAuthEntry  19 }

 cienaCesRadiusDot1xAuthPacketsDropped OBJECT-TYPE
      SYNTAX Counter32
      MAX-ACCESS read-only
      STATUS current
      DESCRIPTION
            "The number of RADIUS packets which were
             received from this server on the authentication port
             and dropped for some other reason."
      ::= { cienaCesRadiusDot1xAuthEntry  20 }
      
 cienaCesRadiusDot1xAuthStatus OBJECT-TYPE
      SYNTAX        RowStatus
      MAX-ACCESS    read-create
      STATUS        current
      DESCRIPTION
           "To create a row in this table, a manager must specify
            cienaCesRadiusDot1xAuthAddr and set this object to createAndGo(4).
            The RADIUS server will initially be administratively disabled.

            To administratively enable the RADIUS server, set this object to
            active(1). To administratively disable the RADIUS server set this
            object to notInService(2)."
      ::= { cienaCesRadiusDot1xAuthEntry 21 } 

--
-- Radius Dot1x Acct Global
--

 cienaCesRadiusDot1xAcctAdminState OBJECT-TYPE     
     SYNTAX        INTEGER {
			disabled(1),
			enabled(2)
                   }
     MAX-ACCESS    read-write
     STATUS        current
     DESCRIPTION
	     "Setting this object administratively enables/disables the RADIUS Dot1x accounting client on the device."
     ::= { cienaCesRadiusDot1xAcctGlobal 1 }

 cienaCesRadiusDot1xAcctTimeout OBJECT-TYPE
     SYNTAX       Integer32 (1..30)
     UNITS        "seconds"
     MAX-ACCESS   read-write
     STATUS       current
     DESCRIPTION
        "This is the time in seconds between re-transmissions
         to the RADIUS server."
     DEFVAL { 1 }
     ::= { cienaCesRadiusDot1xAcctGlobal 2 }
      
 cienaCesRadiusDot1xAcctRetries   OBJECT-TYPE
     SYNTAX         Integer32 (0..3)
     MAX-ACCESS     read-write
     STATUS         current
     DESCRIPTION
        "Indicates the number of times the RADIUS server should be
         tried before giving up on the server."
     DEFVAL { 3 }
     ::= { cienaCesRadiusDot1xAcctGlobal 3 } 
 
 cienaCesRadiusDot1xAcctAuthKey OBJECT-TYPE
     SYNTAX        RadiusString
     MAX-ACCESS    read-write
     STATUS        current
     DESCRIPTION
        "The authenticaion key to be used for RADIUS servers.
        Retrieving the value of this object via SNMP returns 
        an empty string for security reasons."
     ::= { cienaCesRadiusDot1xAcctGlobal 4 }
  
 cienaCesRadiusDot1xAcctSearchType OBJECT-TYPE     
     SYNTAX        INTEGER {
                        priority(1),
                        loadBalance(2)
                   }
     MAX-ACCESS    read-write
     STATUS        current
     DESCRIPTION
             "This object sets the search type of the RADIUS client."
     ::= { cienaCesRadiusDot1xAcctGlobal 5 }

 cienaCesRadiusDot1xAcctGreylistTimeout   OBJECT-TYPE
     SYNTAX         Unsigned32 (60..14400)
     UNITS          "seconds"
     MAX-ACCESS     read-write
     STATUS         current
     DESCRIPTION
        "The max greylist timeout for a RADIUS Dot1x Acct server between
         1 minute and 4 hours."
     DEFVAL { 600 }
     ::= { cienaCesRadiusDot1xAcctGlobal 6 } 

 cienaCesRadiusDot1xAcctAuthSecret OBJECT-TYPE
     SYNTAX       OCTET STRING(SIZE(0..259))
     MAX-ACCESS   read-write
     STATUS       current
     DESCRIPTION
        "Used to set the pre-encrypted secret for dot1x auth acct.
         When read, this object returns the encrypted secret."
     ::= { cienaCesRadiusDot1xAcctGlobal 7 }
 
--
-- Dadius Dot1x Acct Table
--

 cienaCesRadiusDot1xAcctTable OBJECT-TYPE
     SYNTAX         SEQUENCE OF CienaCesRadiusDot1xAcctEntry
     MAX-ACCESS     not-accessible
     STATUS         current
     DESCRIPTION
        "Lists the possible RADIUS Dot1x Acct servers. 
         While creating an entry, cienaCesRadiusDot1xAcctStatus and 
         cienaCesRadiusDot1xAcctAddr must be specified. The SNMP multiple 
         set operation must be used to create an entry."
     ::= { cienaCesRadiusDot1xAcct 2 }
      
  
 cienaCesRadiusDot1xAcctEntry OBJECT-TYPE
     SYNTAX       CienaCesRadiusDot1xAcctEntry
     MAX-ACCESS   not-accessible
     STATUS       current
     DESCRIPTION
        "RADIUS user login entry."
     INDEX { cienaCesRadiusDot1xAcctIndex }
     ::= { cienaCesRadiusDot1xAcctTable 1 }
      
 CienaCesRadiusDot1xAcctEntry ::= SEQUENCE {
     cienaCesRadiusDot1xAcctIndex                  			Integer32,
     cienaCesRadiusDot1xAcctResolvedInetAddrType            InetAddressType,
     cienaCesRadiusDot1xAcctResolvedInetAddress             InetAddress,
     cienaCesRadiusDot1xAcctAddr                            DisplayString,
     cienaCesRadiusDot1xAcctPriority             			   Integer32,
     cienaCesRadiusDot1xAcctAuthPort                        Integer32,
     cienaCesRadiusDot1xAcctClearStatistics                 TruthValue,
     cienaCesRadiusDot1xAcctGreylistTimeRemaining           Unsigned32,   
     cienaCesRadiusDot1xAcctRoundTripTime                   TimeTicks,
     cienaCesRadiusDot1xAcctRequests                        Counter32,
     cienaCesRadiusDot1xAcctRetransmissions                 Counter32,
     cienaCesRadiusDot1xAcctAccessAccepts                   Counter32,
     cienaCesRadiusDot1xAcctAccessRejects                   Counter32,
     cienaCesRadiusDot1xAcctAccessChallenges                Counter32,
     cienaCesRadiusDot1xAcctAccountingResponses             Counter32,
     cienaCesRadiusDot1xAcctMalformedResponses              Counter32,
     cienaCesRadiusDot1xAcctBadAuthenticators               Counter32,
     cienaCesRadiusDot1xAcctTimeouts                        Counter32,
     cienaCesRadiusDot1xAcctUnknownTypes                    Counter32,
     cienaCesRadiusDot1xAcctPacketsDropped                  Counter32,
     cienaCesRadiusDot1xAcctStatus                          RowStatus
	}

 cienaCesRadiusDot1xAcctIndex OBJECT-TYPE
     SYNTAX       Integer32 (1..8)
     MAX-ACCESS   not-accessible
     STATUS       current
     DESCRIPTION
        "Specifies the index of this table."
     ::= { cienaCesRadiusDot1xAcctEntry 1 }

 cienaCesRadiusDot1xAcctResolvedInetAddrType OBJECT-TYPE
     SYNTAX       InetAddressType
     MAX-ACCESS   read-only
     STATUS       current
     DESCRIPTION
           "Specifies the resolved IP address type.  This OID is used in conjunction 
            with cienaCesRadiusDot1xAcctInetAddrress.
            When set to :
            ipv4 : cienaCesRadiusDot1xAcctResolvedInetAddress should be compliant with InetAddressIPv4 
            ipv6 : cienaCesRadiusDot1xAcctResolvedInetAddress should be compliant with InetAddressIPv6 "
     ::= { cienaCesRadiusDot1xAcctEntry 2 }
 
 cienaCesRadiusDot1xAcctResolvedInetAddress OBJECT-TYPE
     SYNTAX       InetAddress
     MAX-ACCESS   read-only
     STATUS       current
     DESCRIPTION
	   "Specifies the resolved IP address if cienaCesRadiusDot1xAcctAddr is set to host name.
            If cienaCesRadiusDot1xAcctAddr is set to ip address then 
            cienaCesRadiusDot1xAcctResolvedInetAddress will contain same information as 
            cienaCesRadiusDot1xAcctAddr.
            This OID should be used in conjuction with cienaCesRadiusDot1xAcctResolvedInetAddrType."
     ::= { cienaCesRadiusDot1xAcctEntry 3 }

 cienaCesRadiusDot1xAcctAddr OBJECT-TYPE
     SYNTAX       DisplayString
     MAX-ACCESS   read-create
     STATUS       current
     DESCRIPTION
        "Host name or IP address of the RADIUS server."
     ::= { cienaCesRadiusDot1xAcctEntry 4 }
 
 cienaCesRadiusDot1xAcctPriority OBJECT-TYPE
     SYNTAX       Integer32
     MAX-ACCESS   read-create
     STATUS       current
     DESCRIPTION
        "Specifies the priority of RADIUS servers configured on the device."
     ::= { cienaCesRadiusDot1xAcctEntry 5 } 

 cienaCesRadiusDot1xAcctAuthPort OBJECT-TYPE
      SYNTAX      Integer32 (1..65535)
      MAX-ACCESS  read-create
      STATUS      current
      DESCRIPTION
         "The destination UDP port number to which RADIUS
         messages should be sent. The RADIUS server is not 
         used for authentication if this port number is 0."
      DEFVAL { 1812 }
      ::= { cienaCesRadiusDot1xAcctEntry 6 }

 cienaCesRadiusDot1xAcctClearStatistics OBJECT-TYPE
     SYNTAX         TruthValue
     MAX-ACCESS     read-write
     STATUS         current
     DESCRIPTION
           "This object clears the statistics for a server."
     ::= { cienaCesRadiusDot1xAcctEntry 7 }

 cienaCesRadiusDot1xAcctGreylistTimeRemaining OBJECT-TYPE
     SYNTAX         Unsigned32 (0..14400)
     UNITS          "seconds"
     MAX-ACCESS     read-only
     STATUS         current
     DESCRIPTION
           "Reflects the remaining time before the server removed from the greylist. 
            A value of '0' (zero) indicates the current server is not greylisted"
     ::= { cienaCesRadiusDot1xAcctEntry 8 }

 cienaCesRadiusDot1xAcctRoundTripTime  OBJECT-TYPE
      SYNTAX TimeTicks
      MAX-ACCESS read-only
      STATUS current
      DESCRIPTION
            "The time interval (in hundredths of a second) between
             the most recent Access-Reply/Access-Challenge and the
             Access-Request that matched it from this RADIUS
             authentication server."
      ::= { cienaCesRadiusDot1xAcctEntry 9 }

 cienaCesRadiusDot1xAcctRequests OBJECT-TYPE
      SYNTAX Counter32
      MAX-ACCESS read-only
      STATUS current
      DESCRIPTION
            "The number of RADIUS Access-Request packets sent
             to this server. This does not include retransmissions."
      ::= { cienaCesRadiusDot1xAcctEntry 10 }

 cienaCesRadiusDot1xAcctRetransmissions OBJECT-TYPE
      SYNTAX Counter32
      MAX-ACCESS read-only
      STATUS current
      DESCRIPTION
            "The number of RADIUS Access-Request packets
             retransmitted to this RADIUS authentication server."
      ::= { cienaCesRadiusDot1xAcctEntry 11 }

 cienaCesRadiusDot1xAcctAccessAccepts OBJECT-TYPE
      SYNTAX Counter32
      MAX-ACCESS read-only
      STATUS current
      DESCRIPTION
            "The number of RADIUS Access-Accept packets
             (valid or invalid) received from this server."
      ::= { cienaCesRadiusDot1xAcctEntry 12 }

 cienaCesRadiusDot1xAcctAccessRejects OBJECT-TYPE
      SYNTAX Counter32
      MAX-ACCESS read-only
      STATUS current
      DESCRIPTION
            "The number of RADIUS Access-Reject packets
             (valid or invalid) received from this server."
      ::= { cienaCesRadiusDot1xAcctEntry  13 }

 cienaCesRadiusDot1xAcctAccessChallenges OBJECT-TYPE
      SYNTAX Counter32
      MAX-ACCESS read-only
      STATUS current
      DESCRIPTION
            "The number of RADIUS Access-Challenge packets
             (valid or invalid) received from this server."
      ::= { cienaCesRadiusDot1xAcctEntry 14 }

 cienaCesRadiusDot1xAcctAccountingResponses OBJECT-TYPE
      SYNTAX Counter32
      MAX-ACCESS read-only
      STATUS current
      DESCRIPTION
            "The number of RADIUS Accounting-Response packets
             (valid or invalid) received from this server."
      ::= { cienaCesRadiusDot1xAcctEntry 15 }

 cienaCesRadiusDot1xAcctMalformedResponses OBJECT-TYPE
      SYNTAX Counter32
      MAX-ACCESS read-only
      STATUS current
      DESCRIPTION
            "The number of malformed RADIUS Access-Response
             packets received from this server.
             Malformed packets include packets with
             an invalid length. Bad authenticators or
             signature attributes or unknown types are not
             included as malformed access responses."
      ::= { cienaCesRadiusDot1xAcctEntry 16 }

 cienaCesRadiusDot1xAcctBadAuthenticators OBJECT-TYPE
      SYNTAX Counter32
      MAX-ACCESS read-only
      STATUS current
      DESCRIPTION
            "The number of RADIUS Access-Response packets
             containing invalid authenticators or signature
             attributes received from this server."
      ::= { cienaCesRadiusDot1xAcctEntry 17 }

 cienaCesRadiusDot1xAcctTimeouts OBJECT-TYPE
     SYNTAX Counter32
     MAX-ACCESS read-only
     STATUS current
     DESCRIPTION
            "The number of authentication timeouts to this server.
             After a timeout the client may retry sending to the same
             server, send to a different server, or
             give up. A retry to the same server is counted as a
             retransmit as well as a timeout. A send to a different
             server is counted as a request as well as a timeout."
      ::= { cienaCesRadiusDot1xAcctEntry  18 }

 cienaCesRadiusDot1xAcctUnknownTypes OBJECT-TYPE
      SYNTAX Counter32
      MAX-ACCESS read-only
      STATUS current
      DESCRIPTION
            "The number of RADIUS packets of unknown type which
             were received from this server on the authentication port."
      ::= { cienaCesRadiusDot1xAcctEntry  19 }

 cienaCesRadiusDot1xAcctPacketsDropped OBJECT-TYPE
      SYNTAX Counter32
      MAX-ACCESS read-only
      STATUS current
      DESCRIPTION
            "The number of RADIUS packets which were
             received from this server on the authentication port
             and dropped for some other reason."
      ::= { cienaCesRadiusDot1xAcctEntry  20 }
       
 cienaCesRadiusDot1xAcctStatus OBJECT-TYPE
      SYNTAX        RowStatus
      MAX-ACCESS    read-create
      STATUS        current
      DESCRIPTION
           "To create a row in this table, a manager must specify
            cienaCesRadiusDot1xAcctAddr and set this object to createAndGo(4).
            The RADIUS server will initially be administratively disabled.

            To administratively enable the RADIUS server, set this object to
            active(1). To administratively disable the RADIUS server set this
            object to notInService(2)."
      ::= { cienaCesRadiusDot1xAcctEntry 21 } 

 END