Header Only - DO NOT REMOVE - Extreme Networks

Getting statistics from NAC


Is there any way to get statistics from a NAC appliance? I looked at the SNMP output but there were no enterprise MIBs in SNMPv2-MIB::sysORID. The stats that are accessible in like authentications per second would be good, time taken for each authentication would be awesome too.

Prompted by this thread about RADIUS performance on the WIRELESS-LAN listserv which mentions radmin but the control socket isn't enabled so I can't use it.

2 replies

Userlevel 3
Hey James,

I just found this MIB OID in an old email from 2013:
etsysNacApplianceMIB=1.3.6.1.4.1.5624.1.2.73

Below this tree you should find:
Authentication Statistics:

etsysNacApplAuthenticationRequests .1.3.6.1.4.1.5624.1.2.73.1.1

etsysNacApplAuthenticationSuccesses .1.3.6.1.4.1.5624.1.2.73.1.2

etsysNacApplAuthenticationFailures .1.3.6.1.4.1.5624.1.2.73.1.3

etsysNacApplRadiusChallenges .1.3.6.1.4.1.5624.1.2.73.1.4

etsysNacApplAuthenticationInvalidRequests .1.3.6.1.4.1.5624.1.2.73.1.5

etsysNacApplAuthenticationDuplicateRequests .1.3.6.1.4.1.5624.1.2.73.1.6

etsysNacApplAuthenticationMalformedRequests .1.3.6.1.4.1.5624.1.2.73.1.7

etsysNacApplAuthenticationBadRequests .1.3.6.1.4.1.5624.1.2.73.1.8

etsysNacApplAuthenticationDroppedPackets .1.3.6.1.4.1.5624.1.2.73.1.9

etsysNacApplAuthenticationUnknownTypes .1.3.6.1.4.1.5624.1.2.73.1.10

etsysNacApplAssessmentRequests .1.3.6.1.4.1.5624.1.2.73.1.11

etsysNacApplCaptivePortalRequests .1.3.6.1.4.1.5624.1.2.73.1.12

etsysNacApplContactLostSwitches .1.3.6.1.4.1.5624.1.2.73.1.13

etsysNacApplIPResolutionFailures .1.3.6.1.4.1.5624.1.2.73.1.14

etsysNacApplIPResolutionTimeouts .1.3.6.1.4.1.5624.1.2.73.1.15

etsysNacApplConnectedAgents .1.3.6.1.4.1.5624.1.2.73.1.16

Give it a try and run it agains your NAC appliance.
Kurt
Userlevel 2
i tried it , it gives only 0 results , is there anything that should be enabled from the NAC Appliance?
Userlevel 2
Works Great, i just needed to add (.0) after each OID.

Thanks

Reply