Getting statistics from NAC

  • 0
  • 1
  • Question
  • Updated 3 months ago
  • Answered
Is there any way to get statistics from a NAC appliance? I looked at the SNMP output but there were no enterprise MIBs in SNMPv2-MIB::sysORID. The stats that are accessible in https://nac.example.com:8444/Admin/ like authentications per second would be good, time taken for each authentication would be awesome too.

Prompted by this thread about RADIUS performance on the WIRELESS-LAN listserv which mentions radmin but the control socket isn't enabled so I can't use it.
Photo of James A

James A, Embassador

  • 6,542 Points 5k badge 2x thumb

Posted 3 months ago

  • 0
  • 1
Photo of Kurt Semba

Kurt Semba, Employee

  • 1,230 Points 1k badge 2x thumb
Hey James,


I just found this MIB OID in an old email from 2013: 
etsysNacApplianceMIB=1.3.6.1.4.1.5624.1.2.73

Below this tree you should find:

Authentication Statistics:

etsysNacApplAuthenticationRequests                                  .1.3.6.1.4.1.5624.1.2.73.1.1

etsysNacApplAuthenticationSuccesses                                 .1.3.6.1.4.1.5624.1.2.73.1.2

etsysNacApplAuthenticationFailures                                     .1.3.6.1.4.1.5624.1.2.73.1.3

etsysNacApplRadiusChallenges                                                .1.3.6.1.4.1.5624.1.2.73.1.4

etsysNacApplAuthenticationInvalidRequests                     .1.3.6.1.4.1.5624.1.2.73.1.5

etsysNacApplAuthenticationDuplicateRequests                .1.3.6.1.4.1.5624.1.2.73.1.6

etsysNacApplAuthenticationMalformedRequests            .1.3.6.1.4.1.5624.1.2.73.1.7        

etsysNacApplAuthenticationBadRequests                           .1.3.6.1.4.1.5624.1.2.73.1.8

etsysNacApplAuthenticationDroppedPackets                    .1.3.6.1.4.1.5624.1.2.73.1.9

etsysNacApplAuthenticationUnknownTypes                      .1.3.6.1.4.1.5624.1.2.73.1.10

etsysNacApplAssessmentRequests                                         .1.3.6.1.4.1.5624.1.2.73.1.11

etsysNacApplCaptivePortalRequests                                     .1.3.6.1.4.1.5624.1.2.73.1.12

etsysNacApplContactLostSwitches                                         .1.3.6.1.4.1.5624.1.2.73.1.13

etsysNacApplIPResolutionFailures                                          .1.3.6.1.4.1.5624.1.2.73.1.14

etsysNacApplIPResolutionTimeouts                                       .1.3.6.1.4.1.5624.1.2.73.1.15

etsysNacApplConnectedAgents                                               .1.3.6.1.4.1.5624.1.2.73.1.16


Give it a try and run it agains your NAC appliance.
Kurt
Photo of Ahmed Haroun

Ahmed Haroun

  • 888 Points 500 badge 2x thumb
Works Great, i just needed to add (.0) after each OID.

Thanks