Juniper SRX IDP Attack

Description

Monitors the number of times an attack has been identified by the Intrusion Detection and Prevention (IDP) system. The metrics are as follows:

  • Attack Name: Tracks the name of the attack identified by the IDP.
  • Attack Hits: Monitors the number of times the attack has occurred.

These metrics are gathered via the following SNMP OIDs:

  • IDP Attack Name: 1.3.6.1.4.1.2636.3.39.1.11.1.1.7.1.2
  • IDP Attack Hits: 1.3.6.1.4.1.2636.3.39.1.11.1.1.7.1.3

Prerequisites

None

Supported Metric

Monitor NameMetric NameMetric Display NameUnitDescription
Juniper SRX IDP Attackjuniper_srx_idp_AttackHitsJuniper SRX IDP Attack HitsIt monitors number of times an attack has been hit and this is a rate-based metric that provides the number of Juniper SRX IDP attack hits per second.
(JUNIPER-JS-IDP-MIB :: jnxJsIdpAttackHits : 1.3.6.1.4.1.2636.3.39.1.11.1.1.7.1.3)

Juniper VPN IPsec Tunnel Status

Description

Monitors the status of Juniper VPN IPSEC Tunnel. [ JUNIPER-IPSEC-FLOW-MON-MIB :: jnxIpSecSaMonState : 1.3.6.1.4.1.2636.3.52.1.2.3.1.14 ]

Prerequisites

Device must have support for JUNIPER-IPSEC-FLOW-MON-MIB

Supported Metric

Monitor NameMetric NameMetric Display NameUnitDescription
Juniper VPN IPsec Tunnel Statusjuniper_vpn_IpsecTunnelStatusJuniper VPN IPsec Tunnel StatusMonitors the Juniper VPN IPsec Tunnel SA Status. [ JUNIPER-IPSEC-FLOW-MON-MIB :: jnxIpSecSaMonState : 1.3.6.1.4.1.2636.3.52.1.2.3.1.14 ] Possible values are : 1 : up , 2 : down.

Juniper - CPU Utilization Last 1 & 15 Minutes

Description

Applicable on all series like the EX series, SRX series, J series, MX series and M series.Monitors the CPU utilization over the last 1, 5 & 15 minutes.[JUNIPER-MIB :: jnxOperating1MinLoadAvg : 1.3.6.1.4.1.2636.3.1.13.1.20, jnxOperating5MinLoadAvg : 1.3.6.1.4.1.2636.3.1.13.1.21, jnxOperating15MinLoadAvg : 1.3.6.1.4.1.2636.3.1.13.1.22]

Prerequisites

Device must have support for JUNIPER-MIB

Supported Metric

Monitor NameMetric NameMetric Display NameUnitDescription
Juniper CPU Utilization Last 1 & 15 Minutesjuniper_cpu_Operating1MinAvgCPUJuniper Cpu Utilization last 1 minute%Monitors the CPU Utilization over the last 1 minute.[JUNIPER-MIB :: jnxOperating1MinLoadAvg : 1.3.6.1.4.1.2636.3.1.13.1.20]
juniper_cpu_Operating15MinAvgCPUJuniper Cpu Utilization last 15 minute%Monitors the CPU Utilization over the last 15 minutes in %.[JUNIPER-MIB :: jnxOperating15MinLoadAvg : 1.3.6.1.4.1.2636.3.1.13.1.22]

Juniper - LED Status

Description

Monitors the state of the LED indicator.[JUNIPER-MIB :: jnxLEDState : 1.3.6.1.4.1.2636.3.1.10.1.8, jnxLEDStateOrdered : 1.3.6.1.4.1.2636.3.1.10.1.9]

Prerequisites

Device must have support for JUNIPER-MIB

Supported Metric

Monitor NameMetric NameMetric Display NameUnitDescription
Juniper LED Statusjuniper_LEDStateJuniper LED StateMonitors the state of the LED indicator.[JUNIPER-MIB :: jnxLEDState : 1.3.6.1.4.1.2636.3.1.10.1.8].Possible values are other(1),green(2),yellow(3),red(4),blue(5),amber(6),off(7),blinkingGreen(8),blinkingYellow(9),blinkingRed(10),blinkingBlue(11),blinkingAmber(12).
juniper_LEDStateOrderedJuniper LED State OrderedMonitors the state of the LED indicator with enums ordered from 'most operational' to 'least operational' states.[JUNIPER-MIB :: jnxLEDStateOrdered : 1.3.6.1.4.1.2636.3.1.10.1.9].Possible values are other(1),green(2),yellow(3),red(4),blue(5),amber(6),off(7),blinkingBlue(8),blinkingGreen(9),blinkingAmber(10),blinkingYellow(11),blinkingRed(12)

Juniper Alarm State - G2

Description

It monitors jnx yellow alarm and jnx red alarm states.

Prerequisites

No prerequisite

Supported Metric

Monitor NameMetric NameMetric Display NameUnitDescription
Juniper Alarm Statejuniper.red.alarm.statusRed Alarm StateThe red alarm indication on the craft interface panel. The red alarm is on when there is some system failure or power supply failure or the system is experiencing a hardware malfunction or some threshold is being exceeded. [JUNIPER-ALARM-MIB] [1.3.6.1.4.1.2636.3.4.2.3.1] - Possible values are 1: Other, 2: Off, 3: On. The critical alert will be generated if this oid value = 3(On). The red alarm is on when there is some system failure or power supply failure or the system is experiencing a hardware malfunction or some threshold is being exceeded.
juniper.yellow.alarm.statusYellow Alarm StateThe yellow alarm state on the craft interface panel. The yellow alarm is On when there is some system warning such as maintenance alert or significant temperature increase. [JUNIPER-ALARM-MIB] [1.3.6.1.4.1.2636.3.4.2.2.1] - Possible values are 1: Other, 2: Off, 3: On. The warning alert will be generated if this oid value = 3(On). The yellow alarm is on when there is some system warning such as maintenance alert or significant temperature increase.

Juniper BGP Peer State - G2

Description

It monitors the remote BGP peer’s FSM state.

Prerequisites

No prerequisite

Supported Metric

Monitor NameMetric NameMetric Display NameUnitDescription
Juniper BGP Peer Statusjuniper.bgp.peer.status.v2Junos BGP Peer StateWhether or not the BGP FSM for this remote peer is halted or running. It will generates critical alert only if (remote peer is not in Established state and BGP FSM is not in halted state). Remote peer state oid - [1.3.6.1.4.1.2636.5.1.1.2.1.1.1.2] and BGP FSM oid - [1.3.6.1.4.1.2636.5.1.1.2.1.1.1.3]

Juniper EX Series - G2

Description

This template is applicable for Juniper EX series. Monitors packet tail drop rate and VLAN interface status.

Prerequisites

No prerequisite

Supported Metric

Monitor NameMetric NameMetric Display NameUnitDescription
Juniper Interface Packets Tail-drop Ratejuniper.cos.packets.tail.drop.ratePackets tail drop ratepackets/secIndicates the rate of packets tail-dropped at the output queue. Tail drop profile is a congestion management mechanism that allows switch to drop arriving packets when queue buffers become full or begin to overflow. [OID: 1.3.6.1.4.1.2636.3.15.4.1.12]
Juniper Vlan Interface Statusvlan.interface.statusVlan Interface StatusProvides the operational status of the vlan when admin status is Up. Possible operational status values are 1 - Up, 2- Down. [OID: 1.3.6.1.4.1.2636.3.40.1.5.1.6.1.6, 1.3.6.1.4.1.2636.3.40.1.5.1.6.1.7, 1.3.6.1.4.1.2636.3.40.1.5.1.5.1.5]

Juniper Firewall Filter Stats - G2

Description

It monitors the number of packets and bytes being counted pertaining to the specified counter or policer. Reference mib - [JUNIPER-FIREWALL-MIB]

Prerequisites

No prerequisite

Supported Metric

Monitor NameMetric NameMetric Display NameUnitDescription
Juniper Firewall Filter Statsjuniper.fw.counter.bytesFirewall Counter BytesThe number of bytes being counted pertaining to the specified counter. For policers, this field is always zero because policers do not count number of bytes. [OIDs: 1.3.6.1.4.1.2636.3.5.2.1.5, 1.3.6.1.4.1.2636.3.5.2.1.6, 1.3.6.1.4.1.2636.3.5.2.1.7]
juniper.fw.counter.packetsFirewall Counter PacketsThe number of packets being counted pertaining to the specified counter or policer. [1.3.6.1.4.1.2636.3.5.2.1.4]

Juniper Interface Statistics

Description

Monitors the interface statistics like Input Queue drops, Output Queue Drops and Output Collisions detected on this interface. [using JUNIPER-IF-MIB]

Prerequisites

No prerequisite

Supported Metric

Monitor NameMetric NameMetric Display NameUnitDescription
Juniper Interface Ext Monitorsjuniper.interface.collisions.rateInterface Output Collisions RatepsecCollisions: The rate of output collisions detected on this interface. [OID: 1.3.6.1.4.1.2636.3.3.1.1.25]
juniper.interface.queue.drops.inInterface Input Queue Drop Ratepackets/secDrops: The rate of packets dropped by the input queue of the I/O Manager ASIC.
juniper.interface.queue.drops.outInterface Output Queue Drop Ratepackets/secDrops: The rate of packets dropped by the output queue of the I/O Manager ASIC. [OID: 1.3.6.1.4.1.2636.3.3.1.1.27]

Juniper LDP Statistics

Description

Monitors Juniper LDP Ingress Octets and Transit Octets.

Prerequisites

No prerequisite

Supported Metric

Monitor NameMetric NameMetric Display NameUnitDescription
Juniper LDP Statsjuniper.ldp.ingress.octetsLDP Ingress OctetsBpsMonitors the number of octets of traffic originated on this box, forwarded over the current LDP FEC. The number reported is not realtime and may be subject to several minutes delay. The delay is controllable by ldp statistics gathering interval, which by default is 5 minutes.[OID: 1.3.6.1.4.1.2636.3.14.2.1.6]. ADDITIONAL INFO: Label Distribution Protocol (LDP) is a protocol for distributing labels in non-traffic-engineered applications. LDP allows routers to establish label-switched paths (LSPs) through a network by mapping network-layer routing information directly to data link layer-switched paths. LDP associates a forwarding equivalence class (FEC) with each LSP it creates. The FEC associated with an LSP specifies which packets are mapped to that LSP.
juniper.ldp.transit.octetsLDP Transit OctetsBpsMonitors the number of octets of traffic destined to this FEC, originated on a different box, forwarded over the current LDP FEC. The number reported is not real time and may be subject to several minutes delay. The delay is controllable by ldp statistics gathering interval, which by default is 5 minutes. [OID: 1.3.6.1.4.1.2636.3.14.2.1.8]. ADDITIONAL INFO: Label Distribution Protocol (LDP) is a protocol for distributing labels in non-traffic-engineered applications. LDP allows routers to establish label-switched paths (LSPs) through a network by mapping network-layer routing information directly to data link layer-switched paths. LDP associates a forwarding equivalence class (FEC) with each LSP it creates. The FEC associated with an LSP specifies which packets are mapped to that LSP.

Juniper MX Series

Description

Applicable on Juniper MX series devices. Monitors Juniper BGP peer status, alarm state and firewall filter statistics.

Prerequisites

No prerequisite

Supported Metric

Monitor NameMetric NameMetric Display NameUnitDescription
Juniper Alarm Statejuniper.red.alarm.statusRed Alarm StateThe red alarm indication on the craft interface panel. The red alarm is on when there is some system failure or power supply failure or the system is experiencing a hardware malfunction or some threshold is being exceeded. [JUNIPER-ALARM-MIB] [1.3.6.1.4.1.2636.3.4.2.3.1] - Possible values are 1: Other, 2: Off, 3: On. The critical alert will be generated if this oid value = 3(On). The red alarm is on when there is some system failure or power supply failure or the system is experiencing a hardware malfunction or some threshold is being exceeded.
juniper.yellow.alarm.statusYellow Alarm StateThe yellow alarm state on the craft interface panel. The yellow alarm is On when there is some system warning such as maintenance alert or significant temperature increase. [JUNIPER-ALARM-MIB] [1.3.6.1.4.1.2636.3.4.2.2.1] - Possible values are 1: Other, 2: Off, 3: On. The warning alert will be generated if this oid value = 3(On). The yellow alarm is on when there is some system warning such as maintenance alert or significant temperature increase.
Juniper BGP Peer Statusjuniper.bgp.peer.status.v2Junos BGP Peer StateWhether or not the BGP FSM for this remote peer is halted or running. It will generates critical alert only if (remote peer is not in Established state and BGP FSM is not in halted state). Remote peer state oid - [1.3.6.1.4.1.2636.5.1.1.2.1.1.1.2] and BGP FSM oid - [1.3.6.1.4.1.2636.5.1.1.2.1.1.1.3]
Juniper Firewall Filter Statsjuniper.fw.counter.bytesFirewall Counter BytesThe number of bytes being counted pertaining to the specified counter. For policers, this field is always zero because policers do not count number of bytes. [OIDs: 1.3.6.1.4.1.2636.3.5.2.1.5, 1.3.6.1.4.1.2636.3.5.2.1.6, 1.3.6.1.4.1.2636.3.5.2.1.7]
juniper.fw.counter.packetsFirewall Counter PacketsThe number of packets being counted pertaining to the specified counter or policer. [1.3.6.1.4.1.2636.3.5.2.1.4]

Juniper NetScreen Firewall - G2

Description

Applicable for devices which are using Screen OS. Monitors CPU utilization, memory utilization, session utilization and failed sessions count.

Prerequisites

No prerequisite

Supported Metric

Monitor NameMetric NameMetric Display NameUnitDescription
Juniper Netscreen Device Healthnetscreen.device.health.cpu.utlizationCPU Utilization%Monitors the average system CPU utilization. [OID: 1.3.6.1.4.1.3224.16.1.1.0]
system.memory.util.percentMemory Utilization%Monitors the memory utilization. [OIDs: 1.3.6.1.4.1.3224.16.2.1.0, 1.3.6.1.4.1.3224.16.2.2.0]
netscreen.session.failedFailed SessionsMonitors failed sessions. [OID: 1.3.6.1.4.1.3224.16.3.4.0]
netscreen.session.utilizationSession Utilization%Provides firewall session utilization. [OIDs: 1.3.6.1.4.1.3224.16.3.2.0, 1.3.6.1.4.1.3224.16.3.3.0]

Juniper OSPF Monitors

Description

Monitors the OSPF router operational status and also monitors the statistics like Rate of OSPF neighbors, Rate of OSPF adjacent neighbors.

Prerequisites

No prerequisite

Supported Metric

Monitor NameMetric NameMetric Display NameUnitDescription
Juniper Inerface OSPF-Specific Characteristicsjuniper.ospf.interface.neighbors.rateOSPF Neighbors RatepsecMonitors the rate of OSPF neighbors from this interface. [OIDs: 1.3.6.1.2.1.14.7.1.1, 1.3.6.1.4.1.4874.2.2.14.1.7.1.4]
juniper.ospf.interface.adjacent.neighbors.rateOSPF Adjacent Neighbors RatepsecRate of OSPF adjacent neighbors from this interface. [OIDs: 1.3.6.1.2.1.14.7.1.1,1.3.6.1.4.1.4874.2.2.14.1.7.1.5]
Juniper OSPF Router Statusjuniper.ospf.router.statusJuniper OSPF Router Operational StatusIt checks whether this router is operational/not. [OID: 1.3.6.1.4.1.4874.2.2.14.1.1.35]

Juniper Power Supply Unit

Description

Monitors the PSU chassis power reserved, power allocated, power consumed, power available in redundant mode, total power available, average power used, temperature and humidity. Also it monitors PSU Outlet parameters like status, power consumed, average power, voltage and current. This template validated on Juniper QFX3000-g devices. [Using JUNIPER-POWER-SUPPLY-UNIT-MIB.mib]

Prerequisites

No prerequisite

Supported Metric

Monitor NameMetric NameMetric Display NameUnitDescription
Juniper PSU Chassis Monitorsjuniper.psu.units.countNumber of PSU units available onlineRepresents the number of PSU units available online in the System. [OID: 1.3.6.1.4.1.2636.3.58.1.2.1.1.0]
juniper.psu.chassis.reserved.powerPower reserved for ChassisWPower reserved for Chassis in Watts. [OID: 1.3.6.1.4.1.2636.3.58.1.2.1.5.0]
juniper.psu.chassis.allocated.powerPower allocated for ChassisWTotal power allocated for chassis and all the FPCs in Watts. [OIDs: 1.3.6.1.4.1.2636.3.58.1.2.1.6.0]
juniper.psu.system.consumed.powerTotal Power consumed across all PSU unitsTotal power consumed by the entire system rounded to the nearest integer. This is calculated using the PowerFactor, Current and Voltage values of each PSU that is online and connected to the System. [OID: 1.3.6.1.4.1.2636.3.58.1.2.1.9.0]
juniper.psu.redundant.power.availPower Available (Redundant case)WPower(in Watts) that is still available for allocation even while supporting redundancy with the present usage. [OID: 1.3.6.1.4.1.2636.3.58.1.2.1.7.0]
juniper.psu.total.power.availTotal Power AvailableWPower available(in Watts) which could be made available for further allocation without supporting any redundancy with the present usage. [OID: 1.3.6.1.4.1.2636.3.58.1.2.1.8]
Juniper PSU Environment Monitorjuniper.psu.env.temperaturePSU Environment TemperatureCRepresents the Temparature at each component in degrees Celsius rounded to the nearest integer. [OID: 1.3.6.1.4.1.2636.3.58.1.2.3.1.1]
juniper.psu.env.humidityPSU Environment Humidity%Humidity at each component in percentage. [OID: 1.3.6.1.4.1.2636.3.58.1.2.3.1.2]
Juniper PSU Outlet Monitorsjuniper.psu.outlet.statusPower Outlet StatusThe value of the operational status for the given outlet. [OID: 1.3.6.1.4.1.2636.3.58.1.2.4.1.8]
juniper.psu.outlet.power.consumedPSU Outlet Power ConsumedWPower Consumed by each outlet units in Watts. [OID: 1.3.6.1.4.1.2636.3.58.1.2.4.1.11]
juniper.psu.outlet.avg.power.usedPSU Outlet Average Power UsedWBuffer that contains the average power used, in Watts for each component. [OID: 1.3.6.1.4.1.2636.3.58.1.2.4.1.3]
juniper.psu.outlet.voltagePSU Outlet VoltagevOutput voltage in Volts rounded to the nearest integer. [OID: 1.3.6.1.4.1.2636.3.58.1.2.4.1.9]
juniper.psu.outlet.currentPSU Outlet CurrentmAPSU output current in milliamps rounded to the nearest integer. [OID: 1.3.6.1.4.1.2636.3.58.1.2.4.1.5]
Juniper PSU Powerjuniper.psu.avg.power.usedAverage Power UsedWBuffer that contains the average power used, in Watts for each component. [OID: 1.3.6.1.4.1.2636.3.58.1.2.2.1.1]

Juniper QFX - Status and Performance Check

Description

Applicable only on QFX series devices. Monitors CPU utilization, memory utilization, buffer utilization, CPU load, temperature, operational state, FRU state and device uptime.

Prerequisites

No prerequisite

Supported Metric

Monitor NameMetric NameMetric Display NameUnitDescription
Juniper QFabric - CPUcpu.utilizationCPU Utilization%Monitors the CPU usage. Zero if unavailable or inapplicable
cpu.loadCPU Load%Routing Engine load averages for the last 5 min. This value needs to be correlated with CPU usage. A value lesser than 100 indicates normal operation. A value in the range of 100-300 along with a CPU utilization of greater than 70% could require some investigation.
Juniper QFabric - FRUjuniper.fru.stateFRU stateIndicates the FRU state of this subject. Possible states are 1- Unknown 2- Empty 3- Present 4- Ready 5- announceOnline 6- Online 7- anounceOffline 8- offline, 9-diagnostic, 10-standby.
juniper.fru.typeJuniper FRU TypeThe FRU type for this subject.
juniper.virtualchassis.fru.temperatureJuniper FRU TemperatureCMonitors the temperature in Celsius (degrees C). The value of this monitor is zero if unavailable or inapplicable.
Juniper QFabric - Kernel Memory Utilizationkernel.memory.utilKernel Memory Utilization%The percentage of kernel memory used of this subject. 0 if unavailable or inapplicable.
Juniper QFabric - Memorymemory.utilizationMemory Utilization%Indicates the heap utilization in percentage. Zero if unavailable or inapplicable.
juniper.buffer.utilizationBuffer utilization%The buffer pool utilization in percentage. Zero if unavailable or inapplicable.
juniper.buffer.freeBuffer Pool FreeBytesMonitors the buffer pool free.
Juniper QFabric - Operating Statejuniper.operational.stateOperational stateIndicates the operating state of this subject. Possible values are 1- Unknown 2- Running 3- Ready 4- Reset 5- Running at full speed 6- Down 7- Standby.
Juniper QFabric - Temperaturesystem.temperatureTemperatureCThe temperature in Celsius (degrees C) of this subject. Zero if unavailable or inapplicable
Juniper Storage Utilizationjuniper.common.app.storageutilizationStorage utilization%The amount of the storage used by each file system on the router in percentage. [OIDs: 1.3.6.1.2.1.25.2.3.1.2,1.3.6.1.2.1.25.2.3.1.3, 1.3.6.1.4.1.2636.3.31.1.1.1.1]
System Uptimesystem.uptimeSystem UptimesThe time since the SNMP agent in the system was last re-initialized.[OID : 1.3.6.1.2.1.1.3.0]

Juniper SA Health - G2

Description

This template is applicable on the Juniper SA series, Secure Access VPN Appliance. Monitors the CPU, Memory, Disk and Swap memory utilization on this appliance. Also monitor the log file used percent and the temperature.

Prerequisites

No prerequisite

Supported Metric

Monitor NameMetric NameMetric Display NameUnitDescription
Juniper SA Health Monitorsystem.disk.util.percentDisk Utilization%Disk utilization is the percent of disk space used in comparison to the total disk space available.
system.cpu.utilizationCPU Utilization%The CPU Utilization of the IVE system.
system.swap.memory.util.percentSwap Memory Utilization%It represents the utilization of Swap Memory.
system.memory.util.percentMemory Utilization%The Memory Utilization of the IVE system.
Juniper SSL VPN Appliance Monitorjuniper.ssl.vpn.log.file.percentLog file full percentage%Provides the percentage of log file full [OID: 1.3.6.1.4.1.12532.1.0]
system.temperatureTemperatureCThe Temperature of MAG application blade.[OID: 1.3.6.1.4.1.12532.42.0 ]

Juniper SA Performance Statistics - G2

Description

This template is applicable for the Juniper SA series, Secure Access VPN Appliance. Monitors performance statistics. Monitors the number of IVE Hits, File Hits, Web hits, and Applet hits on the appliance.

Prerequisites

No prerequisite

Supported Metric

Monitor NameMetric NameMetric Display NameUnitDescription
Juniper SA Performance Statisticsjuniper.total.ive.hitsTotal number of Hits to IVEThe total number of hits to the IVE since last reboot [OID: 1.3.6.1.4.1.12532.14.0]
juniper.total.ive.file.hitsTotal number of IVE File HitsThe Total number of hits to the IVE since last reboot. [OID: 1.3.6.1.4.1.12532.15.0]
juniper.total.ive.web.hitsTotal number of Web HitsThe Total number of hits via the Web Interface since the last reboot. [OID: 1.3.6.1.4.1.12532.16.0]
juniper.total.ive.applet.hitsTotal number of Applet HitsThe Total number of applet hits to the IVE since last reboot. [OID: 1.3.6.1.4.1.12532.17.0]

Juniper SA User Statistics - G2

Description

This template is applicable on the Juniper SA series, Secure Access VPN Appliance. Monitors the number of logged users.

Prerequisites

No prerequisite

Supported Metric

Monitor NameMetric NameMetric Display NameUnitDescription
Juniper SA User Statisticsjuniper.sa.signedin.web.usersSigned In Web UsersNumber of Signed-In Web Users. [OID: 1.3.6.1.4.1.12532.2.0]
juniper.sa.signedin.mail.usersSigned In Mail UsersNumber of Signed-In Mail Users [OID:1.3.6.1.4.1.12532.3.0]
juniper.sa.ive.concurrent.usersNumber of IVE Concurrent usersThe Total number of Users Logged in for the IVE Node. [OID: 1.3.6.1.4.1.12532.12.0]
juniper.sa.cluster.concurrent.usersNumber of Cluster Concurrent UsersThe Total number of Users Logged In for the Cluster [OID: 1.3.6.1.4.1.12532.13.0]

Juniper SRX Series - G2

Description

This template is applicable for Juniper SRX devices. Monitors SPU utilization, memory utilization, flow/PFE sessions utlization, CP sessions utlization, interface NAT port utilization and source-nat port utilization.

Prerequisites

No prerequisite

Supported Metric

Monitor NameMetric NameMetric Display NameUnitDescription
Juniper SRX Interface NAT Port Usagejuniper.srx.nat.singleport.usageNAT Interface Single Ports usage%Amount of Single Ports per Overload Pool in use when using Interface Nat translation. [OID: 1.3.6.1.4.1.2636.3.39.1.7.1.1.3.1.2, 1.3.6.1.4.1.2636.3.39.1.7.1.1.3.1.3]
juniper.srx.nat.twinports.usageNAT Interface Twin Ports usage%Represents Twin Ports per Overload Pool in use when using Interface Nat translation. [OID: 1.3.6.1.4.1.2636.3.39.1.7.1.1.3.1.4, 1.3.6.1.4.1.2636.3.39.1.7.1.1.3.1.5]
Juniper SRX Source-Nat Pool Ports Usagejuniper.srx.sourcenat.port.usageSource-Nat Pool Ports UsagePorts utilization when using Source-NatPool with PAT. [OID: 1.3.6.1.4.1.2636.3.39.1.7.1.1.4.1.1, 1.3.6.1.4.1.2636.3.39.1.7.1.1.4.1.5]
Juniper SRX SPUs Utilization Statisticsjuniper.srx.spu.utilizationSPU utilization%Represents the current SPU Usage of Packet Forwarding Engine(PFE). [OID: 1.3.6.1.4.1.2636.3.39.1.12.1.1.1.11, 1.3.6.1.4.1.2636.3.39.1.12.1.1.1.4]
juniper.srx.spu.memory.utilMemory Utilization%Represents Packet Forwarding memory usage. [OIDs: 1.3.6.1.4.1.2636.3.39.1.12.1.1.1.11, 1.3.6.1.4.1.2636.3.39.1.12.1.1.1.5]
juniper.srx.cpsession.usageCentral Point(CP) Session Utilization%Represents the current central point (CP) session utilization of services processing unit (SPU). OID: [1.3.6.1.4.1.2636.3.39.1.12.1.1.1.8, 1.3.6.1.4.1.2636.3.39.1.12.1.1.1.9, 1.3.6.1.4.1.2636.3.39.1.12.1.1.1.11]
juniper.srx.flowsession.usageFlow/PFE Sessions Utilization%Monitors the current flow sessions utilization of services processing unit (SPU) [OID: 1.3.6.1.4.1.2636.3.39.1.12.1.1.1.7, 1.3.6.1.4.1.2636.3.39.1.12.1.1.1.6, 1.3.6.1.4.1.2636.3.39.1.12.1.1.1.11]

Juniper SSG Firewall - G2

Description

Applicable on all SSG devices. Monitors vpn tunnel. Can be applied on SSG-550 version 6.2.0r10.0 (SN: JN1161AF7ADB, Firewall+VPN). SNMP Obj Id=1.3.6.1.4.1.3224.1.51. . Open TCP ports[80,22,23,443,]. DNS name(R)=10.10.0.120

Prerequisites

No prerequisite

Supported Metric

Monitor NameMetric NameMetric Display NameUnitDescription
Netscreen VPN Tunnel Phases Statusvpn.tunnel.phase2.statusVPN Tunnel Phase2 StatusMonitors the IKE's Phase 2 status. Possible values are 0- inactive, 1- active. [OIDs: 1.3.6.1.4.1.3224.4.1.1.1.4, 1.3.6.1.4.1.3224.4.1.1.1.15, 1.3.6.1.4.1.3224.4.1.1.1.23, 1.3.6.1.4.1.3224.4.1.1.1.24, 1.3.6.1.4.1.3224.4.1.1.1.13]
vpn.tunnel.phase1.statusVPN Tunnel Phase1 StatusMonitors the IKE's phase 1 status. Possible values are 0- inactive, 1- active. [OIDs: 1.3.6.1.4.1.3224.4.1.1.1.4, 1.3.6.1.4.1.3224.4.1.1.1.15, 1.3.6.1.4.1.3224.4.1.1.1.13, 1.3.6.1.4.1.3224.4.1.1.1.21, 1.3.6.1.4.1.3224.4.1.1.1.22]

Juniper Standard Status and Performance Check - G2

Description

Applicable on all series like the EX series, SRX series, J series, MX series and M series. Monitors CPU utilization, memory utilization, buffer utilization, CPU load, temperature, operational state, FRU state and device uptime.

Prerequisites

No prerequisite

Supported Metric

Monitor NameMetric NameMetric Display NameUnitDescription
Juniper CPU Monitorcpu.utilizationCPU Utilization%Monitors CPU usage by the Routing Engine. Zero if unavailable or inapplicable
cpu.loadCPU Load%Routing Engine load averages for the last 5 min. This value needs to be correlated with CPU usage. A value lesser than 100 indicates normal operation. A value in the range of 100-300 along with a CPU utilization of greater than 70% could require some inv.
Juniper FRU Statusjuniper.fru.stateFRU stateRepresents the FRU state. Possible states are 1- Unknown 2- Empty, 3- Present, 4- Ready 5- AnnounceOnline, 6- Online, 7- AnnounceOffline, 8- Offline, 9- Diagnostic, 10- Standby. [OIDs: 1.3.6.1.4.1.2636.3.1.15.1.5, 1.3.6.1.4.1.2636.3.1.15.1.6, 1.3.6.1.4.1.2636.3.1.15.1.8, 1.3.6.1.4.1.2636.3.1.15.1.9].
juniper.fru.typeJuniper FRU TypeThe FRU type for this subject. [OID: 1.3.6.1.4.1.2636.3.1.15.1.6]
Juniper FRU Temperaturejuniper.virtualchassis.fru.temperatureJuniper FRU TemperatureCMonitors the temperature in Celsius (degrees C) of this juniper switch. The value of this monitor is zero if unavailable or inapplicable. [OIDs: 1.3.6.1.4.1.2636.3.1.15.1.5, 1.3.6.1.4.1.2636.3.1.15.1.9]
Juniper Kernel Memory Utilizationkernel.memory.utilKernel Memory Utilization%The percentage of kernel memory used of this subject. 0 if unavailable or inapplicable. [OID: 1.3.6.1.4.1.2636.3.1.16.0]
Juniper Memory Monitormemory.utilizationMemory Utilization%Indicates the heap utilization and memory size. Zero if unavailable or inapplicable. [OIDs: 1.3.6.1.4.1.2636.3.1.13.1.12, 1.3.6.1.4.1.2636.3.1.13.1.15]
juniper.buffer.utilizationBuffer utilization%The buffer pool utilization in percentage. Zero if unavailable or inapplicable [1.3.6.1.4.1.2636.3.1.13.1.5, 1.3.6.1.4.1.2636.3.1.13.1.11]
juniper.buffer.freeBuffer Pool FreeBytesMonitors the buffer pool free. [OID: 1.3.6.1.4.1.2636.3.1.13.1.11, 1.3.6.1.4.1.2636.3.1.13.1.15]
Juniper Operational Statusjuniper.operational.stateOperational stateIndicates the operating state of this subject. Possible values are 1- Unknown 2- Running 3- Ready 4- Reset 5- Running at full speed 6- Down 7- Standby [OID: 1.3.6.1.4.1.2636.3.1.13.1.5, 1.3.6.1.4.1.2636.3.1.13.1.6]
Juniper Storage Utilizationjuniper.common.app.storageutilizationStorage utilization%The amount of the storage used by each file system on the router in percentage. [OIDs: 1.3.6.1.2.1.25.2.3.1.2,1.3.6.1.2.1.25.2.3.1.3, 1.3.6.1.4.1.2636.3.31.1.1.1.1]
Juniper Temperature Monitorsystem.temperatureTemperatureCIndicates the temperature sensor value. [OID: 1.3.6.1.4.1.2636.3.1.13.1.7]
System Uptimesystem.uptimeSystem UptimesThe time since the SNMP agent in the system was last re-initialized.[OID : 1.3.6.1.2.1.1.3.0]

Juniper Virtual Chassis Port Status

Description

Template to monitor the actual operational status of this Virtual Chassis Control Protocol (vccp) port. Tested on Juniper qfx5100-24q-2p Ethernet Switch. [SysObjID: 1.3.6.1.4.1.2636.1.1.1.4.82.4]

Prerequisites

No prerequisite

Supported Metric

Monitor NameMetric NameMetric Display NameUnitDescription
Juniper Virtual Chassis Port Statusjuniper.virtualchassis.port.statusVitual Chassis Port StatusIndicates the actual operational status of this vccp port, which is typically but not limited to, a function of the state of individual segments of this port. [OID: 1.3.6.1.4.1.2636.3.40.1.4.1.2.1.4]

Juniper VPLS Monitors

Description

Monitors the VPLS BGP RT Row Status, VPLS BGP VE Row Status, VPLS config row status, peer count, operational status, bgp auto discovery row status and VPLS PW Bind Row Status.

Prerequisites

No prerequisite

Supported Metric

Monitor NameMetric NameMetric Display NameUnitDescription
Juniper VPLS BGP RT Row Statusjuniper.vpls.bgprte.row.statusVPLS BGP Route Target Row StatusMonitors the VPLS BGP route target row status. Possible values are 1- active: which indicates that the conceptual row is available for use by the managed device, 2- notInService: which indicates that the conceptual row exists in the agent, but is unavailable for use by the managed device, 3- notReady: which indicates that the conceptual row exists in the agent, but is missing information necessary in order to be available for use by the managed device, 4- createAndGo: which is supplied by a management station wishing to create a new instance of a conceptual row and to have its status automatically set to active, making it available for use by the managed device, 5- createAndWait: which is supplied by a management station wishing to create a new instance of a conceptual row (but not make it available for use by the managed device), 6- destroy: which is supplied by a management station wishing to delete all of the instances associated with an existing conceptual row. [OIDs: 1.3.6.1.4.1.2636.5.8.1.2.1.2, .3.6.1.4.1.2636.5.8.1.2.1.4, 1.3.6.1.4.1.2636.5.8.1.6.1.3, 1.3.6.1.4.1.2636.5.8.1.6.1.4]
Juniper VPLS BGP VE Row Statusjuniper.vpls.bgpve.row.statusVPLS BGP VE Row StatusMonitors the VPLS BGP edge device row status. Possible values are 1- active: which indicates that the conceptual row is available for use by the managed device, 2- notInService: which indicates that the conceptual row exists in the agent, but is unavailable for use by the managed device, 3- notReady: which indicates that the conceptual row exists in the agent, but is missing information necessary in order to be available for use by the managed device, 4- createAndGo: which is supplied by a management station wishing to create a new instance of a conceptual row and to have its status automatically set to active, making it available for use by the managed device, 5- createAndWait: which is supplied by a management station wishing to create a new instance of a conceptual row (but not make it available for use by the managed device), 6- destroy: which is supplied by a management station wishing to delete all of the instances associated with an existing conceptual row. [OIDs: 1.3.6.1.4.1.2636.5.8.1.2.1.2, .3.6.1.4.1.2636.5.8.1.2.1.4, 1.3.6.1.4.1.2636.5.10.1.2.1.2, 1.3.6.1.4.1.2636.5.10.1.2.1.5]
Juniper VPLS Configuration Attributesjuniper.vpls.config.row.statusVPLS Configuration Row StatusMonitors the VPLS configuration row status. Possible values are 1- active: which indicates that the conceptual row is available for use by the managed device, 2- notInService: which indicates that the conceptual row exists in the agent, but is unavailable for use by the managed device, 3- notReady: which indicates that the conceptual row exists in the agent, but is missing information necessary in order to be available for use by the managed device, 4- createAndGo: which is supplied by a management station wishing to create a new instance of a conceptual row and to have its status automatically set to active, making it available for use by the managed device, 5- createAndWait: which is supplied by a management station wishing to create a new instance of a conceptual row (but not make it available for use by the managed device), 6- destroy: which is supplied by a management station wishing to delete all of the instances associated with an existing conceptual row. [OIDs: 1.3.6.1.4.1.2636.5.8.1.2.1.2, 1.3.6.1.4.1.2636.5.8.1.2.1.4, 1.3.6.1.4.1.2636.5.8.1.2.1.12]
juniper.vpls.peer.countVPLS Peer CountMonitors the the number of peers present in this vpls instance. [OIDs: 1.3.6.1.4.1.2636.5.8.1.2.1.2, 1.3.6.1.4.1.2636.5.8.1.2.1.4, 1.3.6.1.4.1.2636.5.8.1.3.1.2]
juniper.vpls.oper.statusVPLS Operational StatusMonitors the current operational state of this VPLS Service. [OIDs: 1.3.6.1.4.1.2636.5.8.1.2.1.2, 1.3.6.1.4.1.2636.5.8.1.2.1.4, 1.3.6.1.4.1.2636.5.8.1.3.1.1]
juniper.vpls.bgpadc.row.statusVPLS BGP Auto Discovery Row StatusMonitors the VPLS BGP auto discovery config row status. Possible values are 1- active: which indicates that the conceptual row is available for use by the managed device, 2- notInService: which indicates that the conceptual row exists in the agent, but is unavailable for use by the managed device, 3- notReady: which indicates that the conceptual row exists in the agent, but is missing information necessary in order to be available for use by the managed device, 4- createAndGo: which is supplied by a management station wishing to create a new instance of a conceptual row and to have its status automatically set to active, making it available for use by the managed device, 5- createAndWait: which is supplied by a management station wishing to create a new instance of a conceptual row (but not make it available for use by the managed device), 6- destroy: which is supplied by a management station wishing to delete all of the instances associated with an existing conceptual row. [OID: 1.3.6.1.4.1.2636.5.8.1.5.1.4]
Juniper VPLS PW Bind Row Statusjuniper.vpls.pwbind.row.statusVPLS PW Bind Row StatusMonitors the Pseudo Wires bind row status. Possible values are 1- active: which indicates that the conceptual row is available for use by the managed device, 2- notInService: which indicates that the conceptual row exists in the agent, but is unavailable for use by the managed device, 3- notReady: which indicates that the conceptual row exists in the agent, but is missing information necessary in order to be available for use by the managed device, 4- createAndGo: which is supplied by a management station wishing to create a new instance of a conceptual row and to have its status automatically set to active, making it available for use by the managed device, 5- createAndWait: which is supplied by a management station wishing to create a new instance of a conceptual row (but not make it available for use by the managed device), 6- destroy: which is supplied by a management station wishing to delete all of the instances associated with an existing conceptual row. [OIDs: 1.3.6.1.4.1.2636.5.8.1.4.1, 1.3.6.1.4.1.2636.5.8.1.4.1.5, 1.3.6.1.4.1.2636.5.8.1.2.1.2, .3.6.1.4.1.2636.5.8.1.2.1.4]

Juniper VPN Phase 1 (IKE) Tunnel Status

Description

Template to monitor Juniper VPN Phase 1 (IKE) tunnel peer status. Validated on SRX Firewall, SysObjId is 1.3.6.1.4.1.2636.1.1.1.2.35 [JUNIPER-IPSEC-FLOW-MON-MIB::jnxIkeTunMonState - 1.3.6.1.4.1.2636.3.52.1.1.2.1.6]

Prerequisites

No prerequisite

Supported Metric

Monitor NameMetric NameMetric Display NameUnitDescription
Juniper VPN Phase 1 (IKE) Tunnel Statusjuniper.vpn.ike.tunnel.statusVPN Phase 1 (IKE) Tunnel StatusMonitors the Juniper VPN Phase-1 (IKE) Tunnel Status. [OID: 1.3.6.1.4.1.2636.3.52.1.1.2.1.6]