JUNIPER-CFGMGMT-MIB

All MIBs › JUNIPER-CFGMGMT-MIB

Organization: Juniper Networks, Inc.

Last Updated: 2003-10-24

Category: Device Management, Domain: Network Management, Vendor: Juniper

Description: Defines managed objects for configuration management on Juniper Networks devices, including configuration change tracking and commit history.

Start monitoring vendor-neutral, standards-based MIB, any SNMPv3-capable network device (SNMP engine identity/boot/clock status) with a free 30-day trial of IPNetwork Monitor. Import MIBs, browse SNMP OIDs, create custom SNMP monitors, configure alerts, and monitor any SNMP-enabled network device from a single console.

What Is JUNIPER-CFGMGMT-MIB?

JUNIPER-CFGMGMT-MIB is a Juniper Networks enterprise MIB for tracking configuration management events on Juniper devices, recording when configuration changes are committed and by whom. It exposes the latest configuration change's index, timestamp, source, and user, along with a historical event table of prior configuration changes and a rescue-configuration reference. Its monitoring purpose is squarely software/operational: it lets an administrator audit configuration change history and detect unauthorized or unexpected changes, functioning as a change-tracking and compliance MIB rather than a hardware-health MIB. It is a standalone Juniper enterprise extension not derived from a specific IETF standard, though it follows common SNMP table/notification conventions. It is deployed in production Juniper environments (routers, switches, firewalls) where change-control auditing and configuration drift detection are required. Engineers can download the JUNIPER-CFGMGMT-MIB file directly to load it into their MIB browser.

IPNetwork Monitor allows you to monitor SNMP objects defined in JUNIPER-CFGMGMT-MIB. Use the built-in SNMP Monitoring Browser to explore available variables, view their current values and descriptions, and select the objects you want to monitor. You can then create SNMP monitors, configure thresholds, and receive alerts when monitored values change.

Supported Devices

Juniper router
Juniper switch
Juniper firewall (SRX)

Monitoring Examples

An administrator would poll jnxCmCfgChgLatestTime, jnxCmCfgChgLatestSource, and jnxCmCfgChgLatestUser to see who last modified the running configuration and from where, and would walk jnxCmCfgChgEventTable/jnxCmCfgChgEventEntry (via jnxCmCfgChgEventIndex, jnxCmCfgChgEventTime, jnxCmCfgChgEventSource) to build a change-history audit trail. An unexpected entry with an unfamiliar jnxCmCfgChgEventSource or off-hours jnxCmCfgChgEventTime would flag a possibly unauthorized configuration change. jnxCmRescueChg tracks whether a rescue configuration has been saved, and jnxCmNotificationsPrefix roots traps fired on new configuration commits.

What Can Be Monitored

latest configuration change time/source/user
configuration change event history
rescue configuration status
configuration commit notifications

Imported Objects

From JUNIPER-SMI

jnxCmNotifications	OBJECT-IDENTITY
jnxMibs	OBJECT-IDENTITY

From SNMPv2-SMI

Integer32
MODULE-IDENTITY
NOTIFICATION-TYPE
OBJECT-TYPE
TimeTicks

From SNMPv2-TC

DateAndTime
DisplayString
TEXTUAL-CONVENTION

OIDs

OID symbolic	OID numeric	Type	Access	Description
jnxCfgMgmt	1.3.6.1.4.1.2636.3.18			This MIB module defines objects used for managing the configuration of Juniper products.
jnxCmCfgChg	1.3.6.1.4.1.2636.3.18.1
I32 jnxCmCfgChgLatestIndex	1.3.6.1.4.1.2636.3.18.1.1	Integer32	read-only	The index in jnxCmCfgChgEventTable for the latest configuration change event.
TIK jnxCmCfgChgLatestTime	1.3.6.1.4.1.2636.3.18.1.2	TimeTicks	read-only	The value of sysUpTime when the configuration was last changed. If the management subsystem was reset after the last configuration change, this object will return 0.
DAT jnxCmCfgChgLatestDate	1.3.6.1.4.1.2636.3.18.1.3	DateAndTime	read-only	The date and time when the configuration was last changed.
JNX jnxCmCfgChgLatestSource	1.3.6.1.4.1.2636.3.18.1.4	JnxCmCfChgSource	read-only	The source of the configuration event.
STR jnxCmCfgChgLatestUser	1.3.6.1.4.1.2636.3.18.1.5	DisplayString	read-only	The name of the logged in user. The length is zero if not available or not applicable.
I32 jnxCmCfgChgMaxEventEntries	1.3.6.1.4.1.2636.3.18.1.6	Integer32	read-only	The maximum number of entries that can be held in jnxCmCfgChgEventTable.
jnxCmCfgChgEventTable	1.3.6.1.4.1.2636.3.18.1.7		not-accessible	A table of configuration events on this router.
jnxCmCfgChgEventEntry	1.3.6.1.4.1.2636.3.18.1.7.1		not-accessible	Information about a configuration event on this router.
I32 jnxCmCfgChgEventIndex	1.3.6.1.4.1.2636.3.18.1.7.1.1	Integer32	not-accessible	This object identifies a specific configuration change event. Monotonically increasing values will be assigned by the snmp subsystem to each event as it occurs. If the snmp subsystem is reset, these index values will be reset as well.
TIK jnxCmCfgChgEventTime	1.3.6.1.4.1.2636.3.18.1.7.1.2	TimeTicks	read-only	The value of sysUpTime when the event occurred.
DAT jnxCmCfgChgEventDate	1.3.6.1.4.1.2636.3.18.1.7.1.3	DateAndTime	read-only	The system date and time when the event occurred.
JNX jnxCmCfgChgEventSource	1.3.6.1.4.1.2636.3.18.1.7.1.4	JnxCmCfChgSource	read-only	The source of the configuration event.
STR jnxCmCfgChgEventUser	1.3.6.1.4.1.2636.3.18.1.7.1.5	DisplayString	read-only	The name of the logged in user. The length is zero if not available or not applicable.
STR jnxCmCfgChgEventLog	1.3.6.1.4.1.2636.3.18.1.7.1.6	DisplayString	read-only	The log of the configuration event. The length is zero if not available.
jnxCmRescueChg	1.3.6.1.4.1.2636.3.18.2
TIK jnxCmRescueChgTime	1.3.6.1.4.1.2636.3.18.2.1	TimeTicks	read-only	The value of sysUpTime when the rescue configuration was last changed. If the management subsystem was reset after the last configuration change, this object will return 0.
DAT jnxCmRescueChgDate	1.3.6.1.4.1.2636.3.18.2.2	DateAndTime	read-only	The date and time when the rescue configuration was last changed.
JNX jnxCmRescueChgSource	1.3.6.1.4.1.2636.3.18.2.3	JnxCmCfChgSource	read-only	The source of the rescue configuration event.
STR jnxCmRescueChgUser	1.3.6.1.4.1.2636.3.18.2.4	DisplayString	read-only	The name of the logged in user. The length is zero if not available or not applicable.
JNX jnxCmRescueChgState	1.3.6.1.4.1.2636.3.18.2.5	JnxCmRescueCfgState	read-only	The current state of the rescue configuration.
jnxCmNotificationsPrefix	1.3.6.1.4.1.2636.4.5.0
NTF jnxCmCfgChange	1.3.6.1.4.1.2636.4.5.0.1			Notification of a configuration management event as recorded in jnxCmCfgChgEventTable.
NTF jnxCmRescueChange	1.3.6.1.4.1.2636.4.5.0.2			Notification of the latest rescue configuration change.

RFC description

Manages configuration changes and rescue configuration state for Juniper network devices.

Start monitoring Juniper Networks router/switch/SRX firewall (configuration change tracking) with a free 30-day trial of IPNetwork Monitor. Import MIBs, browse SNMP OIDs, create custom SNMP monitors, configure alerts, and monitor any SNMP-enabled network device from a single console.

Download JUNIPER-CFGMGMT-MIB

What Is JUNIPER-CFGMGMT-MIB?

Supported Devices

Monitoring Examples

What Can Be Monitored

This MIB depends on

Related MIBs

RFC description