JUNIPER-JS-DNS-MIB

All MIBs › JUNIPER-JS-DNS-MIB

Organization: Juniper Networks, Inc.

Last Updated: 2007-04-14

Category: Protocol: DNS, Vendor: Juniper

Description: Provides managed objects for DNS proxy and resolution service monitoring on Juniper Networks SRX and J-series security appliances.

Start monitoring vendor-neutral, standards-based MIB, any SNMPv3-capable network device (SNMP engine identity/boot/clock status) with a free 30-day trial of IPNetwork Monitor. Import MIBs, browse SNMP OIDs, create custom SNMP monitors, configure alerts, and monitor any SNMP-enabled network device from a single console.

What Is JUNIPER-JS-DNS-MIB?

JUNIPER-JS-DNS-MIB is a Juniper Networks enterprise MIB that provides statistics for the DNS proxy service running on Juniper SRX and J-series security appliances (the 'JS' prefix denoting Juniper Security/JUNOS Software services). It exposes counters covering DNS query and response traffic collected across all interfaces where the DNS proxy service is active. Its primary monitoring value is software service health: counts of DNS queries received, responses sent, queries forwarded upstream, negative (failure) responses, retry requests, pending requests, and upstream DNS server failures, all of which reveal whether the DNS proxy function is operating correctly or experiencing resolution problems. As a Juniper security-platform feature MIB it is generally polled alongside other JUNIPER-JS-* service MIBs and does not depend on external IETF standards for its core data. It is deployed in enterprise and branch environments where SRX/J-series devices perform DNS proxying for client subnets. Engineers can download the JUNIPER-JS-DNS-MIB file directly to load it into their MIB browser.

IPNetwork Monitor allows you to monitor SNMP objects defined in JUNIPER-JS-DNS-MIB. Use the built-in SNMP Monitoring Browser to explore available variables, view their current values and descriptions, and select the objects you want to monitor. You can then create SNMP monitors, configure thresholds, and receive alerts when monitored values change.

Supported Devices

Juniper SRX security appliances
Juniper J-series security appliances

Monitoring Examples

An administrator would poll jnxJsDNSProxyQueriesReceived against jnxJsDnsProxyResponsesSent to gauge overall DNS proxy throughput, and watch jnxJsDnsProxyServerFailures and jnxJsDnsProxyNegativeResponses for signs that upstream DNS servers are unreachable or returning failures. A rising jnxJsDnsProxyRetryRequests or jnxJsDnsProxyPendingRequests count alongside flat jnxJsDnsProxyResponsesSent would indicate the DNS proxy is stalling on unanswered forwarded queries, pointing to an upstream DNS outage. jnxJsDnsProxyQueriesForwarded helps confirm whether the proxy is escalating unresolved queries as expected.

What Can Be Monitored

DNS queries received
DNS responses sent
DNS queries forwarded
negative DNS responses
DNS retry requests
pending DNS requests
upstream DNS server failures

Imported Objects

From JUNIPER-JS-SMI

jnxJsDnsRoot

OBJECT-IDENTITY

From SNMPv2-SMI

Counter64
MODULE-IDENTITY
OBJECT-TYPE

How to Use in IPNetwork Monitor

Example using jnxJsDNSProxyQueriesReceived OID:

Select a Juniper SRX/J-series security appliance (DNS proxy statistics) as the target host to create a monitor — the SNMP service should be up and running on it. Click New Monitor, then check SNMP Custom on the Favorites tab, click Next, and confirm the host. On the next page, click Select... to open the built-in SNMP MIB Browser and type jnxJsDNSProxyQueriesReceived into the Find box to locate it in the OID tree, then select it and click OK. It reports the count of total number of DNS queries received by the DNS Proxy. On the monitor's Main parameters page you can set the target's SNMP port (default 161), credentials, polling interval, and other settings — see the SNMP Monitor help for details. On the State conditions and Alerting tabs, configure when the monitor should change state and trigger an alert; since this is a Counter64-type OID, Value bounds is the most useful condition here — trigger an alert if the counter increases sharply between polls relative to its normal baseline, since an unexpected spike often reflects a real change in traffic or activity. Click Finish to create the monitor; you can adjust any parameter later.

OIDs

OID symbolic	OID numeric	Type	Access	Description
jnxJsDns	1.3.6.1.4.1.2636.3.39.1.10.1			This MIB provides collated statistics for the Domain Name System (DNS) proxy collected over all interfaces on which it is configured to serve
jnxJsDnsProxyDataObjects	1.3.6.1.4.1.2636.3.39.1.10.1.1
C64 jnxJsDNSProxyQueriesReceivedEx	1.3.6.1.4.1.2636.3.39.1.10.1.1.1	Counter64	read-only	Count of total number of DNS queries received by the DNS Proxy.
C64 jnxJsDnsProxyResponsesSent	1.3.6.1.4.1.2636.3.39.1.10.1.1.2	Counter64	read-only	Count of DNS queries answered sent by the DNS Proxy. This includes DNS cache hits and misses that were answered.
C64 jnxJsDnsProxyQueriesForwarded	1.3.6.1.4.1.2636.3.39.1.10.1.1.3	Counter64	read-only	Count of DNS queries forwarded to other DNS server. This is number of queries that have been proxied due to cache miss.
C64 jnxJsDnsProxyNegativeResponses	1.3.6.1.4.1.2636.3.39.1.10.1.1.4	Counter64	read-only	Count of Negative DNS query responses. This is the count of DNS queries that the Proxy could not obtain answers for.
C64 jnxJsDnsProxyRetryRequests	1.3.6.1.4.1.2636.3.39.1.10.1.1.5	Counter64	read-only	Count of DNS retry queries that this proxy received.
C64 jnxJsDnsProxyPendingRequests	1.3.6.1.4.1.2636.3.39.1.10.1.1.6	Counter64	read-only	Count of DNS requests yet to be answered.
C64 jnxJsDnsProxyServerFailures	1.3.6.1.4.1.2636.3.39.1.10.1.1.7	Counter64	read-only	Count of DNS Proxy Failures.

RFC description

Juniper DNS proxy statistics MIB collecting query counts, responses, forwarding, and cache performance across interfaces.

Start monitoring Juniper SRX/J-series security appliance (DNS proxy statistics) with a free 30-day trial of IPNetwork Monitor. Import MIBs, browse SNMP OIDs, create custom SNMP monitors, configure alerts, and monitor any SNMP-enabled network device from a single console.

Download JUNIPER-JS-DNS-MIB