All MIBs › JUNIPER-JS-IPSEC-VPN-MIB
Organization: Juniper Networks, Inc.
Last Updated: 2007-05-11
Category: VPN and Security, Vendor: Juniper
Description: Managed objects covering IPsec VPN configuration, tunnel status, and statistics for Juniper Networks SRX security devices.
Start monitoring vendor-neutral, standards-based MIB, any SNMPv3-capable network device (SNMP engine identity/boot/clock status) with a free 30-day trial of IPNetwork Monitor. Import MIBs, browse SNMP OIDs, create custom SNMP monitors, configure alerts, and monitor any SNMP-enabled network device from a single console.
What Is JUNIPER-JS-IPSEC-VPN-MIB?
JUNIPER-JS-IPSEC-VPN-MIB is a Juniper Networks enterprise MIB for SRX-series security platforms that models IPsec VPN tunnel configuration, status, and traffic statistics. It exposes objects covering VPN policy/tunnel entries, their operational state, and associated packet/byte counters, extending Juniper's common IPSEC flow-monitoring infrastructure with SRX-specific value-added attributes. Its monitoring emphasis is on software/service status, tunnel up/down state and throughput, used to detect VPN outages or misconfigured IKE Phase-1/Phase-2 negotiations rather than raw hardware faults. It explicitly depends on and extends Juniper's common IPSEC flow monitoring MIB. Typical deployment is Juniper SRX security gateways terminating site-to-site or remote-access IPsec VPNs. Engineers can download the JUNIPER-JS-IPSEC-VPN-MIB file directly to load it into their MIB browser.
IPNetwork Monitor allows you to monitor SNMP objects defined in JUNIPER-JS-IPSEC-VPN-MIB. Use the built-in SNMP Monitoring Browser to explore available variables, view their current values and descriptions, and select the objects you want to monitor. You can then create SNMP monitors, configure thresholds, and receive alerts when monitored values change.
Supported Devices
- Juniper Networks SRX security gateways
Monitoring Examples
No sample objects were captured for this MIB, but based on its description an admin would typically poll per-tunnel operational status and traffic counters to confirm a VPN tunnel is established and passing traffic. A tunnel stuck in a down or negotiating state would indicate an IKE Phase-1/Phase-2 mismatch.
What Can Be Monitored
- IPsec tunnel operational status
- tunnel traffic byte/packet counters
- VPN policy/rule status
- IKE negotiation state
Imported Objects
From JUNIPER-IPSEC-FLOW-MON-MIB
| jnxIpSecTunnelMonEntry | OBJECT-TYPE |
From JUNIPER-JS-SMI
| jnxJsIPSecVpn | OBJECT-IDENTITY |
From SNMPv2-SMI
| MODULE-IDENTITY | |
| OBJECT-TYPE |
From SNMPv2-TC
| DisplayString | |
| TEXTUAL-CONVENTION |
OIDs
RFC description
Defines managed objects for IPsec VPN configuration, tunnel status, and statistics on Juniper Networks SRX security devices.
Start monitoring Juniper Networks SRX security gateway (IPsec VPN tunnel monitoring) with a free 30-day trial of IPNetwork Monitor. Import MIBs, browse SNMP OIDs, create custom SNMP monitors, configure alerts, and monitor any SNMP-enabled network device from a single console.