JUNIPER-JS-PACKET-MIRROR-MIB

All MIBs › JUNIPER-JS-PACKET-MIRROR-MIB

Organization: Juniper Networks, Inc.

Last Updated: 2011-11-23

Category: Domain: Security, Vendor: Juniper

Description: Defines managed objects for packet mirroring and lawful intercept configuration on Juniper Networks SRX and J-series security devices.

Start monitoring vendor-neutral, standards-based MIB, any SNMPv3-capable network device (SNMP engine identity/boot/clock status) with a free 30-day trial of IPNetwork Monitor. Import MIBs, browse SNMP OIDs, create custom SNMP monitors, configure alerts, and monitor any SNMP-enabled network device from a single console.

What Is JUNIPER-JS-PACKET-MIRROR-MIB?

JUNIPER-JS-PACKET-MIRROR-MIB is a Juniper Networks enterprise MIB for SRX and J-series security devices covering packet mirroring and lawful-intercept configuration. It exposes objects that configure and report on mirrored traffic sessions used for compliance-driven traffic duplication. Its monitoring value is primarily configuration/software-state verification, confirming mirroring rules are active and correctly targeting intercept destinations, rather than hardware health. As a Juniper enterprise MIB it complements the vendor's broader security-platform management framework rather than any IETF standard. Typical deployment is service-provider and enterprise Juniper SRX/J-series gateways subject to lawful-intercept regulatory requirements. Engineers can download the JUNIPER-JS-PACKET-MIRROR-MIB file directly to load it into their MIB browser.

IPNetwork Monitor allows you to monitor SNMP objects defined in JUNIPER-JS-PACKET-MIRROR-MIB. Use the built-in SNMP Monitoring Browser to explore available variables, view their current values and descriptions, and select the objects you want to monitor. You can then create SNMP monitors, configure thresholds, and receive alerts when monitored values change.

Supported Devices

Juniper Networks SRX security gateways
Juniper J-series routers

Monitoring Examples

No sample objects were captured for this MIB; based on its description, a realistic use is confirming that a configured packet-mirror/lawful-intercept rule is enabled and actively forwarding mirrored traffic to the designated collection point, though specific object/table names cannot be confirmed without further data.

What Can Be Monitored

packet mirror rule status
lawful intercept configuration state

Imported Objects

From IPV6-TC

Ipv6AddressPrefix

From JUNIPER-JS-SMI

jnxJsPacketMirror

OBJECT-IDENTITY

From SNMPv2-SMI

Counter64
IpAddress
MODULE-IDENTITY
NOTIFICATION-TYPE
OBJECT-TYPE
Unsigned32

From SNMPv2-TC

DateAndTime
DisplayString
TEXTUAL-CONVENTION

OIDs

OID symbolic	OID numeric	Type	Access	Description
jnxJsPacketMirrorMIB	1.3.6.1.4.1.2636.3.39.1.16.1			The packet mirror MIB for the Juniper Networks enterprise.
jnxJsPacketMirrorNotifications	1.3.6.1.4.1.2636.3.39.1.16.1.0
NTF jnxJsPacketMirrorMirroringFailure	1.3.6.1.4.1.2636.3.39.1.16.1.0.1			The jnxJsPacketMirrorMirroringFailure Trap indicates that the packet mirroring operation failed.
NTF jnxJsPacketMirrorLiSubscriberLoggedIn	1.3.6.1.4.1.2636.3.39.1.16.1.0.2			The jnxJsPacketMirrorLiSubscriberLoggedIn Trap indicates that the target has logged in.
NTF jnxJsPacketMirrorLiSubscriberLogInFailed	1.3.6.1.4.1.2636.3.39.1.16.1.0.3			The jnxJsPacketMirrorLiSubscriberLogInFailed Trap indicates that a request for the subscriber log in request failed due to the reason in jnxJsPacketMirrorTerminationReason.
NTF jnxJsPacketMirrorLiSubscriberLoggedOut	1.3.6.1.4.1.2636.3.39.1.16.1.0.4			The jnxJsPacketMirrorLiSubscriberLoggedOut Trap indicates that the target has logged out with one of the reasons in jnxJsPacketMirrorTerminationReason.
NTF jnxJsPacketMirrorLiServiceActivated	1.3.6.1.4.1.2636.3.39.1.16.1.0.5			The jnxJsPacketMirrorLiServiceActivated Trap indicates that packet mirroring on an interface has been activated.
NTF jnxJsPacketMirrorLiServiceActivationFailed	1.3.6.1.4.1.2636.3.39.1.16.1.0.6			The jnxJsPacketMirrorLiServiceActivationFailed Trap indicates that the LI service on an interface has failed due to the reason in jnxJsPacketMirrorTerminationReason.
NTF jnxJsPacketMirrorLiServiceDeactivated	1.3.6.1.4.1.2636.3.39.1.16.1.0.7			The jnxJsPacketMirrorLiServiceDeactivated Trap indicates that the LI service on an interface has been deactivated due to the reason in jnxJsPacketMirrorTerminationReason.
jnxJsPacketMirrorObjects	1.3.6.1.4.1.2636.3.39.1.16.1.1
jnxJsPacketMirrorTrapVars	1.3.6.1.4.1.2636.3.39.1.16.1.1.1
U32 jnxJsPacketMirrorIdentifier	1.3.6.1.4.1.2636.3.39.1.16.1.1.1.1	Unsigned32	accessible-for-notify	The mirror identifier.
U32 jnxJsPacketMirrorSessionIdentifier	1.3.6.1.4.1.2636.3.39.1.16.1.1.1.2	Unsigned32	accessible-for-notify	The session identifier.
STR jnxJsPacketMirrorTrigger	1.3.6.1.4.1.2636.3.39.1.16.1.1.1.3	DisplayString	accessible-for-notify	The trigger that caused mirroring.
INT jnxJsPacketMirrorTriggerType	1.3.6.1.4.1.2636.3.39.1.16.1.1.1.4	INTEGER	accessible-for-notify	The trigger type.
INT jnxJsPacketMirrorConfigurationSource	1.3.6.1.4.1.2636.3.39.1.16.1.1.1.5	INTEGER	accessible-for-notify	The configuration source of this mirroring.
INT jnxJsPacketMirrorErrorCause	1.3.6.1.4.1.2636.3.39.1.16.1.1.1.6	INTEGER	accessible-for-notify	The error cause.
STR jnxJsPacketMirrorErrorString	1.3.6.1.4.1.2636.3.39.1.16.1.1.1.7	DisplayString	accessible-for-notify	The error string as reported by the JUNOS application.
INT jnxJsPacketMirrorApplicationName	1.3.6.1.4.1.2636.3.39.1.16.1.1.1.8	INTEGER	accessible-for-notify	The name of the JUNOS application reporting the trap.
IP jnxJsPacketMirrorAnalyzerAddress	1.3.6.1.4.1.2636.3.39.1.16.1.1.1.9	IpAddress	accessible-for-notify	The IP address of analyzer.
STR jnxJsPacketMirrorUserName	1.3.6.1.4.1.2636.3.39.1.16.1.1.1.10	DisplayString	accessible-for-notify	The login name of the user who's traffic is being mirrored.
DAT jnxJsPacketMirrorDateAndTime	1.3.6.1.4.1.2636.3.39.1.16.1.1.1.11	DateAndTime	accessible-for-notify	The time of event.
STR jnxJsPacketMirrorRouterId	1.3.6.1.4.1.2636.3.39.1.16.1.1.1.12	DisplayString	accessible-for-notify	The VRF ID in JUNOS. Represented as the Logical Router (LR) Name followed by the Router Instance (RI) Name.
INT jnxJsPacketMirrorDirection	1.3.6.1.4.1.2636.3.39.1.16.1.1.1.13	INTEGER	accessible-for-notify	The mirroring direction.
IP jnxJsPacketMirrorTargetIpAddress	1.3.6.1.4.1.2636.3.39.1.16.1.1.1.14	IpAddress	accessible-for-notify	IP address of the mirrored interface.
INT jnxJsPacketMirrorTerminationReason	1.3.6.1.4.1.2636.3.39.1.16.1.1.1.15	INTEGER	accessible-for-notify	The reason for ending a mirroring session which the analyzer may interpret as an access or packet session event.
STR jnxPacketMirrorCallingStationIdentifier	1.3.6.1.4.1.2636.3.39.1.16.1.1.1.16	DisplayString	accessible-for-notify	The calling station id of the subscriber who's traffic is being monitored.
STR jnxPacketMirrorNasIdentifier	1.3.6.1.4.1.2636.3.39.1.16.1.1.1.17	DisplayString	accessible-for-notify	The Nas identification where the traffic is being monitored.
C64 jnxJsPacketMirrorOctetsReceived	1.3.6.1.4.1.2636.3.39.1.16.1.1.1.18	Counter64	accessible-for-notify	The subscriber octet count received.
C64 jnxJsPacketMirrorOctetsTransmitted	1.3.6.1.4.1.2636.3.39.1.16.1.1.1.19	Counter64	accessible-for-notify	The subscriber octet count transmitted.
ADR jnxJsPacketMirrorTargetIpv6Address	1.3.6.1.4.1.2636.3.39.1.16.1.1.1.20	Ipv6AddressPrefix	accessible-for-notify	IPv6 address of the mirrored interface.
U32 jnxJsPacketMirrorTrgtIpv6PfxLen	1.3.6.1.4.1.2636.3.39.1.16.1.1.1.21	Unsigned32	accessible-for-notify	IPv6 prefix length of the mirrored interface.

RFC description

Monitors packet mirroring for lawful interception and traffic analysis on Juniper security platforms.

Start monitoring Juniper SRX/J-series security gateway (packet mirroring/lawful intercept) with a free 30-day trial of IPNetwork Monitor. Import MIBs, browse SNMP OIDs, create custom SNMP monitors, configure alerts, and monitor any SNMP-enabled network device from a single console.

Download JUNIPER-JS-PACKET-MIRROR-MIB

What Is JUNIPER-JS-PACKET-MIRROR-MIB?

Supported Devices

Monitoring Examples

What Can Be Monitored

This MIB depends on

Related MIBs

RFC description