All MIBs › JUNIPER-LSYSSP-FLOWGATE-MIB
Organization: Juniper Networks, Inc.
Last Updated: 2010-05-19
Category: Vendor: Juniper
Description: Defines managed objects for flow gate (pinhole) resource limits per logical system security profile on Juniper Networks SRX devices.
Start monitoring vendor-neutral, standards-based MIB, any SNMPv3-capable network device (SNMP engine identity/boot/clock status) with a free 30-day trial of IPNetwork Monitor. Import MIBs, browse SNMP OIDs, create custom SNMP monitors, configure alerts, and monitor any SNMP-enabled network device from a single console.
What Is JUNIPER-LSYSSP-FLOWGATE-MIB?
JUNIPER-LSYSSP-FLOWGATE-MIB is a Juniper Networks vendor-specific MIB that defines flow-gate (pinhole) resource objects for logical-system (LSYS) security profiles, layered under the JUNIPER-LSYS-SECURITYPROFILE-MIB registration point. Its jnxLsysSpFlowgateTable reports, per logical system, the current flow-gate usage, reserved allocation, and maximum permitted usage (jnxLsysSpFlowgateUsage/Reserved/Maximum), while a separate jnxLsysSpFlowgateSummary branch rolls this up device-wide with total used amount, maximum quota, available amount, and the heaviest/lightest-consuming LSYS by name. Flow gates are the dynamic pinhole resources SRX devices open for protocols that need return-traffic exceptions (such as certain ALGs), so tracking per-LSYS consumption against configured quotas helps catch a single logical system or security profile monopolizing a shared resource pool. It depends on JUNIPER-LSYS-SECURITYPROFILE-MIB for its object identifier root but otherwise defines only simple Unsigned32/DisplayString objects with no complex external dependencies. It is deployed on Juniper SRX Series security gateways running multiple logical systems, and the JUNIPER-LSYSSP-FLOWGATE-MIB MIB is what an administrator loads to track flow-gate capacity across logical systems.
IPNetwork Monitor allows you to monitor SNMP objects defined in JUNIPER-LSYSSP-FLOWGATE-MIB. Use the built-in SNMP Monitoring Browser to explore available variables, view their current values and descriptions, and select the objects you want to monitor. You can then create SNMP monitors, configure thresholds, and receive alerts when monitored values change.
Supported Devices
- Juniper Networks SRX Series security gateways (logical systems / LSYS security profiles)
Monitoring Examples
An operator polls jnxLsysSpFlowgateUsage against jnxLsysSpFlowgateMaximum for each logical system and checks jnxLsysSpFlowgateHeaviestUser; a logical system's usage approaching its maximum while also appearing as the heaviest user device-wide would indicate that LSYS is at risk of having new pinhole requests rejected.
What Can Be Monitored
- per-LSYS flow-gate (pinhole) resource usage/reserved/maximum counts
- device-wide flow-gate usage and quota totals
- heaviest/lightest flow-gate consumer per LSYS
- flow-gate available-resource amount
Imported Objects
From JUNIPER-LSYS-SECURITYPROFILE-MIB
| jnxLsysSpFlowgate | OBJECT-IDENTITY |
From SNMPv2-SMI
| MODULE-IDENTITY | |
| NOTIFICATION-TYPE | |
| OBJECT-TYPE | |
| Unsigned32 |
From SNMPv2-TC
| DisplayString |
OIDs
RFC description
Juniper Networks logical system security perimeter flow gate MIB used to monitor and manage flow-based security policies and statistics in logical system partitions.
Start monitoring Juniper SRX Series security gateway (logical-system flow-gate quota) with a free 30-day trial of IPNetwork Monitor. Import MIBs, browse SNMP OIDs, create custom SNMP monitors, configure alerts, and monitor any SNMP-enabled network device from a single console.