JUNIPER-LSYSSPAUTHENTRY-MIB

Description: Managed objects covering per-logical-system security profile limits on authentication entry resources for Juniper Networks SRX devices.

Start monitoring vendor-neutral, standards-based MIB, any SNMPv3-capable network device (SNMP engine identity/boot/clock status) with a free 30-day trial of IPNetwork Monitor. Import MIBs, browse SNMP OIDs, create custom SNMP monitors, configure alerts, and monitor any SNMP-enabled network device from a single console.

JUNIPER-LSYSSPAUTHENTRY-MIB is a Juniper Networks proprietary MIB for SRX-series firewalls, focused on the authentication-entry resource dimension of Logical System (LSYS) security profiles, which let a single physical SRX be partitioned into multiple logical systems each with quota-managed resources. It exposes objects tracking configured and current usage of authentication-entry resources (e.g., firewall user-authentication sessions) per logical system security profile. Its monitoring value is on software/resource status: revealing whether a logical system is approaching or has hit its configured authentication-entry quota, which would cause new user-authentication attempts to be rejected even though the physical device has capacity to spare. It is explicitly tied to Juniper's broader Logical-System security-profile MIB framework, of which this module covers only the auth-entry resource, so it depends on that parent LSYS profile model for context. It is deployed on Juniper SRX firewalls used by service providers or enterprises running multi-tenant logical systems requiring per-tenant authentication resource limits. Network engineers evaluating or troubleshooting this functionality can download the JUNIPER-LSYSSPAUTHENTRY-MIB file directly to load it into their MIB browser.

No sample objects were provided for this MIB, but given its stated scope, an operator would poll a logical-system security-profile table (following Juniper's jnxJsSecProfile*AuthEntry naming pattern) to compare current authentication-entry usage against the configured quota for each logical system. A logical system whose usage counter approaches its configured maximum would explain reports from that tenant's administrators of new VPN/firewall user-authentication attempts being unexpectedly rejected. This is inferred from the module's stated purpose since no object names were supplied.

Provides managed objects for authentication entry resource limits per logical system security profile on Juniper Networks SRX devices.