JUNIPER-VPN-MIB

All MIBs › JUNIPER-VPN-MIB

Organization: IETF Provider Provisioned VPNs WG

Last Updated: 2010-10-15

Category: Technology: VPN, VPN and Security, Vendor: Juniper

Description: Juniper Networks MIB for managing Layer 2 and Layer 3 VPN service instances and forwarding tables on Juniper PE routers.

Start monitoring vendor-neutral, standards-based MIB, any SNMPv3-capable network device (SNMP engine identity/boot/clock status) with a free 30-day trial of IPNetwork Monitor. Import MIBs, browse SNMP OIDs, create custom SNMP monitors, configure alerts, and monitor any SNMP-enabled network device from a single console.

What Is JUNIPER-VPN-MIB?

JUNIPER-VPN-MIB is a Juniper Networks enterprise MIB for managing and monitoring Layer 2 and Layer 3 VPN service instances (including locally switched L2 circuits) on Juniper provider-edge (PE) routers. It exposes configuration and inventory objects describing configured and active VPNs, including per-VPN type, name, and administrative row status, along with index-allocation counters for interfaces, pseudowires, and route targets. Its monitoring focus is software/service status rather than hardware: an administrator tracks how many VPNs are configured versus actively up (jnxVpnConfiguredVpns vs jnxVpnActiveVpns), and whether individual VPN instances remain in an active row status, revealing provisioning errors or VPN instances that failed to come up. It extends and works alongside industry-standard VPN MIBs (e.g., PPVPN/L3VPN MIB family) for full VPN management on Juniper equipment. It is deployed on Juniper MX/PE routers in service-provider networks offering L2VPN/L3VPN services to customers. Engineers can download the JUNIPER-VPN-MIB file directly to load it into their MIB browser.

IPNetwork Monitor allows you to monitor SNMP objects defined in JUNIPER-VPN-MIB. Use the built-in SNMP Monitoring Browser to explore available variables, view their current values and descriptions, and select the objects you want to monitor. You can then create SNMP monitors, configure thresholds, and receive alerts when monitored values change.

Supported Devices

Juniper MX-series PE routers
Juniper routers providing L2VPN/L3VPN services

Monitoring Examples

An operator would compare jnxVpnConfiguredVpns to jnxVpnActiveVpns to spot VPN instances that are provisioned but not operationally active. Walking jnxVpnTable/jnxVpnEntry lets the admin inspect jnxVpnType, jnxVpnName, and jnxVpnRowStatus for each VPN, where a row status other than active indicates a failed or incomplete VPN instantiation. jnxVpnNextIfIndex, jnxVpnNextPwIndex, and jnxVpnNextRTIndex track internal index allocation for interfaces, pseudowires, and route targets, useful for diagnosing index exhaustion in very large VPN deployments. jnxVpnMIBNotifications would issue traps when VPN state changes occur.

What Can Be Monitored

configured VPN count
active VPN count
per-VPN type and name
per-VPN row status
pseudowire/interface/route-target index allocation

Imported Objects

From IF-MIB

InterfaceIndexOrZero

From INET-ADDRESS-MIB

InetAddress
InetAddressType

From JUNIPER-SMI

jnxMibs

OBJECT-IDENTITY

From SNMP-FRAMEWORK-MIB

SnmpAdminString

From SNMPv2-SMI

Counter32
Counter64
Gauge32
Integer32
MODULE-IDENTITY
NOTIFICATION-TYPE
OBJECT-TYPE
TimeTicks
Unsigned32

From SNMPv2-TC

RowStatus
StorageType
TEXTUAL-CONVENTION

How to Use in IPNetwork Monitor

Example using jnxVpnPwPacketsSent OID:

Select a Juniper MX/PE router (L2VPN/L3VPN service instances) as the target host to create a monitor — the SNMP service should be up and running on it. Click New Monitor, then check SNMP Custom on the Favorites tab, click Next, and confirm the host. On the next page, click Select... to open the built-in SNMP MIB Browser and type jnxVpnPwPacketsSent into the Find box to locate it in the OID tree, selecting the specific row/instance you want to monitor since this is a table column, then select it and click OK. The number of packets that have been sent over this Pseudo-Wire. On the monitor's Main parameters page you can set the target's SNMP port (default 161), credentials, polling interval, and other settings — see the SNMP Monitor help for details. On the State conditions and Alerting tabs, configure when the monitor should change state and trigger an alert; since this is a Counter64-type OID, Value bounds is the most useful condition here — trigger an alert if the counter increases sharply between polls relative to its normal baseline, since an unexpected spike often reflects a real change in traffic or activity. Click Finish to create the monitor; you can adjust any parameter later.

OIDs

OID symbolic	OID numeric	Type	Access	Description
G32 jnxVpnActiveSites	1.3.6.1.4.1.2636.3.26.1.2.1.9	Gauge32	read-only	The number of active sites (i.e., sites whose state is active) in the VPN.
G32 jnxVpnActiveVpns	1.3.6.1.4.1.2636.3.26.1.1.2	Gauge32	read-only	Number of active VPNs.
TIK jnxVpnAge	1.3.6.1.4.1.2636.3.26.1.2.1.12	TimeTicks	read-only	The age (i.e., time from creation till now) of this VPN in hundredths of a second.
G32 jnxVpnConfiguredSites	1.3.6.1.4.1.2636.3.26.1.2.1.8	Gauge32	read-only	The number of sites configured in the VPN. Must be set to zero if not applicable.
G32 jnxVpnConfiguredVpns	1.3.6.1.4.1.2636.3.26.1.1.1	Gauge32	read-only	Number of configured VPNs.
STR jnxVpnDescription	1.3.6.1.4.1.2636.3.26.1.2.1.5	SnmpAdminString	read-only	String describing the VPN.
jnxVpnEntry	1.3.6.1.4.1.2636.3.26.1.2.1		not-accessible	Entry containing information about a particular VPN.
OID jnxVpnIdentifier	1.3.6.1.4.1.2636.3.26.1.2.1.7	JnxVpnIdentifier	read-only	In the case of BGP VPNs, this is the Route Distinguisher for the VPN. In the case of LDP VPNs, this is the VC ID for the circuit. A value of all zeros indicates that the neither a Route Distinguisher nor a VC ID is configured for the VPN.
OID jnxVpnIdentifierType	1.3.6.1.4.1.2636.3.26.1.2.1.6	JnxVpnIdentifierType	read-only	Type of the following JnxVpnIdentifier.
U32 jnxVpnIfAssociatedPw	1.3.6.1.4.1.2636.3.26.1.3.1.6	Unsigned32	read-only	Index of associated Pseudo-wire, if any, in which case the index MUST be non-zero. If none, then this index MUST be zero.
NTF jnxVpnIfDown	1.3.6.1.4.1.2636.3.26.0.2			A jnxVpnIfDown notification is generated when the interface with index jnxVpnIfIndex belonging to the VPN named jnxVpnIfVpnName of type jnxVpnIfVpnType transitions to the 'down' state.
jnxVpnIfEntry	1.3.6.1.4.1.2636.3.26.1.3.1		not-accessible	Entry containing information about a particular VPN interface.
U32 jnxVpnIfInBandwidth	1.3.6.1.4.1.2636.3.26.1.3.1.8	Unsigned32	read-only	Maximum bandwidth that the CE connected over this VPN i/f can send to the PE, in Kilo (i.e., 1000) Bytes per second. A value of zero means there is no configured maximum.
U32 jnxVpnIfIndex	1.3.6.1.4.1.2636.3.26.1.3.1.3	Unsigned32	accessible-for-notify	The index of this interface in the VPN. Each interface in the VPN is given a unique index. The RowStatus says whether a given interface (i.e., a row in this table) is valid or not. Note: this index MUST NOT be zero.
U32 jnxVpnIfOutBandwidth	1.3.6.1.4.1.2636.3.26.1.3.1.9	Unsigned32	read-only	Maximum bandwidth that the PE can send to the CE over this VPN interface, in Kilo (i.e., 1000) Bytes per second. A value of zero means there is no configured maximum.
INT jnxVpnIfProtocol	1.3.6.1.4.1.2636.3.26.1.3.1.7	INTEGER	read-only	Protocol running over this VPN interface. The values up to 10 are taken from draft-martini-l2circuit-trans-mpls-08.txt; the value for vpls is taken from draft-lasserre-vkompella-ppvpn-vpls-01.txt. The values from 20-23 are used when the VPN is a Layer 3 VPN.
ROW jnxVpnIfRowStatus	1.3.6.1.4.1.2636.3.26.1.3.1.4	RowStatus	read-only	This variable is used to create, modify, and/or delete a row in this table.
INT jnxVpnIfStatus	1.3.6.1.4.1.2636.3.26.1.3.1.10	INTEGER	read-only	Status of this interface.
STO jnxVpnIfStorageType	1.3.6.1.4.1.2636.3.26.1.3.1.5	StorageType	read-only	This variable indicates the storage type for this object.
jnxVpnIfTable	1.3.6.1.4.1.2636.3.26.1.3		not-accessible	Table of VPN Interfaces.
NTF jnxVpnIfUp	1.3.6.1.4.1.2636.3.26.0.1			A jnxVpnIfUp notification is generated when the interface with index jnxVpnIfIndex belonging to the VPN named jnxVpnIfVpnName of type jnxVpnIfVpnType transitions out of the 'down' state.
JNX jnxVpnIfVpnName	1.3.6.1.4.1.2636.3.26.1.3.1.2	JnxVpnName	accessible-for-notify	Name of the VPN to which this interface belongs.
JNX jnxVpnIfVpnType	1.3.6.1.4.1.2636.3.26.1.3.1.1	JnxVpnType	accessible-for-notify	Type of the VPN to which this interface belongs.
jnxVpnInfo	1.3.6.1.4.1.2636.3.26.1.1
G32 jnxVpnLocalAddresses	1.3.6.1.4.1.2636.3.26.1.2.1.10	Gauge32	read-only	The number of addresses learned from the CE device.
jnxVpnMIB	1.3.6.1.4.1.2636.3.26			Extended VPN MIB module to support VPN Identifier for locally switched L2 circuits.
jnxVpnMIBConformance	1.3.6.1.4.1.2636.3.26.2
jnxVpnMIBNotifications	1.3.6.1.4.1.2636.3.26.0
jnxVpnMibObjects	1.3.6.1.4.1.2636.3.26.1
JNX jnxVpnName	1.3.6.1.4.1.2636.3.26.1.2.1.2	JnxVpnName	not-accessible	Name of the VPN. This should ideally be unique in the Service Provider's domain; at a minimum, it MUST be unique per Provider Edge router.
U32 jnxVpnNextIfIndex	1.3.6.1.4.1.2636.3.26.1.1.3	Unsigned32	read-only	Next free VPN interface index.
U32 jnxVpnNextPwIndex	1.3.6.1.4.1.2636.3.26.1.1.4	Unsigned32	read-only	Next free Pseudo-Wire index.
U32 jnxVpnNextRTIndex	1.3.6.1.4.1.2636.3.26.1.1.5	Unsigned32	read-only	Next free Route Target index.
U32 jnxVpnPwAssociatedInterface	1.3.6.1.4.1.2636.3.26.1.4.1.6	Unsigned32	read-only	The VPN index of the interface associated with this Pseudo Wire, if any. If there is no interface associated with this Pseudo Wire, a value of zero is to be returned.
NTF jnxVpnPwDown	1.3.6.1.4.1.2636.3.26.0.4			A jnxVpnPwDown notification is generated when the Pseudo-Wire with index jnxVpnPwIndex belonging to the VPN named jnxVpnPwVpnName of type jnxVpnPwVpnType transitions to the 'down' state.
jnxVpnPwEntry	1.3.6.1.4.1.2636.3.26.1.4.1		not-accessible	Entry containing information about a particular VPN.
U32 jnxVpnPwIndex	1.3.6.1.4.1.2636.3.26.1.4.1.3	Unsigned32	accessible-for-notify	The index of this Pseudo-Wire in the VPN. Each Pseudo Wire in the VPN is given a unique index. The RowStatus says whether a given Pseudo Wire (i.e., a row in this table) is valid or not. Note: this index MUST NOT be zero.
TIK jnxVpnPwLastTransition	1.3.6.1.4.1.2636.3.26.1.4.1.20	TimeTicks	read-only	The time in hundredths of a second since the last transition occurred on this Tunnel.
U32 jnxVpnPwLocalSiteId	1.3.6.1.4.1.2636.3.26.1.4.1.7	Unsigned32	read-only	The local site identifier for this Pseudo-Wire. If there is no local site identifier, a value of zero is to be returned.
C32 jnxVpnPwLROctetsReceived	1.3.6.1.4.1.2636.3.26.1.4.1.28	Counter32	read-only	The number of octets that have been received over this Pseudo-Wire.
C32 jnxVpnPwLROctetsSent	1.3.6.1.4.1.2636.3.26.1.4.1.26	Counter32	read-only	The number of octets that have been sent over this Pseudo-Wire.
C32 jnxVpnPwLRPacketsReceived	1.3.6.1.4.1.2636.3.26.1.4.1.27	Counter32	read-only	The number of packets that have been received over this Pseudo-Wire.
C32 jnxVpnPwLRPacketsSent	1.3.6.1.4.1.2636.3.26.1.4.1.25	Counter32	read-only	The number of packets that have been sent over this Pseudo-Wire.
C64 jnxVpnPwOctetsReceived	1.3.6.1.4.1.2636.3.26.1.4.1.24	Counter64	read-only	The number of octets that have been received over this Pseudo-Wire.
C64 jnxVpnPwOctetsSent	1.3.6.1.4.1.2636.3.26.1.4.1.22	Counter64	read-only	The number of octets that have been sent over this Pseudo-Wire.
C64 jnxVpnPwPacketsReceived	1.3.6.1.4.1.2636.3.26.1.4.1.23	Counter64	read-only	The number of packets that have been received over this Pseudo-Wire.
C64 jnxVpnPwPacketsSentEx	1.3.6.1.4.1.2636.3.26.1.4.1.21	Counter64	read-only	The number of packets that have been sent over this Pseudo-Wire.
JNX jnxVpnPwReceiveDemux	1.3.6.1.4.1.2636.3.26.1.4.1.13	JnxVpnMultiplexor	read-only	The value of the demultiplexor that identifies received packets as belonging to this Pseudo-Wire, if any.
U32 jnxVpnPwRemoteSiteId	1.3.6.1.4.1.2636.3.26.1.4.1.8	Unsigned32	read-only	The remote site (i.e., the site at the other end of this Pseudo-Wire) identifier. If there is no remote site identifier, a value of zero is to be returned.
INT jnxVpnPwRemoteSiteStatus	1.3.6.1.4.1.2636.3.26.1.4.1.17	INTEGER	read-only	Status of the interface at the remote end of the Pseudo-Wire.
ROW jnxVpnPwRowStatus	1.3.6.1.4.1.2636.3.26.1.4.1.4	RowStatus	read-only	This variable is used to create, modify, and/or delete a row in this table.
INT jnxVpnPwStatus	1.3.6.1.4.1.2636.3.26.1.4.1.15	INTEGER	read-only	Status of the Pseudo-Wire.
STO jnxVpnPwStorageType	1.3.6.1.4.1.2636.3.26.1.4.1.5	StorageType	read-only	This variable indicates the storage type for this object.
jnxVpnPwTable	1.3.6.1.4.1.2636.3.26.1.4		not-accessible	Table of Pseudo-Wire Connections.
TIK jnxVpnPwTimeUp	1.3.6.1.4.1.2636.3.26.1.4.1.18	TimeTicks	read-only	The total time in hundredths of a second that this Pseudo-Wire has been operational.
G32 jnxVpnPwTransitions	1.3.6.1.4.1.2636.3.26.1.4.1.19	Gauge32	read-only	The number of state transitions (up -> down and down -> up) this Tunnel has undergone.
JNX jnxVpnPwTransmitDemux	1.3.6.1.4.1.2636.3.26.1.4.1.14	JnxVpnMultiplexor	read-only	The value of the demultiplexor that identifies transmitted packets as belonging to this Pseudo-Wire, if any.
STR jnxVpnPwTunnelName	1.3.6.1.4.1.2636.3.26.1.4.1.12	SnmpAdminString	read-only	The name of the Tunnel over which this Pseudo-Wire is carried, if any.
INT jnxVpnPwTunnelStatus	1.3.6.1.4.1.2636.3.26.1.4.1.16	INTEGER	read-only	Status of the PE-to-PE tunnel over which the Pseudo- Wire is carried.
INT jnxVpnPwTunnelType	1.3.6.1.4.1.2636.3.26.1.4.1.11	INTEGER	read-only	The type of the tunnel over which the Pseudo-Wire is carried. If several Pseudo-Wires can be carried in one tunnel, each Pseudo-Wire is identified by the multiplexor/ demultiplexor within this tunnel.
NTF jnxVpnPwUp	1.3.6.1.4.1.2636.3.26.0.3			A jnxVpnPwUp notification is generated when the Pseudo-Wire with index jnxVpnPwIndex belonging to the VPN named jnxVpnPwVpnName of type jnxVpnPwVpnType transitions out of the 'down' state.
JNX jnxVpnPwVpnName	1.3.6.1.4.1.2636.3.26.1.4.1.2	JnxVpnName	accessible-for-notify	The name of the VPN to which this Pseudo-Wire belongs.
JNX jnxVpnPwVpnType	1.3.6.1.4.1.2636.3.26.1.4.1.1	JnxVpnType	accessible-for-notify	The type of the VPN to which this Pseudo-Wire belongs.
IP jnxVpnRemotePeIdAddress	1.3.6.1.4.1.2636.3.26.1.4.1.10	InetAddress	read-only	The address of the remote PE, i.e., the router at the other end of the Pseudo-Wire.
IPt jnxVpnRemotePeIdAddrType	1.3.6.1.4.1.2636.3.26.1.4.1.9	InetAddressType	read-only	The type of address assigned to the remote PE.
ROW jnxVpnRowStatus	1.3.6.1.4.1.2636.3.26.1.2.1.3	RowStatus	read-only	This variable is used to create, modify, and/or delete a row in this table.
OID jnxVpnRT	1.3.6.1.4.1.2636.3.26.1.5.1.7	JnxVpnIdentifier	read-only	Route Target for the VPN. If the jnxVpnRTType is 'none', this value should be all zeros.
jnxVpnRTEntry	1.3.6.1.4.1.2636.3.26.1.5.1		not-accessible	Entry containing information about a particular VPN.
INT jnxVpnRTFunction	1.3.6.1.4.1.2636.3.26.1.5.1.8	INTEGER	read-only	The route target export distribution type.
U32 jnxVpnRTIndex	1.3.6.1.4.1.2636.3.26.1.5.1.3	Unsigned32	not-accessible	The index within the list of Route Targets that specifies individual Route Targets that define the VPN. Note: this index MUST NOT be zero.
ROW jnxVpnRTRowStatus	1.3.6.1.4.1.2636.3.26.1.5.1.4	RowStatus	read-only	This variable is used to create, modify, and/or delete a row in this table.
STO jnxVpnRTStorageType	1.3.6.1.4.1.2636.3.26.1.5.1.5	StorageType	read-only	This variable indicates the storage type for this object.
jnxVpnRTTable	1.3.6.1.4.1.2636.3.26.1.5		not-accessible	Table of Route Targets for a VPN.
OID jnxVpnRTType	1.3.6.1.4.1.2636.3.26.1.5.1.6	JnxVpnIdentifierType	read-only	Type of the following Route Target. This can one of 'routeTarget[012]' or 'none'.
JNX jnxVpnRTVpnName	1.3.6.1.4.1.2636.3.26.1.5.1.2	JnxVpnName	not-accessible	The name of the VPN for which this list of Route Targets are defined.
JNX jnxVpnRTVpnType	1.3.6.1.4.1.2636.3.26.1.5.1.1	JnxVpnType	not-accessible	The type of the VPN for which this list of Route Targets are defined.
STO jnxVpnStorageType	1.3.6.1.4.1.2636.3.26.1.2.1.4	StorageType	read-only	This variable indicates the storage type for this object.
jnxVpnTable	1.3.6.1.4.1.2636.3.26.1.2		not-accessible	Table of Configured VPNs.
G32 jnxVpnTotalAddresses	1.3.6.1.4.1.2636.3.26.1.2.1.11	Gauge32	read-only	The total number of addresses in the VPN RIB.
JNX jnxVpnType	1.3.6.1.4.1.2636.3.26.1.2.1.1	JnxVpnType	not-accessible	Type of the VPN.

RFC description

Manages provider-provisioned VPNs including L2 circuits, VPLS, and various VPN types on Juniper networks.

Start monitoring Juniper MX/PE router (L2VPN/L3VPN service instances) with a free 30-day trial of IPNetwork Monitor. Import MIBs, browse SNMP OIDs, create custom SNMP monitors, configure alerts, and monitor any SNMP-enabled network device from a single console.

Download JUNIPER-VPN-MIB