Juniper-CLI-MIB

All MIBs › Juniper-CLI-MIB

Organization: Juniper Networks, Inc.

Last Updated: 2007-12-10

Category: Device Management, Vendor: Juniper

Description: Provides managed objects for monitoring and managing CLI sessions and access on Juniper Networks E-series routers.

Start monitoring vendor-neutral, standards-based MIB, any SNMPv3-capable network device (SNMP engine identity/boot/clock status) with a free 30-day trial of IPNetwork Monitor. Import MIBs, browse SNMP OIDs, create custom SNMP monitors, configure alerts, and monitor any SNMP-enabled network device from a single console.

What Is Juniper-CLI-MIB?

The Juniper-CLI-MIB is a Juniper Networks enterprise MIB (originating from the Unisphere/E-series line) for monitoring and managing Command Line Interface (CLI) configuration operations and CLI-related security events on E-series routers. It exposes a configuration table tracking configuration file names and their apply/operation status, plus a security-alert mechanism reporting CLI-related security messages with a priority and timestamp. This makes it useful for monitoring the software-level state of configuration changes on the router: whether a configuration file apply operation succeeded, failed, or is in progress, and whether any security-relevant CLI events, such as suspicious access attempts, have been raised. It sits within Juniper's broader E-series enterprise MIB tree and is used alongside standard SNMP notification mechanisms (juniCliTrap) to alert management stations. It is deployed on Juniper Networks E-series routers used by service providers for edge routing, where configuration-change auditing and CLI security alerting matter operationally. Engineers can download the Juniper-CLI-MIB file directly to load it into their MIB browser.

IPNetwork Monitor allows you to monitor SNMP objects defined in Juniper-CLI-MIB. Use the built-in SNMP Monitoring Browser to explore available variables, view their current values and descriptions, and select the objects you want to monitor. You can then create SNMP monitors, configure thresholds, and receive alerts when monitored values change.

Supported Devices

Juniper Networks E-series routers

Monitoring Examples

An administrator can poll juniCliConfigurationTable/juniCliConfigurationEntry to check juniCliConfigurationOpStatus for a given juniCliConfigurationFileName, confirming whether a pushed configuration was successfully applied. Watching juniCliSecurityAlertMessage together with juniCliSecurityAlertPriority and juniCliSecurityAlertTime, combined with the juniCliTrap notification, lets an operator detect and time-stamp suspicious CLI access attempts as they occur.

What Can Be Monitored

configuration file apply status
configuration operation status
CLI security alert messages
CLI security alert priority/timestamp
CLI trap notifications

Imported Objects

From Juniper-MIBs

juniMibs

MODULE-IDENTITY

From Juniper-TC

JuniLogSeverity

From SNMPv2-CONF

MODULE-COMPLIANCE
NOTIFICATION-GROUP
OBJECT-GROUP

From SNMPv2-SMI

MODULE-IDENTITY
NOTIFICATION-TYPE
OBJECT-TYPE

From SNMPv2-TC

DateAndTime
DisplayString
TruthValue

How to Use in IPNetwork Monitor

Example using juniCliConfigurationApply OID:

Select a Juniper Networks E-series router (CLI configuration/security alerts) as the target host to create a monitor — the SNMP service should be up and running on it. Click New Monitor, then check SNMP Custom on the Favorites tab, click Next, and confirm the host. On the next page, click Select... to open the built-in SNMP MIB Browser and type juniCliConfigurationApply into the Find box to locate it in the OID tree, selecting the specific row/instance you want to monitor since this is a table column, then select it and click OK. It reports as soon as a CLI configuration file is transferred using juniFileXferMIB, this value is set to juniCliConfigurationReadyToApply. On the monitor's Main parameters page you can set the target's SNMP port (default 161), credentials, polling interval, and other settings — see the SNMP Monitor help for details. On the State conditions and Alerting tabs, configure when the monitor should change state and trigger an alert; since this is an INTEGER-type OID, Value bounds is the most useful condition here — trigger an alert if the value stays at 'juniCliConfigurationReadyToApply' for longer than you'd expect, since that means a transferred configuration file is still waiting to be applied. Click Finish to create the monitor; you can adjust any parameter later.

OIDs

OID symbolic	OID numeric	Type	Access	Description
juniCliMIB	1.3.6.1.4.1.4874.2.2.30			The Command Line Interface (CLI) MIB for the Juniper Networks enterprise.
juniCliTrap	1.3.6.1.4.1.4874.2.2.30.0
NTF juniCliSecurityAlert	1.3.6.1.4.1.4874.2.2.30.0.1			Reports a cli security alert. Events such as the following generate this notification when it is enabled: - Logins/logouts from telnet or console access - Logins/logout from SSH - Access from unknown IP addreses - Access list accept or failures - Successful and unsuccessful authentications
juniCliObjects	1.3.6.1.4.1.4874.2.2.30.1
juniCliGeneral	1.3.6.1.4.1.4874.2.2.30.1.1
T/F juniCliSecurityTrapEnable	1.3.6.1.4.1.4874.2.2.30.1.1.1	TruthValue	read-write	An indication of whether the juniCliSecurityAlert notifications are enabled.
juniCliSecurity	1.3.6.1.4.1.4874.2.2.30.1.2
JUN juniCliSecurityAlertPriority	1.3.6.1.4.1.4874.2.2.30.1.2.1	JuniLogSeverity	accessible-for-notify	The priority level of the cli security alert.
STR juniCliSecurityAlertMessage	1.3.6.1.4.1.4874.2.2.30.1.2.2	DisplayString	accessible-for-notify	The cli security alert message.
DAT juniCliSecurityAlertTime	1.3.6.1.4.1.4874.2.2.30.1.2.3	DateAndTime	accessible-for-notify	The date and time of this cliSecurityAlert.
juniCliConfigurationTable	1.3.6.1.4.1.4874.2.2.30.1.3		not-accessible	A table which has entries for the configuration files which are transferred using juniFileXferMIB.
juniCliConfigurationEntry	1.3.6.1.4.1.4874.2.2.30.1.3.1		not-accessible	An entry in juniCliConfigurationTable represents a CLI configuration file which can be applied using juniConfigurationApply object.
INT juniCliConfigurationIndex	1.3.6.1.4.1.4874.2.2.30.1.3.1.1	INTEGER	not-accessible	A unique index used to identify this entry. The value of the index is same as the index in juniFileXferTable from juniFileXferMIB. The entries in this table correspond only to those entries in the juniFileXferTable which has the juniFileXferFileType specified as juniFileXferScript.
STR juniCliConfigurationFileName	1.3.6.1.4.1.4874.2.2.30.1.3.1.2	DisplayString	read-only	The full path name of the CLI configuration files on the router which are copied using juniFileXferMIB. The configuration specified in these file can be applied to the router.
INT juniCliConfigurationApplyEx	1.3.6.1.4.1.4874.2.2.30.1.3.1.3	INTEGER	read-write	As soon as a CLI configuration file is transferred using juniFileXferMIB, this value is set to juniCliConfigurationReadyToApply. If the user wants to apply the configuration specified in this file, the value of this object needs to be set to juniCliConfigurationApplyNow. Once the operation is completed, the status of the operation is updated in juniCliConfigurationOpStatus object and the value of juniCliConfigurationApply is reset to juniCliConfigurationReadyToApply.
INT juniCliConfigurationOpStatus	1.3.6.1.4.1.4874.2.2.30.1.3.1.4	INTEGER	read-only	The status of the operation. Once the CLI configuration file is copied, the value of this object is set to juniCliConfigurationOp. Once the administrator sets the vlaue of juniCliConfigurationApply object to be juniCliConfigurationApplyNow,the status is changed to juniCliConfigurationOpInProgress until the operation is completed. After completion of the operation, the status is set to one of the specified values.
juniCliConformance	1.3.6.1.4.1.4874.2.2.30.2
juniCliCompliances	1.3.6.1.4.1.4874.2.2.30.2.1
juniCliCompliance	1.3.6.1.4.1.4874.2.2.30.2.1.1			Obsolete compliance statement for entities that implement the Juniper CLI MIB. This statement became obsolete when new groups were added.
juniCliCompliance2	1.3.6.1.4.1.4874.2.2.30.2.1.2			The compliance statement for entities that implement the Juniper CLI MIB.
juniCliGroups	1.3.6.1.4.1.4874.2.2.30.2.2
juniCliGroup	1.3.6.1.4.1.4874.2.2.30.2.2.1			A management object pertaining to CLI security configuration.
juniCliSecurityAlertGroup	1.3.6.1.4.1.4874.2.2.30.2.2.2			A collection of management objects pertaining to CLI security alert notification.
juniCliSecurityTrapGroup	1.3.6.1.4.1.4874.2.2.30.2.2.3			A management notification pertaining to CLI security operations.
juniCliConfigurationGroup	1.3.6.1.4.1.4874.2.2.30.2.2.4			A collection of objects providing information to implementers for applying configuration on a Juniper router.

RFC description

Juniper Networks command line interface MIB with configuration management and security monitoring capabilities.

Start monitoring Juniper Networks E-series router (CLI configuration/security alerts) with a free 30-day trial of IPNetwork Monitor. Import MIBs, browse SNMP OIDs, create custom SNMP monitors, configure alerts, and monitor any SNMP-enabled network device from a single console.

Download Juniper-CLI-MIB