Juniper-IKE-MIB

All MIBs › Juniper-IKE-MIB

Organization: Juniper Networks, Inc.

Last Updated: 2005--1-1-

Category: VPN and Security, Vendor: Juniper

Description: Provides managed objects for IKE negotiation statistics, SA (Security Association) status, and policy on Juniper Networks E-series VPN routers.

Start monitoring vendor-neutral, standards-based MIB, any SNMPv3-capable network device (SNMP engine identity/boot/clock status) with a free 30-day trial of IPNetwork Monitor. Import MIBs, browse SNMP OIDs, create custom SNMP monitors, configure alerts, and monitor any SNMP-enabled network device from a single console.

What Is Juniper-IKE-MIB?

Juniper-IKE-MIB is a vendor MIB from Juniper Networks for its E-series routers, providing managed objects for Internet Key Exchange (IKE) negotiation, covering IKE policy rules and their negotiated Security Associations for IPsec VPNs. It exposes configuration data (policy rules, authentication method, encryption method, PFS group, hash method, lifetime, negotiation mode) in the security/VPN category, for both IKEv1 (juniIkePolicyRuleTable) and IKEv2 (juniIkePolicyRuleV2Table) policies. Its monitoring role centers on software/configuration status of the VPN control plane: verifying juniIkePolicyRuleRowStatus and the negotiated parameters confirms whether an IKE policy is active and correctly provisioned, which is essential to diagnosing failed or mismatched VPN tunnel negotiations. It depends on the base IPsec/IKE framework standards (RFC 2409 IKE) that define the negotiation concepts it models, and is part of Juniper's broader E-series VPN/security MIB family. It is typically deployed on Juniper E-series edge routers terminating IPsec VPN tunnels for enterprise or service-provider WAN connectivity. Engineers can download the Juniper-IKE-MIB file directly to load it into their MIB browser.

IPNetwork Monitor allows you to monitor SNMP objects defined in Juniper-IKE-MIB. Use the built-in SNMP Monitoring Browser to explore available variables, view their current values and descriptions, and select the objects you want to monitor. You can then create SNMP monitors, configure thresholds, and receive alerts when monitored values change.

Supported Devices

Juniper Networks E-series routers

Monitoring Examples

An administrator would poll juniIkePolicyRuleTable (via juniIkePolicyRuleEntry, indexed by rule priority juniIkePolicyRulePriority) to check juniIkePolicyRuleAuthMethod, juniIkePolicyRuleEncryptMethod, and juniIkePolicyRulePfsGroup for a given VPN peer's policy, confirming it matches the remote peer's configuration. A juniIkePolicyRuleRowStatus that fails to reach an active state, or a lifetime mismatch (juniIkePolicyRuleLifetime) between the local juniIkePolicyRuleV2Table entry and its peer, would reveal why an IPsec tunnel is failing to establish or is repeatedly renegotiating.

What Can Be Monitored

IKE policy rule priority
authentication method
encryption method
PFS group
hash method
SA lifetime
negotiation mode
policy row status

Imported Objects

From Juniper-MIBs

juniMibs

MODULE-IDENTITY

From SNMPv2-CONF

MODULE-COMPLIANCE
OBJECT-GROUP

From SNMPv2-SMI

Integer32
IpAddress
MODULE-IDENTITY
OBJECT-TYPE
Unsigned32

From SNMPv2-TC

DisplayString
RowStatus
TEXTUAL-CONVENTION

OIDs

OID symbolic	OID numeric	Type	Access	Description
juniIkeMIB	1.3.6.1.4.1.4874.2.2.71			The Internet Key Exchange (IKE) MIB for the Juniper Networks enterprise.
juniIkeObjects	1.3.6.1.4.1.4874.2.2.71.1
juniIke	1.3.6.1.4.1.4874.2.2.71.1.1
juniIkePolicyRuleTable	1.3.6.1.4.1.4874.2.2.71.1.1.1		not-accessible	Obsolete IKE policy rule table that stores the IKE policy rule. This table has been replaced by the juniIkePolicyRuleV2Table
juniIkePolicyRuleEntry	1.3.6.1.4.1.4874.2.2.71.1.1.1.1		not-accessible	Describes the IKE policy rule.
I32 juniIkePolicyRulePriority	1.3.6.1.4.1.4874.2.2.71.1.1.1.1.1	Integer32	not-accessible	The priority of the IKE policy rule.
JUN juniIkePolicyRuleAuthMethod	1.3.6.1.4.1.4874.2.2.71.1.1.1.1.2	JuniIkeAuthenticationMethod	read-create	The authentication method for the IKE policy rule.
JUN juniIkePolicyRuleEncryptMethod	1.3.6.1.4.1.4874.2.2.71.1.1.1.1.3	JuniIkeEncryptionMethod	read-create	The encryption method for the IKE policy rule.
JUN juniIkePolicyRulePfsGroup	1.3.6.1.4.1.4874.2.2.71.1.1.1.1.4	JuniIkeGroup	read-create	The PFS group for the IKE policy rule.
JUN juniIkePolicyRuleHashMethod	1.3.6.1.4.1.4874.2.2.71.1.1.1.1.5	JuniIkeHashMethod	read-create	The hash method for the IKE policy rule.
I32 juniIkePolicyRuleLifetime	1.3.6.1.4.1.4874.2.2.71.1.1.1.1.6	Integer32	read-create	The lifetime in seconds for the IKE policy rule.
JUN juniIkePolicyRuleNegotiationMode	1.3.6.1.4.1.4874.2.2.71.1.1.1.1.7	JuniIkeNegotiationMode	read-create	The negotiation mode for the IKE policy rule.
ROW juniIkePolicyRuleRowStatus	1.3.6.1.4.1.4874.2.2.71.1.1.1.1.8	RowStatus	read-create	Controls creation/deletion of entries in this table according to the RowStatus textual convention, constrained to support the following values only: createAndGo destroy To create an entry in this table, the following entry objects MUST be explicitly configured: juniIkePolicyRulePriority
juniIkeIpv4PresharedKeyTable	1.3.6.1.4.1.4874.2.2.71.1.1.2		not-accessible	The IKE preshared key table that stores the IKE pre-share keys indexed by the IP address.
juniIkeIpv4PresharedKeyEntry	1.3.6.1.4.1.4874.2.2.71.1.1.2.1		not-accessible	Describes the IKE preshared key.
IP juniIkeIpv4PresharedRemoteIpAddr	1.3.6.1.4.1.4874.2.2.71.1.1.2.1.1	IpAddress	not-accessible	The IP address of the remote endpoint for the preshared key.
U32 juniIkeIpv4PresharedRouterIdx	1.3.6.1.4.1.4874.2.2.71.1.1.2.1.2	Unsigned32	not-accessible	The router index of the virtual router. The value of this object can be used to retrieve additional information in the router MIB.
STR juniIkeIpv4PresharedKeyStr	1.3.6.1.4.1.4874.2.2.71.1.1.2.1.3	DisplayString	read-create	The IKE preshared key string.
OCT juniIkeIpv4PresharedMaskedKeyStr	1.3.6.1.4.1.4874.2.2.71.1.1.2.1.4	OCTET STRING	read-create	The IKE masked preshared key string.
ROW juniIkeIpv4PresharedKeyRowStatus	1.3.6.1.4.1.4874.2.2.71.1.1.2.1.5	RowStatus	read-create	Controls creation/deletion of entries in this table according to the RowStatus textual convention, constrained to support the following values only: createAndGo destroy To create an entry in this table, the following entry objects MUST be explicitly configured: juniIkeIpv4PresharedKeyRowStatus juniIkeIpv4PresharedRemoteIpAddr juniIkeIpv4PresharedKeyStr Once created, the following objects may not be modified: juniIkeIpv4PresharedRemoteIpAddr juniIkeIpv4PresharedMaskedKeyStr
juniIkeFqdnPresharedKeyTable	1.3.6.1.4.1.4874.2.2.71.1.1.3		not-accessible	The IPSEC preshared key table that stores the IKE pre-share keys indexed by FQDN or userFQDN string.
juniIkeFqdnPresharedKeyEntry	1.3.6.1.4.1.4874.2.2.71.1.1.3.1		not-accessible	Describes the IKE phase preshared key.
STR juniIkeFqdnPresharedRemote	1.3.6.1.4.1.4874.2.2.71.1.1.3.1.1	DisplayString	not-accessible	The remote FQDN endpoint of the IKE preshared key.
U32 juniIkeFqdnPresharedRouterIndex	1.3.6.1.4.1.4874.2.2.71.1.1.3.1.2	Unsigned32	not-accessible	The router index of the virtual router. The value of this object can be used to retrieve additional information in the router MIB.
STR juniIkeFqdnPresharedKeyStr	1.3.6.1.4.1.4874.2.2.71.1.1.3.1.3	DisplayString	read-create	The IKE preshared key string.
OCT juniIkeFqdnPresharedMaskedKeyStr	1.3.6.1.4.1.4874.2.2.71.1.1.3.1.4	OCTET STRING	read-create	The IKE masked preshared key string.
ROW juniIkeFqdnPresharedKeyRowStatus	1.3.6.1.4.1.4874.2.2.71.1.1.3.1.5	RowStatus	read-create	Controls creation/deletion of entries in this table according to the RowStatus textual convention, constrained to support the following values only: createAndGo destroy To create an entry in this table, the following entry objects MUST be explicitly configured: juniIpsecIkePresharedKeyRowStatus juniIkeFqdnPresharedRemote juniIkeFqdnPresharedVirtualRouter juniIkeFqdnPresharedKeyStr Once created, the following objects may not be modified: juniIkeFqdnPresharedRemote juniIkeFqdnPresharedVirtualRouter juniIkeFqdnPresharedMaskedKeyStr
juniIkeSaTable	1.3.6.1.4.1.4874.2.2.71.1.1.4		not-accessible	Obsolete IKE security assoication table. This table has been replaced by the version 2 IKE SA table (juniIkeSa2Table).
juniIkeSaEntry	1.3.6.1.4.1.4874.2.2.71.1.1.4.1		not-accessible	Describes the IPsec IKE SA.
IP juniIkeSaRemoteIpAddr	1.3.6.1.4.1.4874.2.2.71.1.1.4.1.1	IpAddress	not-accessible	The remote IP address of the IKE security association.
IP juniIkeSaLocalIpAddr	1.3.6.1.4.1.4874.2.2.71.1.1.4.1.2	IpAddress	not-accessible	The local IP address of the IKE security association.
U32 juniIkeSaRouterIndex	1.3.6.1.4.1.4874.2.2.71.1.1.4.1.3	Unsigned32	not-accessible	The router index of the virtual router. The value of this object can be used to retrieve additional information in the router MIB.
JUN juniIkeSaDirection	1.3.6.1.4.1.4874.2.2.71.1.1.4.1.4	JuniIpsecPhase1SaDirection	not-accessible	The value represents if the IKE SA is for initiator or responder. Initiator donates the value of 0, and responder denotes the value of 1.
JUN juniIkeSaState	1.3.6.1.4.1.4874.2.2.71.1.1.4.1.5	JuniIpsecPhase1SaState	read-only	The state of the IKE secruity association.
U32 juniIkeSaRemaining	1.3.6.1.4.1.4874.2.2.71.1.1.4.1.6	Unsigned32	read-only	The remaining time of the IKE security association.
juniIkeSa2Table	1.3.6.1.4.1.4874.2.2.71.1.1.5		not-accessible	The IKE security assoication table.
juniIkeSa2Entry	1.3.6.1.4.1.4874.2.2.71.1.1.5.1		not-accessible	Describes the IPsec IKE SA.
IP juniIkeSa2RemoteIpAddr	1.3.6.1.4.1.4874.2.2.71.1.1.5.1.1	IpAddress	not-accessible	The remote IP address of the IKE security association.
U32 juniIkeSaRemotePort	1.3.6.1.4.1.4874.2.2.71.1.1.5.1.2	Unsigned32	not-accessible	The remote UDP port the IKE security association.
IP juniIkeSa2LocalIpAddr	1.3.6.1.4.1.4874.2.2.71.1.1.5.1.3	IpAddress	not-accessible	The local IP address of the IKE security association.
U32 juniIkeSaLocalPort	1.3.6.1.4.1.4874.2.2.71.1.1.5.1.4	Unsigned32	not-accessible	The local UDP port the IKE security association.
U32 juniIkeSa2RouterIndex	1.3.6.1.4.1.4874.2.2.71.1.1.5.1.5	Unsigned32	not-accessible	The router index of the virtual router. The value of this object can be used to retrieve additional information in the router MIB.
INT juniIkeSa2Direction	1.3.6.1.4.1.4874.2.2.71.1.1.5.1.6	INTEGER	not-accessible	This IKE SA is for an initiator or a responder.
INT juniIkeSaNegotiationDone	1.3.6.1.4.1.4874.2.2.71.1.1.5.1.7	INTEGER	not-accessible	The phase 1 negotiation is done or not.
JUN juniIkeSa2State	1.3.6.1.4.1.4874.2.2.71.1.1.5.1.8	JuniIpsecPhase1SaState	read-only	The state of the IKE secruity association.
U32 juniIkeSa2Remaining	1.3.6.1.4.1.4874.2.2.71.1.1.5.1.9	Unsigned32	read-only	The remaining time of the IKE security association.
OCT juniRemoteCookie	1.3.6.1.4.1.4874.2.2.71.1.1.5.1.10	OCTET STRING	read-only	The remote IKE cookie.
OCT juniLocalCookie	1.3.6.1.4.1.4874.2.2.71.1.1.5.1.11	OCTET STRING	read-only	The local IKE cookie.
juniIkePolicyRuleV2Table	1.3.6.1.4.1.4874.2.2.71.1.1.6		not-accessible	The IKE policy rule table that stores the IKE policy rule.
juniIkePolicyRuleV2Entry	1.3.6.1.4.1.4874.2.2.71.1.1.6.1		not-accessible	Describes the IKE policy rule.
I32 juniIkePolicyRuleV2Priority	1.3.6.1.4.1.4874.2.2.71.1.1.6.1.1	Integer32	not-accessible	The priority of the IKE policy rule.
JUN juniIkePolicyRuleV2AuthMethod	1.3.6.1.4.1.4874.2.2.71.1.1.6.1.2	JuniIkeAuthenticationMethod	read-create	The authentication method for the IKE policy rule.
JUN juniIkePolicyRuleV2EncryptMethod	1.3.6.1.4.1.4874.2.2.71.1.1.6.1.3	JuniIkeEncryptionMethod	read-create	The encryption method for the IKE policy rule.
JUN juniIkePolicyRuleV2PfsGroup	1.3.6.1.4.1.4874.2.2.71.1.1.6.1.4	JuniIkeGroup	read-create	The PFS group for the IKE policy rule.
JUN juniIkePolicyRuleV2HashMethod	1.3.6.1.4.1.4874.2.2.71.1.1.6.1.5	JuniIkeHashMethod	read-create	The hash method for the IKE policy rule.
I32 juniIkePolicyRuleV2Lifetime	1.3.6.1.4.1.4874.2.2.71.1.1.6.1.6	Integer32	read-create	The lifetime in seconds for the IKE policy rule.
JUN juniIkePolicyRuleV2NegotiationMode	1.3.6.1.4.1.4874.2.2.71.1.1.6.1.7	JuniIkeNegotiationV2Mode	read-create	The negotiation mode for the IKE policy rule.
IP juniIkePolicyRuleV2IpAddress	1.3.6.1.4.1.4874.2.2.71.1.1.6.1.8	IpAddress	read-create	The ip address for the IKE policy rule.
U32 juniIkePolicyRuleV2RouterIndex	1.3.6.1.4.1.4874.2.2.71.1.1.6.1.9	Unsigned32	read-create	The virtual router for the IKE policy rule.
ROW juniIkePolicyRuleV2RowStatus	1.3.6.1.4.1.4874.2.2.71.1.1.6.1.10	RowStatus	read-create	Controls creation/deletion of entries in this table according to the RowStatus textual convention, constrained to support the following values only: createAndGo destroy To create an entry in this table, the following entry objects MUST be explicitly configured: juniIkePolicyRuleV2Priority
juniIkeMIBConformance	1.3.6.1.4.1.4874.2.2.71.2
juniIkeMIBCompliances	1.3.6.1.4.1.4874.2.2.71.2.1
juniIkeCompliance	1.3.6.1.4.1.4874.2.2.71.2.1.1			Obsolete compliance statement for SNMPv2 entities which implement the IKE MIB. This statement became obsolete when the juniIkeSaTable was replaced with the juniIkeSa2Table.
juniIkeCompliance2	1.3.6.1.4.1.4874.2.2.71.2.1.2			Obsolete compliance statement for SNMPv2 entities which implement the IKE MIB. This statement became obsolete when the juniIkePolicyRuleGroup was replaced with the juniIkePolicyRuleV2Group
juniIkeCompliance3	1.3.6.1.4.1.4874.2.2.71.2.1.3			The compliance statement for SNMPv2 entities which implement the IKE MIB.
juniIkeMIBGroups	1.3.6.1.4.1.4874.2.2.71.2.2
juniIkePolicyRuleGroup	1.3.6.1.4.1.4874.2.2.71.2.2.1			Obsolete collection of objects providing configuration information of the IKE policy rule. This group became obsolete when the juniIkePolicyRuleGroup was replaced with the juniIkePolicyRuleV2Group
juniIkeIpv4PreSharedKeyGroup	1.3.6.1.4.1.4874.2.2.71.2.2.2			A collection of objects providing configuration information of the IKE preshared key in IPv4 format.
juniIkeFqdnPreSharedKeyGroup	1.3.6.1.4.1.4874.2.2.71.2.2.3			A collection of objects providing configuration information of the IKE preshared key in FQDN format.
juniIkeSaGroup	1.3.6.1.4.1.4874.2.2.71.2.2.4			Obsolete collection of objects providing IKE SA state information. This group became obsolete when the juniIkeSaTable was replaced with the juniIkeSa2Table.
juniIkeSa2Group	1.3.6.1.4.1.4874.2.2.71.2.2.5			A collection of objects providing IKE SA state information.
juniIkePolicyRuleV2Group	1.3.6.1.4.1.4874.2.2.71.2.2.6			A collection of objects providing configuration information of the IKE policy rule.

RFC description

Manages Internet Key Exchange (IKE) configuration and policies for Juniper Networks devices.

Start monitoring Juniper Networks E-series router (IKE VPN policy/SA negotiation) with a free 30-day trial of IPNetwork Monitor. Import MIBs, browse SNMP OIDs, create custom SNMP monitors, configure alerts, and monitor any SNMP-enabled network device from a single console.

Download Juniper-IKE-MIB

What Is Juniper-IKE-MIB?

Supported Devices

Monitoring Examples

What Can Be Monitored

This MIB depends on

Related MIBs

RFC description