NETSCREEN-IPPOOL-MIB

All MIBs › NETSCREEN-IPPOOL-MIB

Organization: Juniper Networks, Inc.

Last Updated: 2004-05-03

Category: IPSec/VPN

Description: Manages IP address pool configuration and utilization for NAT and VPN address assignment on NetScreen devices.

Start monitoring vendor-neutral, standards-based MIB, any SNMPv3-capable network device (SNMP engine identity/boot/clock status) with a free 30-day trial of IPNetwork Monitor. Import MIBs, browse SNMP OIDs, create custom SNMP monitors, configure alerts, and monitor any SNMP-enabled network device from a single console.

What Is NETSCREEN-IPPOOL-MIB?

NETSCREEN-IPPOOL-MIB is a Juniper NetScreen (ScreenOS) vendor MIB for managing IP address pools used in NAT and VPN client address assignment. It exposes a table of configured IP pools, each with a name, start/end address range, and count of addresses currently in use. Its monitoring value is primarily configuration/capacity status: administrators track pool utilization to detect when an address pool is nearing exhaustion, which would prevent new VPN clients or NAT sessions from obtaining an address. It depends on the broader NetScreen VPN and NAT subsystem MIBs for context on which VPN tunnels or NAT policies consume addresses from a given pool. It is deployed on Juniper NetScreen firewall/VPN gateway appliances providing remote-access VPN or NAT services to client populations. Engineers can download the NETSCREEN-IPPOOL-MIB file directly to load it into their MIB browser.

IPNetwork Monitor allows you to monitor SNMP objects defined in NETSCREEN-IPPOOL-MIB. Use the built-in SNMP Monitoring Browser to explore available variables, view their current values and descriptions, and select the objects you want to monitor. You can then create SNMP monitors, configure thresholds, and receive alerts when monitored values change.

Supported Devices

Juniper NetScreen firewall/VPN gateway

Monitoring Examples

An administrator would walk nsVpnIpPoolTable/nsVpnIpPoolEntry and compare nsVpnIpPoolIpUsed against the range implied by nsVpnIpPoolStartIp and nsVpnIpPoolEndIp to compute pool utilization. A pool where nsVpnIpPoolIpUsed approaches the full range size would indicate imminent address exhaustion, explaining new VPN client connection failures. The nsVpnIpPoolName lets an operator identify which named pool (e.g. per-vsys or per-VPN-group) is under pressure.

What Can Be Monitored

IP pool address range
addresses currently in use
pool utilization/exhaustion
pool name/identity

Imported Objects

From NETSCREEN-SMI

netscreenVpn	OBJECT-IDENTITY
netscreenVpnMibModule	OBJECT-IDENTITY

From SNMPv2-SMI

Integer32
IpAddress
MODULE-IDENTITY
OBJECT-TYPE

From SNMPv2-TC

DisplayString

How to Use in IPNetwork Monitor

Example using nsVpnIpPoolIpUsed OID:

Select a Juniper NetScreen firewall/VPN gateway (IP address pools) as the target host to create a monitor — the SNMP service should be up and running on it. Click New Monitor, then check SNMP Custom on the Favorites tab, click Next, and confirm the host. On the next page, click Select... to open the built-in SNMP MIB Browser and type nsVpnIpPoolIpUsed into the Find box to locate it in the OID tree, selecting the specific row/instance you want to monitor since this is a table column, then select it and click OK. It reports the total number of addresses in use from this pool. On the monitor's Main parameters page you can set the target's SNMP port (default 161), credentials, polling interval, and other settings — see the SNMP Monitor help for details. On the State conditions and Alerting tabs, configure when the monitor should change state and trigger an alert; since this is an Integer32-type OID, Value bounds is the most useful condition here — trigger an alert if the count changes from its expected baseline, since that would indicate the underlying set of items changed unexpectedly. Click Finish to create the monitor; you can adjust any parameter later.

OIDs

OID symbolic	OID numeric	Type	Access	Description
netscreenIppoolMibModule	1.3.6.1.4.1.3224.4.0.9			This module defines the object that are used to monitor VPN IP pool
nsVpnIpPool	1.3.6.1.4.1.3224.4.9
nsVpnIpPoolTable	1.3.6.1.4.1.3224.4.9.1		not-accessible	This table collects all ip pool configuration in NetScreen device.
nsVpnIpPoolEntry	1.3.6.1.4.1.3224.4.9.1.1		not-accessible	Each entry in the nsVpnIpPoolEntry holds a set of configuration parameters associated with an instance IP pool.
I32 nsVpnIpPoolIndex	1.3.6.1.4.1.3224.4.9.1.1.1	Integer32	read-only	A unique value for ip pool. Its value ranges between 0 and 65535 and may not be contiguous.
STR nsVpnIpPoolName	1.3.6.1.4.1.3224.4.9.1.1.2	DisplayString	read-only	ip pool name
IP nsVpnIpPoolStartIp	1.3.6.1.4.1.3224.4.9.1.1.3	IpAddress	read-only	IP pool's start ip address.
IP nsVpnIpPoolEndIp	1.3.6.1.4.1.3224.4.9.1.1.4	IpAddress	read-only	IP pool's end ip address.
I32 nsVpnIpPoolIpUsedEx	1.3.6.1.4.1.3224.4.9.1.1.5	Integer32	read-only	Total number of addresses in use from this pool.

RFC description

Juniper NetScreen VPN IP pool management MIB; monitors and manages VPN IP address pool configuration and allocation tracking.

Start monitoring Juniper NetScreen firewall/VPN gateway (IP address pools) with a free 30-day trial of IPNetwork Monitor. Import MIBs, browse SNMP OIDs, create custom SNMP monitors, configure alerts, and monitor any SNMP-enabled network device from a single console.

Download NETSCREEN-IPPOOL-MIB