NETSCREEN-NSRP-MIB

All MIBs › NETSCREEN-NSRP-MIB

Organization: Juniper Networks, Inc.

Last Updated: 2004-05-03

Category: Firewall

Description: Manages NetScreen Redundancy Protocol (NSRP) high-availability cluster state, sync status, and failover events.

Start monitoring vendor-neutral, standards-based MIB, any SNMPv3-capable network device (SNMP engine identity/boot/clock status) with a free 30-day trial of IPNetwork Monitor. Import MIBs, browse SNMP OIDs, create custom SNMP monitors, configure alerts, and monitor any SNMP-enabled network device from a single console.

What Is NETSCREEN-NSRP-MIB?

NETSCREEN-NSRP-MIB is a NetScreen (later Juniper Networks) proprietary MIB configuring NSRP (NetScreen Redundancy Protocol), the vendor's VRRP-like high-availability clustering protocol. Its general objects cover cluster ID, local unit ID, encryption/authentication enable, interface-monitoring enable, and gratuitous-ARP setting, while a VSD (Virtual Security Device) group table records group ID, priority, preempt, hold-down time, unit count, and cumulative counts of state changes and transitions to init/master/pre-backup/backup/ineligible/inoperable states, master/pre-backup conflict counts, and heartbeat Tx/Rx counts, alongside a member table. As a configuration/status MIB it lets an administrator confirm an NSRP cluster's current priority and watch state-transition counts for flapping. It is deployed on NetScreen (Juniper) security appliances using NSRP high availability. Engineers can download the NETSCREEN-NSRP-MIB file directly to load it into their MIB browser.

IPNetwork Monitor allows you to monitor SNMP objects defined in NETSCREEN-NSRP-MIB. Use the built-in SNMP Monitoring Browser to explore available variables, view their current values and descriptions, and select the objects you want to monitor. You can then create SNMP monitors, configure thresholds, and receive alerts when monitored values change.

Supported Devices

NetScreen (Juniper Networks) security appliances (NSRP)

Monitoring Examples

An administrator checks nsrpVsdGroupCntStateChange to catch an NSRP cluster flapping between master and backup roles on a NetScreen (Juniper) security appliance.

What Can Be Monitored

NSRP cluster state transitions and heartbeat counters

Imported Objects

From NETSCREEN-SMI

netscreenNsrp

OBJECT-IDENTITY

From SNMPv2-SMI

Counter32
Integer32
IpAddress
MODULE-IDENTITY
OBJECT-TYPE

From SNMPv2-TC

DisplayString
PhysAddress

OIDs

OID symbolic	OID numeric	Type	Access	Description
netscreenNsrpMibModule	1.3.6.1.4.1.3224.6.0			This module defines the object that are200 used for netscreen redundancy protocol
netscreenNsrpGeneral	1.3.6.1.4.1.3224.6.1
I32 nsrpGeneralClusterId	1.3.6.1.4.1.3224.6.1.1	Integer32	read-only	The cluster ID
I32 nsrpGeneralLocalUnitId	1.3.6.1.4.1.3224.6.1.2	Integer32	read-only	local device's unit ID
INT nsrpGeneralEncrypEnable	1.3.6.1.4.1.3224.6.1.3	INTEGER	read-only	NSRP encryption enabled
INT nsrpGeneralAuthEnable	1.3.6.1.4.1.3224.6.1.4	INTEGER	read-only	NSRP authentication enabled
STR nsrpGeneralIfMonitor	1.3.6.1.4.1.3224.6.1.5	DisplayString	read-only	interface being monitored
I32 nsrpGeneralGratArps	1.3.6.1.4.1.3224.6.1.6	Integer32	read-only	number of gratuitious arps
netscreenNsrpVSD	1.3.6.1.4.1.3224.6.2
nsrpVsdGroupTable	1.3.6.1.4.1.3224.6.2.1		not-accessible	A list of VSD groups on the device.
nsrpVsdGroupEntry	1.3.6.1.4.1.3224.6.2.1.1		not-accessible	An entry containing attributes for a track ip
I32 nsrpVsdGroupID	1.3.6.1.4.1.3224.6.2.1.1.1	Integer32	read-only	one group ID the device belongs to.
I32 nsrpVsdGroupPriority	1.3.6.1.4.1.3224.6.2.1.1.2	Integer32	read-only	local unit in current group's priority.
I32 nsrpVsdGroupPreempt	1.3.6.1.4.1.3224.6.2.1.1.3	Integer32	read-only	local unit in current group's preempt.
I32 nsrpVsdGroupHoldDownTime	1.3.6.1.4.1.3224.6.2.1.1.4	Integer32	read-only	TBD
I32 nsrpVsdGroupNumberOfUnit	1.3.6.1.4.1.3224.6.2.1.1.5	Integer32	read-only	unit quantity in this group.
I32 nsrpVsdGroupCntStateChange	1.3.6.1.4.1.3224.6.2.1.1.6	Integer32	read-only	total number of state transition events
I32 nsrpVsdGroupCntToInit	1.3.6.1.4.1.3224.6.2.1.1.7	Integer32	read-only	number of state transition into init state, which is as out of ineligible state`
I32 nsrpVsdGroupCntToMaster	1.3.6.1.4.1.3224.6.2.1.1.8	Integer32	read-only	number of state transition into master state
I32 nsrpVsdGroupCntToPBackup	1.3.6.1.4.1.3224.6.2.1.1.9	Integer32	read-only	number of state transition into primary backup state
I32 nsrpVsdGroupCntToBackup	1.3.6.1.4.1.3224.6.2.1.1.10	Integer32	read-only	number of state transition into backup state.
I32 nsrpVsdGroupCntToIneligible	1.3.6.1.4.1.3224.6.2.1.1.11	Integer32	read-only	number of state transition into ineligible state.
I32 nsrpVsdGroupCntToInoperable	1.3.6.1.4.1.3224.6.2.1.1.12	Integer32	read-only	number of state transition into inoperable state.
I32 nsrpVsdGroupCntMasterConflict	1.3.6.1.4.1.3224.6.2.1.1.13	Integer32	read-only	number of times multiple masters exist while the local unit is in master state.
I32 nsrpVsdGroupCntPbConfilict	1.3.6.1.4.1.3224.6.2.1.1.14	Integer32	read-only	number of times multiple primary backups exist while the local unit is in primary backup state.
I32 nsrpVsdGroupCntHeartbeatTx	1.3.6.1.4.1.3224.6.2.1.1.15	Integer32	read-only	number of heart beat transfered by a group.
I32 nsrpVsdGroupCntHeartbeatRx	1.3.6.1.4.1.3224.6.2.1.1.16	Integer32	read-only	number of heart beat received by a group.
nsrpVsdMemberTable	1.3.6.1.4.1.3224.6.2.2		not-accessible	A list of devices within the VSD group.
nsrpVsdMemberEntry	1.3.6.1.4.1.3224.6.2.2.1		not-accessible	A entry containing attributes of one device in a group
I32 nsrpVsdMemberGroupId	1.3.6.1.4.1.3224.6.2.2.1.1	Integer32	read-only	indicate the Group it belong to
I32 nsrpVsdMemberUnitId	1.3.6.1.4.1.3224.6.2.2.1.2	Integer32	read-only	VSD group member's unit id
INT nsrpVsdMemberStatus	1.3.6.1.4.1.3224.6.2.2.1.3	INTEGER	read-only	0 Undefined 1 init 2 Master 3 Primary Backup 4 Backup 5 ineligible 6 inoperable
I32 nsrpVsdMemberPriority	1.3.6.1.4.1.3224.6.2.2.1.4	Integer32	read-only	Priority of unit in this group
I32 nsrpVsdMemberPreempt	1.3.6.1.4.1.3224.6.2.2.1.5	Integer32	read-only	unit in current group's preempt
nsrpVsdInterfaceTable	1.3.6.1.4.1.3224.6.2.3		not-accessible	A list of VSD interfaces on the device.
nsrpVsdInterfaceEntry	1.3.6.1.4.1.3224.6.2.3.1		not-accessible	A track entry containing attributes for a track ip
I32 nsrpVsdIfIndex	1.3.6.1.4.1.3224.6.2.3.1.1	Integer32	read-only	A index.
INT nsrpVsdIfStatus	1.3.6.1.4.1.3224.6.2.3.1.2	INTEGER	read-only	indicate the status of this vsi interface
I32 nsrpVsdIfGroupId	1.3.6.1.4.1.3224.6.2.3.1.3	Integer32	read-only	indicate the group it belong to
IP nsrpVsdIfIp	1.3.6.1.4.1.3224.6.2.3.1.4	IpAddress	read-only	ip ADDRESS
IP nsrpVsdIfNetmask	1.3.6.1.4.1.3224.6.2.3.1.5	IpAddress	read-only	subnet mask
IP nsrpVsdIfGateway	1.3.6.1.4.1.3224.6.2.3.1.6	IpAddress	read-only	gateway
STR nsrpVsdIfName	1.3.6.1.4.1.3224.6.2.3.1.7	DisplayString	read-only	trust/untrust/DMZ
I32 nsrpVsdIfVLAN	1.3.6.1.4.1.3224.6.2.3.1.8	Integer32	read-only	vlan -1 means no vlan
PHY nsrpVsdIfMAC	1.3.6.1.4.1.3224.6.2.3.1.9	PhysAddress	read-only	mac address
STR nsrpVsdIfVSys	1.3.6.1.4.1.3224.6.2.3.1.10	DisplayString	read-only	virtual system
INT nsrpVsdIfMngTelnet	1.3.6.1.4.1.3224.6.2.3.1.11	INTEGER	read-only	0 Disable 1 Enable
INT nsrpVsdIfMngSCS	1.3.6.1.4.1.3224.6.2.3.1.12	INTEGER	read-only	0 Disable 1 Enable
INT nsrpVsdIfMngWEB	1.3.6.1.4.1.3224.6.2.3.1.13	INTEGER	read-only	0 Disable 1 Enable
INT nsrpVsdIfMngSSL	1.3.6.1.4.1.3224.6.2.3.1.14	INTEGER	read-only	0 Disable 1 Enable
INT nsrpVsdIfMngSNMP	1.3.6.1.4.1.3224.6.2.3.1.15	INTEGER	read-only	0 Disable 1 Enable
INT nsrpVsdIfMngGlobal	1.3.6.1.4.1.3224.6.2.3.1.16	INTEGER	read-only	0 Disable 1 Enable
INT nsrpVsdIfMngGlobalPro	1.3.6.1.4.1.3224.6.2.3.1.17	INTEGER	read-only	0 Disable 1 Enable
INT nsrpVsdIfMngPing	1.3.6.1.4.1.3224.6.2.3.1.18	INTEGER	read-only	0 Disable 1 Enable
INT nsrpVsdIfMngIdentReset	1.3.6.1.4.1.3224.6.2.3.1.19	INTEGER	read-only	0 Disable 1 Enable
nsrpVsdGeneral	1.3.6.1.4.1.3224.6.2.4
C32 nsrpVsdGeneralInitHoldTime	1.3.6.1.4.1.3224.6.2.4.1	Counter32	read-only	VSD group init hold time (in second)
C32 nsrpVsdGeneralHbInterval	1.3.6.1.4.1.3224.6.2.4.2	Counter32	read-only	VSD heart beat interval.(in milisecond)
C32 nsrpVsdGeneralHbLostThres	1.3.6.1.4.1.3224.6.2.4.3	Counter32	read-only	vsd heartbeat lost threshold
netscreenNsrpRTO	1.3.6.1.4.1.3224.6.3
nsrpRtoGroupTable	1.3.6.1.4.1.3224.6.3.1		not-accessible	A list of RTO groups on the device.
nsrpRtoGroupEntry	1.3.6.1.4.1.3224.6.3.1.1		not-accessible	An entry containing attributes for RTO group
I32 nsrpRtoGroupId	1.3.6.1.4.1.3224.6.3.1.1.1	Integer32	read-only	A RTO group ID.also used as table index
I32 nsrpRtoNumOfUnit	1.3.6.1.4.1.3224.6.3.1.1.2	Integer32	read-only	how many units in this RTO group
nsrpRtoUnitTable	1.3.6.1.4.1.3224.6.3.2		not-accessible	A list of device status within a RTO group.
nsrpRtoUnitEntry	1.3.6.1.4.1.3224.6.3.2.1		not-accessible	A track entry containing attributes for a track ip
I32 nsrpRtoUnitGroupId	1.3.6.1.4.1.3224.6.3.2.1.1	Integer32	read-only	The RTO group id, a unit belongs to
I32 nsrpRtoUnitId	1.3.6.1.4.1.3224.6.3.2.1.2	Integer32	read-only	device's unit id.
INT nsrpRtoUnitStatus	1.3.6.1.4.1.3224.6.3.2.1.3	INTEGER	read-only	The RTO group id, a unit belongs to
INT nsrpRtoUnitDirection	1.3.6.1.4.1.3224.6.3.2.1.4	INTEGER	read-only	The RTO uint's dirction in the group
C32 nsrpRtoUnitLostHeartbeat	1.3.6.1.4.1.3224.6.3.2.1.5	Counter32	read-only	counter of heartbeat
C32 nsrpRtoUnitToActive	1.3.6.1.4.1.3224.6.3.2.1.6	Counter32	read-only	counter of active
C32 nsrpRtoUnitToSet	1.3.6.1.4.1.3224.6.3.2.1.7	Counter32	read-only	counter of set
C32 nsrpRtoUnitLostPeer	1.3.6.1.4.1.3224.6.3.2.1.8	Counter32	read-only	counter of lost peer
C32 nsrpRtoUnitGroupDetach	1.3.6.1.4.1.3224.6.3.2.1.9	Counter32	read-only	counter of rto group detach
nsrpRtoCounter	1.3.6.1.4.1.3224.6.3.3
C32 nsrpRtoCounterPakForwarded	1.3.6.1.4.1.3224.6.3.3.1	Counter32	read-only	packets forwarded by rto.
C32 nsrpRtoCounterPakReceived	1.3.6.1.4.1.3224.6.3.3.2	Counter32	read-only	packets received by rto.
nsrpRtoCounterTable	1.3.6.1.4.1.3224.6.3.3.3		not-accessible	A list of rto counter object entry.
nsrpRtoCounterEntry	1.3.6.1.4.1.3224.6.3.3.3.1		not-accessible	A rto counter entry containing attributes for a rto counter obj.
I32 nsrpRtoCounterIdx	1.3.6.1.4.1.3224.6.3.3.3.1.1	Integer32	read-only	counter index.
STR nsrpRtoCounterName	1.3.6.1.4.1.3224.6.3.3.3.1.2	DisplayString	read-only	Name of a rto counter object.
C32 nsrpRtoCounterSend	1.3.6.1.4.1.3224.6.3.3.3.1.3	Counter32	read-only	Total number of message sent.
C32 nsrpRtoCounterReceive	1.3.6.1.4.1.3224.6.3.3.3.1.4	Counter32	read-only	Total number of message received.
C32 nsrpRtoCounterDrop	1.3.6.1.4.1.3224.6.3.3.3.1.5	Counter32	read-only	Total number of message dropped.
nsrpRtoGeneral	1.3.6.1.4.1.3224.6.3.4
C32 nsrpRtoGeneralHbInterval	1.3.6.1.4.1.3224.6.3.4.1	Counter32	read-only	rto heart beat interval.
C32 nsrpRtoGeneralHbLostThres	1.3.6.1.4.1.3224.6.3.4.2	Counter32	read-only	rto heartbeat lost threshold
INT nsrpRtoGeneralSessSyncEnable	1.3.6.1.4.1.3224.6.3.4.3	INTEGER	read-only	session sync enabled.
netscreenNsrpTrack	1.3.6.1.4.1.3224.6.4
I32 nsrpTrackEnable	1.3.6.1.4.1.3224.6.4.1	Integer32	read-only	0 means disable, 1 meams enable
I32 nsrpTrackThreshold	1.3.6.1.4.1.3224.6.4.2	Integer32	read-only	Failover Threshold
I32 nsrpTrackFailoverEnalble	1.3.6.1.4.1.3224.6.4.3	Integer32	read-only	Failover enable switch
nsrpTrackTable	1.3.6.1.4.1.3224.6.4.4		not-accessible	A list of track ip entries.
nsrpTrackEntry	1.3.6.1.4.1.3224.6.4.4.1		not-accessible	A track entry containing attributes for a track ip
I32 nsrpTrackIpIndex	1.3.6.1.4.1.3224.6.4.4.1.1	Integer32	read-only	A unique value for each track ip. Its value ranges between 1 and 65535 and may not be contigous. It has no other meaning but a pure index.
IP nsrpTrackIpAddr	1.3.6.1.4.1.3224.6.4.4.1.2	IpAddress	read-only	The IP address of the monitored device.
INT nsrpTrackIpStatus	1.3.6.1.4.1.3224.6.4.4.1.3	INTEGER	read-only	Status
I32 nsrpTrackIpTimestamp	1.3.6.1.4.1.3224.6.4.4.1.4	Integer32	read-only	Timestamp of status change. Reference 1970/1/1 0:0
I32 nsrpTrackIpInterval	1.3.6.1.4.1.3224.6.4.4.1.5	Integer32	read-only	A frequecy how the track ip is checked. It is in unit of seconds.
I32 nsrpTrackIpThreshhold	1.3.6.1.4.1.3224.6.4.4.1.6	Integer32	read-only	A number of consective failures to regard the device has failed.
INT nsrpTrackIpMethod	1.3.6.1.4.1.3224.6.4.4.1.7	INTEGER	read-only	The method to track the device.
I32 nsrpTrackIpWeight	1.3.6.1.4.1.3224.6.4.4.1.8	Integer32	read-only	The weight of this failure contributing to the failover.
STR nsrpTrackIpIfName	1.3.6.1.4.1.3224.6.4.4.1.9	DisplayString	read-only	The interface the track messages are sent to. Auto means the actual interface is determined by the routing table.
I32 nsrpTrackIpTotalCheck	1.3.6.1.4.1.3224.6.4.4.1.10	Integer32	read-only	The number of ping/arp attempts.
I32 nsrpTrackIpTotalFailedCheck	1.3.6.1.4.1.3224.6.4.4.1.11	Integer32	read-only	The number of total failed attempts.
netscreenNsrpCluster	1.3.6.1.4.1.3224.6.5
nsrpClusterTable	1.3.6.1.4.1.3224.6.5.1		not-accessible	A list of cluster on the device.
nsrpClusterEntry	1.3.6.1.4.1.3224.6.5.1.1		not-accessible	An entry containing attributes for nsrp cluster
I32 nsrpClusterTblIndex	1.3.6.1.4.1.3224.6.5.1.1.1	Integer32	read-only	table index
I32 nsrpClusterUnitId	1.3.6.1.4.1.3224.6.5.1.1.2	Integer32	read-only	Unit id in this cluster
PHY nsrpClusterUnitCtrlMac	1.3.6.1.4.1.3224.6.5.1.1.3	PhysAddress	read-only	Unit id's control path mac address
PHY nsrpClusterUnitDataMac	1.3.6.1.4.1.3224.6.5.1.1.4	PhysAddress	read-only	Unit id's data path mac address
netscreenNsrpLinkInfo	1.3.6.1.4.1.3224.6.6
nsrpLinkInfoTable	1.3.6.1.4.1.3224.6.6.1		not-accessible	A list of NSRP link info
nsrpLinkInfoEntry	1.3.6.1.4.1.3224.6.6.1.1		not-accessible	An entry containing attributes for nsrp link info
I32 nsrpLinkInfoIndex	1.3.6.1.4.1.3224.6.6.1.1.1	Integer32	read-only	table index
INT nsrpLinkInfoLinkType	1.3.6.1.4.1.3224.6.6.1.1.2	INTEGER	read-only	link type
STR nsrpLinkInfoChannel	1.3.6.1.4.1.3224.6.6.1.1.3	DisplayString	read-only	link channel's name
PHY nsrpLinkInfoMac	1.3.6.1.4.1.3224.6.6.1.1.4	PhysAddress	read-only	link channel's mac address
INT nsrpLinkInfoState	1.3.6.1.4.1.3224.6.6.1.1.5	INTEGER	read-only	link channel's state

RFC description

Manages NetScreen NSRP (NetScreen Redundancy Protocol) for high-availability firewall pairs with cluster status and heartbeat monitoring.

Start monitoring NetScreen (Juniper Networks) security appliance (NSRP high availability) with a free 30-day trial of IPNetwork Monitor. Import MIBs, browse SNMP OIDs, create custom SNMP monitors, configure alerts, and monitor any SNMP-enabled network device from a single console.

Download NETSCREEN-NSRP-MIB

What Is NETSCREEN-NSRP-MIB?

Supported Devices

Monitoring Examples

What Can Be Monitored

This MIB depends on

Related MIBs

RFC description