All MIBs › NETSCREEN-SET-ADMIN-USR-MIB
Organization: Juniper Networks, Inc.
Last Updated: 2004-05-03
Description: MIB for administrator user accounts, privilege levels, and allowed client IP ranges on Juniper NetScreen firewall appliances
Start monitoring vendor-neutral, standards-based MIB, any SNMPv3-capable network device (SNMP engine identity/boot/clock status) with a free 30-day trial of IPNetwork Monitor. Import MIBs, browse SNMP OIDs, create custom SNMP monitors, configure alerts, and monitor any SNMP-enabled network device from a single console.
What Is NETSCREEN-SET-ADMIN-USR-MIB?
NETSCREEN-SET-ADMIN-USR-MIB is a Juniper NetScreen firewall MIB for managing local administrator user accounts and their access controls. It exposes a table of local admin users with name, privilege level, and role, a RADIUS-based admin authentication enable/server setting, and a client table restricting which source IP addresses/ranges are permitted to administer the device. Its monitoring value is administrative/software configuration status rather than hardware health: it lets an operator audit which accounts exist, their privilege levels, and whether RADIUS centralized authentication is enabled, plus verify management access is restricted to expected client IP ranges, important for security posture rather than fault detection. It is a NetScreen vendor-private MIB that would typically be used alongside NETSCREEN-RESOURCE-MIB and other NetScreen system MIBs for full device oversight. It is deployed on Juniper NetScreen/SSG firewall appliances where administrative access control needs to be centrally audited. Engineers can download the NETSCREEN-SET-ADMIN-USR-MIB file directly to load it into their MIB browser.
IPNetwork Monitor allows you to monitor SNMP objects defined in NETSCREEN-SET-ADMIN-USR-MIB. Use the built-in SNMP Monitoring Browser to explore available variables, view their current values and descriptions, and select the objects you want to monitor. You can then create SNMP monitors, configure thresholds, and receive alerts when monitored values change.
Supported Devices
- Juniper NetScreen/SSG firewall appliance
Monitoring Examples
An admin would enumerate nsSetAdminUserLocalTable/nsSetAdminUserLocalEntry indexed by nsAdminUserLocalIndex to review each nsAdminUserLocalName's nsAdminUserLocalPriv and nsAdminUserLocalRole, flagging any unexpected account with elevated privilege. nsAdminUserRadiusEnabled and nsAdminUserRadiusServer would be checked to confirm centralized RADIUS authentication is active and pointing at the correct server. The nsSetAdminUserClientTable/nsSetAdminUserClientEntry, via nsAdminUserClientIp, would be audited to ensure management access is restricted to approved administrative subnets, revealing a security gap if an overly broad IP range is configured.
What Can Be Monitored
- local administrator accounts and privilege levels
- RADIUS admin authentication status
- allowed administrative client IP ranges
Imported Objects
From NETSCREEN-SMI
| netscreenSetting | OBJECT-IDENTITY |
| netscreenSettingMibModule | OBJECT-IDENTITY |
From SNMPv2-SMI
| Integer32 | |
| IpAddress | |
| MODULE-IDENTITY | |
| OBJECT-TYPE |
From SNMPv2-TC
| DisplayString |
OIDs
RFC description
Juniper NetScreen vendor MIB (now legacy) for managing administrator users and security administrative settings on Netscreen firewalls.
Start monitoring Juniper NetScreen/SSG firewall appliance (local admin user accounts) with a free 30-day trial of IPNetwork Monitor. Import MIBs, browse SNMP OIDs, create custom SNMP monitors, configure alerts, and monitor any SNMP-enabled network device from a single console.