NETSCREEN-SET-AUTH-MIB

All MIBs › NETSCREEN-SET-AUTH-MIB

Organization: Juniper Networks, Inc.

Last Updated: 2004-11-10

Category: Firewall, RADIUS/AAA

Description: Configures authentication server settings including RADIUS and LDAP parameters on Juniper NetScreen firewalls.

Start monitoring vendor-neutral, standards-based MIB, any SNMPv3-capable network device (SNMP engine identity/boot/clock status) with a free 30-day trial of IPNetwork Monitor. Import MIBs, browse SNMP OIDs, create custom SNMP monitors, configure alerts, and monitor any SNMP-enabled network device from a single console.

What Is NETSCREEN-SET-AUTH-MIB?

NETSCREEN-SET-AUTH-MIB is a Juniper NetScreen (legacy ScreenOS) firewall MIB used to configure and monitor authentication server settings for VPN and remote-access services, including RADIUS, LDAP, and local account backends per virtual system (vsys). It exposes configuration-style data such as primary and backup authentication server assignments, connection idle timeouts, and dedicated accounts for IKE and L2TP sessions rather than traffic counters. Its monitoring relevance is chiefly configuration-status: an administrator can verify which authentication servers are actively assigned to each vsys and confirm failover backup servers are correctly populated, which indirectly signals whether remote-access authentication would succeed or fail. It depends on the broader NetScreen/ScreenOS enterprise MIB tree for vsys indexing and general device identification. It is typically deployed on Juniper NetScreen firewall/VPN gateway appliances in multi-tenant or branch-office security deployments. Engineers can download the NETSCREEN-SET-AUTH-MIB file directly to load it into their MIB browser.

IPNetwork Monitor allows you to monitor SNMP objects defined in NETSCREEN-SET-AUTH-MIB. Use the built-in SNMP Monitoring Browser to explore available variables, view their current values and descriptions, and select the objects you want to monitor. You can then create SNMP monitors, configure thresholds, and receive alerts when monitored values change.

Supported Devices

Juniper NetScreen firewall/VPN appliance

Monitoring Examples

An administrator would poll the nsSetAuthCfgTable/nsSetAuthCfgEntry indexed by nsSetAuthCfgIdx and nsSetAuthCfgVsys to confirm nsSetAuthCfgPrimary and nsSetAuthCfgBackup1/nsSetAuthCfgBackup2 point to reachable RADIUS or LDAP servers for each virtual system. If nsSetAuthCfgConnIdleTimeout is set too low, VPN users could be prematurely logged out, which this table would reveal. Separate account fields like nsSetAuthCfgIkeAccount and nsSetAuthCfgL2tpAccount let an operator confirm the correct authentication account is bound to each VPN tunnel type.

What Can Be Monitored

primary/backup authentication server assignment per vsys
connection idle timeout
IKE account binding
L2TP account binding
authentication account configuration

Imported Objects

From SNMPv2-SMI

Integer32
MODULE-IDENTITY
OBJECT-TYPE

From SNMPv2-TC

DisplayString

OIDs

OID symbolic	OID numeric	Type	Access	Description
netscreenSetAuthMibModule	1.3.6.1.4.1.3224.7.0.2			This module defines the object that are used to monitor all the configuration info
nsSetAuth	1.3.6.1.4.1.3224.7.2
INT nsSetAuthCfgAcctListActn	1.3.6.1.4.1.3224.7.2.1.1.31	INTEGER	read-only	Radius accounting action for this entry
I32 nsSetAuthCfgAcctPort	1.3.6.1.4.1.3224.7.2.1.1.30	Integer32	read-only	Radius accounting port for this entry
I32 nsSetAuthCfgAcctSessIdLen	1.3.6.1.4.1.3224.7.2.1.1.27	Integer32	read-only	Acct session identifier length for this entry
INT nsSetAuthCfgAdminAccount	1.3.6.1.4.1.3224.7.2.1.1.11	INTEGER	read-only	Allow administration account.
INT nsSetAuthCfgAuthAccount	1.3.6.1.4.1.3224.7.2.1.1.8	INTEGER	read-only	Allow authentication account.
STR nsSetAuthCfgBackup1	1.3.6.1.4.1.3224.7.2.1.1.5	DisplayString	read-only	First backup authentication server IP or domain name.It's optional.
STR nsSetAuthCfgBackup2	1.3.6.1.4.1.3224.7.2.1.1.6	DisplayString	read-only	Secondary backup authentication server IP or domain name.It's optional.
I32 nsSetAuthCfgConnIdleTimeout	1.3.6.1.4.1.3224.7.2.1.1.7	Integer32	read-only	connection timeout threshold setting. 0 means no timeout setting.
STR nsSetAuthCfgDomainName	1.3.6.1.4.1.3224.7.2.1.1.26	DisplayString	read-only	Domain name for this entry
INT nsSetAuthCfgEnableStnID	1.3.6.1.4.1.3224.7.2.1.1.25	INTEGER	read-only	Enable/Disable call station ID for this entry.
nsSetAuthCfgEntry	1.3.6.1.4.1.3224.7.2.1.1		not-accessible	NetScreen admin user authentication setting table.
I32 nsSetAuthCfgIdx	1.3.6.1.4.1.3224.7.2.1.1.1	Integer32	read-only	Authentication server config index.
INT nsSetAuthCfgIkeAccount	1.3.6.1.4.1.3224.7.2.1.1.9	INTEGER	read-only	Allow IKE account.
INT nsSetAuthCfgL2tpAccount	1.3.6.1.4.1.3224.7.2.1.1.10	INTEGER	read-only	Allow L2tp account.
STR nsSetAuthCfgLDAPCni	1.3.6.1.4.1.3224.7.2.1.1.19	DisplayString	read-only	LDAP server common name identifier
STR nsSetAuthCfgLDAPDn	1.3.6.1.4.1.3224.7.2.1.1.20	DisplayString	read-only	LDAP server distinguished name
INT nsSetAuthCfgMethod	1.3.6.1.4.1.3224.7.2.1.1.13	INTEGER	read-only	NetScreen device admin user authentication method.
STR nsSetAuthCfgName	1.3.6.1.4.1.3224.7.2.1.1.3	DisplayString	read-only	Authentication server setting entry name.
I32 nsSetAuthCfgPort	1.3.6.1.4.1.3224.7.2.1.1.14	Integer32	read-only	Server listening port number.
STR nsSetAuthCfgPrimary	1.3.6.1.4.1.3224.7.2.1.1.4	DisplayString	read-only	Primary authentication server IP or domain name.
I32 nsSetAuthCfgRadRetries	1.3.6.1.4.1.3224.7.2.1.1.24	Integer32	read-only	Radius retries for this entries
I32 nsSetAuthCfgRevInterval	1.3.6.1.4.1.3224.7.2.1.1.23	Integer32	read-only	Revert interval for this entry
INT nsSetAuthCfgRFC2138Compatibility	1.3.6.1.4.1.3224.7.2.1.1.28	INTEGER	read-only	Is RFC2138 compatible for this entry
I32 nsSetAuthCfgSecCliRetry	1.3.6.1.4.1.3224.7.2.1.1.15	Integer32	read-only	SecureID client client retry times
I32 nsSetAuthCfgSecCliTimeout	1.3.6.1.4.1.3224.7.2.1.1.16	Integer32	read-only	SecureID client timeout threshold.
INT nsSetAuthCfgSecEncType	1.3.6.1.4.1.3224.7.2.1.1.17	INTEGER	read-only	SecureID traffic encryption type.
INT nsSetAuthCfgSecUseDuress	1.3.6.1.4.1.3224.7.2.1.1.18	INTEGER	read-only	Use duress in SecureID authentication.
STR nsSetAuthCfgSepChar	1.3.6.1.4.1.3224.7.2.1.1.21	DisplayString	read-only	Seperator character for this entry
I32 nsSetAuthCfgSepNumber	1.3.6.1.4.1.3224.7.2.1.1.22	Integer32	read-only	Seperator number for this entry
I32 nsSetAuthCfgSourceIfInfo	1.3.6.1.4.1.3224.7.2.1.1.32	Integer32	read-only	Source interface info for this entry. Returns -1 if no interface is selected
STR nsSetAuthCfgSourceIfName	1.3.6.1.4.1.3224.7.2.1.1.29	DisplayString	read-only	Source interface name for this entry
nsSetAuthCfgTable	1.3.6.1.4.1.3224.7.2.1		not-accessible	The authentication configuration of NetScreen device.
I32 nsSetAuthCfgVsys	1.3.6.1.4.1.3224.7.2.1.1.2	Integer32	read-only	Virtural system the setting belongs to.
INT nsSetAuthCfgXauthAccount	1.3.6.1.4.1.3224.7.2.1.1.12	INTEGER	read-only	Allow Xauth account.

RFC description

Monitors authentication configuration including RADIUS/LDAP servers, authentication methods, and security settings.

Start monitoring Juniper NetScreen firewall/VPN appliance (VPN/remote-access auth servers) with a free 30-day trial of IPNetwork Monitor. Import MIBs, browse SNMP OIDs, create custom SNMP monitors, configure alerts, and monitor any SNMP-enabled network device from a single console.

Download NETSCREEN-SET-AUTH-MIB

What Is NETSCREEN-SET-AUTH-MIB?

Supported Devices

Monitoring Examples

What Can Be Monitored

This MIB depends on

Related MIBs

RFC description