All MIBs › NETSCREEN-SET-AUTH-MIB
Organization: Juniper Networks, Inc.
Last Updated: 2004-11-10
Category: Firewall, RADIUS/AAA
Description:
Configures authentication server settings including RADIUS and LDAP parameters on Juniper NetScreen firewalls.
Imported Objects
From NETSCREEN-SMI
| netscreenSetting | OBJECT-IDENTITY |
| netscreenSettingMibModule | OBJECT-IDENTITY |
From SNMPv2-SMI
| Integer32 | |
| MODULE-IDENTITY | |
| OBJECT-TYPE |
From SNMPv2-TC
| DisplayString |
What Is NETSCREEN-SET-AUTH-MIB?
NETSCREEN-SET-AUTH-MIB is a Juniper NetScreen (legacy ScreenOS) firewall MIB used to configure and monitor authentication server settings for VPN and remote-access services, including RADIUS, LDAP, and local account backends per virtual system (vsys). It exposes configuration-style data such as primary and backup authentication server assignments, connection idle timeouts, and dedicated accounts for IKE and L2TP sessions rather than traffic counters. Its monitoring relevance is chiefly configuration-status: an administrator can verify which authentication servers are actively assigned to each vsys and confirm failover backup servers are correctly populated, which indirectly signals whether remote-access authentication would succeed or fail. It depends on the broader NetScreen/ScreenOS enterprise MIB tree for vsys indexing and general device identification. It is typically deployed on Juniper NetScreen firewall/VPN gateway appliances in multi-tenant or branch-office security deployments. Engineers can download the NETSCREEN-SET-AUTH-MIB file directly to load it into their MIB browser.
IPNetwork Monitor allows you to monitor SNMP objects defined in NETSCREEN-SET-AUTH-MIB. Use the built-in SNMP Monitoring Browser to explore available variables, view their current values and descriptions, and select the objects you want to monitor. You can then create SNMP monitors, configure thresholds, and receive alerts when monitored values change.
What Can Be Monitored
- primary/backup authentication server assignment per vsys
- connection idle timeout
- IKE account binding
- L2TP account binding
- authentication account configuration
Supported Devices
- Juniper NetScreen firewall/VPN appliance
Monitoring Examples
An administrator would poll the nsSetAuthCfgTable/nsSetAuthCfgEntry indexed by nsSetAuthCfgIdx and nsSetAuthCfgVsys to confirm nsSetAuthCfgPrimary and nsSetAuthCfgBackup1/nsSetAuthCfgBackup2 point to reachable RADIUS or LDAP servers for each virtual system. If nsSetAuthCfgConnIdleTimeout is set too low, VPN users could be prematurely logged out, which this table would reveal. Separate account fields like nsSetAuthCfgIkeAccount and nsSetAuthCfgL2tpAccount let an operator confirm the correct authentication account is bound to each VPN tunnel type.
OIDs
| OID symbolic | OID numeric | Type | Access | Description |
|---|---|---|---|---|
| netscreenSetAuthMibModule | 1.3.6.1.4.1.3224.7.0.2 | This module defines the object that are used to monitor all the configuration info | ||
| nsSetAuth | 1.3.6.1.4.1.3224.7.2 | |||
| nsSetAuthCfgTable | 1.3.6.1.4.1.3224.7.2.1 | not-accessible | The authentication configuration of NetScreen device. | |
| nsSetAuthCfgEntry | 1.3.6.1.4.1.3224.7.2.1.1 | not-accessible | NetScreen admin user authentication setting table. | |
| I32 nsSetAuthCfgIdx | 1.3.6.1.4.1.3224.7.2.1.1.1 | Integer32 | read-only | Authentication server config index. |
| I32 nsSetAuthCfgVsys | 1.3.6.1.4.1.3224.7.2.1.1.2 | Integer32 | read-only | Virtural system the setting belongs to. |
| STR nsSetAuthCfgName | 1.3.6.1.4.1.3224.7.2.1.1.3 | DisplayString | read-only | Authentication server setting entry name. |
| STR nsSetAuthCfgPrimary | 1.3.6.1.4.1.3224.7.2.1.1.4 | DisplayString | read-only | Primary authentication server IP or domain name. |
| STR nsSetAuthCfgBackup1 | 1.3.6.1.4.1.3224.7.2.1.1.5 | DisplayString | read-only | First backup authentication server IP or domain name.It's optional. |
| STR nsSetAuthCfgBackup2 | 1.3.6.1.4.1.3224.7.2.1.1.6 | DisplayString | read-only | Secondary backup authentication server IP or domain name.It's optional. |
| I32 nsSetAuthCfgConnIdleTimeout | 1.3.6.1.4.1.3224.7.2.1.1.7 | Integer32 | read-only | connection timeout threshold setting. 0 means no timeout setting. |
| INT nsSetAuthCfgAuthAccount | 1.3.6.1.4.1.3224.7.2.1.1.8 | INTEGER | read-only | Allow authentication account. |
| INT nsSetAuthCfgIkeAccount | 1.3.6.1.4.1.3224.7.2.1.1.9 | INTEGER | read-only | Allow IKE account. |
| INT nsSetAuthCfgL2tpAccount | 1.3.6.1.4.1.3224.7.2.1.1.10 | INTEGER | read-only | Allow L2tp account. |
| INT nsSetAuthCfgAdminAccount | 1.3.6.1.4.1.3224.7.2.1.1.11 | INTEGER | read-only | Allow administration account. |
| INT nsSetAuthCfgXauthAccount | 1.3.6.1.4.1.3224.7.2.1.1.12 | INTEGER | read-only | Allow Xauth account. |
| INT nsSetAuthCfgMethod | 1.3.6.1.4.1.3224.7.2.1.1.13 | INTEGER | read-only | NetScreen device admin user authentication method. |
| I32 nsSetAuthCfgPort | 1.3.6.1.4.1.3224.7.2.1.1.14 | Integer32 | read-only | Server listening port number. |
| I32 nsSetAuthCfgSecCliRetry | 1.3.6.1.4.1.3224.7.2.1.1.15 | Integer32 | read-only | SecureID client client retry times |
| I32 nsSetAuthCfgSecCliTimeout | 1.3.6.1.4.1.3224.7.2.1.1.16 | Integer32 | read-only | SecureID client timeout threshold. |
| INT nsSetAuthCfgSecEncType | 1.3.6.1.4.1.3224.7.2.1.1.17 | INTEGER | read-only | SecureID traffic encryption type. |
| INT nsSetAuthCfgSecUseDuress | 1.3.6.1.4.1.3224.7.2.1.1.18 | INTEGER | read-only | Use duress in SecureID authentication. |
| STR nsSetAuthCfgLDAPCni | 1.3.6.1.4.1.3224.7.2.1.1.19 | DisplayString | read-only | LDAP server common name identifier |
| STR nsSetAuthCfgLDAPDn | 1.3.6.1.4.1.3224.7.2.1.1.20 | DisplayString | read-only | LDAP server distinguished name |
| STR nsSetAuthCfgSepChar | 1.3.6.1.4.1.3224.7.2.1.1.21 | DisplayString | read-only | Seperator character for this entry |
| I32 nsSetAuthCfgSepNumber | 1.3.6.1.4.1.3224.7.2.1.1.22 | Integer32 | read-only | Seperator number for this entry |
| I32 nsSetAuthCfgRevInterval | 1.3.6.1.4.1.3224.7.2.1.1.23 | Integer32 | read-only | Revert interval for this entry |
| I32 nsSetAuthCfgRadRetries | 1.3.6.1.4.1.3224.7.2.1.1.24 | Integer32 | read-only | Radius retries for this entries |
| INT nsSetAuthCfgEnableStnID | 1.3.6.1.4.1.3224.7.2.1.1.25 | INTEGER | read-only | Enable/Disable call station ID for this entry. |
| STR nsSetAuthCfgDomainName | 1.3.6.1.4.1.3224.7.2.1.1.26 | DisplayString | read-only | Domain name for this entry |
| I32 nsSetAuthCfgAcctSessIdLen | 1.3.6.1.4.1.3224.7.2.1.1.27 | Integer32 | read-only | Acct session identifier length for this entry |
| INT nsSetAuthCfgRFC2138Compatibility | 1.3.6.1.4.1.3224.7.2.1.1.28 | INTEGER | read-only | Is RFC2138 compatible for this entry |
| STR nsSetAuthCfgSourceIfName | 1.3.6.1.4.1.3224.7.2.1.1.29 | DisplayString | read-only | Source interface name for this entry |
| I32 nsSetAuthCfgAcctPort | 1.3.6.1.4.1.3224.7.2.1.1.30 | Integer32 | read-only | Radius accounting port for this entry |
| INT nsSetAuthCfgAcctListActn | 1.3.6.1.4.1.3224.7.2.1.1.31 | INTEGER | read-only | Radius accounting action for this entry |
| I32 nsSetAuthCfgSourceIfInfo | 1.3.6.1.4.1.3224.7.2.1.1.32 | Integer32 | read-only | Source interface info for this entry. Returns -1 if no interface is selected |
RFC description
Monitors authentication configuration including RADIUS/LDAP servers, authentication methods, and security settings.
Start monitoring Juniper NetScreen firewall/VPN appliance (VPN/remote-access auth servers) with a free 30-day trial of IPNetwork Monitor. Import MIBs, browse SNMP OIDs, create custom SNMP monitors, configure alerts, and monitor any SNMP-enabled network device from a single console.