All MIBs › NETSCREEN-SET-DNS-MIB
Organization: Juniper Networks, Inc.
Last Updated: 2004-05-03
Category: Firewall
Description: Configures DNS server addresses and domain lookup settings on Juniper NetScreen ScreenOS firewalls.
Start monitoring vendor-neutral, standards-based MIB, any SNMPv3-capable network device (SNMP engine identity/boot/clock status) with a free 30-day trial of IPNetwork Monitor. Import MIBs, browse SNMP OIDs, create custom SNMP monitors, configure alerts, and monitor any SNMP-enabled network device from a single console.
What Is NETSCREEN-SET-DNS-MIB?
NETSCREEN-SET-DNS-MIB is a small Juniper NetScreen (ScreenOS) vendor MIB for configuring the DNS resolver settings used by the firewall device itself. It exposes primary and secondary DNS server addresses along with refresh-enable and refresh-interval settings controlling how often the device re-resolves cached DNS entries. Its monitoring value is configuration status rather than hardware/performance: administrators confirm the device is pointed at the correct, reachable DNS servers and that automatic refresh is enabled, since misconfigured DNS can break domain-name-based policy objects and management access. It is a narrow, standalone configuration MIB with no significant dependency beyond the core NetScreen system MIB. It is deployed on Juniper NetScreen firewall appliances wherever the device relies on DNS resolution for policy or administrative functions. Engineers can download the NETSCREEN-SET-DNS-MIB file directly to load it into their MIB browser.
IPNetwork Monitor allows you to monitor SNMP objects defined in NETSCREEN-SET-DNS-MIB. Use the built-in SNMP Monitoring Browser to explore available variables, view their current values and descriptions, and select the objects you want to monitor. You can then create SNMP monitors, configure thresholds, and receive alerts when monitored values change.
Supported Devices
- Juniper NetScreen firewall
Monitoring Examples
An administrator would read nsConfigDnsPriSer and nsConfigDnsSecSer to confirm the firewall is configured with valid, reachable primary and secondary DNS servers. If nsConfigDnsRefEnable is off or nsConfigDnsRefTime is unexpectedly long, cached DNS-based address objects could go stale, causing policies referencing domain names to enforce against outdated IP addresses. This MIB has no larger runtime tables beyond these scalar configuration values.
What Can Be Monitored
- primary/secondary DNS server address
- DNS refresh enable state
- DNS refresh interval
Imported Objects
From NETSCREEN-SMI
| netscreenSetting | OBJECT-IDENTITY |
| netscreenSettingMibModule | OBJECT-IDENTITY |
From SNMPv2-SMI
| IpAddress | |
| MODULE-IDENTITY | |
| OBJECT-TYPE |
From SNMPv2-TC
| DisplayString |
OIDs
RFC description
DNS configuration and monitoring for Juniper/NetScreen security appliances including primary and secondary servers.
Start monitoring Juniper NetScreen firewall (DNS resolver settings) with a free 30-day trial of IPNetwork Monitor. Import MIBs, browse SNMP OIDs, create custom SNMP monitors, configure alerts, and monitor any SNMP-enabled network device from a single console.