All MIBs › NETSCREEN-SET-SNMP-MIB
Organization: Juniper Networks, Inc.
Last Updated: 2004-05-03
Category: Network Management
Description: Configures SNMP community strings, trap receivers, and access control parameters on Juniper NetScreen firewalls.
Start monitoring vendor-neutral, standards-based MIB, any SNMPv3-capable network device (SNMP engine identity/boot/clock status) with a free 30-day trial of IPNetwork Monitor. Import MIBs, browse SNMP OIDs, create custom SNMP monitors, configure alerts, and monitor any SNMP-enabled network device from a single console.
What Is NETSCREEN-SET-SNMP-MIB?
NETSCREEN-SET-SNMP-MIB is a Juniper NetScreen (ScreenOS) vendor MIB for configuring the device's own SNMP agent settings, including system identity, community strings, trap-receiving hosts, and access permissions. It exposes system name/contact/location scalars alongside a community-host table mapping SNMP communities to allowed host addresses and their read/write/trap permissions. Its monitoring value is primarily configuration/security status: administrators verify which hosts can read or write via SNMP and which are permitted to receive traps, catching accidental over-permissive access or a misconfigured trap destination that would silently drop alerts. It is a self-contained configuration MIB for the device's management plane with no significant dependency on other NetScreen functional MIBs beyond sharing the same vsys/device model. It is deployed on Juniper NetScreen firewall appliances to control and audit SNMP-based management access. Engineers can download the NETSCREEN-SET-SNMP-MIB file directly to load it into their MIB browser.
IPNetwork Monitor allows you to monitor SNMP objects defined in NETSCREEN-SET-SNMP-MIB. Use the built-in SNMP Monitoring Browser to explore available variables, view their current values and descriptions, and select the objects you want to monitor. You can then create SNMP monitors, configure thresholds, and receive alerts when monitored values change.
Supported Devices
- Juniper NetScreen firewall
Monitoring Examples
An administrator would walk nsSetSnmpCommHostTable/nsSetSnmpCommHostEntry to review nsSetSnmpCommunity, nsSetSnmpHostInComm, and permission flags like nsSetSnmpWritePermit and nsSetSnmpTrapPermit for each configured host. Finding nsSetSnmpWritePermit enabled for an unexpected host would flag a security misconfiguration allowing unauthorized changes. Checking nsSetSnmpTrafficAlarmPermit confirms whether traffic-threshold alarm traps are actually permitted to reach a given management station, explaining missing alerts if disabled.
What Can Be Monitored
- SNMP community-to-host mapping
- read/write permission per host
- trap permission per host
- traffic alarm trap permission
- system name/contact/location
Imported Objects
From NETSCREEN-SMI
| netscreenSetting | OBJECT-IDENTITY |
| netscreenSettingMibModule | OBJECT-IDENTITY |
From SNMPv2-SMI
| Integer32 | |
| IpAddress | |
| MODULE-IDENTITY | |
| OBJECT-TYPE |
From SNMPv2-TC
| DisplayString |
OIDs
RFC description
Configures SNMP settings and community strings on Juniper NetScreen security appliances.
Start monitoring Juniper NetScreen firewall (SNMP agent configuration) with a free 30-day trial of IPNetwork Monitor. Import MIBs, browse SNMP OIDs, create custom SNMP monitors, configure alerts, and monitor any SNMP-enabled network device from a single console.