All MIBs › NETSCREEN-SET-SYSTIME-MIB
Organization: Juniper Networks, Inc.
Last Updated: 2004-05-03
Category: NTP, Network Management
Description: Manages system clock, NTP server configuration, and timezone settings on Juniper NetScreen ScreenOS firewalls.
Start monitoring vendor-neutral, standards-based MIB, any SNMPv3-capable network device (SNMP engine identity/boot/clock status) with a free 30-day trial of IPNetwork Monitor. Import MIBs, browse SNMP OIDs, create custom SNMP monitors, configure alerts, and monitor any SNMP-enabled network device from a single console.
What Is NETSCREEN-SET-SYSTIME-MIB?
NETSCREEN-SET-SYSTIME-MIB manages system clock and NTP configuration on Juniper NetScreen ScreenOS firewalls, covering GMT offset, daylight-saving settings, NTP enable state, NTP server address, and update interval. It is a configuration/status MIB focused on time synchronization rather than traffic or hardware sensors, exposing the device's current system time alongside its NTP source settings. Its monitoring value is in confirming a critical piece of software status, accurate system time, since firewalls depend on correct time for log timestamps, certificate validation, and VPN key/lifetime calculations; a stale or disabled NTP configuration can silently corrupt these functions. It has an implicit dependency on standard NTP protocol behavior even though the MIB itself is a vendor-private ScreenOS extension. It is deployed on Juniper NetScreen firewalls in any environment requiring synchronized, auditable time for logging and secure VPN operation. Engineers can download the NETSCREEN-SET-SYSTIME-MIB file directly to load it into their MIB browser.
IPNetwork Monitor allows you to monitor SNMP objects defined in NETSCREEN-SET-SYSTIME-MIB. Use the built-in SNMP Monitoring Browser to explore available variables, view their current values and descriptions, and select the objects you want to monitor. You can then create SNMP monitors, configure thresholds, and receive alerts when monitored values change.
Supported Devices
- Juniper NetScreen (ScreenOS) firewall
Monitoring Examples
An administrator polls nsSetNtpEnable and nsSetNtpServer to confirm NTP synchronization is enabled and pointed at the correct time source, then checks nsSetSysTime against a known-good reference to detect clock drift. If nsSetNtpEnable shows disabled or nsSetNtpUpdateInterval is unexpectedly long, the firewall's clock could drift enough to cause VPN SA lifetime mismatches or invalid certificate-validity checks. nsSetSysTimeGmtOffset and nsSetSysTimeDaySaving would be checked after a timezone change to confirm log timestamps are being recorded correctly for the local site.
What Can Be Monitored
- current system time
- NTP synchronization enable status
- configured NTP server address
- NTP update interval
- GMT offset / daylight-saving setting
Imported Objects
From NETSCREEN-SMI
| netscreenSetting | OBJECT-IDENTITY |
| netscreenSettingMibModule | OBJECT-IDENTITY |
From SNMPv2-SMI
| Integer32 | |
| IpAddress | |
| MODULE-IDENTITY | |
| OBJECT-TYPE |
OIDs
RFC description
NTP and system time configuration for Netscreen firewalls, including GMT offset and daylight saving settings.
Start monitoring Juniper NetScreen firewalls with a free 30-day trial of IPNetwork Monitor. Import MIBs, browse SNMP OIDs, create custom SNMP monitors, configure alerts, and monitor any SNMP-enabled network device from a single console.