NETSCREEN-USER-MIB

All MIBs › NETSCREEN-USER-MIB

Category: Firewall

Description: Manages local user account definitions, authentication credentials, and access permissions on NetScreen firewalls.

Start monitoring vendor-neutral, standards-based MIB, any SNMPv3-capable network device (SNMP engine identity/boot/clock status) with a free 30-day trial of IPNetwork Monitor. Import MIBs, browse SNMP OIDs, create custom SNMP monitors, configure alerts, and monitor any SNMP-enabled network device from a single console.

What Is NETSCREEN-USER-MIB?

NETSCREEN-USER-MIB is a Juniper Networks (NetScreen firewall heritage) proprietary MIB managing VPN dialup-user groups and manual-key/AutoKey IKE users. Its dialup-group table, keyed by index, records name, type, and virtual-system (vsys), a manual-key-user table records group, local/remote security index, tunnel type, ESP encryption/authentication algorithm, AH hash, and vsys, and an AutoKey-IKE-user (AIL) table records group, status, and IKE settings. As a configuration/status MIB it lets an administrator confirm which dialup VPN group a user belongs to and its negotiated encryption/authentication algorithms on a Juniper NetScreen firewall. It is deployed on Juniper Networks NetScreen firewall/security appliances. Engineers can download the NETSCREEN-USER-MIB file directly to load it into their MIB browser.

IPNetwork Monitor allows you to monitor SNMP objects defined in NETSCREEN-USER-MIB. Use the built-in SNMP Monitoring Browser to explore available variables, view their current values and descriptions, and select the objects you want to monitor. You can then create SNMP monitors, configure thresholds, and receive alerts when monitored values change.

Supported Devices

Juniper Networks NetScreen firewall/security appliances

Monitoring Examples

An administrator checks nsVpnManualKeyUsrEspEncAlg to confirm the negotiated encryption algorithm for a dialup VPN user on a Juniper NetScreen firewall.

What Can Be Monitored

VPN dialup-user group membership and encryption settings

Imported Objects

From NETSCREEN-SMI

netscreenVpn

OBJECT-IDENTITY

From RFC1155-SMI

IpAddress
OBJECT-TYPE

From RFC1213-MIB

DisplayString

OIDs

OID symbolic	OID numeric	Type	Access	Description
nsVpnUser	1.3.6.1.4.1.3224.4.10
nsVpnUsrDialupGrpTable	1.3.6.1.4.1.3224.4.10.1		not-accessible	NetScreen supports using dialup group to organize vpn user.This table collects the information of dialup group in NetScreen device.
nsVpnUsrDialupGrpEntry	1.3.6.1.4.1.3224.4.10.1.1		not-accessible	Each entry in this table holds a set of configuration information about dialup group.
INT nsVpnUsrDialupGrpIndex	1.3.6.1.4.1.3224.4.10.1.1.1	INTEGER	read-only	A unique value for schedule. Its value ranges between 0 and 65535 and may not be contiguous.
STR nsVpnUsrDialupGrpName	1.3.6.1.4.1.3224.4.10.1.1.2	DisplayString	read-only	dialup user group name.
INT nsVpnUsrDialupGrpType	1.3.6.1.4.1.3224.4.10.1.1.3	INTEGER	read-only	dial up group type.
INT nsVpnUsrDialupGrpVsys	1.3.6.1.4.1.3224.4.10.1.1.4	INTEGER	read-only	vsys this group belongs to.
nsVpnManualKeyUsrTable	1.3.6.1.4.1.3224.4.10.2		not-accessible	This table specifies the configuration attributes for manual key user.
nsVpnManualKeyUsrEntry	1.3.6.1.4.1.3224.4.10.2.1		not-accessible	Each entry in the nsVpnManualkeyUsrTable holds a set of configuration parameters associated with an instance of manual key user.
INT nsVpnManualKeyUsrIndex	1.3.6.1.4.1.3224.4.10.2.1.1	INTEGER	read-only	A unique value for manual key user table. Its value ranges between 0 and 65535 and may not be contiguous.
STR nsVpnManualKeyUsrName	1.3.6.1.4.1.3224.4.10.2.1.2	DisplayString	read-only	User name.
STR nsVpnManualKeyUsrGrp	1.3.6.1.4.1.3224.4.10.2.1.3	DisplayString	read-only	group this user belongs to.
INT nsVpnManualKeyUsrSILocal	1.3.6.1.4.1.3224.4.10.2.1.4	INTEGER	read-only	Local Security Index
INT nsVpnManualKeyUsrSIRemote	1.3.6.1.4.1.3224.4.10.2.1.5	INTEGER	read-only	Remote Security Index
INT nsVpnManualKeyUsrTunnelType	1.3.6.1.4.1.3224.4.10.2.1.6	INTEGER	read-only	vpn tunnel type.
INT nsVpnManualKeyUsrEspEncAlg	1.3.6.1.4.1.3224.4.10.2.1.7	INTEGER	read-only	ESP Encryption Algorithm.
INT nsVpnManualKeyUsrEspAuthAlg	1.3.6.1.4.1.3224.4.10.2.1.8	INTEGER	read-only	ESP Authentication Algorithm.
INT nsVpnManualKeyUsrAhHash	1.3.6.1.4.1.3224.4.10.2.1.9	INTEGER	read-only	AH Hash Algorithm.
INT nsVpnManualKeyUsrVsys	1.3.6.1.4.1.3224.4.10.2.1.10	INTEGER	read-only	vsys this user belongs to.
nsVpnAILUsrTable	1.3.6.1.4.1.3224.4.10.3		not-accessible	This table specifies the configuration attributes for AUTH/IKE/L2TP user.
nsVpnAILUsrEntry	1.3.6.1.4.1.3224.4.10.3.1		not-accessible	Each entry in the nsVpnManualkeyUsrTable holds a set of configuration parameters associated with an instance of AUTH/IKE/L2TP user.
INT nsVpnAILUsrIndex	1.3.6.1.4.1.3224.4.10.3.1.1	INTEGER	read-only	A unique value for Auth/Ike/l2tp user table. Its value ranges between 1 and 65535 and may not be contiguous.
STR nsVpnAILUsrName	1.3.6.1.4.1.3224.4.10.3.1.2	DisplayString	read-only	User name.
STR nsVpnAILUsrGrp	1.3.6.1.4.1.3224.4.10.3.1.3	DisplayString	read-only	group this user belongs to.
INT nsVpnAILUsrStatus	1.3.6.1.4.1.3224.4.10.3.1.4	INTEGER	read-only	User status
INT nsVpnAILUsrIKE	1.3.6.1.4.1.3224.4.10.3.1.5	INTEGER	read-only	Since Authentication, IKE L2TP can be combined together. This attribute is used to indicate if this user is an IKE user.
INT nsVpnAILUsrIKEIdType	1.3.6.1.4.1.3224.4.10.3.1.6	INTEGER	read-only	IKE user type 1 means auto, other values are undefined.
STR nsVpnAILUsrIKEId	1.3.6.1.4.1.3224.4.10.3.1.7	DisplayString	read-only	IKE id.
INT nsVpnAILUsrAuth	1.3.6.1.4.1.3224.4.10.3.1.8	INTEGER	read-only	Since Authentication, IKE L2TP can be combined together. This attribute is used to indicate if this user is an Authentication user.
INT nsVpnAILUsrL2TP	1.3.6.1.4.1.3224.4.10.3.1.9	INTEGER	read-only	Since Authentication, IKE L2TP can be combined together. This attribute is used to indicate if this user is a L2TP user. The NetScreen-1000 does not support L2TP.
IP nsVpnAILUsrL2tpRemoteIp	1.3.6.1.4.1.3224.4.10.3.1.10	IpAddress	read-only	L2TP remote peer ip address.
STR nsVpnAILUsrL2tpIpPool	1.3.6.1.4.1.3224.4.10.3.1.11	DisplayString	read-only	ip pool entity name.
IP nsVpnAILUsrL2tpIp	1.3.6.1.4.1.3224.4.10.3.1.12	IpAddress	read-only	L2TP local ip address.
IP nsVpnAILUsrL2tpPriDnsIp	1.3.6.1.4.1.3224.4.10.3.1.13	IpAddress	read-only	primary DNS server IP address for L2TP user.
IP nsVpnAILUsrL2tpSecDnsIp	1.3.6.1.4.1.3224.4.10.3.1.14	IpAddress	read-only	secondary DNS server IP address for L2TP user.
IP nsVpnAILUsrL2tpPriWinsIp	1.3.6.1.4.1.3224.4.10.3.1.15	IpAddress	read-only	primary WINS server IP address for L2TP user.
IP nsVpnAILUsrL2tpSecWinsIp	1.3.6.1.4.1.3224.4.10.3.1.16	IpAddress	read-only	secondary WINS server IP address for L2TP user.
INT nsVpnAILUsrVsys	1.3.6.1.4.1.3224.4.10.3.1.17	INTEGER	read-only	vsys this user belongs to.

RFC description

Netscreen ScreenOS User MIB for managing user authentication, access control, and VPN user management on Netscreen security appliances.

Start monitoring Juniper Networks NetScreen firewall/security appliance (VPN dialup user groups) with a free 30-day trial of IPNetwork Monitor. Import MIBs, browse SNMP OIDs, create custom SNMP monitors, configure alerts, and monitor any SNMP-enabled network device from a single console.

Download NETSCREEN-USER-MIB

What Is NETSCREEN-USER-MIB?

Supported Devices

Monitoring Examples

What Can Be Monitored

This MIB depends on

Related MIBs

RFC description