All MIBs › NETSCREEN-VPN-GATEWAY-MIB
Organization: Juniper Networks, Inc.
Last Updated: 2004-05-03
Category: IPSec/VPN
Description: Monitors VPN gateway configuration and active tunnel counts on Juniper NetScreen ScreenOS firewall appliances.
Start monitoring vendor-neutral, standards-based MIB, any SNMPv3-capable network device (SNMP engine identity/boot/clock status) with a free 30-day trial of IPNetwork Monitor. Import MIBs, browse SNMP OIDs, create custom SNMP monitors, configure alerts, and monitor any SNMP-enabled network device from a single console.
What Is NETSCREEN-VPN-GATEWAY-MIB?
NETSCREEN-VPN-GATEWAY-MIB is a NetScreen (later Juniper Networks) proprietary MIB configuring IPsec VPN gateway definitions on NetScreen security appliances. Its gateway table, keyed by index, records the gateway name, remote-peer type, remote static IP, remote peer ID, whether the gateway is dial-up, IKE initiation mode, and Phase 1 proposal settings. As a configuration MIB it lets an administrator audit VPN gateway definitions — remote peer addressing and IKE negotiation mode — when diagnosing a site-to-site VPN tunnel that won't establish. It is deployed on NetScreen (Juniper) security appliances providing IPsec VPN gateways. Engineers can download the NETSCREEN-VPN-GATEWAY-MIB file directly to load it into their MIB browser.
IPNetwork Monitor allows you to monitor SNMP objects defined in NETSCREEN-VPN-GATEWAY-MIB. Use the built-in SNMP Monitoring Browser to explore available variables, view their current values and descriptions, and select the objects you want to monitor. You can then create SNMP monitors, configure thresholds, and receive alerts when monitored values change.
Supported Devices
- NetScreen (Juniper Networks) security appliances (IPsec VPN gateways)
Monitoring Examples
An administrator checks nsVpnGwRemoteStaticIp and nsVpnGwInitMode for a VPN gateway that won't establish a tunnel, confirming the remote peer address and IKE initiation mode match the far end's configuration.
What Can Be Monitored
- VPN gateway remote-peer addressing and IKE negotiation mode
Imported Objects
From NETSCREEN-SMI
| netscreenVpn | OBJECT-IDENTITY |
| netscreenVpnMibModule | OBJECT-IDENTITY |
From SNMPv2-SMI
| Integer32 | |
| IpAddress | |
| MODULE-IDENTITY | |
| OBJECT-TYPE |
From SNMPv2-TC
| DisplayString |
OIDs
RFC description
Provides configuration management for NetScreen VPN gateway tunnels and remote peer connections.
Start monitoring NetScreen (Juniper Networks) security appliance (IPsec VPN gateway) with a free 30-day trial of IPNetwork Monitor. Import MIBs, browse SNMP OIDs, create custom SNMP monitors, configure alerts, and monitor any SNMP-enabled network device from a single console.