All MIBs › NETSCREEN-VPN-L2TP-MIB
Organization: Juniper Networks, Inc.
Last Updated: 2004-05-03
Category: IPSec/VPN
Description: Manages L2TP tunnel configuration, user authentication, and session state on Juniper NetScreen VPN devices.
Start monitoring vendor-neutral, standards-based MIB, any SNMPv3-capable network device (SNMP engine identity/boot/clock status) with a free 30-day trial of IPNetwork Monitor. Import MIBs, browse SNMP OIDs, create custom SNMP monitors, configure alerts, and monitor any SNMP-enabled network device from a single console.
What Is NETSCREEN-VPN-L2TP-MIB?
NETSCREEN-VPN-L2TP-MIB is a Juniper NetScreen (ScreenOS) private enterprise MIB for configuring Layer 2 Tunneling Protocol (L2TP) remote-access VPN defaults on NetScreen firewalls, typically used for dial-in or client VPN termination. It exposes configuration objects for the L2TP default profile per virtual system, including the client address pool, authentication database (local or RADIUS), PPP authentication method, and primary/secondary DNS and WINS server assignments. Rather than performance counters, it is a configuration/state MIB useful for confirming remote-access VPN authentication and addressing are set up as expected, e.g., verifying which RADIUS server (nsVpnL2tpDefRadServer) and authentication method (nsVpnL2tpDefPPPAuth) a vsys uses for L2TP clients. It has an implicit dependency on RADIUS/PPP authentication standards and on the NetScreen virtual-system (vsys) model referenced via nsVpnL2tpDefVsys. It is typically deployed in enterprise remote-access scenarios where NetScreen firewalls terminate L2TP/IPsec VPN sessions from remote or mobile users, and administrators can download the NETSCREEN-VPN-L2TP-MIB file directly to load it into their MIB browser.
IPNetwork Monitor allows you to monitor SNMP objects defined in NETSCREEN-VPN-L2TP-MIB. Use the built-in SNMP Monitoring Browser to explore available variables, view their current values and descriptions, and select the objects you want to monitor. You can then create SNMP monitors, configure thresholds, and receive alerts when monitored values change.
Supported Devices
- Juniper NetScreen firewall
- NetScreen ScreenOS security appliance
Monitoring Examples
An administrator inspects nsVpnL2tpDefTable/nsVpnL2tpDefEntry per nsVpnL2tpDefVsys to confirm the correct nsVpnL2tpDefPool of client IP addresses and nsVpnL2tpDefAuthDb (local vs. RADIUS) are assigned. Checking nsVpnL2tpDefPriDns/nsVpnL2tpDefSecDns and nsVpnL2tpDefPriWins/nsVpnL2tpDefSecWins verifies remote clients receive correct name-resolution servers over the tunnel. A misconfigured nsVpnL2tpDefRadServer would explain widespread L2TP client authentication failures for that vsys.
What Can Be Monitored
- L2TP address pool assignment
- authentication database (local/RADIUS)
- PPP authentication method
- RADIUS server configuration
- DNS/WINS server assignment for VPN clients
Imported Objects
From NETSCREEN-SMI
| netscreenVpn | OBJECT-IDENTITY |
| netscreenVpnMibModule | OBJECT-IDENTITY |
From RFC1155-SMI
| OBJECT-TYPE |
From SNMPv2-SMI
| Integer32 | |
| IpAddress | |
| MODULE-IDENTITY | |
| TimeTicks |
From SNMPv2-TC
| DisplayString |
OIDs
RFC description
NetScreen L2TP VPN tunnel configuration and management with authentication and DNS/WINS settings.
Start monitoring Juniper NetScreen firewall (ScreenOS L2TP remote-access VPN) with a free 30-day trial of IPNetwork Monitor. Import MIBs, browse SNMP OIDs, create custom SNMP monitors, configure alerts, and monitor any SNMP-enabled network device from a single console.