All MIBs › NETSCREEN-VPN-USER-MIB
Organization: Juniper Networks, Inc.
Last Updated: 2004-05-03
Category: IPSec/VPN
Description: Manages VPN user accounts, group memberships, and dial-up VPN authentication on Juniper NetScreen devices.
Start monitoring vendor-neutral, standards-based MIB, any SNMPv3-capable network device (SNMP engine identity/boot/clock status) with a free 30-day trial of IPNetwork Monitor. Import MIBs, browse SNMP OIDs, create custom SNMP monitors, configure alerts, and monitor any SNMP-enabled network device from a single console.
What Is NETSCREEN-VPN-USER-MIB?
NETSCREEN-VPN-USER-MIB is a Juniper NetScreen firewall MIB for managing dial-up VPN user and group configuration, covering both group-based dial-up VPN accounts and manual-key VPN user definitions. It exposes tables for dial-up VPN group membership/type/vsys assignment and for manual-key VPN users including their group association and security index (SPI) bindings. Its monitoring value is primarily software/configuration status related to remote-access VPN service: confirming VPN user groups and manual-key associations are correctly provisioned is essential to diagnosing why a remote user's VPN client cannot connect, such as a wrong group type or missing manual-key SPI binding, rather than hardware fault detection. It is a NetScreen vendor-private MIB used alongside NETSCREEN-RESOURCE-MIB and general NetScreen system MIBs, and it operates in the context of standard IPsec/IKE VPN concepts. It is deployed on Juniper NetScreen/SSG firewall appliances providing remote-access dial-up VPN termination. Engineers can download the NETSCREEN-VPN-USER-MIB file directly to load it into their MIB browser.
IPNetwork Monitor allows you to monitor SNMP objects defined in NETSCREEN-VPN-USER-MIB. Use the built-in SNMP Monitoring Browser to explore available variables, view their current values and descriptions, and select the objects you want to monitor. You can then create SNMP monitors, configure thresholds, and receive alerts when monitored values change.
Supported Devices
- Juniper NetScreen/SSG firewall appliance
Monitoring Examples
An admin would poll nsVpnUsrDialupGrpTable/nsVpnUsrDialupGrpEntry indexed by nsVpnUsrDialupGrpIndex to confirm each nsVpnUsrDialupGrpName has the correct nsVpnUsrDialupGrpType and nsVpnUsrDialupGrpVsys, useful when a group of remote users in a specific vsys cannot establish tunnels. The nsVpnManualKeyUsrTable/nsVpnManualKeyUsrEntry, indexed by nsVpnManualKeyUsrIndex, would be checked for nsVpnManualKeyUsrGrp and nsVpnManualKeyUsrSILocal to verify manual-key security index bindings match on both VPN endpoints, since a mismatch here is a classic cause of failed manual-key IPsec tunnels.
What Can Be Monitored
- dial-up VPN group configuration
- VPN group type and vsys assignment
- manual-key VPN user/group bindings
- security index (SPI) associations
Imported Objects
From NETSCREEN-SMI
| netscreenVpn | OBJECT-IDENTITY |
| netscreenVpnMibModule | OBJECT-IDENTITY |
From SNMPv2-SMI
| Integer32 | |
| IpAddress | |
| MODULE-IDENTITY | |
| OBJECT-TYPE |
From SNMPv2-TC
| DisplayString |
OIDs
RFC description
Juniper NetScreen private MIB for VPN user configuration and management.
Start monitoring Juniper NetScreen/SSG firewall appliance (dial-up VPN user/group configuration) with a free 30-day trial of IPNetwork Monitor. Import MIBs, browse SNMP OIDs, create custom SNMP monitors, configure alerts, and monitor any SNMP-enabled network device from a single console.