NETSCREEN-VR-BGP4-MIB

All MIBs › NETSCREEN-VR-BGP4-MIB

Organization: Juniper Networks, Inc.

Last Updated: 2005-06-20

Category: BGP

Description: Monitors BGP4 routing within virtual router instances on Juniper NetScreen ScreenOS firewall platforms.

Start monitoring vendor-neutral, standards-based MIB, any SNMPv3-capable network device (SNMP engine identity/boot/clock status) with a free 30-day trial of IPNetwork Monitor. Import MIBs, browse SNMP OIDs, create custom SNMP monitors, configure alerts, and monitor any SNMP-enabled network device from a single console.

What Is NETSCREEN-VR-BGP4-MIB?

NETSCREEN-VR-BGP4-MIB is a Juniper NetScreen (ScreenOS) private enterprise MIB that extends BGP4 routing visibility to the per-virtual-router context on NetScreen firewalls, since ScreenOS firewalls can host multiple independent virtual router (VR) routing instances. Conceptually it exposes BGP peering and routing data -- such as peer identity, session state, and advertised routes -- scoped to each virtual router, mirroring the kind of data found in the standard BGP4-MIB. In a monitoring context this is used to confirm the software-level routing health of each VR instance, primarily whether configured BGP peers are established and exchanging routes, rather than any hardware attribute. It is modeled on and dependent on the concepts of the standard IETF BGP4-MIB, adapted to NetScreen's multi-VR architecture. It is typically deployed on NetScreen/Juniper firewalls that run BGP for dynamic routing across multiple virtual-router contexts, such as multi-tenant or segmented network edges, where administrators can get the NETSCREEN-VR-BGP4-MIB download to load into their SNMP tooling.

IPNetwork Monitor allows you to monitor SNMP objects defined in NETSCREEN-VR-BGP4-MIB. Use the built-in SNMP Monitoring Browser to explore available variables, view their current values and descriptions, and select the objects you want to monitor. You can then create SNMP monitors, configure thresholds, and receive alerts when monitored values change.

Supported Devices

Juniper NetScreen firewall
NetScreen ScreenOS security appliance

Monitoring Examples

No concrete object or table names were included in this extract, so no specific object can be cited with confidence; the module description indicates only that it defines BGP4 monitoring "for NS-BGP-4." In practice such a MIB would be expected to expose per-VR analogues of standard BGP4-MIB objects (e.g., peer address, peer state, established/idle transitions) so an admin could confirm a given virtual router's BGP peer is Established rather than flapping. Without the underlying object list, however, a more specific polling scenario would be speculative.

What Can Be Monitored

BGP peer state per virtual router
BGP peering configuration per VR

Imported Objects

From NETSCREEN-SMI

netscreenVR

OBJECT-IDENTITY

From NETSCREEN-TRAP-MIB

netscreenTrapDesc	OBJECT-TYPE
netscreenTrapType	OBJECT-TYPE

From SNMPv2-SMI

Counter32
Gauge32
Integer32
IpAddress
MODULE-IDENTITY
NOTIFICATION-TYPE
OBJECT-TYPE

How to Use in IPNetwork Monitor

Example using nsVrBgpPeerInUpdates OID:

Select a Juniper NetScreen firewall (BGP4 per virtual-router) as the target host to create a monitor — the SNMP service should be up and running on it. Click New Monitor, then check SNMP Custom on the Favorites tab, click Next, and confirm the host. On the next page, click Select... to open the built-in SNMP MIB Browser and type nsVrBgpPeerInUpdates into the Find box to locate it in the OID tree, selecting the specific row/instance you want to monitor since this is a table column, then select it and click OK. The number of BGP UPDATE messages received on this connection. On the monitor's Main parameters page you can set the target's SNMP port (default 161), credentials, polling interval, and other settings — see the SNMP Monitor help for details. On the State conditions and Alerting tabs, configure when the monitor should change state and trigger an alert; since this is a Counter32-type OID, Value bounds is the most useful condition here — trigger an alert if the counter increases sharply between polls relative to its normal baseline, since an unexpected spike often reflects a real change in traffic or activity. Click Finish to create the monitor; you can adjust any parameter later.

OIDs

OID symbolic	OID numeric	Type	Access	Description
nsVrBgp	1.3.6.1.4.1.3224.18.6			The MIB module for NS-BGP-4.
nsVrBgpInfoTable	1.3.6.1.4.1.3224.18.6.1		not-accessible	BGP info table. This table contains, one entry per VR, information about the BGP's Version, LocalAs and Identifier.
nsVrBgpInfoEntry	1.3.6.1.4.1.3224.18.6.1.1		not-accessible	Entry containing information about the BGP's Version, LocalAs and Identifier
OCT nsVrBgpInfoVersion	1.3.6.1.4.1.3224.18.6.1.1.1	OCTET STRING	read-only	Vector of supported BGP protocol version numbers. Each peer negotiates the version from this vector. Versions are identified via the string of bits contained within this object. The first octet contains bits 0 to 7, the second octet contains bits 8 to 15, and so on, with the most significant bit referring to the lowest bit number in the octet (e.g., the MSB of the first octet refers to bit 0). If a bit, i, is present and set, then the version (i+1) of the BGP is supported.
INT nsVrBgpInfoLocalAs	1.3.6.1.4.1.3224.18.6.1.1.2	INTEGER	read-only	The local autonomous system number.
IP nsVrBgpInfoIdentifier	1.3.6.1.4.1.3224.18.6.1.1.3	IpAddress	read-only	The BGP Identifier of local system.
INT nsVrBgpInfoVRID	1.3.6.1.4.1.3224.18.6.1.1.4	INTEGER	read-only	Virtual Router ID. VRID range for system created VRs: [1-1024] and for user created VRs: [1025-2048]
nsVrBgpPeerTable	1.3.6.1.4.1.3224.18.6.3		not-accessible	BGP peer table. This table contains, one entry per BGP peer, information about the connections with BGP peers.
nsVrBgpPeerEntry	1.3.6.1.4.1.3224.18.6.3.1		not-accessible	Entry containing information about the connection with a BGP peer.
IP nsVrBgpPeerIdentifier	1.3.6.1.4.1.3224.18.6.3.1.1	IpAddress	read-only	The BGP Identifier of this entry's BGP peer.
INT nsVrBgpPeerState	1.3.6.1.4.1.3224.18.6.3.1.2	INTEGER	read-only	The BGP peer connection state.
INT nsVrBgpPeerAdminStatus	1.3.6.1.4.1.3224.18.6.3.1.3	INTEGER	read-only	The desired state of the BGP connection. A transition from 'stop' to 'start' will cause the BGP Start Event to be generated. A transition from 'start' to 'stop' will cause the BGP Stop Event to be generated. This parameter can be used to restart BGP peer connections. Care should be used in providing write access to this object without adequate authentication.
I32 nsVrBgpPeerNegotiatedVersion	1.3.6.1.4.1.3224.18.6.3.1.4	Integer32	read-only	The negotiated version of BGP running between the two peers.
IP nsVrBgpPeerLocalAddr	1.3.6.1.4.1.3224.18.6.3.1.5	IpAddress	read-only	The local IP address of this entry's BGP connection.
INT nsVrBgpPeerLocalPort	1.3.6.1.4.1.3224.18.6.3.1.6	INTEGER	read-only	The local port for the TCP connection between the BGP peers.
IP nsVrBgpPeerRemoteAddr	1.3.6.1.4.1.3224.18.6.3.1.7	IpAddress	read-only	The remote IP address of this entry's BGP peer.
INT nsVrBgpPeerRemotePort	1.3.6.1.4.1.3224.18.6.3.1.8	INTEGER	read-only	The remote port for the TCP connection between the BGP peers. Note that the objects nsVrBgpPeerLocalAddr, nsVrBgpPeerLocalPort, nsVrBgpPeerRemoteAddr and nsVrBgpPeerRemotePort provide the appropriate reference to the standard MIB TCP connection table.
INT nsVrBgpPeerRemoteAs	1.3.6.1.4.1.3224.18.6.3.1.9	INTEGER	read-only	The remote autonomous system number.
C32 nsVrBgpPeerInUpdatesEx	1.3.6.1.4.1.3224.18.6.3.1.10	Counter32	read-only	The number of BGP UPDATE messages received on this connection. This object should be initialized to zero (0) when the connection is established.
C32 nsVrBgpPeerOutUpdates	1.3.6.1.4.1.3224.18.6.3.1.11	Counter32	read-only	The number of BGP UPDATE messages transmitted on this connection. This object should be initialized to zero (0) when the connection is established.
C32 nsVrBgpPeerInTotalMessages	1.3.6.1.4.1.3224.18.6.3.1.12	Counter32	read-only	The total number of messages received from the remote peer on this connection. This object should be initialized to zero when the connection is established.
C32 nsVrBgpPeerOutTotalMessages	1.3.6.1.4.1.3224.18.6.3.1.13	Counter32	read-only	The total number of messages transmitted to the remote peer on this connection. This object should be initialized to zero when the connection is established.
OCT nsVrBgpPeerLastError	1.3.6.1.4.1.3224.18.6.3.1.14	OCTET STRING	read-only	The last error code and subcode seen by this peer on this connection. If no error has occurred, this field is zero. Otherwise, the first byte of this two byte OCTET STRING contains the error code, and the second byte contains the subcode.
C32 nsVrBgpPeerFsmEstablishedTransitions	1.3.6.1.4.1.3224.18.6.3.1.15	Counter32	read-only	The total number of times the BGP FSM transitioned into the established state.
G32 nsVrBgpPeerFsmEstablishedTime	1.3.6.1.4.1.3224.18.6.3.1.16	Gauge32	read-only	This timer indicates how long (in seconds) this peer has been in the Established state or how long since this peer was last in the Established state. It is set to zero when a new peer is configured or the router is booted.
INT nsVrBgpPeerConnectRetryInterval	1.3.6.1.4.1.3224.18.6.3.1.17	INTEGER	read-only	Time interval in seconds for the ConnectRetry timer. The suggested value for this timer is 120 seconds.
INT nsVrBgpPeerHoldTime	1.3.6.1.4.1.3224.18.6.3.1.18	INTEGER	read-only	Time interval in seconds for the Hold Timer established with the peer. The value of this object is calculated by this BGP speaker by using the smaller of the value in nsVrBgpPeerHoldTimeConfigured and the Hold Time received in the OPEN message. This value must be at lease three seconds if it is not zero (0) in which case the Hold Timer has not been established with the peer, or, the value of nsVrBgpPeerHoldTimeConfigured is zero (0).
INT nsVrBgpPeerKeepAlive	1.3.6.1.4.1.3224.18.6.3.1.19	INTEGER	read-only	Time interval in seconds for the KeepAlive timer established with the peer. The value of this object is calculated by this BGP speaker such that, when compared with nsVrBgpPeerHoldTime, it has the same proportion as what nsVrBgpPeerKeepAliveConfigured has when compared with nsVrBgpPeerHoldTimeConfigured. If the value of this object is zero (0), it indicates that the KeepAlive timer has not been established with the peer, or, the value of nsVrBgpPeerKeepAliveConfigured is zero (0).
INT nsVrBgpPeerHoldTimeConfigured	1.3.6.1.4.1.3224.18.6.3.1.20	INTEGER	read-only	Time interval in seconds for the Hold Time configured for this BGP speaker with this peer. This value is placed in an OPEN message sent to this peer by this BGP speaker, and is compared with the Hold Time field in an OPEN message received from the peer when determining the Hold Time (nsVrBgpPeerHoldTime) with the peer. This value must not be less than three seconds if it is not zero (0) in which case the Hold Time is NOT to be established with the peer. The suggested value for this timer is 90 seconds.
INT nsVrBgpPeerKeepAliveConfigured	1.3.6.1.4.1.3224.18.6.3.1.21	INTEGER	read-only	Time interval in seconds for the KeepAlive timer configured for this BGP speaker with this peer. The value of this object will only determine the KEEPALIVE messages' frequency relative to the value specified in nsVrBgpPeerHoldTimeConfigured; the actual time interval for the KEEPALIVE messages is indicated by nsVrBgpPeerKeepAlive. A reasonable maximum value for this timer would be configured to be one third of that of nsVrBgpPeerHoldTimeConfigured. If the value of this object is zero (0), no periodical KEEPALIVE messages are sent to the peer after the BGP connection has been established. The suggested value for this timer is 30 seconds.
INT nsVrBgpPeerMinASOriginationInterval	1.3.6.1.4.1.3224.18.6.3.1.22	INTEGER	read-only	Time interval in seconds for the MinASOriginationInterval timer. The suggested value for this timer is 15 seconds.
INT nsVrBgpPeerMinRouteAdvertisementInterval	1.3.6.1.4.1.3224.18.6.3.1.23	INTEGER	read-only	Time interval in seconds for the MinRouteAdvertisementInterval timer. The suggested value for this timer is 30 seconds.
G32 nsVrBgpPeerInUpdateElapsedTime	1.3.6.1.4.1.3224.18.6.3.1.24	Gauge32	read-only	Elapsed time in seconds since the last BGP UPDATE message was received from the peer. Each time nsVrBgpPeerInUpdates is incremented, the value of this object is set to zero (0).
INT nsVrBgpPeerVRID	1.3.6.1.4.1.3224.18.6.3.1.25	INTEGER	read-only	Virtual Router ID. VRID range for system created VRs: [1-1024] and for user created VRs: [1025-2048]
nsVrBgp4PathAttrTable	1.3.6.1.4.1.3224.18.6.6		not-accessible	The BGP-4 Received Path Attribute Table contains information about paths to destination networks received from all BGP4 peers.
nsVrBgp4PathAttrEntry	1.3.6.1.4.1.3224.18.6.6.1		not-accessible	Information about a path to a network.
IP nsVrBgp4PathAttrPeer	1.3.6.1.4.1.3224.18.6.6.1.1	IpAddress	read-only	The IP address of the peer where the path information was learned.
INT nsVrBgp4PathAttrIpAddrPrefixLen	1.3.6.1.4.1.3224.18.6.6.1.2	INTEGER	read-only	Length in bits of the IP address prefix in the Network Layer Reachability Information field.
IP nsVrBgp4PathAttrIpAddrPrefix	1.3.6.1.4.1.3224.18.6.6.1.3	IpAddress	read-only	An IP address prefix in the Network Layer Reachability Information field. This object is an IP address containing the prefix with length specified by nsVrBgp4PathAttrIpAddrPrefixLen. Any bits beyond the length specified by nsVrBgp4PathAttrIpAddrPrefixLen are zeroed.
INT nsVrBgp4PathAttrOrigin	1.3.6.1.4.1.3224.18.6.6.1.4	INTEGER	read-only	The ultimate origin of the path information.
OCT nsVrBgp4PathAttrASPathSegment	1.3.6.1.4.1.3224.18.6.6.1.5	OCTET STRING	read-only	The sequence of AS path segments. Each AS path segment is represented by a triple . The type is a 1-octet field which has two possible values: 1 AS_SET: unordered set of ASs a route in the UPDATE message has traversed 2 AS_SEQUENCE: ordered set of ASs a route in the UPDATE message has traversed. The length is a 1-octet field containing the number of ASs in the value field. The value field contains one or more AS numbers, each AS is represented in the octet string as a pair of octets according to the following algorithm: first-byte-of-pair = ASNumber / 256; second-byte-of-pair = ASNumber & 255;
IP nsVrBgp4PathAttrNextHop	1.3.6.1.4.1.3224.18.6.6.1.6	IpAddress	read-only	The address of the border router that should be used for the destination network.
INT nsVrBgp4PathAttrMultiExitDisc	1.3.6.1.4.1.3224.18.6.6.1.7	INTEGER	read-only	This metric is used to discriminate between multiple exit points to an adjacent autonomous system. A value of -1 indicates the absence of this attribute.
INT nsVrBgp4PathAttrLocalPref	1.3.6.1.4.1.3224.18.6.6.1.8	INTEGER	read-only	The originating BGP4 speaker's degree of preference for an advertised route. A value of -1 indicates the absence of this attribute.
INT nsVrBgp4PathAttrAtomicAggregate	1.3.6.1.4.1.3224.18.6.6.1.9	INTEGER	read-only	Whether or not the local system has selected a less specific route without selecting a more specific route.
INT nsVrBgp4PathAttrAggregatorAS	1.3.6.1.4.1.3224.18.6.6.1.10	INTEGER	read-only	The AS number of the last BGP4 speaker that performed route aggregation. A value of zero (0) indicates the absence of this attribute.
IP nsVrBgp4PathAttrAggregatorAddr	1.3.6.1.4.1.3224.18.6.6.1.11	IpAddress	read-only	The IP address of the last BGP4 speaker that performed route aggregation. A value of 0.0.0.0 indicates the absence of this attribute.
INT nsVrBgp4PathAttrCalcLocalPref	1.3.6.1.4.1.3224.18.6.6.1.12	INTEGER	read-only	The degree of preference calculated by the receiving BGP4 speaker for an advertised route. A value of -1 indicates the absence of this attribute.
INT nsVrBgp4PathAttrBest	1.3.6.1.4.1.3224.18.6.6.1.13	INTEGER	read-only	An indication of whether or not this route was chosen as the best BGP4 route.
OCT nsVrBgp4PathAttrUnknown	1.3.6.1.4.1.3224.18.6.6.1.14	OCTET STRING	read-only	One or more path attributes not understood by this BGP4 speaker. Size zero (0) indicates the absence of such attribute(s). Octets beyond the maximum size, if any, are not recorded by this object.
INT nsVrBgp4PathAttrVRID	1.3.6.1.4.1.3224.18.6.6.1.15	INTEGER	read-only	Virtual Router ID. VRID range for system created VRs: [1-1024] and for user created VRs: [1025-2048]
nsVrBgpTraps	1.3.6.1.4.1.3224.18.6.7
NTF nsVrBgpEstablished	1.3.6.1.4.1.3224.18.6.7.1			The BGP Established event is generated when the BGP FSM enters the ESTABLISHED state.

RFC description

Manages BGP-4 routing configuration and status for virtual routers on Netscreen/Juniper devices.

Start monitoring Juniper NetScreen firewall (BGP4 per virtual-router) with a free 30-day trial of IPNetwork Monitor. Import MIBs, browse SNMP OIDs, create custom SNMP monitors, configure alerts, and monitor any SNMP-enabled network device from a single console.

Download NETSCREEN-VR-BGP4-MIB