NETSCREEN-VR-RIPv2-MIB

All MIBs › NETSCREEN-VR-RIPv2-MIB

Organization: Juniper Networks, Inc.

Last Updated: 2005-06-20

Category: IP Routing

Description: Monitors RIPv2 routing within virtual router instances on Juniper NetScreen ScreenOS firewall platforms.

Start monitoring vendor-neutral, standards-based MIB, any SNMPv3-capable network device (SNMP engine identity/boot/clock status) with a free 30-day trial of IPNetwork Monitor. Import MIBs, browse SNMP OIDs, create custom SNMP monitors, configure alerts, and monitor any SNMP-enabled network device from a single console.

What Is NETSCREEN-VR-RIPv2-MIB?

NETSCREEN-VR-RIPv2-MIB is a Juniper Networks (NetScreen) enterprise MIB, defined under the netscreenVR subtree, that models RIP version 2 routing per virtual router (VR) instance on NetScreen ScreenOS firewall platforms. It exposes a per-VR globals table (nsVrRip2GlobalsTable) with route-change and query-response counters, an interface status table (nsVrRip2IfStatTable) tracking received bad packets/routes and sent triggered updates per VR/subnet, an interface configuration table (nsVrRip2IfConfTable) covering per-interface send/receive version rules, authentication type/key, and default metric, and a peer table (nsVrRip2PeerTable) tracking each active RIP neighbor's last-update time, RIP version, and bad-packet/route counts. All four tables are indexed in whole or part by a VRID object, reflecting ScreenOS's support for multiple virtual routers on one physical firewall. Because RIP is a control-plane routing protocol, monitoring this reveals routing-table churn, malformed RIP traffic, and stale neighbors rather than data-plane throughput, making the NETSCREEN-VR-RIPv2-MIB MIB the right target for auditing per-VR RIP health on ScreenOS firewalls.

IPNetwork Monitor allows you to monitor SNMP objects defined in NETSCREEN-VR-RIPv2-MIB. Use the built-in SNMP Monitoring Browser to explore available variables, view their current values and descriptions, and select the objects you want to monitor. You can then create SNMP monitors, configure thresholds, and receive alerts when monitored values change.

Supported Devices

Juniper (NetScreen) ScreenOS firewall/security platforms

Monitoring Examples

An operator polls nsVrRip2PeerLastUpdate for each peer in nsVrRip2PeerTable (keyed by VRID/address/domain) to catch a neighbor that has stopped sending updates, and a climbing nsVrRip2IfStatRcvBadRoutes on a given VR/subnet would indicate a misconfigured or incompatible RIP neighbor on that interface.

What Can Be Monitored

per-VR RIP route change/query counters
per-interface bad packet/route receive counters
per-interface RIP version send/receive configuration
RIP authentication type/key configuration
peer last-update time and RIP version
peer bad packet/route counters

Imported Objects

From NETSCREEN-SMI

netscreenVR

OBJECT-IDENTITY

From SNMPv2-CONF

MODULE-COMPLIANCE
OBJECT-GROUP

From SNMPv2-SMI

Counter32
IpAddress
MODULE-IDENTITY
OBJECT-TYPE
TimeTicks

From SNMPv2-TC

RowStatus
TEXTUAL-CONVENTION

How to Use in IPNetwork Monitor

Example using nsVrRip2GlobalRouteChanges OID:

Select a Juniper (NetScreen) ScreenOS firewall (RIPv2 per virtual router) as the target host to create a monitor — the SNMP service should be up and running on it. Click New Monitor, then check SNMP Custom on the Favorites tab, click Next, and confirm the host. On the next page, click Select... to open the built-in SNMP MIB Browser and type nsVrRip2GlobalRouteChanges into the Find box to locate it in the OID tree, selecting the specific row/instance you want to monitor since this is a table column, then select it and click OK. The number of route changes made to the IP Route Database by RIP. On the monitor's Main parameters page you can set the target's SNMP port (default 161), credentials, polling interval, and other settings — see the SNMP Monitor help for details. On the State conditions and Alerting tabs, configure when the monitor should change state and trigger an alert; since this is a Counter32-type OID, Value bounds is the most useful condition here — trigger an alert if the counter increases sharply between polls relative to its normal baseline, since an unexpected spike often reflects a real change in traffic or activity. Click Finish to create the monitor; you can adjust any parameter later.

OIDs

OID symbolic	OID numeric	Type	Access	Description
nsVrRip2	1.3.6.1.4.1.3224.18.7			The MIB module to describe the RIP2 Version 2 Protocol
nsVrRip2GlobalsTable	1.3.6.1.4.1.3224.18.7.1		not-accessible	A list of RIP2 Globals per VR.
nsVrRip2GlobalsEntry	1.3.6.1.4.1.3224.18.7.1.1		not-accessible	One VR's Globals.
C32 nsVrRip2GlobalRouteChangesEx	1.3.6.1.4.1.3224.18.7.1.1.1	Counter32	read-only	The number of route changes made to the IP Route Database by RIP. This does not include the refresh of a route's age.
C32 nsVrRip2GlobalQueries	1.3.6.1.4.1.3224.18.7.1.1.2	Counter32	read-only	The number of responses sent to RIP queries from other systems.
INT nsVrRip2GlobalVRID	1.3.6.1.4.1.3224.18.7.1.1.3	INTEGER	read-only	Virtual Router ID. VRID range for system created VRs: [1-1024] and for user created VRs: [1025-2048]
nsVrRip2IfStatTable	1.3.6.1.4.1.3224.18.7.2		not-accessible	A list of subnets which require separate status monitoring in RIP.
nsVrRip2IfStatEntry	1.3.6.1.4.1.3224.18.7.2.1		not-accessible	A Single Routing Domain in a single Subnet.
IP nsVrRip2IfStatAddress	1.3.6.1.4.1.3224.18.7.2.1.1	IpAddress	read-only	The IP Address of this system on the indicated subnet. For unnumbered interfaces, the value 0.0.0.N, where the least significant 24 bits (N) is the ifIndex for the IP Interface in network byte order.
C32 nsVrRip2IfStatRcvBadPackets	1.3.6.1.4.1.3224.18.7.2.1.2	Counter32	read-only	The number of RIP response packets received by the RIP process which were subsequently discarded for any reason (e.g. a version 0 packet, or an unknown command type).
C32 nsVrRip2IfStatRcvBadRoutes	1.3.6.1.4.1.3224.18.7.2.1.3	Counter32	read-only	The number of routes, in valid RIP packets, which were ignored for any reason (e.g. unknown address family, or invalid metric).
C32 nsVrRip2IfStatSentUpdates	1.3.6.1.4.1.3224.18.7.2.1.4	Counter32	read-only	The number of triggered RIP updates actually sent on this interface. This explicitly does NOT include full updates sent containing new information.
ROW nsVrRip2IfStatStatus	1.3.6.1.4.1.3224.18.7.2.1.5	RowStatus	read-create	Writing invalid has the effect of deleting this interface.
INT nsVrRip2IfStatVRID	1.3.6.1.4.1.3224.18.7.2.1.6	INTEGER	read-only	Virtual Router ID. VRID range for system created VRs: [1-1024] and for user created VRs: [1025-2048]
nsVrRip2IfConfTable	1.3.6.1.4.1.3224.18.7.3		not-accessible	A list of subnets which require separate configuration in RIP.
nsVrRip2IfConfEntry	1.3.6.1.4.1.3224.18.7.3.1		not-accessible	A Single Routing Domain in a single Subnet.
IP nsVrRip2IfConfAddress	1.3.6.1.4.1.3224.18.7.3.1.1	IpAddress	read-only	The IP Address of this system on the indicated subnet. For unnumbered interfaces, the value 0.0.0.N, where the least significant 24 bits (N) is the ifIndex for the IP Interface in network byte order.
ROU nsVrRip2IfConfDomain	1.3.6.1.4.1.3224.18.7.3.1.2	RouteTag	read-create	Value inserted into the Routing Domain field of all RIP packets sent on this interface.
INT nsVrRip2IfConfAuthType	1.3.6.1.4.1.3224.18.7.3.1.3	INTEGER	read-create	The type of Authentication used on this interface.
OCT nsVrRip2IfConfAuthKey	1.3.6.1.4.1.3224.18.7.3.1.4	OCTET STRING	read-create	The value to be used as the Authentication Key whenever the corresponding instance of nsVrRip2IfConfAuthType has a value other than noAuthentication. A modification of the corresponding instance of nsVrRip2IfConfAuthType does not modify the nsVrRip2IfConfAuthKey value. If a string shorter than 16 octets is supplied, it will be left- justified and padded to 16 octets, on the right, with nulls (0x00). Reading this object always results in an OCTET STRING of length zero; authentication may not be bypassed by reading the MIB object.
INT nsVrRip2IfConfSend	1.3.6.1.4.1.3224.18.7.3.1.5	INTEGER	read-create	What the router sends on this interface. ripVersion1 implies sending RIP updates compliant with RFC 1058. rip1Compatible implies broadcasting RIP-2 updates using RFC 1058 route subsumption rules. ripVersion2 implies multicasting RIP-2 updates. ripV1Demand indicates the use of Demand RIP on a WAN interface under RIP Version 1 rules. ripV2Demand indicates the use of Demand RIP on a WAN interface under Version 2 rules.
INT nsVrRip2IfConfReceive	1.3.6.1.4.1.3224.18.7.3.1.6	INTEGER	read-create	This indicates which version of RIP updates are to be accepted. Note that rip2 and rip1OrRip2 implies reception of multicast packets.
INT nsVrRip2IfConfDefaultMetric	1.3.6.1.4.1.3224.18.7.3.1.7	INTEGER	read-create	This variable indicates the metric that is to be used for the default route entry in RIP updates originated on this interface. A value of zero indicates that no default route should be originated; in this case, a default route via another router may be propagated.
ROW nsVrRip2IfConfStatus	1.3.6.1.4.1.3224.18.7.3.1.8	RowStatus	read-create	Writing invalid has the effect of deleting this interface.
IP nsVrRip2IfConfSrcAddress	1.3.6.1.4.1.3224.18.7.3.1.9	IpAddress	read-create	The IP Address this system will use as a source address on this interface. If it is a numbered interface, this MUST be the same value as nsVrRip2IfConfAddress. On unnumbered interfaces, it must be the value of nsVrRip2IfConfAddress for some interface on the system.
INT nsVrRip2IfConfVRID	1.3.6.1.4.1.3224.18.7.3.1.10	INTEGER	read-only	Virtual Router ID. VRID range for system created VRs: [1-1024] and for user created VRs: [1025-2048]
nsVrRip2PeerTable	1.3.6.1.4.1.3224.18.7.4		not-accessible	A list of RIP Peers.
nsVrRip2PeerEntry	1.3.6.1.4.1.3224.18.7.4.1		not-accessible	Information regarding a single routing peer.
IP nsVrRip2PeerAddress	1.3.6.1.4.1.3224.18.7.4.1.1	IpAddress	read-only	The IP Address that the peer is using as its source address. Note that on an unnumbered link, this may not be a member of any subnet on the system.
ROU nsVrRip2PeerDomain	1.3.6.1.4.1.3224.18.7.4.1.2	RouteTag	read-only	The value in the Routing Domain field in RIP packets received from the peer. As domain suuport is deprecated, this must be zero.
TIK nsVrRip2PeerLastUpdate	1.3.6.1.4.1.3224.18.7.4.1.3	TimeTicks	read-only	The value of sysUpTime when the most recent RIP update was received from this system.
INT nsVrRip2PeerVersion	1.3.6.1.4.1.3224.18.7.4.1.4	INTEGER	read-only	The RIP version number in the header of the last RIP packet received.
C32 nsVrRip2PeerRcvBadPackets	1.3.6.1.4.1.3224.18.7.4.1.5	Counter32	read-only	The number of RIP response packets from this peer discarded as invalid.
C32 nsVrRip2PeerRcvBadRoutes	1.3.6.1.4.1.3224.18.7.4.1.6	Counter32	read-only	The number of routes from this peer that were ignored because the entry format was invalid.
INT nsVrRip2PeerVRID	1.3.6.1.4.1.3224.18.7.4.1.7	INTEGER	read-only	Virtual Router ID. VRID range for system created VRs: [1-1024] and for user created VRs: [1025-2048]

RFC description

Juniper Networks MIB module for monitoring RIPv2 dynamic routing configuration on NetScreen security appliances with virtual router capabilities, based on the NS-VR-RIP module.

Start monitoring Juniper (NetScreen) ScreenOS firewall (RIPv2 per virtual router) with a free 30-day trial of IPNetwork Monitor. Import MIBs, browse SNMP OIDs, create custom SNMP monitors, configure alerts, and monitor any SNMP-enabled network device from a single console.

Download NETSCREEN-VR-RIPv2-MIB