NETWORK-ALCHEMY-CLUSTER-MIB

All MIBs › NETWORK-ALCHEMY-CLUSTER-MIB

Organization: Network Alchemy, Inc.

Last Updated: 2000-10-25

Category: Security

Description: Manages Network Alchemy VPN appliance cluster membership, failover state, and node synchronization.

Start monitoring vendor-neutral, standards-based MIB, any SNMPv3-capable network device (SNMP engine identity/boot/clock status) with a free 30-day trial of IPNetwork Monitor. Import MIBs, browse SNMP OIDs, create custom SNMP monitors, configure alerts, and monitor any SNMP-enabled network device from a single console.

What Is NETWORK-ALCHEMY-CLUSTER-MIB?

NETWORK-ALCHEMY-CLUSTER-MIB is a private enterprise MIB from Network Alchemy, a VPN/security appliance vendor, for managing high-availability clustering across multiple appliances. It exposes cluster-wide identity and membership information, a table of cluster IP addresses, and a per-node table listing each member's primary IP address, workload, and master/backup role. For monitoring hardware/software cluster health, it is primarily used to confirm clusterMemberInfoNumMembers matches the expected node count, check clusterMemberMaster to see which node currently holds mastership, and compare clusterMemberWorkload across nodes to detect an imbalance or a node that has silently dropped out of load distribution. It has no notable dependency on external standard MIBs, being a self-contained vendor clustering extension. It is typically deployed on Network Alchemy VPN/firewall appliances configured in an active/active or active/standby high-availability cluster for enterprise perimeter security. Engineers can download the NETWORK-ALCHEMY-CLUSTER-MIB file directly to load it into their MIB browser.

IPNetwork Monitor allows you to monitor SNMP objects defined in NETWORK-ALCHEMY-CLUSTER-MIB. Use the built-in SNMP Monitoring Browser to explore available variables, view their current values and descriptions, and select the objects you want to monitor. You can then create SNMP monitors, configure thresholds, and receive alerts when monitored values change.

Supported Devices

Network Alchemy VPN/security appliance
clustered firewall/VPN gateway
Nokia IP-series VPN/firewall security appliances (clustering technology originated at Network Alchemy, acquired by Nokia in 2000)

Monitoring Examples

An admin polls clusterMemberTable/clusterMemberEntry to enumerate nodes by clusterMemberIndex and check clusterMemberMaster on each, expecting exactly one node to report itself as master at any time. Comparing clusterMemberWorkload across entries reveals whether load is balanced or whether one node is silently carrying all traffic after a failover. If clusterMemberInfoNumMembers reports fewer members than the configured cluster size, a node has likely dropped out of clusterAddrTable/clusterAddrEntry synchronization and needs investigation.

What Can Be Monitored

cluster member count
cluster master/backup role per node
per-node workload distribution
cluster IP address assignments
node primary IP address

Imported Objects

From NETAL-SMI

cryptoCluster	OBJECT-IDENTITY
netalModules	OBJECT-IDENTITY
netalTraps	OBJECT-IDENTITY

From SNMPv2-SMI

Integer32
IpAddress
MODULE-IDENTITY
NOTIFICATION-TYPE
OBJECT-TYPE

From SNMPv2-TC

DisplayString

How to Use in IPNetwork Monitor

Example using clusterMemberInfoNumMembers OID:

Select a Nokia IP-series security appliance as the target host to create a monitor — the SNMP service should be up and running on it. Click New Monitor, then check SNMP Custom on the Favorites tab, click Next, and confirm the host. On the next page, click Select... to open the built-in SNMP MIB Browser and type clusterMemberInfoNumMembers into the Find box to locate it in the OID tree, then select it and click OK. It reports the number of members in this cluster. On the monitor's Main parameters page you can set the target's SNMP port (default 161), credentials, polling interval, and other settings — see the SNMP Monitor help for details. On the State conditions and Alerting tabs, configure when the monitor should change state and trigger an alert; since this is an INTEGER-type OID, Value bounds is the most useful condition here — trigger an alert if the count changes from its expected baseline, since that would indicate the underlying set of items changed unexpectedly. Click Finish to create the monitor; you can adjust any parameter later.

OIDs

OID symbolic	OID numeric	Type	Access	Description
STR clusterInfoName	1.3.6.1.4.1.2972.2.1.1	DisplayString	read-only	Name of this cluster
INT clusterMemberInfoNumMembersEx	1.3.6.1.4.1.2972.2.1.2	INTEGER	read-only	Number of members in this cluster
clusterAddrTable	1.3.6.1.4.1.2972.2.1.3		not-accessible	List of IP addresses for this cluster.
clusterAddrEntry	1.3.6.1.4.1.2972.2.1.3.1		not-accessible
INT clusterAddrIndex	1.3.6.1.4.1.2972.2.1.3.1.1	INTEGER	read-only	The index of the member list for this cluster
IP clusterInfoAddrs	1.3.6.1.4.1.2972.2.1.3.1.2	IpAddress	read-only	List of the cluster's IP addresses
clusterMemberTable	1.3.6.1.4.1.2972.2.1.4		not-accessible	A list of information, one entry for each member of the cluster
clusterMemberEntry	1.3.6.1.4.1.2972.2.1.4.1		not-accessible	A table entry containing information about a member of the cluster.
INT clusterMemberIndex	1.3.6.1.4.1.2972.2.1.4.1.1	INTEGER	read-only	A unique value for each member in the cluster. The value ranges between 1 and the value of clusterMemberInfoNumMembers.
IP clusterMemberPrimaryIPAddr	1.3.6.1.4.1.2972.2.1.4.1.2	IpAddress	read-only	The member's primary IP address
INT clusterMemberWorkload	1.3.6.1.4.1.2972.2.1.4.1.3	INTEGER	read-only	The member's workload
INT clusterMemberMaster	1.3.6.1.4.1.2972.2.1.4.1.4	INTEGER	read-only	Is this member the master???
clusterMemberSecondaryIPAddrTable	1.3.6.1.4.1.2972.2.1.5		not-accessible	A table of secondary IP addresses for this cluster member
clusterMemberSecondaryIPAddrEntry	1.3.6.1.4.1.2972.2.1.5.1		not-accessible	List of the secondary (outside) addresses of the cluster members. This is only valid if this member is the master node of the cluster.
IP clusterMemberSecondaryIPAddr	1.3.6.1.4.1.2972.2.1.5.1.1	IpAddress	read-only	One member of the cluster's secondary IP address
I32 clusterMemberSecondaryIPAddrIndex	1.3.6.1.4.1.2972.2.1.5.1.2	Integer32	not-accessible	Second index for clusterMemberSecondaryIPAddrTable. The first entry has index 1, the second 2, etc.
networkAlchemyClusterMIB	1.3.6.1.4.1.2972.5.2			Cluster MIB module.
NTF netalTrap0	1.3.6.1.4.1.2972.6.0			Trap.
NTF clusterMemberJoin	1.3.6.1.4.1.2972.6.0.1			Signifies that a member node has joined the cluster.
NTF clusterMemberLeft	1.3.6.1.4.1.2972.6.0.2			Signifies that a node has left the cluster.
NTF clusterMemberBecameMaster	1.3.6.1.4.1.2972.6.0.3			Sent when a node has been made the master.

RFC description

Network Alchemy crypto cluster management including member information and cluster IP address configuration.

Start monitoring Nokia IP-series security appliances with a free 30-day trial of IPNetwork Monitor. Import MIBs, browse SNMP OIDs, create custom SNMP monitors, configure alerts, and monitor any SNMP-enabled network device from a single console.

Download NETWORK-ALCHEMY-CLUSTER-MIB