MIBs for Monitoring CPU and Memory on SRX240

[jodros]

I am evaluating an SRX240.  We use SolarWinds Orion for network monitoring.  I have added the device to Orion, however I need to point Orion to the specific MIBs used for CPU and Memory utilization.  Preferably the same MIB or resource that is showing CPU and Memory utilization in the JWeb UI.  I have done several MIB walks on the SRX240, but cannot seem to find the correct MIBs.  Any assistance would be appreciated.

[Kamil]

Hi !

CPU usage OID is: .1.3.6.1.4.1.2636.3.1.13.1.8.9.1.0.0 When I found memory usage OID I post it here.

Best Regards

[jodros]

I found this MIB.  It is in the jnxOperatingTable.  The MIB is jnxOperatingCPU.  I thought that this MIB would provide the information I need, but the SRX240 does not support this MIB.  There are also MIBs for memory and temp in the jnxOperatingTable, but none of them are supported on the SRX240.  Is there a way to use SNMP to poll for CPU on the SRX240?

[Automate]

Wild guess...is it because we call CPU an SPU?

https://www.juniper.net/techpubs/en_US/junos10.0/information-products/topic-collections/config-guide...

-Keith

[jodros]

I don't think the smaller SRX models use SPU, but I could be wrong.  I will try to locate this MIB to see if it returns results.  I was looking at the jnxOperatingCPU MIB.  Several people mentioned this MIB, but I cannot find it on the SRX 240 with 9.6 code.  I did an entire MIB walk but it was not present.

[jodros]

The MIB tables that I see when performing an entire private MIB walk on the SRX 240 running 9.6R2.11 are as follows:

MPLS-MIB

JUNIPER-IF-MIB

JUNIPER-ALARM-MIB

JUNIPER-FIREWALL-MIB

JUNIPER-IPv6-MIB

JUNIPER-IPv4-MIB

JUNIPER-COS-MIB

JUNIPER-CFGMGMT-MIB

JUNIPER-VPN-MIB

JUNIPER-COLLECTOR-MIB

JUNIPER-HOSTRESOURCES-MIB (which I thought would provide info, but only gives volume stats)

JUNIPER-DCU-MIB

JUNIPER-EXPERIMENT-MIB

SNMPv2-MIB

I have also uploaded the private MIB walk in .xls format.

[James_Chen]

Yes, SRX branch also have a SPU. Considering SRX branch doesn't have a dedicated SPU chip, but due to it's muticore infrasture, it will use one logical core act as RE, and other logical core act as SPU, this SPU always sit in FPC0.

You can use below command to monitoring it:

lab@srx210> show security monitoring fpc 0
FPC 0
  PIC 0
    CPU utilization      :    0 %
    Memory utilization   :   40 %
    Current flow session :   13
    Max flow session     : 65536

For MIB OID, you could reference SPU mib monitoring file in http://www.juniper.net/techpubs/en_US/junos9.5/information-products/topic-collections/config-guide-n...

some popular OID is:

SRX SPC CPU Utilization         1.3.6.1.4.1.2636.3.39.1.12.1.1.1.4.7     #SPU in slot 7

                                              1.3.6.1.4.1.2636.3.39.1.12.1.1.1.4.8     #SPU in slot 8
……

SRX SPC Memory Utilization      1.3.6.1.4.1.2636.3.39.1.12.1.1.1.5.7    #SPU in slot 7
                                               1.3.6.1.4.1.2636.3.39.1.12.1.1.1.5.8    #SPU in slot 8
……

SRX SPC alloc session per SPC    1.3.6.1.4.1.2636.3.39.1.12.1.1.1.6.7 #SPU in slot 7
                                             1.3.6.1.4.1.2636.3.39.1.12.1.1.1.6.8       #SPU in slot 8
……

SRX Total alloc session               1.3.6.1.4.1.2636.3.39.1.12.1.2.0   #SRX branch doesn't have this one, only in 3K/5K

And you can use JUNOS CLI to verity MIB OID:

lab@srx210> show snmp mib get 1.3.6.1.4.1.2636.3.39.1.12.1.1.1.6.0
jnxJsSPUMonitoringCurrentFlowSession.0 = 12

[jodros]

James,

     Thank you for clarifying if the branch SRX's have SPU.  I tried the commands that you listed but none of them returned information.  Below are the results of the commands.  I also tried the OID of the MIB that I feel is the one I need for CPU, jnxOperatingCPU (1.3.6.1.4.1.2636.3.1.13.1.8).

--- JUNOS 9.6R2.11 built 2009-10-06 21:14:55 UTC
{primary:node0}
jodros@alfafw1> show snmp mib get 1.3.6.1.4.1.2636.3.39.1.12.1.1.1.6.0
jnxJsSPUMonitoringCurrentFlowSession.0 = 0

{primary:node0}
jodros@alfafw1> show snmp mib get 1.3.6.1.4.1.2636.3.39.1.12.1.1.1.6.7
jnxJsSPUMonitoringCurrentFlowSession.7 No such instance

{primary:node0}
jodros@alfafw1> show snmp mib get 1.3.6.1.4.1.2636.3.39.1.12.1.1.1.4.7
jnxJsSPUMonitoringCPUUsage.7 No such instance

{primary:node0}
jodros@alfafw1> show snmp mib get 1.3.6.1.4.1.2636.3.39.1.12.1.1.1.4.8
jnxJsSPUMonitoringCPUUsage.8 No such instance

{primary:node0}
jodros@alfafw1> show snmp mib get 1.3.6.1.4.1.2636.3.39.1.12.1.1.1.4.1
jnxJsSPUMonitoringCPUUsage.1 No such instance

{primary:node0}
jodros@alfafw1> show snmp mib get 1.3.6.1.4.1.2636.3.39.1.12.1.1.1.4
jnxJsSPUMonitoringCPUUsage No such instance

{primary:node0}
jodros@alfafw1> show snmp mib get 1.3.6.1.4.1.2636.3.39.1.12.1.1.1.4
jnxJsSPUMonitoringCPUUsage No such instance

{primary:node0}
jodros@alfafw1> show snmp mib get 1.3.6.1.4.1.2636.3.1.13.1.8.9.1.0.0
jnxOperatingCPU.9.1.0.0 No such object

{primary:node0}
jodros@alfafw1> show snmp mib get 1.3.6.1.4.1.2636.3.1.13.1.8
jnxOperatingCPU   No such object

{primary:node0}
jodros@alfafw1> show snmp mib get 1.3.6.1.4.1.2636.3.39.1.12.1.1.1.6
jnxJsSPUMonitoringCurrentFlowSession No such instance

{primary:node0}
jodros@alfafw1> show snmp mib get 1.3.6.1.4.1.2636.3.39.1.12.1.1.1.6.0
jnxJsSPUMonitoringCurrentFlowSession.0 = 0

{primary:node0}
jodros@alfafw1> show snmp mib get 1.3.6.1.4.1.2636.3.39.1.12.1.1.1.6.1
jnxJsSPUMonitoringCurrentFlowSession.1 No such instance

{primary:node0}
jodros@alfafw1> show security monitoring fpc 0
node0:
--------------------------------------------------------------------------

node1:
--------------------------------------------------------------------------

The attachment in the last post I made is the entire private MIB tree on the SRX240 in the lab.  No where in that MIB tree is the jnxJs or the jnxOperating MIB table.  Is there a bug in the version of code that I am running?  I would be more than happy to jump onto a webex to demonstrate what the SRX240 is displaying as far as available MIBs are concerned.

Thanks for the help.

[igort]

Hi jodros,

You have mistakes in the OIDs used, the example that James gave was with SPU in slot 7, you need to use slot 0:

root@barbrady> show snmp mib get 1.3.6.1.4.1.2636.3.39.1.12.1.1.1.4.0  
jnxJsSPUMonitoringCPUUsage.0 = 0

root@barbrady> show snmp mib get 1.3.6.1.4.1.2636.3.39.1.12.1.1.1.5.0   
jnxJsSPUMonitoringMemoryUsage.0 = 54

root@barbrady> show snmp mib get 1.3.6.1.4.1.2636.3.39.1.12.1.1.1.6.0   
jnxJsSPUMonitoringCurrentFlowSession.0 = 1

root@barbrady> show snmp mib get 1.3.6.1.4.1.2636.3.39.1.12.1.1.1.7.0   
jnxJsSPUMonitoringMaxFlowSession.0 = 262144

root@barbrady> show security monitoring fpc 0
--------------------------------------------------------------------------
FPC 0
  PIC 0
    CPU utilization      :    0 %
    Memory utilization   :   54 %
    Current flow session :    1
    Max flow session     : 262144

Best regards,

Igor

[James_Chen]

Yes, igort is right. Considering SRX branch always has the SPU in fpc0, you should replace the slot number in OID with "0"