SRX

last person joined: yesterday 

Ask questions and share experiences about the SRX Series, vSRX, and cSRX.
  • 1.  No more variables left in this MIB View (It is past the end of the MIB tree)

    Posted 11-25-2016 05:10

    Hi,

     

    We use 2 Juniper SRX220 firewalls.

    One is active and one is passive.

    I want to use SNMP V3.

    The next configuration is entered.

    Gate@gate-0# edit snmp v3

    {primary:node0}[edit snmp v3]

    Gate@gate-0# show

    usm {

             local-engine {

                    user john {

                            authentication-md5 {
                                    authentication-key "$9$0SXf1IcvMQb... end so on"; ## SECRET-DATA

                            }

                           privacy-none;

                   }

            }

    }
    vacm {

             security-to-group {

                      security-model usm {

                              security-name john {

                                      group group_john;

                              }
                      }
             }
             access {
                      group ALL-ACCESS {
                              default-context-prefix {
                                       security-model usm {
                                               security-level privacy { 
                                                       read-view GLOBAL;
                                                      write-view GLOBAL;
                                               }
                                       }
                              }
                      }
                     group group_john {
                             default-context-prefix {
                                      security-model usm {
                                               security-level none {

                                                       read-view full-mib;
                                               }
                                      }
                             }
                     }
            }
    }

     


    On a Linux system I execute the snmpwalk (or snmpget) command

     

    $ snmpwalk -v 3 -u john -a md5 -A abc123 192.168.6.1 .1.3.6.1.2.1.1
    iso.3.6.1.2.1.1 = No more variables left in this MIB View (It is past the end of the MIB tree)

     

    With SNMP V1 I get the correct output

    snmpwalk -v 1 -c public 192.168.6.1 .1.3.6.1.2.1.1
    iso.3.6.1.2.1.1.1.0 = STRING: "Juniper Networks, Inc. srx220h2 internet router, kernel JUNOS 12.1X46-D40.2 #0: 2015-09-26 02:25:28 UTC builder@greteth.juniper.net:/volume/build/junos/12.1/service/12.1X46-D40.2/obj-octeon/junos/bsd/kernels/JSRXNLE/kernel Build date: 2015-09-26 04:4"
    iso.3.6.1.2.1.1.2.0 = OID: iso.3.6.1.4.1.2636.1.1.1.2.58
    iso.3.6.1.2.1.1.3.0 = Timeticks: (180214609) 20 days, 20:35:46.09
    iso.3.6.1.2.1.1.4.0 = ""
    iso.3.6.1.2.1.1.5.0 = STRING: "Gate-0"
    iso.3.6.1.2.1.1.6.0 = ""
    iso.3.6.1.2.1.1.7.0 = INTEGER: 4

     

     

    But i had to use SNMP V3.

    How can I solve this SNMP V3 "No more variables left......" problem?

     

    Thanks.



  • 2.  RE: No more variables left in this MIB View (It is past the end of the MIB tree)
    Best Answer

    Posted 11-26-2016 10:53

    Does the view full-mib exist?

     

    set snmp view full-mib oid .1 include
    


  • 3.  RE: No more variables left in this MIB View (It is past the end of the MIB tree)

    Posted 11-28-2016 00:55

    The setting "set snmp view full-mib oid .1 include" solved my problem.

    Thanks.