ScreenOS Firewalls (NOT SRX)
Reply
Regular Visitor
t0lle
Posts: 7
Registered: ‎11-10-2008
0
Accepted Solution

Polling the Chassis MIB on an ISG2000

Hi,

 

Does anybode know how to (if possible) snmp poll an ISG2000 with the chassis mib?

 

/Henrik

Trusted Contributor
Munpe_Q
Posts: 192
Registered: ‎10-02-2008
0

Re: Polling the Chassis MIB on an ISG2000

Are you trying to do a snmpwalk against it?
 
From a *nix machine with snmp installed, you can do:
 
snmpwalk -v 2c -c community 192.168.1.1 1.2.3.4.5.6.7
 
where 1.2.3.4.5.6.7 is your OID 
 
There are windows utilities avaialble for snmpwalk also. 

 

 

You can download the MIB files from Juniper's site. 

-=Q
Regular Visitor
t0lle
Posts: 7
Registered: ‎11-10-2008
0

Re: Polling the Chassis MIB on an ISG2000

Yes, I have tried "walking" it. Stating the OID for the Chassis mib (1.3.6.1.4.1.3224.21) returns no results while the other OID's work, e.g. 1.3.6.1.4.1.3224.16 for Resources.

 

/Henrik

Trusted Contributor
Munpe_Q
Posts: 192
Registered: ‎10-02-2008
0

Re: Polling the Chassis MIB on an ISG2000

[ Edited ]

I downloaded all of the MIB's from 5.4 to 6.2 and did a search for "1.3.6.1.4.1.3224" and this is not located in any MIB's I downloaded.  The closest thing I found was the following:

 

Search for "1.3.6.1.4.1." resulted in:

 

standards\mib-rfc1213.txt:                      (1.3.6.1.4.1)

standards\mib-rfc1213.txt:                      1.3.6.1.4.1.4242

standards\mib-rfc1213.txt:                      1.3.6.1.4.1.4242.1.1

 

Message Edited by Munpe_Q on 11-17-2008 10:24 AM
-=Q
Regular Visitor
t0lle
Posts: 7
Registered: ‎11-10-2008
0

Re: Polling the Chassis MIB on an ISG2000

Hi,

 

I downloaded the mibs for 6.0.0 again today and ran snmpwalk with and without numerical OID output. These examples only show the NS-SET-GEN.mib (.7.1)

 

unix-host{user}: snmpwalk -v1 -c public -O n -m all -M /opt/mibs/6.0/5.0/:/etc/sma/snmp/mibs/ 10.10.10.3  1.3.6.1.4.1.3224.7.1    
.1.3.6.1.4.1.3224.7.1.1.0 = IpAddress: 0.0.0.0
.1.3.6.1.4.1.3224.7.1.2.0 = STRING: "hostname"
.1.3.6.1.4.1.3224.7.1.3.0 = STRING: "domain"
.1.3.6.1.4.1.3224.7.1.4.0 = STRING: "NAT/Route mode"
.1.3.6.1.4.1.3224.7.1.5.0 = STRING: "6.0.0r4.0 (SN: 0123456789012345, Firewall+VPN)"
.1.3.6.1.4.1.3224.7.1.6.0 = STRING: "#Model: Advanced.#Sessions: 1048576 sessions.#Capacity: unlimited number of users.#NSRP: ActiveActive.#VPN tunnels: 10000 tunnels.#Vsys: None.#Vrouters: 3 virtual routers.#Zones: 34 zones.#VLANs: 2000 vlans.#Drp: Enable.#Deep Inspection: Disable.Deep Insp"
.1.3.6.1.4.1.3224.7.1.7.0 = INTEGER: enabled(1)
.1.3.6.1.4.1.3224.7.1.8.0 = INTEGER: enabled(1)

unix-host{user}: snmpwalk -v1 -c public -m all -M /opt/mibs/6.0/5.0/:/etc/sma/snmp/mibs/ 10.10.10.3  1.3.6.1.4.1.3224.7.1
NETSCREEN-SET-GEN-MIB::nsSetGenSysIp.0 = IpAddress: 0.0.0.0
NETSCREEN-SET-GEN-MIB::nsSetGenHostName.0 = STRING: "hostname"
NETSCREEN-SET-GEN-MIB::nsSetGenDomain.0 = STRING: "domain"
NETSCREEN-SET-GEN-MIB::nsSetGenOpMode.0 = STRING: "NAT/Route mode"
NETSCREEN-SET-GEN-MIB::nsSetGenSwVer.0 = STRING: "6.0.0r4.0 (SN: 0213456789012345, Firewall+VPN)"
NETSCREEN-SET-GEN-MIB::nsSetGenLicInfo.0 = STRING: "#Model: Advanced.#Sessions: 1048576 sessions.#Capacity: unlimited number of users.#NSRP: ActiveActive.#VPN tunnels: 10000 tunnels.#Vsys: None.#Vrouters: 3 virtual routers.#Zones: 34 zones.#VLANs: 2000 vlans.#Drp: Enable.#Deep Inspection: Disable.Deep Insp"
NETSCREEN-SET-GEN-MIB::nsSetGenSCSAdminEnable.0 = INTEGER: enabled(1)
NETSCREEN-SET-GEN-MIB::nsSetGenDropSelfLogPac.0 = INTEGER: enabled(1)

 

/Henrik

Trusted Contributor
Munpe_Q
Posts: 192
Registered: ‎10-02-2008
0

Re: Polling the Chassis MIB on an ISG2000

Interesting.  Forgive me, but I don't know what you want the next step to be in this thread.

 

 

-=Q
Regular Visitor
t0lle
Posts: 7
Registered: ‎11-10-2008
0

Re: Polling the Chassis MIB on an ISG2000

As you can see from my previous post I was querying the SET-GEN mib. In the NS-SMI.mib the SET-GEN corresponds to OID .7 after the Netscreen enterprise number which is 3224. Querying OID .16 e.g. gives information about Resources (NS-RES.mib) such as CPU usage, MEM usage etc.

 

What I want to do is query the Chassis mib which, according to NS-SMI.mib, has an OID of .21 after 3224. This gives me no result. If I understand the Chassis mib correct this would result in Fan status, Power status, Temperature etc.

 

Next step of this thread would be if someone out there had any clue of how to accomplish this. Maybe it is not possible to poll the ISG2000 for this.

 

/Henrik

Contributor
Asm0deus
Posts: 21
Registered: ‎01-22-2009
0

Re: Polling the Chassis MIB on an ISG2000

I had the same problem initially, but I think it was a syntax issue:

 

snmpbulkwalk -v2c -Of -Cr100 -Cn100 -Cp -m +/usr/share/snmp/mibs/NS-CHASSIS.mib -c MyCommunityString 10.10.10.10 .1.3.6.1.4.1.3224.21

 

.iso.org.dod.internet.private.enterprises.netscreen.netscreenChasis.nsPowerTable.nsPowerEntry.nsPowerId.1 = INTEGER: 1
.iso.org.dod.internet.private.enterprises.netscreen.netscreenChasis.nsPowerTable.nsPowerEntry.nsPowerId.2 = INTEGER: 2
.iso.org.dod.internet.private.enterprises.netscreen.netscreenChasis.nsPowerTable.nsPowerEntry.nsPowerStatus.1 = INTEGER: 1
.iso.org.dod.internet.private.enterprises.netscreen.netscreenChasis.nsPowerTable.nsPowerEntry.nsPowerStatus.2 = INTEGER: 1
.iso.org.dod.internet.private.enterprises.netscreen.netscreenChasis.nsPowerTable.nsPowerEntry.nsPowerDesc.1 = STRING: Primary Power
.iso.org.dod.internet.private.enterprises.netscreen.netscreenChasis.nsPowerTable.nsPowerEntry.nsPowerDesc.2 = STRING: Secondary Power
.iso.org.dod.internet.private.enterprises.netscreen.netscreenChasis.nsFanTable.nsFanEntry.nsFanId.1 = INTEGER: 1
.iso.org.dod.internet.private.enterprises.netscreen.netscreenChasis.nsFanTable.nsFanEntry.nsFanStatus.1 = INTEGER: 1
.iso.org.dod.internet.private.enterprises.netscreen.netscreenChasis.nsFanTable.nsFanEntry.nsFanDesc.1 = STRING: Fan 1
.iso.org.dod.internet.private.enterprises.netscreen.netscreenChasis.nsTemperatureTable.nsTemperatureEntry.nsTemperatureId.1 = INTEGER: 1
.iso.org.dod.internet.private.enterprises.netscreen.netscreenChasis.nsTemperatureTable.nsTemperatureEntry.nsTemperatureId.2 = INTEGER: 2
.iso.org.dod.internet.private.enterprises.netscreen.netscreenChasis.nsTemperatureTable.nsTemperatureEntry.nsTemperatureId.3 = INTEGER: 3
.iso.org.dod.internet.private.enterprises.netscreen.netscreenChasis.nsTemperatureTable.nsTemperatureEntry.nsTemperatureSlotId.1 = INTEGER: 4

 

Hopefully this helps someone else avoid the same problems.

Regular Visitor
t0lle
Posts: 7
Registered: ‎11-10-2008
0

Re: Polling the Chassis MIB on an ISG2000

Hi,

 

I upgraded from ScreenOS 6.0 to 6.1 and then it works for me too.

 

/Henrik

Copyright© 1999-2013 Juniper Networks, Inc. All rights reserved.