Junos
Junos

IKE Tunnel Monitoring on MX104(with MS-MIC) using SNMP

‎06-13-2016 01:43 PM

Folks, 

 

Could someone help in figuring out the OID i can use to monitor phase 1 ike tunnel status on MX104 router ? 

 

Tried few MIBS, some of them did not work. One worked but giving statistics only for phase2 ipsec part not ike. 

 

I wanna see if phase 1 tunnel is matured or not. 

 

Thanks in Advance,

Amrinder 

3 REPLIES 3
Junos

Re: IKE Tunnel Monitoring on MX104(with MS-MIC) using SNMP

‎06-13-2016 03:46 PM

I think what you are looking for is the jnxIkeTunNegState.

 

NamejnxIkeTunNegState
OID1.3.6.1.4.1.2636.3.22.1.2.1.1.3
Syntax
INTEGER
matured(1)
notmatured(2)
Accessread-only
Statuscurrent
Description
The state of the current negotiation , It can be
matured
not matured

The MIB Explorer is great for these purposes.  If this parameter if not the right one, here is a link to the IKE tree in the MIB.  You can browse or search further from here.

 

http://contentapps.juniper.net/mib-explorer/search.jsp#object=jnxIkeTunnelEntry&product=Junos%20OS&r...

 

MIB-IKE.png

Steve Puluka BSEET - Juniper Ambassador
IP Architect - DQE Communications Pittsburgh, PA (Metro Ethernet & ISP)
http://puluka.com/home
Junos

Re: IKE Tunnel Monitoring on MX104(with MS-MIC) using SNMP

‎06-14-2016 07:03 AM

Thanks spuluka... 

 

run show snmp mib get 1.3.6.1.4.1.2636.3.22.1.2.1.1.3 (ike)
jnxIkeTunNegState No such instance

 

run show snmp mib get-next 1.3.6.1.4.1.2636.3.22.1.2.1.1.3  (ipsec)
jnxIpSecRuleName.10.118.112.110.95.110.121.95.105.115.103.1.4.64.94.160.226.4 = *************

 

MIB is working for ipsec but not ike. 

 

MX104 - 13.3R2.7 - MultiServices-MIC for IPSec 

 

Ammy

Highlighted
Junos

Re: IKE Tunnel Monitoring on MX104(with MS-MIC) using SNMP

‎06-17-2016 03:02 PM

Can't understand why there would be no data, your version says this is a supported OID on in the docs and clearly if IPSEC is up there should be an IKE too.

Steve Puluka BSEET - Juniper Ambassador
IP Architect - DQE Communications Pittsburgh, PA (Metro Ethernet & ISP)
http://puluka.com/home