SRX

I am evaluating an SRX240.  We use SolarWinds Orion for network monitoring.  I have added the device to Orion, however I need to point Orion to the specific MIBs used for CPU and Memory utilization.  Preferably the same MIB or resource that is showing CPU and Memory utilization in the JWeb UI.  I have done several MIB walks on the SRX240, but cannot seem to find the correct MIBs.  Any assistance would be appreciated.

Hi !

CPU usage OID is: .1.3.6.1.4.1.2636.3.1.13.1.8.9.1.0.0 When I found memory usage OID I post it here.

Best Regards

I found this MIB.  It is in the jnxOperatingTable.  The MIB is jnxOperatingCPU.  I thought that this MIB would provide the information I need, but the SRX240 does not support this MIB.  There are also MIBs for memory and temp in the jnxOperatingTable, but none of them are supported on the SRX240.  Is there a way to use SNMP to poll for CPU on the SRX240?

Wild guess...is it because we call CPU an SPU?

https://www.juniper.net/techpubs/en_US/junos10.0/information-products/topic-collections/config-guide-network-mgm/mib-jnx-js-spu-monitoring.txt

-Keith

I don't think the smaller SRX models use SPU, but I could be wrong.  I will try to locate this MIB to see if it returns results.  I was looking at the jnxOperatingCPU MIB.  Several people mentioned this MIB, but I cannot find it on the SRX 240 with 9.6 code.  I did an entire MIB walk but it was not present.

The MIB tables that I see when performing an entire private MIB walk on the SRX 240 running 9.6R2.11 are as follows:

MPLS-MIB

JUNIPER-IF-MIB

JUNIPER-ALARM-MIB

JUNIPER-FIREWALL-MIB

JUNIPER-IPv6-MIB

JUNIPER-IPv4-MIB

JUNIPER-COS-MIB

JUNIPER-CFGMGMT-MIB

JUNIPER-VPN-MIB

JUNIPER-COLLECTOR-MIB

JUNIPER-HOSTRESOURCES-MIB (which I thought would provide info, but only gives volume stats)

JUNIPER-DCU-MIB

JUNIPER-EXPERIMENT-MIB

SNMPv2-MIB

I have also uploaded the private MIB walk in .xls format.

Attachment(s)

MIB Walk of Juniper SRX 240 9.6.zip   296 KB 1 version

Yes, SRX branch also have a SPU. Considering SRX branch doesn't have a dedicated SPU chip, but due to it's muticore infrasture, it will use one logical core act as RE, and other logical core act as SPU, this SPU always sit in FPC0.

You can use below command to monitoring it:

lab@srx210> show security monitoring fpc 0
FPC 0
  PIC 0
    CPU utilization      :    0 %
    Memory utilization   :   40 %
    Current flow session :   13
    Max flow session     : 65536

For MIB OID, you could reference SPU mib monitoring file in http://www.juniper.net/techpubs/en_US/junos9.5/information-products/topic-collections/config-guide-network-mgm/mib-jnx-js-spu-monitoring.txt

some popular OID is:

SRX SPC CPU Utilization         1.3.6.1.4.1.2636.3.39.1.12.1.1.1.4.7     #SPU in slot 7

                                              1.3.6.1.4.1.2636.3.39.1.12.1.1.1.4.8     #SPU in slot 8
……

SRX SPC Memory Utilization      1.3.6.1.4.1.2636.3.39.1.12.1.1.1.5.7    #SPU in slot 7
                                               1.3.6.1.4.1.2636.3.39.1.12.1.1.1.5.8    #SPU in slot 8
……

SRX SPC alloc session per SPC    1.3.6.1.4.1.2636.3.39.1.12.1.1.1.6.7 #SPU in slot 7
                                             1.3.6.1.4.1.2636.3.39.1.12.1.1.1.6.8       #SPU in slot 8
……

SRX Total alloc session               1.3.6.1.4.1.2636.3.39.1.12.1.2.0   #SRX branch doesn't have this one, only in 3K/5K

And you can use JUNOS CLI to verity MIB OID:

lab@srx210> show snmp mib get 1.3.6.1.4.1.2636.3.39.1.12.1.1.1.6.0
jnxJsSPUMonitoringCurrentFlowSession.0 = 12

James,

     Thank you for clarifying if the branch SRX's have SPU.  I tried the commands that you listed but none of them returned information.  Below are the results of the commands.  I also tried the OID of the MIB that I feel is the one I need for CPU, jnxOperatingCPU (1.3.6.1.4.1.2636.3.1.13.1.8).

--- JUNOS 9.6R2.11 built 2009-10-06 21:14:55 UTC
{primary:node0}
jodros@alfafw1> show snmp mib get 1.3.6.1.4.1.2636.3.39.1.12.1.1.1.6.0
jnxJsSPUMonitoringCurrentFlowSession.0 = 0

{primary:node0}
jodros@alfafw1> show snmp mib get 1.3.6.1.4.1.2636.3.39.1.12.1.1.1.6.7
jnxJsSPUMonitoringCurrentFlowSession.7 No such instance

{primary:node0}
jodros@alfafw1> show snmp mib get 1.3.6.1.4.1.2636.3.39.1.12.1.1.1.4.7
jnxJsSPUMonitoringCPUUsage.7 No such instance

{primary:node0}
jodros@alfafw1> show snmp mib get 1.3.6.1.4.1.2636.3.39.1.12.1.1.1.4.8
jnxJsSPUMonitoringCPUUsage.8 No such instance

{primary:node0}
jodros@alfafw1> show snmp mib get 1.3.6.1.4.1.2636.3.39.1.12.1.1.1.4.1
jnxJsSPUMonitoringCPUUsage.1 No such instance

{primary:node0}
jodros@alfafw1> show snmp mib get 1.3.6.1.4.1.2636.3.39.1.12.1.1.1.4
jnxJsSPUMonitoringCPUUsage No such instance

{primary:node0}
jodros@alfafw1> show snmp mib get 1.3.6.1.4.1.2636.3.39.1.12.1.1.1.4
jnxJsSPUMonitoringCPUUsage No such instance

{primary:node0}
jodros@alfafw1> show snmp mib get 1.3.6.1.4.1.2636.3.1.13.1.8.9.1.0.0
jnxOperatingCPU.9.1.0.0 No such object

{primary:node0}
jodros@alfafw1> show snmp mib get 1.3.6.1.4.1.2636.3.1.13.1.8
jnxOperatingCPU   No such object

{primary:node0}
jodros@alfafw1> show snmp mib get 1.3.6.1.4.1.2636.3.39.1.12.1.1.1.6
jnxJsSPUMonitoringCurrentFlowSession No such instance

{primary:node0}
jodros@alfafw1> show snmp mib get 1.3.6.1.4.1.2636.3.39.1.12.1.1.1.6.0
jnxJsSPUMonitoringCurrentFlowSession.0 = 0

{primary:node0}
jodros@alfafw1> show snmp mib get 1.3.6.1.4.1.2636.3.39.1.12.1.1.1.6.1
jnxJsSPUMonitoringCurrentFlowSession.1 No such instance

{primary:node0}
jodros@alfafw1> show security monitoring fpc 0
node0:
--------------------------------------------------------------------------

node1:
--------------------------------------------------------------------------

The attachment in the last post I made is the entire private MIB tree on the SRX240 in the lab.  No where in that MIB tree is the jnxJs or the jnxOperating MIB table.  Is there a bug in the version of code that I am running?  I would be more than happy to jump onto a webex to demonstrate what the SRX240 is displaying as far as available MIBs are concerned.

Thanks for the help.

Hi jodros,

You have mistakes in the OIDs used, the example that James gave was with SPU in slot 7, you need to use slot 0:

root@barbrady> show snmp mib get 1.3.6.1.4.1.2636.3.39.1.12.1.1.1.4.0  
jnxJsSPUMonitoringCPUUsage.0 = 0

root@barbrady> show snmp mib get 1.3.6.1.4.1.2636.3.39.1.12.1.1.1.5.0   
jnxJsSPUMonitoringMemoryUsage.0 = 54

root@barbrady> show snmp mib get 1.3.6.1.4.1.2636.3.39.1.12.1.1.1.6.0   
jnxJsSPUMonitoringCurrentFlowSession.0 = 1

root@barbrady> show snmp mib get 1.3.6.1.4.1.2636.3.39.1.12.1.1.1.7.0   
jnxJsSPUMonitoringMaxFlowSession.0 = 262144

root@barbrady> show security monitoring fpc 0
--------------------------------------------------------------------------
FPC 0
  PIC 0
    CPU utilization      :    0 %
    Memory utilization   :   54 %
    Current flow session :    1
    Max flow session     : 262144

Best regards,

Igor

Yes, igort is right. Considering SRX branch always has the SPU in fpc0, you should replace the slot number in OID with "0"

My results are below.  I still do not get any information from the "show security monitoring fpc 0."

--- JUNOS 9.6R2.11 built 2009-10-06 21:14:55 UTC
{primary:node0}
jodros@alfafw1> show snmp mib get 1.3.6.1.4.1.2636.3.39.1.12.1.1.1.4.0
jnxJsSPUMonitoringCPUUsage.0 = 0

{primary:node0}
jodros@alfafw1> show snmp mib get 1.3.6.1.4.1.2636.3.39.1.12.1.1.1.5.0
jnxJsSPUMonitoringMemoryUsage.0 = 0

{primary:node0}
jodros@alfafw1> show snmp mib get 1.3.6.1.4.1.2636.3.39.1.12.1.1.1.6.0
jnxJsSPUMonitoringCurrentFlowSession.0 = 0

{primary:node0}
jodros@alfafw1> show snmp mib get 1.3.6.1.4.1.2636.3.39.1.12.1.1.1.7.0
jnxJsSPUMonitoringMaxFlowSession.0 = 0

{primary:node0}
jodros@alfafw1> show security monitoring fpc 0
node0:
--------------------------------------------------------------------------

node1:
--------------------------------------------------------------------------

{primary:node0}
jodros@alfafw1>

Also, I still urge someone to actually look over the entire MIB walk I did on the SRX240.  This clearly shows that the MIBs being requested are not there.  I am not saying that the MIBs are not supposed to be there.  All I am saying is that for some reason, the MIBs are not there for this particular pair of SRX240's in my lab.  It would be interesting to find out why.

Thanks again for trying to help me sort this out.  Hopefully monitoring the SRX3400's will not prove to be as complicating.  Those are the boxes we will purchase if we decide on Juniper.

ttt

hope everyone's weekend was well.

thanks

morning bump.  think this thread is dying a slow death...

What tool are you using for the SNMP walk? I think you mentioned you are working with an SE or reseller? Might be good to get  case opened at this point.

regards,

-Keith

Thanks Keith.  I am using SolarWinds Engineer's Toolset, MIB Walk utility.  I will check with the SE to see where he is with this issue.

Thanks