Security

 View Only
last person joined: 14 hours ago 

Ask questions and share experiences with Juniper Connected Security. Discuss Advanced Threat Protection, SecIntel, Secure Analytics, Secure Connect, Security Director, and all things related to Juniper security technologies.
  • 1.  OID to monitor IPSEC Tunnel in SRX

    Posted 03-18-2023 11:06

    Hi all,

    Can someone share with which OID need to take and load it if i have NMS such as PRTG/LibreNMS/zabbix and etc to monitor IPSEC Tunnel in SRX?

    Thanks and appreciate any feedback



  • 2.  RE: OID to monitor IPSEC Tunnel in SRX

    Posted 03-18-2023 11:35

    You can see the various options on the Juniper MIB explorer here.

    https://apps.juniper.net/mib-explorer/navigate?software=Junos%20OS&release=22.4R1&name=jnxVpnMIB&oid=1.3.6.1.4.1.2636.3.26

    Name:
    jnxVpnMIB
    OID:
    1.3.6.1.4.1.2636.3.26
    Description:
    Extended VPN MIB module to support VPN Identifier for locally switched
    L2 circuits.
    Mib Name:
    JUNIPER-VPN-MIB
    Mib Path:
    /iso/org/dod/internet/private/enterprises/juniperMIB/jnxMibs/jnxVpnMIB



    ------------------------------
    Steve Puluka BSEET - Juniper Ambassador
    IP Architect - DQE Communications Pittsburgh, PA (Metro Ethernet & ISP - Retired)
    http://puluka.com/home
    ------------------------------



  • 3.  RE: OID to monitor IPSEC Tunnel in SRX

    Posted 03-18-2023 11:45

    Hi Spuluka,

    I'm refering to IPSEC VPN. Just want to know whether u have exprience anyone success to monitor juniper ipsec vpn using NMS like solarwind/prtg n etc?

    Thanks




  • 4.  RE: OID to monitor IPSEC Tunnel in SRX

    Posted 03-20-2023 20:03

    That is the OID area for IPSEC monitoring.  You would select the specific parameters you want to monitor and enter the OID values per the monitoring platform.

    I had not used Juniper NMS but setup monitoring pages for tunnel up and down listings in Nagios using these SNMP polling methods years ago in a previous position.



    ------------------------------
    Steve Puluka BSEET - Juniper Ambassador
    IP Architect - DQE Communications Pittsburgh, PA (Metro Ethernet & ISP - Retired)
    http://puluka.com/home
    ------------------------------



  • 5.  RE: OID to monitor IPSEC Tunnel in SRX

    Posted 03-20-2023 22:58

    Hi Spuluka,

    Noted. Thanks for your feedback. I will try look into that Nagios.