Friday, 29 July 2011

Configuring SNMP Server via Juniper SSL VPN

http://kb.juniper.net/InfoCenter/index?page=content&id=KB14263
http://www.paessler.com/support/video_tutorials/installation_of_prtg_network_monitor

You can use a network management tool such as HP OpenView to monitor the IVE as an SNMP agent. The IVE supports SNMP (Simple Network Management Protocol) v2, implements a private MIB (management information base), and defines its own traps. To enable your network management station to process these traps, you need to download the Juniper Networks MIB file and specify the appropriate information to receive the traps.


1.    Enter information in the System Name, System Location, and System Contact fields that describes the IVE agent (optional).

2.    These are just friendly name and you can provide it so that you can manage the logs in the SNMP Server.

3.    Make sure you provide correct Community String: Community String is a text that acts as a password. IT is used to authenticate messages that are sending between the Management and the agent.



4.    Juniper IVE use main ports – 161 and 162 to communicate.

5.    Port number 161 is used by the agent to communicate to the Manager.

6.    Port number 162 is used by the manager to communicate to the agent.

7.    We need to create an entry using port number 162 in the Juniper IVE so that Manager can communicate the Juniper IVE.



  • Threshold values in the Juniper IVE to generate :

If you open the Juniper MIB file then you might find 2 options:
a.    iveConcurrentUsers is how many users are currently logged inside the Juniper IVE.

b.    iveMaxConcurrentUsersSignedIn is a trap to warn that the maximum user license has been reached.

Note : User value in the Threshold means iveMaxConcurrentUsersSignedIn

Object    Description
logFullPercent    Returns the percentage of the available file size filled by the current log as a parameter of thelogNearlyFull trap.
signedInWebUsers    Returns the number of users signed in to the IVE through a Web browser.
signedInMailUsers    Returns the number of users signed in to the Email client.
blockedIP    Returns the IP address—blocked due to consecutive failed login attempts—sent by theiveToomanyFailedLoginAttempts trap. The system adds the blocked IP address to theblockedIPList table.
authServerName    Returns the name of an external authentication server sent by theexternalAuthServerUnreachable trap.
productName    Returns the IVE licensed product name.
productVersion    Returns the IVE system software version.
fileName    Returns the file name sent by the archiveFileTransferFailed trap.
meetingUserCount    Returns the number of concurrent meeting users sent by the meetingUserLimit trap.
iveCpuUtil    Returns the percentage of CPU used during the interval between two SNMP polls. This value is calculated by dividing the amount of CPU used by the amount of CPU available during the current and previous SNMP polls. If no previous poll is available, the calculation is based on the interval between the current poll and system boot.
iveMemoryUtil    Returns the percentage of memory utilized by the IVE at the time of an SNMP poll. The system calculates this value by dividing the number of used memory pages by the number of available memory pages.
iveConcurrentUsers    Returns the total number of users logged in for the IVE node.
clusterConcurrentUsers    Returns the total number of users logged in for the cluster.
iveTotalHits    Returns the total number of hits to the IVE since last reboot. Includes total values from iveFileHits, iveAppletHits, meetingHits, and iveWebHits.
iveFileHits    Returns the total number of file hits to the IVE since last reboot.Incremented by the web server with each GET/POST corresponding to a file browser request.
iveWebHits    Returns the total number of hits by means of the Web interface since last reboot. Incremented by the web server for each http request received by the IVE, excluding file hits, applet hits, and meeting hits.
iveAppletHits    Returns the total number of applet hits to the IVE since last reboot.Incremented by the web server for each GET request for a Java applet.
ivetermHits    Returns the total number of terminal hits to the IVE since last reboot.
iveSAMHits    Returns the total number of Secure Application Manager hits to the IVE since last reboot.
iveNCHits    Returns the total number of Network Connect hits to the IVE since last reboot.
meetingHits    Returns the total number of meeting hits to the IVE since last reboot. Incremented by the web server for each http request received by the IVE for a meeting-related URL.
meetingCount    Returns the number of concurrent meetings sent by the meetingLimit trap.
logName    Returns the name of the log (admin/user/event) for the logNearlyFull and iveLogFull traps.
iveSwapUtil    Returns the percentage of swap memory pages used by the IVE at the time of an SNMP poll. The system calculates this value by dividing the number of swap memory pages used, by the number of available swap memory pages.
diskFullPercent    Returns the percentage of disk space used in the IVE for the iveDiskNearlyFull trap. The system calculates this value by dividing the number of used disk space blocks by the number of total disk space blocks.
blockedIPList    Returns a table with the 10 most recently blocked IP addresses. The blockedIP MIB adds blocked IP addresses to this table
ipEntry    An entry in the blockedListIP table containing a blocked IP address and its index (seeIPEntry).
IPEntry    The index (ipIndex) and IP address (ipValue) for an entry in the blockedIPList table.
ipIndex    Returns the index for the blockedIPList table.
ipValue    A blocked IP address entry in the blockedIPList table.
logID    Returns the unique ID of the log message sent by the logMessageTrap trap.
logType    Returns a string sent by the logMessageTrap trap stating whether a log message is major or critical.
logDescription    Returns a string sent by the logMessageTrap trap stating whether a log message is major or critical.
ivsName    Returns the name of a virtual system.
ocspResponderURL    Returns the name of an OCSP responder.
fanDescription    Returns the status of the IVE fans.
psDescription    Returns the status of the IVE power supplies.
raidDescription    Returns the status of the IVE RAID device.


1 comment:

  1. Guys, if you are facing issues with the configuration then logs that you need to collect to fix the issue is the TCP Dump via Juniper IVE, Event Logs and Admin Access Logs.

    you can use the MIB browser to check that IVE is responding to the SNMP Queries or not..

    Note : If you are using IVE in Cluster then please try to configure SNMP via IVE's internal port.

    Hope this will help..

    ReplyDelete