1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
136
137
138
139
140
141
142
143
144
145
146
147
148
149
150
151
152
153
154
155
156
157
158
159
160
161
162
163
164
165
166
167
168
169
170
171
172
173
174
175
176
177
178
179
180
181
182
183
184
185
186
187
188
189
190
191
192
193
194
195
196
197
198
199
200
201
202
203
204
205
206
207
208
209
210
211
212
213
214
215
216
217
218
219
220
221
222
223
224
225
226
227
228
229
230
231
232
233
234
235
236
237
238
239
240
241
242
243
244
245
246
247
248
249
250
251
252
253
254
255
256
257
258
259
260
261
262
263
264
265
266
267
268
269
270
271
272
273
274
275
276
277
278
279
280
281
282
283
284
285
286
287
288
289
290
291
292
293
294
295
296
297
298
299
300
301
302
303
304
305
306
307
308
309
310
311
312
313
314
315
316
317
318
319
320
321
322
323
324
325
326
327
328
329
330
331
332
333
334
335
336
337
338
339
340
341
342
343
344
345
346
347
348
349
350
351
352
353
354
355
356
357
358
359
360
361
362
363
364
365
366
367
|
-- *******************************************************************
--Juniper enterprise security Interface extension objects MIB.
--
--Copyright(c) 2001 - 2007, Juniper Networks, Inc.
-- All rights reserved.
--
--The contents of this document are subject to change without notice.
-- *******************************************************************
JUNIPER-JS-IF-EXT-MIB DEFINITIONS ::= BEGIN
IMPORTS
Counter64, Counter32,
MODULE-IDENTITY, OBJECT-TYPE FROM SNMPv2-SMI
DisplayString FROM SNMPv2-TC
ifIndex FROM IF-MIB
jnxJsIf FROM JUNIPER-JS-SMI;
jnxJsIfMIB MODULE-IDENTITY
LAST-UPDATED "200705090000Z"-- May 09, 2007
ORGANIZATION "Juniper Networks, Inc."
CONTACT-INFO
"Juniper Technical Assistance Center
Juniper Networks, Inc.
1194 N.Mathilda Avenue
Sunnyvale, CA 94089
E - mail:support @ juniper.net
HTTP://www.juniper.net "
DESCRIPTION
"This module defines the object that are used to monitor
the entries in the interfaces pertaining to the security
management of the interface."
REVISION "200705090000Z"-- May 09, 2007
DESCRIPTION
"Creation Date"
::= {jnxJsIf 1}
--
--node to create the objects
--
jnxJsIfExtension OBJECT IDENTIFIER ::= {jnxJsIfMIB 1}
--***************************************************************
--The Juniper Security interface extension table.
-- ***************************************************************
jnxJsIfMonTable OBJECT-TYPE
SYNTAX SEQUENCE OF JnxJsIfMonEntry
MAX-ACCESS not-accessible
STATUS current
DESCRIPTION
"The table extend the interface entries to support
security related objects on a particular interface.
The table is index by ifIndex."
::= {jnxJsIfExtension 1}
jnxJsIfMonEntry OBJECT-TYPE
SYNTAX JnxJsIfMonEntry
MAX-ACCESS not-accessible
STATUS current
DESCRIPTION
"Entry pertains to an interface."
INDEX {ifIndex}
::= {jnxJsIfMonTable 1}
JnxJsIfMonEntry ::= SEQUENCE
{
jnxJsIfMonInIcmp Counter32,
jnxJsIfMonInSelf Counter32,
jnxJsIfMonInVpn Counter32,
jnxJsIfMonInPolicyPermit Counter64,
jnxJsIfMonOutPolicyPermit Counter64,
jnxJsIfMonConn Counter32,
jnxJsIfMonInMcast Counter32,
jnxJsIfMonOutMcast Counter32,
jnxJsIfMonPolicyDeny Counter32,
jnxJsIfMonNoGateParent Counter32,
jnxJsIfMonTcpProxyDrop Counter32,
jnxJsIfMonNoDip Counter32,
jnxJsIfMonNoNspTunnel Counter32,
jnxJsIfMonNoNatCon Counter32,
jnxJsIfMonInvalidZone Counter32,
jnxJsIfMonIpClsFail Counter32,
jnxJsIfMonAuthDrop Counter32,
jnxJsIfMonMultiUserAuthDrop Counter32,
jnxJsIfMonLoopMultiDipDrop Counter32,
jnxJsIfMonAddrSpoof Counter32,
jnxJsIfMonLpDrop Counter32,
jnxJsIfMonNullZone Counter32,
jnxJsIfMonNoGate Counter32,
jnxJsIfMonNoMinorSess Counter32,
jnxJsIfMonNvecErr Counter32,
jnxJsIfMonTcpSeq Counter32,
jnxJsIfMonIllegalPak Counter32,
jnxJsIfMonNoRoute Counter32,
jnxJsIfMonAuthFail Counter32,
jnxJsIfMonSaInactive Counter32,
jnxJsIfMonNoSa Counter32,
jnxJsIfMonSelfPktDrop Counter32
}
jnxJsIfMonInIcmp OBJECT-TYPE
SYNTAX Counter32
MAX-ACCESS read-only
STATUS current
DESCRIPTION
"ICMP packets received."
::= {jnxJsIfMonEntry 1}
jnxJsIfMonInSelf OBJECT-TYPE
SYNTAX Counter32
MAX-ACCESS read-only
STATUS current
DESCRIPTION
"Packets for self received."
::= {jnxJsIfMonEntry 2}
jnxJsIfMonInVpn OBJECT-TYPE
SYNTAX Counter32
MAX-ACCESS read-only
STATUS current
DESCRIPTION
"VPN packets received."
::= {jnxJsIfMonEntry 3}
jnxJsIfMonInPolicyPermit OBJECT-TYPE
SYNTAX Counter64
MAX-ACCESS read-only
STATUS current
DESCRIPTION
"Incoming bytes permitted by policy."
::= {jnxJsIfMonEntry 4}
jnxJsIfMonOutPolicyPermit OBJECT-TYPE
SYNTAX Counter64
MAX-ACCESS read-only
STATUS current
DESCRIPTION
"Outgoing bytes permitted by policy."
::= {jnxJsIfMonEntry 5}
jnxJsIfMonConn OBJECT-TYPE
SYNTAX Counter32
MAX-ACCESS read-only
STATUS current
DESCRIPTION
"Incoming connections established."
::= {jnxJsIfMonEntry 6}
jnxJsIfMonInMcast OBJECT-TYPE
SYNTAX Counter32
MAX-ACCESS read-only
STATUS current
DESCRIPTION
"Multicast packets received."
::= {jnxJsIfMonEntry 7}
jnxJsIfMonOutMcast OBJECT-TYPE
SYNTAX Counter32
MAX-ACCESS read-only
STATUS current
DESCRIPTION
"Multicast packets sent."
::= {jnxJsIfMonEntry 8}
jnxJsIfMonPolicyDeny OBJECT-TYPE
SYNTAX Counter32
MAX-ACCESS read-only
STATUS current
DESCRIPTION
"Packets dropped due to policy deny."
::= {jnxJsIfMonEntry 9}
jnxJsIfMonNoGateParent OBJECT-TYPE
SYNTAX Counter32
MAX-ACCESS read-only
STATUS current
DESCRIPTION
"Packets dropped due to no parent for a gate."
::= {jnxJsIfMonEntry 10}
jnxJsIfMonTcpProxyDrop OBJECT-TYPE
SYNTAX Counter32
MAX-ACCESS read-only
STATUS current
DESCRIPTION
"Packets dropped due to syn-attack protection."
::= {jnxJsIfMonEntry 11}
jnxJsIfMonNoDip OBJECT-TYPE
SYNTAX Counter32
MAX-ACCESS read-only
STATUS current
DESCRIPTION
"Packets dropped due to dip errors."
::= {jnxJsIfMonEntry 12}
jnxJsIfMonNoNspTunnel OBJECT-TYPE
SYNTAX Counter32
MAX-ACCESS read-only
STATUS current
DESCRIPTION
"Packets dropped because no nsp tunnel found."
::= {jnxJsIfMonEntry 13}
jnxJsIfMonNoNatCon OBJECT-TYPE
SYNTAX Counter32
MAX-ACCESS read-only
STATUS current
DESCRIPTION
"Packets dropped due to no more sessions."
::= {jnxJsIfMonEntry 14}
jnxJsIfMonInvalidZone OBJECT-TYPE
SYNTAX Counter32
MAX-ACCESS read-only
STATUS current
DESCRIPTION
"Packets dropped because an invalid zone received the packet."
::= {jnxJsIfMonEntry 15}
jnxJsIfMonIpClsFail OBJECT-TYPE
SYNTAX Counter32
MAX-ACCESS read-only
STATUS current
DESCRIPTION
"Packets dropped due to IP classification failure."
::= {jnxJsIfMonEntry 16}
jnxJsIfMonAuthDrop OBJECT-TYPE
SYNTAX Counter32
MAX-ACCESS read-only
STATUS current
DESCRIPTION
"Packets dropped due to user auth errors."
::= {jnxJsIfMonEntry 17}
jnxJsIfMonMultiUserAuthDrop OBJECT-TYPE
SYNTAX Counter32
MAX-ACCESS read-only
STATUS current
DESCRIPTION
"Packets dropped due to multiple user auth in loopback sessions."
::= {jnxJsIfMonEntry 18}
jnxJsIfMonLoopMultiDipDrop OBJECT-TYPE
SYNTAX Counter32
MAX-ACCESS read-only
STATUS current
DESCRIPTION
"Packets dropped due to multiple DIP in loopback sessions."
::= {jnxJsIfMonEntry 19}
jnxJsIfMonAddrSpoof OBJECT-TYPE
SYNTAX Counter32
MAX-ACCESS read-only
STATUS current
DESCRIPTION
"Packets dropped due to address spoofing."
::= {jnxJsIfMonEntry 20}
jnxJsIfMonLpDrop OBJECT-TYPE
SYNTAX Counter32
MAX-ACCESS read-only
STATUS current
DESCRIPTION
"Packets dropped due to no loopback."
::= {jnxJsIfMonEntry 21}
jnxJsIfMonNullZone OBJECT-TYPE
SYNTAX Counter32
MAX-ACCESS read-only
STATUS current
DESCRIPTION
"Packets dropped due to no zone or null-zone binding."
::= {jnxJsIfMonEntry 22}
jnxJsIfMonNoGate OBJECT-TYPE
SYNTAX Counter32
MAX-ACCESS read-only
STATUS current
DESCRIPTION
"Packets dropped due to no nat gate."
::= {jnxJsIfMonEntry 23}
jnxJsIfMonNoMinorSess OBJECT-TYPE
SYNTAX Counter32
MAX-ACCESS read-only
STATUS current
DESCRIPTION
"Packets dropped due to no minor session."
::= {jnxJsIfMonEntry 24}
jnxJsIfMonNvecErr OBJECT-TYPE
SYNTAX Counter32
MAX-ACCESS read-only
STATUS current
DESCRIPTION
"Packets dropped due to no session for gate."
::= {jnxJsIfMonEntry 25}
jnxJsIfMonTcpSeq OBJECT-TYPE
SYNTAX Counter32
MAX-ACCESS read-only
STATUS current
DESCRIPTION
"Packets dropped because TCP seq number out of window."
::= {jnxJsIfMonEntry 26}
jnxJsIfMonIllegalPak OBJECT-TYPE
SYNTAX Counter32
MAX-ACCESS read-only
STATUS current
DESCRIPTION
"Packets dropped because they didn't make any sense."
::= {jnxJsIfMonEntry 27}
jnxJsIfMonNoRoute OBJECT-TYPE
SYNTAX Counter32
MAX-ACCESS read-only
STATUS current
DESCRIPTION
"Packets dropped because no route present."
::= {jnxJsIfMonEntry 28}
jnxJsIfMonAuthFail OBJECT-TYPE
SYNTAX Counter32
MAX-ACCESS read-only
STATUS current
DESCRIPTION
"Packets dropped because auth failed."
::= {jnxJsIfMonEntry 29}
jnxJsIfMonSaInactive OBJECT-TYPE
SYNTAX Counter32
MAX-ACCESS read-only
STATUS current
DESCRIPTION
"Packets dropped because sa is not active."
::= {jnxJsIfMonEntry 30}
jnxJsIfMonNoSa OBJECT-TYPE
SYNTAX Counter32
MAX-ACCESS read-only
STATUS current
DESCRIPTION
"Packets dropped because no sa found for incoming spi."
::= {jnxJsIfMonEntry 31}
jnxJsIfMonSelfPktDrop OBJECT-TYPE
SYNTAX Counter32
MAX-ACCESS read-only
STATUS current
DESCRIPTION
"Packets dropped because no one interested in self packets."
::= {jnxJsIfMonEntry 32}
END
|
