Community
- Command Central
- MVP Program
- Monthly Mission
- Blogs
- Groups
- Events
- Media Vault
Products
- Observability
- Network Management
- Application Management
- IT Security
- IT Service Management
- System Management
- Database Management
Content Exchange
- SolarWinds Platform
- Server & Application Monitor
- Database Performance Analyzer
- Server Configuration Monitor
- Network Performance Monitor
- Network Configuration Manager
- SQL Sentry
- Web Help Desk
Free Tools & Trials
Store

Juniper Netscreen VPN Monitoring

So I'm trying to monitor Netscreen VPNs, and have spent all day overloading google for info. I have setup custom MIB pollers and now have them listed on the Orion HTTP GUI. I'm trying to setup an alert to trigger when the VPN changes state to DOWN. I watched some Solarwinds flash demos and they help, but are not specific to alerting on the specific OIDs.

Ideas?

Chris Serafin

cserafin@rkon.com

Find more posts tagged with

Accepted answers

All comments

Ralphr

Chris,

The OID is 1.3.6.1.4.1.3224.4.1.1.1.20 (VPN Status) if you only have a single tunnel then utilizing this OID with an SNMP Get-Next Request will return the status of that tunnel. If you have multiple tunnels you will need to first use the VPNName (1.3.6.1.4.1.3224.4.1.1.1.4) and a series of SNMP Get Requests (each incrementing the index number e.g. ....1.1.1.4.1 to .....1.1.1.4.2) to correlate each named tunnel with an index number. Then use SNMP Get Request with each of the index numbers appended to the VPN Status MIB to create your status polls for each tunnel. H

A Heads Up

I only set this polling up last week on one firewall and it had been working but when I went in to grab the OID to respond to this e-mail I noticed I have not recieved a status update in a few days ......not sure why at this point ....

KennyLamb

Hello,

The most useful OIDs would be:

1.3.6.1.4.1.3224.4.1.1.1.4.x - VPN Name

1.3.6.1.4.1.3224.4.1.1.1.13.x - Remote Gateway IP

1.3.6.1.4.1.3224.4.1.1.1.21.x - P1 State

and/or 1.3.6.1.4.1.3224.4.1.1.1.23.x - P2 State: if either of these are down then the tunnel is down.

As Ralphr states, the x above references the index of the particular tunnel - which can be retreived using the GET request.

cisco80211

Thanks for the great responses! Now the only question is how do I alert on them changing state? I'm having trouble creating an advanced alert based on OIDs...

Thanks,

Chris Serafin

cserafin@rkon.com

Ralphr

Chris,

When you go into Configure a New Advanced Alerts make sure on the tab for "Trigger Condition" that you use the drop down "Type of Property to Monitor" menu to select Custom Node Poller. Then build conditions to isolate the poller name then trigger when the status goes to 0.