- play_arrow Carrier Grade NAT (CGNAT)
- play_arrow Deterministic NAT Overview and Configuration
- play_arrow Dynamic Address-Only Source NAT Overview and Configuration
- play_arrow Network Address Port Translation Overview and Configuration
- play_arrow NAT46
- play_arrow Stateful NAT64 Overview and Configuration
- play_arrow IPv4 Connectivity Across IPv6-Only Network Using 464XLAT Overview and Configuration
- play_arrow IPv6 NAT Protocol Translation (NAT PT)
- play_arrow Stateless Source Network Prefix Translation for IPv6 Overview and Configuration
- play_arrow Transitioning to IPv6 Using Softwires
- play_arrow Transitioning to IPv6 Using DS-Lite Softwires
- play_arrow Reducing Traffic and Bandwidth Requirements Using Port Control Protocol
- play_arrow Transitioning to IPv6 Using Mapping of Address and Port with Encapsulation (MAP-E)
- play_arrow Monitoring and Troubleshooting Softwires
- play_arrow Port Forwarding Overview and Configuration
- play_arrow Port Translation Features Overview and Configuration
- play_arrow Static Source NAT Overview and Configuration
- play_arrow Static Destination NAT Overview and Configuration
- play_arrow Twice NAPT Overview and Configuration
- play_arrow Twice NAT Overview and Configuration
- play_arrow Class of Service Overview and Configuration
-
- play_arrow Stateful Firewall Services
- play_arrow Stateful Firewall Services Overview and Configuration
-
- play_arrow Intrusion Detection Services
- play_arrow IDS Screens for Network Attack Protection Overview and Configuration
-
- play_arrow Traffic Load Balancing
- play_arrow Traffic Load Balancing Overview and Configuration
-
- play_arrow DNS Request Filtering
- play_arrow DNS Request Filtering Overview and Configuration
-
- play_arrow URL Filtering
- play_arrow URL Filtering
-
- play_arrow Integration of Juniper ATP Cloud and Web filtering on MX Routers
- play_arrow Integration of Juniper ATP Cloud and Web filtering on MX Routers
-
- play_arrow Aggregated Multiservices Interfaces
- play_arrow Enabling Load Balancing and High Availability Using Multiservices Interfaces
-
- play_arrow Inter-Chassis Services PIC High Availability
- play_arrow Inter-Chassis Services PIC High Availability Overview and Configuration
- Next Gen Services Inter-chassis High Availability Overview for NAT, Stateful Firewall, and IDS Flows
- Inter-Chassis Stateful Synchronization for Long Lived NAT, Stateful Firewall, and IDS Flows for Next Gen Services
- Inter-Chassis Services Redundancy Overview for Next Gen Services
- Configuring Inter-Chassis Services Redundancy for Next Gen Services
-
- play_arrow Application Layer Gateways
- play_arrow Enabling Traffic to Pass Securely Using Application Layer Gateways
-
- play_arrow NAT, Stateful Firewall, and IDS Flows
- play_arrow Inline NAT Services Overview and Configuration
-
- play_arrow Configuration Statements
Next Gen Services SNMP MIBs and Traps
This topic describes the SNMP MIBS and traps for Next Gen Services with the MX-SPC3 services. As a reference, it also compares MX-SPC3 services card MIBS and traps with the MPC services card.
Service-Set Related SNMP MIBs
Table 1, Table 2, and Table 3 describe the MIB objects in the service-set related SNMP MIB tables supported in jnxSPMIB. This MIB is supported for both MS-MPC services cards and MX-SPC3 services cards with the exception of the following:
The MX-SPC3 services card supports counters, such as memory usage and cpu usage, at the per service-set and per pic level, whereas MS-MPC services cards support these counters at the service level, for example, stateful firewall (SFW) and NAT).
The MX-SPC3 card uses the jnxSpSvcSetTable MIB for these counters.
InTable 1 the jnxSpSvcSetTable, the object jnxSpSvcSetSvcType field will show a value of “ALL” since no per service-type specific counters are supported.
MIB Object | jnxSpSvcSet Entry Number | Description |
|---|---|---|
jnxSpSvcSetIfName | jnxSpSvcSetEntry 4 | The name of the interface identifying the AS PIC. If more than one interface is associated with the AS PIC, the name associated with the lower layer interface is used. |
jnxSpSvcSetIfIndex | jnxSpSvcSetEntry 5 | An index number associated with the interface name. |
jnxSpSvcSetMemoryUsage | jnxSpSvcSetEntry 6 | Amount of memory used by the service set, in bytes. |
jnxSpSvcSetCpuUtil | jnxSpSvcSetEntry 7 | Amount of CPU processing used by the service set, expressed as a percentage of total CPU usage. J Series Services Routers do not have a dedicated CPU for services. CPU usage on these routers appears as 0. |
jnxSpSvcSetSvcStyle | jnxSpSvcSetEntry 8 | Type of service for the service set. Service types include:
|
jnxSpSvcSetMemLimitPktDrops | jnxSpSvcSetEntry 9 | Number of packets dropped because the service set exceeded its memory limits (operating in the Red zone). |
jnxSpSvcSetCpuLimitPktDrops | jnxSpSvcSetEntry 10 | Number of packets dropped because the service set exceeded the average CPU limits (when total CPU usage exceeds 85 percent). |
jnxSpSvcSetFlowLimitPktDrops | jnxSpSvcSetEntry 11 | Number of packets dropped because the service set exceeded the flow limit. |
jnxSpSvcSetMemoryUsage64 | Amount of memory used by the service set, in bytes. | |
jnxSpSvcSetMemLimitPktDrops64 | Number of packets dropped because the service set exceeded its memory limits (operating in the Red zone). | |
jnxSpSvcSetCpuLimitPktDrops64 | Number of packets dropped because the service set exceeded the average CPU limits (when total CPU usage exceeds 85 percent). | |
jnxSpSvcSetFlowLimitPktDrops64 | Number of packets dropped because the service set exceeded the flow limit. | |
jnxSpSvcSetSessCount | Number of valid sessions in the service-set. |
MIB Object | (jnxSpSvcSetSvcType Entry Number | Description |
|---|---|---|
jnxSpSvcSetSvcTypeIndex | jnxSpSvcSetSvcTypeEntry 1 | An integer used to identify the service type. |
jnxSpSvcSetSvcTypeIfName | jnxSpSvcSetSvcTypeEntry 2 | The name of the interface identifying the AS PIC. If more than one interface is associated with the AS PIC, the name associated with the lower layer interface is used. |
jnxSpSvcSetSvcTypeName | jnxSpSvcSetSvcTypeEntry 3 | The name of the service type. |
jnxSpSvcSetSvcTypeSvcSets | jnxSpSvcSetSvcTypeEntry 4 | Number of service sets configured on the AS PIC that use this service type. |
jnxSpSvcSetSvcTypeMemoryUsage | jnxSpSvcSetSvcTypeEntry 5 | Amount of memory used by this service type, expressed in bytes. |
jnxSpSvcSetSvcTypePctMemoryUsage | jnxSpSvcSetSvcTypeEntry 6 | Amount of memory used by this service type, expressed as a percentage of total memory. |
jnxSpSvcSetSvcTypeCpuUtil | jnxSpSvcSetSvcTypeEntry 7 | Amount of CPU processing used by the service set, expressed as a percentage of total CPU usage. J Series Services Routers do not have a dedicated CPU for services. CPU usage on these routers appears as 0. |
MIB Object | jnxSpSvcSetIf Entry Number | Description |
|---|---|---|
jnxSpSvcSetIfTableName | jnxSpSvcSetIfEntry 1 | The name of the interface used to identify the AS PIC. If more than one interface is associated with the AS PIC, the name associated with the lower layer interface is used. |
jnxSpSvcSetIfsvcSets | jnxSpSvcSetIfEntry 2 | The number of service sets configured on the AS PIC. |
jnxSpSvcSetIfMemoryUsage | jnxSpSvcSetIfEntry 3 | Amount of memory used by the AS PIC, expressed in bytes. |
jnxSpSvcSetIfPctMemoryUsage | jnxSpSvcSetIfEntry 4 | Amount of memory used by the AS PIC, expressed as a percentage of total memory. |
jnxSpSvcSetIfPolMemoryUsage | jnxSpSvcSetIfEntry 5 | Amount of policy memory used by the AS PIC, expressed in bytes. |
jnxSpSvcSetIfPctPolMemoryUsage | jnxSpSvcSetIfEntry 6 | Amount of policy memory used by the AS PIC, expressed as a percentage of the total. |
jnxSpSvcSetIfMemoryZone | jnxSpSvcSetIfEntry 7 | The memory usage zone currently occupied by the AS PIC. The definitions of each zone are:
|
jnxSpSvcSetIfCpuUtil | jnxSpSvcSetIfEntry 8 | Amount of CPU processing used by the AS PIC, expressed as a percentage of total CPU usage. J Series Services Routers do not have a dedicated CPU for services. CPU usage on these routers appears as 0. |
jnxSpSvcSetIfMemoryUsage64 | Amount of policy memory used by the AS PIC, expressed in bytes. | |
jnxSpSvcSetIfPolMemoryUsage64 | Amount of policy memory used by the AS PIC, expressed as a percentage of the total. | |
jnxSpSvcSetIfNumTotalSessActive | Total number of active sessions in the PIC. | |
jnxSpSvcSetIfPeakTotalSessActive | Number of active sessions in the PIC at any time. | |
jnxSpSvcSetIfNumCreatedSessPerSec | Number of created sessions per second in the PIC | |
jnxSpSvcSetIfNumDeletedSessPerSec | Number of deleted sessions per second in the PIC | |
jnxSpSvcSetIfNumTotalTcpSessActive jnxSpSvcSetIfNumTotalUdpSessActive jnxSpSvcSetIfNumTotalOtherSessActive | Number of active sessions (TCP, UDP and other )in the PIC | |
jnxSpSvcSetIfPeakTotalTcpSessActive jnxSpSvcSetIfPeakTotalUdpSessActive jnxSpSvcSetIfPeakTotalOtherSessActive | Number of active sessions (TCP, UDP, and others) in the PIC | |
jnxSpSvcSetIfPeakCreatedSessPerSec | Number of created sessions per sec in the PIC | |
jnxSpSvcSetIfPeakDeletedSessPerSec | Number of deleted sessions per sec in the PIC | |
jnxSpSvcSetIfNumTotalTcpIpv4SessActive jnxSpSvcSetIfNumTotalTcpIpv6SessActive jnxSpSvcSetIfNumTotalUdpIpv4SessActive jnxSpSvcSetIfNumTotalUdpIpv6SessActive jnxSpSvcSetIfNumTotalOtherIpv4SessActive jnxSpSvcSetIfNumTotalOtherIpv6SessActive | Total number of active sessions (TCP, UDP and other) for IPv4 and IPv6 in the PIC | |
jnxSpSvcSetIfNumTotalTcpGatedSessActive jnxSpSvcSetIfNumTotalUdpGatedSessActive | Number of TCP and UDP gated sessions in the PIC | |
jnxSpSvcSetIfNumTotalTcpRegSessActive jnxSpSvcSetIfNumTotalUdpRegSessActive | Number of TCP and UDP regular sessions in the PIC | |
jnxSpSvcSetIfNumTotalTcpTunSessActive jnxSpSvcSetIfNumTotalUdpTunSessActive | Number of TCP and UDP tunneled sessions in the PIC | |
jnxSpSvcSetIfSessPktRecv | Number of packets received in session handling | |
jnxSpSvcSetIfSessPktXmit | Number of packets transmitted as a part of session handling | |
jnxSpSvcSetIfSessSlowPathDiscard | Number of packets discarded in slow path | |
jnxSpSvcSetIfSessSlowPathForward | Number of packets forwarded in slow path | |
jnxSpSvcSetIfMspNumCreatedSubsPerSec | Number of subscribers created per sec | |
jnxSpSvcSetIfMspNumDeletedSubsPerSec | Number of Subscribers deleted per sec | |
jnxSpSvcSetIfMspNumTotalSubsActive | Number of active subscribers | |
jnxSpSvcSetIfMspPeakCreatedSubsPerSec | Peak number of created subscribers per sec in the PIC | |
jnxSpSvcSetIfMspPeakDeletedSubsPerSec | Peak number of deleted subscribers per sec in the PIC | |
jnxSpSvcSetIfMspPeakTotalSubsActive | Peak number of total active subscribers in the PIC |
Summary Mapping of MX-SPC3 CLI Services Operational Commands to SNMP MIBs
Table 4 summarizes the mapping of the MX-SPC3 services card operations commands to the respective SNMP MIB.
CLI Command | Variable Name | MIB Tables | MIB Object |
|---|---|---|---|
show services service-sets cpu-usage | cpu-utilization-percent | jnxSpSvcSetTable | jnxSpSvcSetCpuUtil |
show services service-sets memory-usage | bytes-used | jnxSpSvcSetMemoryUsage64 | |
show services service-sets memory-usage zone | mem-zone | jnxSpSvcSetIfMemoryZone | |
show services service-sets statistics packet-drops | cpulimit-drops | jnxSpSvcSetCpuLimitPktDrops64 | |
flowlimit-drops | jnxSpSvcSetFlowLimitPktDrops64 | ||
memlimit-drops | jnxSpSvcSetMemLimitPktDrops64 | ||
show services service-sets summary | service-set-bytes-used | jnxSpSvcSetIfTable | jnxSpSvcSetIfMemoryUsage64 |
service-set-cpu-utilization | jnxSpSvcSetIfCpuUtil | ||
service-set-percent-bytes-used | jnxSpSvcSetIfPctMemoryUsage | ||
service-set-percent-policy-bytes-used | jnxSpSvcSetIfPctPolMemoryUsage | ||
service-set-policy-bytes-used | jnxSpSvcSetIfPolMemoryUsage64 | ||
service-sets-configured | jnxSpSvcSetIfSvcSets | ||
show services sessions count | sess-count | jnxSpSvcSetTable | jnxSpSvcSetSessCount |
show services sessions analysis | num-total-session-active | jnxSpSvcSetIfTable | jnxSpSvcSetIfNumTotalSessActive |
peak-total-session-active | jnxSpSvcSetIfPeakTotalSessActive | ||
num-created-session-per-sec | jnxSpSvcSetIfNumCreatedSessPerSec | ||
num-deleted-session-per-sec | jnxSpSvcSetIfNumDeletedSessPerSec | ||
num-total-tcp-session-active | jnxSpSvcSetIfNumTotalTcpSessActive | ||
num-total-udp-session-active | jnxSpSvcSetIfNumTotalUdpSessActive | ||
peak-total-tcp-session-active | jnxSpSvcSetIfPeakTotalTcpSessActive | ||
peak-total-udp-session-active | jnxSpSvcSetIfPeakTotalUdpSessActive | ||
num-total-other-session-active | jnxSpSvcSetIfNumTotalOtherSessActive | ||
peak-created-session-per-second | jnxSpSvcSetIfPeakCreatedSessPerSec | ||
peak-deleted-session-per-second | jnxSpSvcSetIfPeakDeletedSessPerSec | ||
peak-total-other-session-active | jnxSpSvcSetIfPeakTotalOtherSessActive | ||
num-total-tcp-ipv4-session-active | jnxSpSvcSetIfNumTotalTcpIpv4SessActive | ||
num-total-tcp-ipv6-session-active | jnxSpSvcSetIfNumTotalTcpIpv6SessActive | ||
num-total-udp-ipv4-session-active | jnxSpSvcSetIfNumTotalUdpIpv4SessActive | ||
num-total-udp-ipv6-session-active | jnxSpSvcSetIfNumTotalUdpIpv6SessActive | ||
num-total-tcp-gated-session-active | jnxSpSvcSetIfNumTotalTcpGatedSessActive | ||
num-total-udp-gated-session-active | jnxSpSvcSetIfNumTotalUdpGatedSessActive | ||
num-total-other-ipv4-session-active | jnxSpSvcSetIfNumTotalOtherIpv4SessActive | ||
num-total-other-ipv6-session-active | jnxSpSvcSetIfNumTotalOtherIpv6SessActive | ||
num-total-tcp-regular-session-active | jnxSpSvcSetIfNumTotalTcpRegSessActive | ||
num-total-udp-regular-session-active | jnxSpSvcSetIfTable | jnxSpSvcSetIfNumTotalUdpRegSessActive | |
num-total-tcp-tunneled-session-active | jnxSpSvcSetIfNumTotalTcpTunSessActive | ||
num-total-udp-tunneled-session-active | jnxSpSvcSetIfNumTotalUdpTunSessActive | ||
session-pkts-received | jnxSpSvcSetIfSessPktRecv | ||
session-pkts-transmitted | jnxSpSvcSetIfSessPktXmit | ||
session-slow-path-discard | jnxSpSvcSetIfSessSlowPathDiscard | ||
session-slow-path-forward | jnxSpSvcSetIfSessSlowPathForward | ||
show services subscriber analysis | msp-num-created-subs-per-sec | jnxSpSvcSetIfMspNumCreatedSubsPerSec | |
msp-num-deleted-subs-per-sec | jnxSpSvcSetIfMspNumDeletedSubsPerSec | ||
msp-num-total-subs-active | jnxSpSvcSetIfMspNumTotalSubsActive | ||
msp-peak-created-subs-per-second | jnxSpSvcSetIfMspPeakCreatedSubsPerSec | ||
msp-peak-deleted-subs-per-second | jnxSpSvcSetIfMspPeakDeletedSubsPerSec | ||
msp-peak-total-subs-active | jnxSpSvcSetIfMspPeakTotalSubsActive |
NAT SNMP MIBs
This section describes the jnxSrcNatStatsTable MIB objects.
Table 5 describes the source NAT SNMP MIB objects for the MS-MPC services card. This table exposes the source NAT translation attributes of the translated addresses.
Table 6 describes the source NAT SNMP MIB objects for the MX-SPC3 services card. This table contains information on source IP address translation only.
jnxSrcNatStatsTable | MIB Object | Description |
|---|---|---|
jnxNatSrcPoolName | The name of dynamic source IP address pool | |
jnxNatSrcXlatedAddrType | V4 or V6. The type of dynamic source IP address allocated from the address pool used in the NAT translation | |
jnxNatSrcPoolType | The source port pool type indicates whether the address translation is done with port or without the port, or if it is a static translation. Ex napt-44, nat64 etc | |
jnxNatSrcNumPortAvail | The number of ports available with this pool | |
jnxNatSrcNumPortInuse | The number of ports in use for this NAT address entry | |
jnxNatSrcNumAddressAvail | The total number of addresses available in this pool | |
jnxNatSrcNumAddressInUse | The number of addresses in use from this pool | |
jnxNatSrcNumSessions | The number of sessions are in use based on this NAT address entry | |
jnxNatRuleTable | This table monitors NAT rule hits | |
jnxNatRuleName | NAT rule name | |
jnxNatRuleType | NAT types: Static Source, Static Destination, Dynamic Source and NAPT. Ex: napt44 etc | |
jnxNatRuleTransHits | The number of hits on this NAT rule | |
jnxNatPoolTable | This table monitors NAT pool hits | |
jnxNatPoolName | NAT Pool name | |
jnxNatPoolType | NAT types: Static Source, Static Destination, Dynamic Source and NAPT. Ex: napt44 etc | |
jnxNatPoolTransHits | The number of hits on this NAT Pool |
jnxJsSrcNatStatsTable | MIB Object | Description |
|---|---|---|
jnxJsNatSrcPoolName | The name of dynamic source IP address pool | |
jnxJsNatSrcXlatedAddrType | New MIB. The type of dynamic source IP address allocated from the address pool used in the NAT translation. Value is v4 or v6 | |
jnxJsNatSrcPoolType | withPAT or withoutPAT or static | |
jnxJsNatSrcNumPortAvail | New MIB. The number of ports available with this pool | |
jnxJsNatSrcNumPortInuse | The number of ports in use for this NAT address entry | |
jnxJsNatSrcNumSessions | The number of sessions are in use based on this NAT address entry | |
jnxJsNatSrcNumAddressAvail | New MIB. The total number of addresses available in this pool | |
jnxJsNatSrcNumAddressInuse | New MIB. The number of addresses in use from this pool | |
jnxJsNatRuleTable | This table monitors NAT rule hits | |
jnxJsNatRuleName | NAT rule name | |
jnxJsNatRuleType | NAT types: Source, Destination and Static | |
jnxJsNatRuleTransHits | The number of hits on this NAT rule. Status is deprecated. New - jnxJsNatRuleHits | |
jnxJsNatRuleHits | The number of hits on this NAT rule, | |
jnxJsNatRuleNumOfSessions | The number of sessions on this NAT rule | |
jnxJsNatTransType | New MIB. Details below | |
jnxJsNatPoolTable | This table monitors NAT pool hits | |
jnxJsNatPoolName | NAT Pool name | |
jnxJsNatPoolType | NAT types: Source, Destination and Static | |
jnxJsNatPoolTransHits | The number of hits on this NAT Pool. (Only for SRX devices). | |
jnxJsNatPoolUtility | Utilization of NAT Pool (Only for SRX devices). |
SNMP Traps
Table 7 describes the SNMP traps supported by both the MS-MPC services card and the MX-SPC3 services card.
Trap | Description |
|---|---|
SPD_TRAP_OIDS(jnxSpSvcSetZoneEntered) | jnxSpSvcSetZoneEntered — Indicates that an AS PIC has entered a more severe memory usage zone from a less severe memory usage zone. The zone entered is identified by JnxSpSvcSetIfMemoryZone |
SPD_TRAP_OIDS(jnxSpSvcSetZoneExited) | jnxSpSvcSetZoneExited — Indicates that an AS PIC has exited a more severe memory usage zone to a less severe memory usage zone. The zone entered is identified by JnxSpSvcSetIfMemoryZone. |
SPD_TRAP_OIDS(jnxSpSvcSetCpuExceeded) | jnxSpSvcSetCpuExceeded — Indicates that an AS PIC has over 85% CPU usage. |
SPD_TRAP_OIDS(jnxSpSvcSetCpuOk) | jnxSpSvcSetCpuOk — Indicates that an AS PIC has returned to less than 85%CPU usage. |
SPD_TRAP_OIDS(jnxSpSvcSetFlowLimitUtilized) | jnxSpSvcSetFlowLimitUtilized — Indicates a service-set has reached its upper limit of flows threshold of a maximun flows allowed for a service set. |
Configuring SNMP Trap Generation
This sections describes how to configure the MS-MPC service card versus the MX-SPC3 services card to generate SNMP traps.
Configuring SNMP Trap for NAT Ports in a Source NAT Pool
If the current usage is above the raise threshold or below the clear threshold, we will generate a SNMP trap.
Configuring SNMP Traps for NAT Ports in a Source NAT Pool on an MS-MPC
user@host# set services nat pool NAT_POOL_TEST snmp-trap-thresholds address-port low 50user@host# set services nat pool NAT_POOL_TEST snmp-trap-thresholds address-port high 75
Configuring SNMP Traps for NAT Ports in a Source NAT Pool on an MX-SPC3
user@host# set services nat source pool NAT_POOL_TEST pool-utilization-alarm raise-threshold 50user@host# set services nat source pool NAT_POOL_TEST pool-utilization-alarm clear-threshold 40
Configuring SNMP Trap for Sessions
This is infra trap which configures SNMP flow thresholds for all flows for a service set or flows for all NAT pools configured for a service set.
Configuring a Sessions SNMP Trap on an MS-MPC
user@host# set services service-set SS_TEST max-flows 2muser@host# set services service-set SS_TEST snmp-trap-thresholds flow low 50user@host# set services service-set SS_TEST snmp-trap-thresholds flow high 75
Configuring a Sessions SNMP Trap on an MX-SPC3
user@host# set services service-set ss1 service-set-options session-limit maximum 2000user@host# set services service-set ss1 snmp-trap-thresholds session low 50user@host# set services service-set ss1 snmp-trap-thresholds session high 60
Example-Configuration for MX-SPC3 NAT for Three SNMP MIB Tables
Example Configuration
user@host> show services | display set Configuration ============= show services | display set set services service-set ss1_nh_style1 nat-rule-sets rset1 set services service-set ss1_nh_style1 nat-rule-sets rset2 set services service-set ss1_nh_style1 nat-rule-sets rset5 set services service-set ss1_nh_style1 next-hop-service inside-service-interface vms-0/0/0.1 set services service-set ss1_nh_style1 next-hop-service outside-service-interface vms-0/0/0.2 set services nat source pool src_pool2_v6 address 300::0/128 set services nat source pool src_pool1 address 50.0.0.0/29 set services nat source rule-set rset1 rule nr1 match source-address 10.0.0.0/32 set services nat source rule-set rset1 rule nr1 match destination-address 20.0.0.0/32 set services nat source rule-set rset1 rule nr1 match application any set services nat source rule-set rset1 rule nr1 then source-nat pool src_pool1 set services nat source rule-set rset1 match-direction input set services nat source rule-set rset2 rule nr2_v6 match source-address 200::0/34 set services nat source rule-set rset2 rule nr2_v6 match destination-address 400::0/34 set services nat source rule-set rset2 rule nr2_v6 match application any set services nat source rule-set rset2 rule nr2_v6 then source-nat pool src_pool2_v6 set services nat source rule-set rset2 match-direction input set services nat destination pool src_pool5_dnat address 20.0.0.0/30 set services nat destination rule-set rset5 rule nr5_dnat match destination-address 21.0.0.0/30 set services nat destination rule-set rset5 rule nr5_dnat match application any set services nat destination rule-set rset5 rule nr5_dnat then destination-nat pool src_pool5_dnat set services nat destination rule-set rset5 match-direction input set services nat traceoptions file nat-trace.txt set services nat traceoptions flag all
show snmp mib walk jnxJsSrcNatStatsTable
user@host>show snmp mib walk jnxJsSrcNatStatsTable jnxJsNatSrcPoolName.2.112.49.0.0.0.0.0 = p1 jnxJsNatSrcXlatedAddrType.2.112.49.0.0.0.0.0 = 1 jnxJsNatSrcPoolType.2.112.49.0.0.0.0.0 = 1 jnxJsNatSrcNumPortInuse.2.112.49.0.0.0.0.0 = 0 jnxJsNatSrcNumSessions.2.112.49.0.0.0.0.0 = 0 jnxJsNatSrcNumPortAvail.2.112.49.0.0.0.0.0 = 10 jnxJsNatSrcNumAddressAvail.2.112.49.0.0.0.0.0 = 1 jnxJsNatSrcNumAddressInuse.2.112.49.0.0.0.0.0 = 0
show snmp mib walk jnxJsNatPoolTable
user@host>show snmp mib walk jnxJsNatPoolTable jnxJsNatPoolName.9.115.114.99.95.112.111.111.108.49.1 = src_pool1 jnxJsNatPoolName.14.115.114.99.95.112.111.111.108.53.95.100.110.97.116.2 = src_pool5_dnat jnxJsNatPoolType.9.115.114.99.95.112.111.111.108.49.1 = 1 jnxJsNatPoolType.14.115.114.99.95.112.111.111.108.53.95.100.110.97.116.2 = 2 jnxJsNatPoolTransHits.9.115.114.99.95.112.111.111.108.49.1 = 0 jnxJsNatPoolTransHits.14.115.114.99.95.112.111.111.108.53.95.100.110.97.116.2 = 0 jnxJsNatPoolHits.9.115.114.99.95.112.111.111.108.49.1 = 0 jnxJsNatPoolHits.14.115.114.99.95.112.111.111.108.53.95.100.110.97.116.2 = 0 jnxJsNatPoolUtil.9.115.114.99.95.112.111.111.108.49.1 = 0 jnxJsNatPoolUtil.14.115.114.99.95.112.111.111.108.53.95.100.110.97.116.2 = 0
show snmp mib walk jnxJsNatRuleTable
user@host>show snmp mib walk jnxJsNatRuleTable jnxJsNatRuleName.3.110.114.49.1 = nr1 jnxJsNatRuleName.6.110.114.50.95.118.54.1 = nr2_v6 jnxJsNatRuleName.8.110.114.53.95.100.110.97.116.2 = nr5_dnat jnxJsNatRuleType.3.110.114.49.1 = 1 jnxJsNatRuleType.6.110.114.50.95.118.54.1 = 1 jnxJsNatRuleType.8.110.114.53.95.100.110.97.116.2 = 2 jnxJsNatRuleTransHits.3.110.114.49.1 = 0 jnxJsNatRuleTransHits.6.110.114.50.95.118.54.1 = 0 jnxJsNatRuleTransHits.8.110.114.53.95.100.110.97.116.2 = 0 jnxJsNatRuleHits.3.110.114.49.1 = 0 jnxJsNatRuleHits.6.110.114.50.95.118.54.1 = 0 jnxJsNatRuleHits.8.110.114.53.95.100.110.97.116.2 = 0 jnxJsNatRuleNumOfSessions.3.110.114.49.1 = 0 jnxJsNatRuleNumOfSessions.6.110.114.50.95.118.54.1 = 0 jnxJsNatRuleNumOfSessions.8.110.114.53.95.100.110.97.116.2 = 0 jnxJsNatTransType.3.110.114.49.1 = 13 jnxJsNatTransType.6.110.114.50.95.118.54.1 = 22 jnxJsNatTransType.8.110.114.53.95.100.110.97.116.2 = 13
SNMP Trace Logs for Traps
This section provides some example trace logs for these SNMP traps.
CPU-Utilization Trap
Mar 20 15:07:52.575680 snmpd[0] <<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<< Mar 20 15:07:52.575697 snmpd[0] <<< V2 Trap Mar 20 15:07:52.575714 snmpd[0] <<< Source: 10.48.12.170 Mar 20 15:07:52.575730 snmpd[0] <<< Destination: 190.1.1.1 Mar 20 15:07:52.575745 snmpd[0] <<< Version: SNMPv2 Mar 20 15:07:52.575761 snmpd[0] <<< Community: rtlogd_trap Mar 20 15:07:52.575777 snmpd[0] <<< Mar 20 15:07:52.575807 snmpd[0] <<< OID : sysUpTime.0 Mar 20 15:07:52.575824 snmpd[0] <<< type : TimeTicks Mar 20 15:07:52.575841 snmpd[0] <<< value: (7605999) 21:07:39.99 Mar 20 15:07:52.575856 snmpd[0] <<< Mar 20 15:07:52.575878 snmpd[0] <<< OID : snmpTrapOID.0 Mar 20 15:07:52.575894 snmpd[0] <<< type : Object Mar 20 15:07:52.575915 snmpd[0] <<< value: jnxSpSvcSetCpuExceeded Mar 20 15:07:52.575945 snmpd[0] <<< Mar 20 15:07:52.575968 snmpd[0] <<< OID : jnxSpSvcSetIfCpuUtil.4294967295 Mar 20 15:07:52.575984 snmpd[0] <<< type : Gauge Mar 20 15:07:52.576000 snmpd[0] <<< value: 45 Mar 20 15:07:52.576015 snmpd[0] <<< Mar 20 15:07:52.576033 snmpd[0] <<< OID : jnxSpSvcSetIfTableName.4294967295 Mar 20 15:07:52.576049 snmpd[0] <<< type : OctetString Mar 20 15:07:52.576066 snmpd[0] <<< value: "ms-2/0/0" Mar 20 15:07:52.576085 snmpd[0] <<< HEX : 6d 73 2d 32 2f 30 2f 30 Mar 20 15:07:52.576100 snmpd[0] <<< Mar 20 15:07:52.576118 snmpd[0] <<< OID : snmpTrapEnterprise.0 Mar 20 15:07:52.576134 snmpd[0] <<< type : Object Mar 20 15:07:52.576155 snmpd[0] <<< value: jnxProductNameMX480 Mar 20 15:07:52.576169 snmpd[0] <<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<
Memoryzone Trap
Mar 21 10:53:31.550471 snmpd[0] <<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<< Mar 21 10:53:31.550491 snmpd[0] <<< V2 Trap Mar 21 10:53:31.550507 snmpd[0] <<< Source: 10.48.12.170 Mar 21 10:53:31.550522 snmpd[0] <<< Destination: 190.1.1.1 Mar 21 10:53:31.550536 snmpd[0] <<< Version: SNMPv2 Mar 21 10:53:31.550551 snmpd[0] <<< Community: rtlogd_trap Mar 21 10:53:31.550566 snmpd[0] <<< Mar 21 10:53:31.550585 snmpd[0] <<< OID : sysUpTime.0 Mar 21 10:53:31.550600 snmpd[0] <<< type : TimeTicks Mar 21 10:53:31.550616 snmpd[0] <<< value: (6076788) 16:52:47.88 Mar 21 10:53:31.550631 snmpd[0] <<< Mar 21 10:53:31.550649 snmpd[0] <<< OID : snmpTrapOID.0 Mar 21 10:53:31.550664 snmpd[0] <<< type : Object Mar 21 10:53:31.550681 snmpd[0] <<< value: jnxSpSvcSetZoneEntered Mar 21 10:53:31.550695 snmpd[0] <<< Mar 21 10:53:31.550714 snmpd[0] <<< OID : jnxSpSvcSetIfMemoryZone.4294967295 Mar 21 10:53:31.550729 snmpd[0] <<< type : Number Mar 21 10:53:31.550744 snmpd[0] <<< value: 2 Mar 21 10:53:31.550758 snmpd[0] <<< Mar 21 10:53:31.550776 snmpd[0] <<< OID : jnxSpSvcSetIfTableName.4294967295 Mar 21 10:53:31.550791 snmpd[0] <<< type : OctetString Mar 21 10:53:31.550806 snmpd[0] <<< value: "ms-2/0/0" Mar 21 10:53:31.550824 snmpd[0] <<< HEX : 6d 73 2d 32 2f 30 2f 30 Mar 21 10:53:31.550838 snmpd[0] <<< Mar 21 10:53:31.550856 snmpd[0] <<< OID : snmpTrapEnterprise.0 Mar 21 10:53:31.550871 snmpd[0] <<< type : Object Mar 21 10:53:31.550888 snmpd[0] <<< value: jnxProductNameMX480 Mar 21 10:53:31.550901 snmpd[0] <<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<
Session Limit Trap
Mar 21 10:53:31.551133 snmpd[0] <<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<< Mar 21 10:53:31.551152 snmpd[0] <<< V2 Trap Mar 21 10:53:31.551168 snmpd[0] <<< Source: 10.48.12.170 Mar 21 10:53:31.551184 snmpd[0] <<< Destination: 190.1.1.1 Mar 21 10:53:31.551197 snmpd[0] <<< Version: SNMPv2 Mar 21 10:53:31.551212 snmpd[0] <<< Community: rtlogd_trap Mar 21 10:53:31.551228 snmpd[0] <<< Mar 21 10:53:31.551246 snmpd[0] <<< OID : sysUpTime.0 Mar 21 10:53:31.551262 snmpd[0] <<< type : TimeTicks Mar 21 10:53:31.551278 snmpd[0] <<< value: (6076788) 16:52:47.88 Mar 21 10:53:31.551292 snmpd[0] <<< Mar 21 10:53:31.551311 snmpd[0] <<< OID : snmpTrapOID.0 Mar 21 10:53:31.551326 snmpd[0] <<< type : Object Mar 21 10:53:31.551343 snmpd[0] <<< value: jnxSpSvcSetFlowLimitUtilised Mar 21 10:53:31.551358 snmpd[0] <<< Mar 21 10:53:31.551376 snmpd[0] <<< OID : jnxSpSvcSetFlowLimitUtil.0 Mar 21 10:53:31.551391 snmpd[0] <<< type : Number Mar 21 10:53:31.551406 snmpd[0] <<< value: 45 Mar 21 10:53:31.551421 snmpd[0] <<< Mar 21 10:53:31.551439 snmpd[0] <<< OID : jnxSpSvcSetNameUtil.0 Mar 21 10:53:31.551454 snmpd[0] <<< type : OctetString Mar 21 10:53:31.551471 snmpd[0] <<< HEX : 20 bc 55 88 01 Mar 21 10:53:31.551486 snmpd[0] <<< Mar 21 10:53:31.551503 snmpd[0] <<< OID : snmpTrapEnterprise.0 Mar 21 10:53:31.551518 snmpd[0] <<< type : Object Mar 21 10:53:31.551535 snmpd[0] <<< value: jnxProductNameMX480 Mar 21 10:53:31.551549 snmpd[0] <<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<
