Standard view Table view

JUNIPER-JS-SCREENING-MIB

        This module defines the MIB for Juniper Enterprise Firewall 
screen functionality.  Juniper documentation is recommended
as the reference. 
        
Juniper Security Firewall provides various detection methods
and defense mechanisms to combat exploits at all stages of 
the path of execution.  These includes:
               Setting screen options
               Firwall DOS attacks
               Network DOS attack 
               OS specific DOS attack   
               Fragment reassembly

Source file: JUNIPER-JS-SCREENING-MIB
Last revised: 2 Apr 2014, 00:00 UTC
Identity: jnxJsScreenMIB
Base OID: 1.3.6.1.4.1.2636.3.39.1.8.1

Imported Objects

IF-MIB	ifName
JUNIPER-JS-SMI	jnxJsScreening
SNMPv2-SMI	Counter64 Integer32 MODULE-IDENTITY (no object page) NOTIFICATION-TYPE (no object page) OBJECT-TYPE (no object page)
SNMPv2-TC	DisplayString

Net-SNMP examples using the juniper MIB directory Show commands

These commands use the standard Observium installation path and load the selected MIB variant before the RFC and Net-SNMP directories.

Translate the module identity

/usr/bin/snmptranslate -Pud -Ir -On -m 'JUNIPER-JS-SCREENING-MIB' -M '/opt/observium/mibs/juniper:/opt/observium/mibs/rfc:/opt/observium/mibs/net-snmp' 'JUNIPER-JS-SCREENING-MIB::jnxJsScreenMIB'

Walk the MIB subtree

/usr/bin/snmpbulkwalk -v2c -c '<community>' -Pud -Ir -OQUs -m 'JUNIPER-JS-SCREENING-MIB' -M '/opt/observium/mibs/juniper:/opt/observium/mibs/rfc:/opt/observium/mibs/net-snmp' 'udp:<hostname>:161' 'JUNIPER-JS-SCREENING-MIB::jnxJsScreenMIB'

How SNMP, Net-SNMP, MIB paths, and variants work

Objects (88)

jnxJsScreenMIB		`.1.3.6.1.4.1.2636.3.39.1.8.1`
jnxJsScreenNotifications		`.1.3.6.1.4.1.2636.3.39.1.8.1.0`
jnxJsScreenObjects		`.1.3.6.1.4.1.2636.3.39.1.8.1.1`
jnxJsScreenMonTable		`.1.3.6.1.4.1.2636.3.39.1.8.1.1.1`
jnxJsScreenMonEntry	jnxJsScreenZoneName	`.1.3.6.1.4.1.2636.3.39.1.8.1.1.1.1`
jnxJsScreenZoneName	OctetString	`.1.3.6.1.4.1.2636.3.39.1.8.1.1.1.1.1`
jnxJsScreenMonUdpFlood	SNMPv2-SMICounter64	`.1.3.6.1.4.1.2636.3.39.1.8.1.1.1.1.10`
jnxJsScreenMonWinnuke	SNMPv2-SMICounter64	`.1.3.6.1.4.1.2636.3.39.1.8.1.1.1.1.11`
jnxJsScreenMonPortScan	SNMPv2-SMICounter64	`.1.3.6.1.4.1.2636.3.39.1.8.1.1.1.1.12`
jnxJsScreenMonIpSweep	SNMPv2-SMICounter64	`.1.3.6.1.4.1.2636.3.39.1.8.1.1.1.1.13`
jnxJsScreenMonSynFrag	SNMPv2-SMICounter64	`.1.3.6.1.4.1.2636.3.39.1.8.1.1.1.1.14`
jnxJsScreenMonTcpNoFlag	SNMPv2-SMICounter64	`.1.3.6.1.4.1.2636.3.39.1.8.1.1.1.1.15`
jnxJsScreenMonIpUnknownProt	SNMPv2-SMICounter64	`.1.3.6.1.4.1.2636.3.39.1.8.1.1.1.1.16`
jnxJsScreenMonIpOptBad	SNMPv2-SMICounter64	`.1.3.6.1.4.1.2636.3.39.1.8.1.1.1.1.17`
jnxJsScreenMonIpOptRecRt	SNMPv2-SMICounter64	`.1.3.6.1.4.1.2636.3.39.1.8.1.1.1.1.18`
jnxJsScreenMonIpOptTimestamp	SNMPv2-SMICounter64	`.1.3.6.1.4.1.2636.3.39.1.8.1.1.1.1.19`
jnxJsScreenNumOfIf	SNMPv2-SMIInteger32	`.1.3.6.1.4.1.2636.3.39.1.8.1.1.1.1.2`
jnxJsScreenMonIpOptSecurity	SNMPv2-SMICounter64	`.1.3.6.1.4.1.2636.3.39.1.8.1.1.1.1.20`
jnxJsScreenMonIpOptLSR	SNMPv2-SMICounter64	`.1.3.6.1.4.1.2636.3.39.1.8.1.1.1.1.21`
jnxJsScreenMonIpOptSSR	SNMPv2-SMICounter64	`.1.3.6.1.4.1.2636.3.39.1.8.1.1.1.1.22`
jnxJsScreenMonIpOptStream	SNMPv2-SMICounter64	`.1.3.6.1.4.1.2636.3.39.1.8.1.1.1.1.23`
jnxJsScreenMonIcmpFrag	SNMPv2-SMICounter64	`.1.3.6.1.4.1.2636.3.39.1.8.1.1.1.1.24`
jnxJsScreenMonIcmpLarge	SNMPv2-SMICounter64	`.1.3.6.1.4.1.2636.3.39.1.8.1.1.1.1.25`
jnxJsScreenMonTcpSynFin	SNMPv2-SMICounter64	`.1.3.6.1.4.1.2636.3.39.1.8.1.1.1.1.26`
jnxJsScreenMonTcpFinNoAck	SNMPv2-SMICounter64	`.1.3.6.1.4.1.2636.3.39.1.8.1.1.1.1.27`
jnxJsScreenMonLimitSessSrc	SNMPv2-SMICounter64	`.1.3.6.1.4.1.2636.3.39.1.8.1.1.1.1.28`
jnxJsScreenMonLimitSessDest	SNMPv2-SMICounter64	`.1.3.6.1.4.1.2636.3.39.1.8.1.1.1.1.29`
jnxJsScreenMonSynAttk	SNMPv2-SMICounter64	`.1.3.6.1.4.1.2636.3.39.1.8.1.1.1.1.3`
jnxJsScreenMonSynAckAck	SNMPv2-SMICounter64	`.1.3.6.1.4.1.2636.3.39.1.8.1.1.1.1.30`
jnxJsScreenMonIpFrag	SNMPv2-SMICounter64	`.1.3.6.1.4.1.2636.3.39.1.8.1.1.1.1.31`
jnxJsScreenSynAttackThresh	SNMPv2-SMIInteger32	`.1.3.6.1.4.1.2636.3.39.1.8.1.1.1.1.32`
jnxJsScreenSynAttackTimeout	SNMPv2-SMIInteger32	`.1.3.6.1.4.1.2636.3.39.1.8.1.1.1.1.33`
jnxJsScreenSynAttackAlmTh	SNMPv2-SMIInteger32	`.1.3.6.1.4.1.2636.3.39.1.8.1.1.1.1.34`
jnxJsScreenSynAttackQueSize deprecated	SNMPv2-SMIInteger32	`.1.3.6.1.4.1.2636.3.39.1.8.1.1.1.1.35`
jnxJsScreenSynAttackAgeTime deprecated	SNMPv2-SMIInteger32	`.1.3.6.1.4.1.2636.3.39.1.8.1.1.1.1.36`
jnxJsScreenIcmpFloodThresh	SNMPv2-SMIInteger32	`.1.3.6.1.4.1.2636.3.39.1.8.1.1.1.1.37`
jnxJsScreenUdpFloodThresh	SNMPv2-SMIInteger32	`.1.3.6.1.4.1.2636.3.39.1.8.1.1.1.1.38`
jnxJsScreenPortScanThresh	SNMPv2-SMIInteger32	`.1.3.6.1.4.1.2636.3.39.1.8.1.1.1.1.39`
jnxJsScreenMonTearDrop	SNMPv2-SMICounter64	`.1.3.6.1.4.1.2636.3.39.1.8.1.1.1.1.4`
jnxJsScreenIpSweepThresh	SNMPv2-SMIInteger32	`.1.3.6.1.4.1.2636.3.39.1.8.1.1.1.1.40`
jnxJsScreenSynAckAckThres	SNMPv2-SMIInteger32	`.1.3.6.1.4.1.2636.3.39.1.8.1.1.1.1.41`
jnxJsScreenMonIpv6ExtHdr	SNMPv2-SMICounter64	`.1.3.6.1.4.1.2636.3.39.1.8.1.1.1.1.42`
jnxJsScreenMonIpv6HopOpt	SNMPv2-SMICounter64	`.1.3.6.1.4.1.2636.3.39.1.8.1.1.1.1.43`
jnxJsScreenMonIpv6DstOpt	SNMPv2-SMICounter64	`.1.3.6.1.4.1.2636.3.39.1.8.1.1.1.1.44`
jnxJsScreenMonIpv6ExtLimit	SNMPv2-SMICounter64	`.1.3.6.1.4.1.2636.3.39.1.8.1.1.1.1.45`
jnxJsScreenMonIpMalIpv6	SNMPv2-SMICounter64	`.1.3.6.1.4.1.2636.3.39.1.8.1.1.1.1.46`
jnxJsScreenMonIcmpMalIcmpv6	SNMPv2-SMICounter64	`.1.3.6.1.4.1.2636.3.39.1.8.1.1.1.1.47`
jnxJsScreenIpv6ExtNumLim	SNMPv2-SMIInteger32	`.1.3.6.1.4.1.2636.3.39.1.8.1.1.1.1.48`
jnxJsScreenUdpPortScanThresh	SNMPv2-SMIInteger32	`.1.3.6.1.4.1.2636.3.39.1.8.1.1.1.1.49`
jnxJsScreenMonSrcRoute	SNMPv2-SMICounter64	`.1.3.6.1.4.1.2636.3.39.1.8.1.1.1.1.5`
jnxJsScreenMonUdpPortScan	SNMPv2-SMICounter64	`.1.3.6.1.4.1.2636.3.39.1.8.1.1.1.1.50`
jnxJsScreenMonIpTunnelGre6in4	SNMPv2-SMICounter64	`.1.3.6.1.4.1.2636.3.39.1.8.1.1.1.1.51`
jnxJsScreenMonIpTunnelGre4in6	SNMPv2-SMICounter64	`.1.3.6.1.4.1.2636.3.39.1.8.1.1.1.1.52`
jnxJsScreenMonIpTunnelGre6in6	SNMPv2-SMICounter64	`.1.3.6.1.4.1.2636.3.39.1.8.1.1.1.1.53`
jnxJsScreenMonIpTunnelGre4in4	SNMPv2-SMICounter64	`.1.3.6.1.4.1.2636.3.39.1.8.1.1.1.1.54`
jnxJsScreenMonIpTunnelIpInUdpTeredo	SNMPv2-SMICounter64	`.1.3.6.1.4.1.2636.3.39.1.8.1.1.1.1.55`
jnxJsScreenMonIpTunnelBadInnerHeader	SNMPv2-SMICounter64	`.1.3.6.1.4.1.2636.3.39.1.8.1.1.1.1.56`
jnxJsScreenMonIpTunnelIpIp6to4relay	SNMPv2-SMICounter64	`.1.3.6.1.4.1.2636.3.39.1.8.1.1.1.1.57`
jnxJsScreenMonIpTunnelIpIp6in4	SNMPv2-SMICounter64	`.1.3.6.1.4.1.2636.3.39.1.8.1.1.1.1.58`
jnxJsScreenMonIpTunnelIpIp6over4	SNMPv2-SMICounter64	`.1.3.6.1.4.1.2636.3.39.1.8.1.1.1.1.59`
jnxJsScreenMonPingDeath	SNMPv2-SMICounter64	`.1.3.6.1.4.1.2636.3.39.1.8.1.1.1.1.6`
jnxJsScreenMonIpTunnelIpIp4in6	SNMPv2-SMICounter64	`.1.3.6.1.4.1.2636.3.39.1.8.1.1.1.1.60`
jnxJsScreenMonIpTunnelIpIp4in4	SNMPv2-SMICounter64	`.1.3.6.1.4.1.2636.3.39.1.8.1.1.1.1.61`
jnxJsScreenMonIpTunnelIpIp6in6	SNMPv2-SMICounter64	`.1.3.6.1.4.1.2636.3.39.1.8.1.1.1.1.62`
jnxJsScreenMonIpTunnelIpIpIsatap	SNMPv2-SMICounter64	`.1.3.6.1.4.1.2636.3.39.1.8.1.1.1.1.63`
jnxJsScreenMonIpTunnelIpIpDsLite	SNMPv2-SMICounter64	`.1.3.6.1.4.1.2636.3.39.1.8.1.1.1.1.64`
jnxJsScreenMonAddrSpoof	SNMPv2-SMICounter64	`.1.3.6.1.4.1.2636.3.39.1.8.1.1.1.1.7`
jnxJsScreenMonLand	SNMPv2-SMICounter64	`.1.3.6.1.4.1.2636.3.39.1.8.1.1.1.1.8`
jnxJsScreenMonIcmpFlood	SNMPv2-SMICounter64	`.1.3.6.1.4.1.2636.3.39.1.8.1.1.1.1.9`
jnxJsScreenMonThreshTable		`.1.3.6.1.4.1.2636.3.39.1.8.1.1.2`
jnxJsScreenMonThreshEntry		`.1.3.6.1.4.1.2636.3.39.1.8.1.1.2.1`
jnxJsScreenSynFloodSrcThresh	SNMPv2-SMIInteger32	`.1.3.6.1.4.1.2636.3.39.1.8.1.1.2.1.1`
jnxJsScreenSynFloodDstThresh	SNMPv2-SMIInteger32	`.1.3.6.1.4.1.2636.3.39.1.8.1.1.2.1.2`
jnxJsScreenSessLimitSrcThresh	SNMPv2-SMIInteger32	`.1.3.6.1.4.1.2636.3.39.1.8.1.1.2.1.3`
jnxJsScreenSessLimitDstThresh	SNMPv2-SMIInteger32	`.1.3.6.1.4.1.2636.3.39.1.8.1.1.2.1.4`
jnxJsScreenMonSynFloodSrc	SNMPv2-SMICounter64	`.1.3.6.1.4.1.2636.3.39.1.8.1.1.2.1.5`
jnxJsScreenMonSynFloodDst	SNMPv2-SMICounter64	`.1.3.6.1.4.1.2636.3.39.1.8.1.1.2.1.6`
jnxJsScreenSweepTable		`.1.3.6.1.4.1.2636.3.39.1.8.1.1.3`
jnxJsScreenSweepEntry		`.1.3.6.1.4.1.2636.3.39.1.8.1.1.3.1`
jnxJsScreenTcpSweepThresh	SNMPv2-SMIInteger32	`.1.3.6.1.4.1.2636.3.39.1.8.1.1.3.1.1`
jnxJsScreenUdpSweepThresh	SNMPv2-SMIInteger32	`.1.3.6.1.4.1.2636.3.39.1.8.1.1.3.1.2`
jnxJsScreenMonTcpSweep	SNMPv2-SMICounter64	`.1.3.6.1.4.1.2636.3.39.1.8.1.1.3.1.3`
jnxJsScreenMonUdpSweep	SNMPv2-SMICounter64	`.1.3.6.1.4.1.2636.3.39.1.8.1.1.3.1.4`
jnxJsScreenTrapVars		`.1.3.6.1.4.1.2636.3.39.1.8.1.2`
jnxJsScreenAttackType	Enumeration	`.1.3.6.1.4.1.2636.3.39.1.8.1.2.1`
jnxJsScreenAttackCounter	SNMPv2-SMIInteger32	`.1.3.6.1.4.1.2636.3.39.1.8.1.2.2`
jnxJsScreenAttackDescr	OctetString	`.1.3.6.1.4.1.2636.3.39.1.8.1.2.3`
jnxJsScreenCfgStatus	Enumeration	`.1.3.6.1.4.1.2636.3.39.1.8.1.2.4`

Dependencies (8) 4 direct · 4 transitive Show tree and compile order Hide dependency details

Each imported module is resolved in the importing module's source directory first, then through the normal default-variant rules.

Dependency tree

JUNIPER-JS-SCREENING-MIBjuniperselected
- IF-MIBrfcdefault fallback1 symbol
  - IANAifType-MIBrfc1 symbol
    - SNMPv2-SMIrfc2 symbols
    - SNMPv2-TCrfc1 symbol
      - SNMPv2-SMIrfcshared1 symbol
  - SNMPv2-CONFrfc3 symbols
    - SNMPv2-SMIrfcshared3 symbols
  - SNMPv2-MIBrfc1 symbol
    - SNMPv2-CONFrfcshared3 symbols
    - SNMPv2-SMIrfcshared7 symbols
    - SNMPv2-TCrfcshared3 symbols
  - SNMPv2-SMIrfcshared9 symbols
  - SNMPv2-TCrfcshared8 symbols
- JUNIPER-JS-SMIjuniper1 symbol
  - JUNIPER-SMIjuniper1 symbol
    - SNMPv2-SMIrfcdefault fallbackshared3 symbols
- SNMPv2-SMIrfcdefault fallbackshared5 symbols
- SNMPv2-TCrfcdefault fallbackshared1 symbol

Dependency-first compile order

Notifications / Traps (2)

Name	OID	Description
jnxJsScreenAttack jnxJsScreenZoneName IF-MIBifName jnxJsScreenAttackType jnxJsScreenAttackCounter jnxJsScreenAttackDescr	`.1.3.6.1.4.1.2636.3.39.1.8.1.0.1`	A per min bytes exceed trap signifies that the number of bytes per minutes has exceeds the specified threshold. jnxJsScreenZoneName: the zone name under which the attack is occuring. ifName the interface at which the attack is occuring. jnxJsScreenAttackType: type of attack. jnxJsScreenAttackCounter: the number of attacks recorded based on the particular screening options enabled. The value of this counter is the aggregated statistic of all the interfaces bound to the mentioned zone. jnxJsScreenAttackDescr: a general text description of the this attack or the trap.
jnxJsScreenCfgChange jnxJsScreenZoneName jnxJsScreenAttackType jnxJsScreenCfgStatus	`.1.3.6.1.4.1.2636.3.39.1.8.1.0.2`	The screening configuration change trap signifies that an screening option has been changed(enabled or disabled). A disable feature may implies a security hole. jnxJsScreenZoneName is the zone at which the changed option is applicable to. jnxJsScreenAttackType the screen feature. jnxJsScreenCfgStatus: either enabled or disabled