697 lines
19 KiB
Plaintext
697 lines
19 KiB
Plaintext
|
-- This module defines enterprise MIBs for interface configuration
|
||
|
|
--
|
||
|
|
-- Copyright (c) 1999-2004, Juniper Networks, Inc.
|
||
|
|
-- All rights reserved.
|
||
|
|
|
||
|
|
NETSCREEN-INTERFACE-MIB DEFINITIONS ::= BEGIN
|
||
|
|
|
||
|
|
IMPORTS
|
||
|
|
netscreenInterface
|
||
|
|
FROM NETSCREEN-SMI
|
||
|
|
Counter32, Integer32, IpAddress, MODULE-IDENTITY, OBJECT-TYPE
|
||
|
|
FROM SNMPv2-SMI
|
||
|
|
DisplayString,PhysAddress
|
||
|
|
FROM SNMPv2-TC
|
||
|
|
;
|
||
|
|
|
||
|
|
netscreenInterfaceMibModule MODULE-IDENTITY
|
||
|
|
LAST-UPDATED "200405032022Z" -- May 03, 2004
|
||
|
|
ORGANIZATION
|
||
|
|
"Juniper Networks, Inc."
|
||
|
|
CONTACT-INFO
|
||
|
|
"Customer Support
|
||
|
|
|
||
|
|
1194 North Mathilda Avenue
|
||
|
|
Sunnyvale, California 94089-1206
|
||
|
|
USA
|
||
|
|
|
||
|
|
Tel: 1-800-638-8296
|
||
|
|
E-mail: customerservice@juniper.net
|
||
|
|
HTTP://www.juniper.net"
|
||
|
|
DESCRIPTION
|
||
|
|
"This module defines the object that are used to monitor NS's
|
||
|
|
interface configuration"
|
||
|
|
REVISION "200405030000Z" -- May 03, 2004
|
||
|
|
DESCRIPTION
|
||
|
|
"Modified copyright and contact information"
|
||
|
|
REVISION "200403030000Z" -- March 03, 2004
|
||
|
|
DESCRIPTION
|
||
|
|
"Converted to SMIv2 by Longview Software"
|
||
|
|
REVISION "200109280000Z" -- September 28, 2001
|
||
|
|
DESCRIPTION
|
||
|
|
"No Comment"
|
||
|
|
REVISION "200105110000Z" -- May 11, 2001
|
||
|
|
DESCRIPTION
|
||
|
|
"Creation Date"
|
||
|
|
::= { netscreenInterface 0 }
|
||
|
|
|
||
|
|
NsIfEntry ::= SEQUENCE
|
||
|
|
{
|
||
|
|
nsIfIndex Integer32,
|
||
|
|
nsIfName DisplayString,
|
||
|
|
nsIfVsys Integer32,
|
||
|
|
nsIfZone Integer32,
|
||
|
|
nsIfStatus INTEGER,
|
||
|
|
nsIfIp IpAddress,
|
||
|
|
nsIfNetmask IpAddress,
|
||
|
|
nsIfGateway IpAddress,
|
||
|
|
nsIfMngIp IpAddress,
|
||
|
|
nsIfMode INTEGER,
|
||
|
|
nsIfMAC PhysAddress,
|
||
|
|
nsIfMngTelnet INTEGER,
|
||
|
|
nsIfMngSCS INTEGER,
|
||
|
|
nsIfMngWEB INTEGER,
|
||
|
|
nsIfMngSSL INTEGER,
|
||
|
|
nsIfMngSNMP INTEGER,
|
||
|
|
nsIfMngGlobal INTEGER,
|
||
|
|
nsIfMngGlobalPro INTEGER,
|
||
|
|
nsIfMngPing INTEGER,
|
||
|
|
nsIfMngIdentReset INTEGER,
|
||
|
|
nsIfInfo Integer32,
|
||
|
|
nsIfDescr DisplayString
|
||
|
|
}
|
||
|
|
|
||
|
|
NsIfFlowEntry ::= SEQUENCE
|
||
|
|
{
|
||
|
|
nsIfFlowIfIdx Integer32,
|
||
|
|
nsIfFlowVsys Integer32,
|
||
|
|
nsIfFlowInByte Counter32,
|
||
|
|
nsIfFlowInPacket Counter32,
|
||
|
|
nsIfFlowOutByte Counter32,
|
||
|
|
nsIfFlowOutPacket Counter32,
|
||
|
|
nsIfFlowInVpn Counter32,
|
||
|
|
nsIfInVlan Counter32,
|
||
|
|
nsIfOutVlan Counter32,
|
||
|
|
nsIfFlowIfInfo Integer32
|
||
|
|
}
|
||
|
|
|
||
|
|
NsIfMonEntry ::= SEQUENCE
|
||
|
|
{
|
||
|
|
nsIfMonIfIdx Integer32,
|
||
|
|
nsIfMonVsys Integer32,
|
||
|
|
nsIfMonPlyDeny Counter32,
|
||
|
|
nsIfMonAuthFail Counter32,
|
||
|
|
nsIfMonUrlBlock Counter32,
|
||
|
|
nsIfMonTrMngQueue Counter32,
|
||
|
|
nsIfMonTrMngDrop Counter32,
|
||
|
|
nsIfMonEncFail Counter32,
|
||
|
|
nsIfMonNoSa Counter32,
|
||
|
|
nsIfMonNoSaPly Counter32,
|
||
|
|
nsIfMonSaInactive Counter32,
|
||
|
|
nsIfMonSaPolicyDeny Counter32,
|
||
|
|
nsIfMonIfInfo Integer32
|
||
|
|
}
|
||
|
|
|
||
|
|
NsIfSecondaryIpEntry ::= SEQUENCE
|
||
|
|
{
|
||
|
|
nsIfSecondaryIpIndex Integer32,
|
||
|
|
nsIfSecondaryIpIfIdx Integer32,
|
||
|
|
nsIfSecondaryIpVsys Integer32,
|
||
|
|
nsIfSecondaryIpZone Integer32,
|
||
|
|
nsIfSecondaryIpAddress IpAddress,
|
||
|
|
nsIfSecondaryIpNetmask IpAddress,
|
||
|
|
nsIfSecondaryIpIfInfo Integer32
|
||
|
|
}
|
||
|
|
|
||
|
|
nsIfTable OBJECT-TYPE
|
||
|
|
SYNTAX SEQUENCE OF NsIfEntry
|
||
|
|
MAX-ACCESS not-accessible
|
||
|
|
STATUS current
|
||
|
|
DESCRIPTION
|
||
|
|
"All NetScreen devices have a trusted interface and an
|
||
|
|
untrusted interface. The NetScreen-10 and -100 also have a DMZ
|
||
|
|
interface. Additionally, on each of the virtual systems
|
||
|
|
supported by the NetScreen-1000 there can be on or more tursted
|
||
|
|
subinterfaces linking a particular virtual system to one or
|
||
|
|
more virtual LANs. Other interfaces-some physical, some
|
||
|
|
logical, and some virtual-provide exclusive channels for
|
||
|
|
administrative traffic, or for communication among member in a
|
||
|
|
redundant group. In this table, it will collect following
|
||
|
|
interface: tursted interface, untrusted interface, DMZ
|
||
|
|
interface, Management Interface and Subinterface."
|
||
|
|
::= { netscreenInterface 1 }
|
||
|
|
|
||
|
|
nsIfEntry OBJECT-TYPE
|
||
|
|
SYNTAX NsIfEntry
|
||
|
|
MAX-ACCESS not-accessible
|
||
|
|
STATUS current
|
||
|
|
DESCRIPTION
|
||
|
|
"nsIfEntry collects some attributes about NetScreen interface
|
||
|
|
settings."
|
||
|
|
INDEX
|
||
|
|
{ nsIfIndex }
|
||
|
|
::= { nsIfTable 1 }
|
||
|
|
|
||
|
|
nsIfIndex OBJECT-TYPE
|
||
|
|
SYNTAX Integer32 (0..2147483647)
|
||
|
|
MAX-ACCESS read-only
|
||
|
|
STATUS current
|
||
|
|
DESCRIPTION
|
||
|
|
"Interface number which uniquely identifies an interface."
|
||
|
|
::= { nsIfEntry 1 }
|
||
|
|
|
||
|
|
nsIfName OBJECT-TYPE
|
||
|
|
SYNTAX DisplayString (SIZE(0..32))
|
||
|
|
MAX-ACCESS read-only
|
||
|
|
STATUS current
|
||
|
|
DESCRIPTION
|
||
|
|
"Each interface has a readable name such as 'trust', 'trust/1',
|
||
|
|
etc."
|
||
|
|
::= { nsIfEntry 2 }
|
||
|
|
|
||
|
|
nsIfVsys OBJECT-TYPE
|
||
|
|
SYNTAX Integer32
|
||
|
|
MAX-ACCESS read-only
|
||
|
|
STATUS current
|
||
|
|
DESCRIPTION
|
||
|
|
"According NetScreen's concepts, each interface belongs to one
|
||
|
|
virtual system. This attribute displays the virtual system name
|
||
|
|
an interface belongs to. If the device is device which doesn't
|
||
|
|
support vsys such as NS-100, we can logically think all the
|
||
|
|
setting belongs to 'root' vsys."
|
||
|
|
::= { nsIfEntry 3 }
|
||
|
|
|
||
|
|
nsIfZone OBJECT-TYPE
|
||
|
|
SYNTAX Integer32
|
||
|
|
MAX-ACCESS read-only
|
||
|
|
STATUS current
|
||
|
|
DESCRIPTION
|
||
|
|
"Each interface belongs to one security zone. This attribute
|
||
|
|
displays the security zone name an interface belongs to."
|
||
|
|
::= { nsIfEntry 4 }
|
||
|
|
|
||
|
|
nsIfStatus OBJECT-TYPE
|
||
|
|
SYNTAX INTEGER {
|
||
|
|
down(0),
|
||
|
|
up(1),
|
||
|
|
ready(2),
|
||
|
|
inactive(3)
|
||
|
|
}
|
||
|
|
MAX-ACCESS read-only
|
||
|
|
STATUS current
|
||
|
|
DESCRIPTION
|
||
|
|
"The interface status which indicates interface's operational
|
||
|
|
status."
|
||
|
|
::= { nsIfEntry 5 }
|
||
|
|
|
||
|
|
nsIfIp OBJECT-TYPE
|
||
|
|
SYNTAX IpAddress
|
||
|
|
MAX-ACCESS read-only
|
||
|
|
STATUS current
|
||
|
|
DESCRIPTION
|
||
|
|
"Each interface must be assigned an IP address."
|
||
|
|
::= { nsIfEntry 6 }
|
||
|
|
|
||
|
|
nsIfNetmask OBJECT-TYPE
|
||
|
|
SYNTAX IpAddress
|
||
|
|
MAX-ACCESS read-only
|
||
|
|
STATUS current
|
||
|
|
DESCRIPTION
|
||
|
|
"Each interface must belong to a subnet represented by
|
||
|
|
netmask."
|
||
|
|
::= { nsIfEntry 7 }
|
||
|
|
|
||
|
|
nsIfGateway OBJECT-TYPE
|
||
|
|
SYNTAX IpAddress
|
||
|
|
MAX-ACCESS read-only
|
||
|
|
STATUS current
|
||
|
|
DESCRIPTION
|
||
|
|
"Default gateway ip address."
|
||
|
|
::= { nsIfEntry 8 }
|
||
|
|
|
||
|
|
nsIfMngIp OBJECT-TYPE
|
||
|
|
SYNTAX IpAddress
|
||
|
|
MAX-ACCESS read-only
|
||
|
|
STATUS current
|
||
|
|
DESCRIPTION
|
||
|
|
"Trusted, untrusted and DMZ interfaces can have two IP address:
|
||
|
|
an interface IP address that corresponds to the physical port
|
||
|
|
through which that interface connects to a network, and a
|
||
|
|
Manage IP address that can be used to receive administrative
|
||
|
|
traffic"
|
||
|
|
::= { nsIfEntry 9 }
|
||
|
|
|
||
|
|
nsIfMode OBJECT-TYPE
|
||
|
|
SYNTAX INTEGER {
|
||
|
|
transparent(0),
|
||
|
|
nat(1),
|
||
|
|
route(2),
|
||
|
|
not-applicable(3)
|
||
|
|
}
|
||
|
|
MAX-ACCESS read-only
|
||
|
|
STATUS current
|
||
|
|
DESCRIPTION
|
||
|
|
"NetScreen interface can has three operation modes. They are
|
||
|
|
transparent, nat and route."
|
||
|
|
::= { nsIfEntry 10 }
|
||
|
|
|
||
|
|
nsIfMAC OBJECT-TYPE
|
||
|
|
SYNTAX PhysAddress
|
||
|
|
MAX-ACCESS read-only
|
||
|
|
STATUS current
|
||
|
|
DESCRIPTION
|
||
|
|
"MAC address the interface has."
|
||
|
|
::= { nsIfEntry 11 }
|
||
|
|
|
||
|
|
nsIfMngTelnet OBJECT-TYPE
|
||
|
|
SYNTAX INTEGER {
|
||
|
|
disable(0),
|
||
|
|
enable(1)
|
||
|
|
}
|
||
|
|
MAX-ACCESS read-only
|
||
|
|
STATUS current
|
||
|
|
DESCRIPTION
|
||
|
|
"This attribute is used to indicate whether the interface
|
||
|
|
permits telnet management."
|
||
|
|
::= { nsIfEntry 12 }
|
||
|
|
|
||
|
|
nsIfMngSCS OBJECT-TYPE
|
||
|
|
SYNTAX INTEGER {
|
||
|
|
disable(0),
|
||
|
|
enable(1)
|
||
|
|
}
|
||
|
|
MAX-ACCESS read-only
|
||
|
|
STATUS current
|
||
|
|
DESCRIPTION
|
||
|
|
"This attribute is used to indicate whether the interface
|
||
|
|
permits Secure Command Shell management."
|
||
|
|
::= { nsIfEntry 13 }
|
||
|
|
|
||
|
|
nsIfMngWEB OBJECT-TYPE
|
||
|
|
SYNTAX INTEGER {
|
||
|
|
disable(0),
|
||
|
|
enable(1)
|
||
|
|
}
|
||
|
|
MAX-ACCESS read-only
|
||
|
|
STATUS current
|
||
|
|
DESCRIPTION
|
||
|
|
"This attribute is used to indicate whether the interface
|
||
|
|
permits WEB UI management."
|
||
|
|
::= { nsIfEntry 14 }
|
||
|
|
|
||
|
|
nsIfMngSSL OBJECT-TYPE
|
||
|
|
SYNTAX INTEGER {
|
||
|
|
disable(0),
|
||
|
|
enable(1)
|
||
|
|
}
|
||
|
|
MAX-ACCESS read-only
|
||
|
|
STATUS current
|
||
|
|
DESCRIPTION
|
||
|
|
"This attribute is used to indicate whether the interface
|
||
|
|
permits SSL management."
|
||
|
|
::= { nsIfEntry 15 }
|
||
|
|
|
||
|
|
nsIfMngSNMP OBJECT-TYPE
|
||
|
|
SYNTAX INTEGER {
|
||
|
|
disable(0),
|
||
|
|
enable(1)
|
||
|
|
}
|
||
|
|
MAX-ACCESS read-only
|
||
|
|
STATUS current
|
||
|
|
DESCRIPTION
|
||
|
|
"This attribute is used to indicate whether the interface
|
||
|
|
permits SNMP management."
|
||
|
|
::= { nsIfEntry 16 }
|
||
|
|
|
||
|
|
nsIfMngGlobal OBJECT-TYPE
|
||
|
|
SYNTAX INTEGER {
|
||
|
|
disable(0),
|
||
|
|
enable(1)
|
||
|
|
}
|
||
|
|
MAX-ACCESS read-only
|
||
|
|
STATUS current
|
||
|
|
DESCRIPTION
|
||
|
|
"This attribute is used to indicate whether the interface
|
||
|
|
permits NS Global management."
|
||
|
|
::= { nsIfEntry 17 }
|
||
|
|
|
||
|
|
nsIfMngGlobalPro OBJECT-TYPE
|
||
|
|
SYNTAX INTEGER {
|
||
|
|
disable(0),
|
||
|
|
enable(1)
|
||
|
|
}
|
||
|
|
MAX-ACCESS read-only
|
||
|
|
STATUS current
|
||
|
|
DESCRIPTION
|
||
|
|
"This attribute is used to indicate whether the interface
|
||
|
|
permits NS Global Pro management."
|
||
|
|
::= { nsIfEntry 18 }
|
||
|
|
|
||
|
|
nsIfMngPing OBJECT-TYPE
|
||
|
|
SYNTAX INTEGER {
|
||
|
|
disable(0),
|
||
|
|
enable(1)
|
||
|
|
}
|
||
|
|
MAX-ACCESS read-only
|
||
|
|
STATUS current
|
||
|
|
DESCRIPTION
|
||
|
|
"This attribute is used to indicate whether the interface
|
||
|
|
permits Ping go-through."
|
||
|
|
::= { nsIfEntry 19 }
|
||
|
|
|
||
|
|
nsIfMngIdentReset OBJECT-TYPE
|
||
|
|
SYNTAX INTEGER {
|
||
|
|
disable(0),
|
||
|
|
enable(1)
|
||
|
|
}
|
||
|
|
MAX-ACCESS read-only
|
||
|
|
STATUS current
|
||
|
|
DESCRIPTION
|
||
|
|
"This attribute is used to indicate whether the interface
|
||
|
|
permits ident reset."
|
||
|
|
::= { nsIfEntry 20 }
|
||
|
|
|
||
|
|
nsIfInfo OBJECT-TYPE
|
||
|
|
SYNTAX Integer32 (0..2147483647)
|
||
|
|
MAX-ACCESS read-only
|
||
|
|
STATUS current
|
||
|
|
DESCRIPTION
|
||
|
|
"Internal id assigned to this interface. Stays persistent across resets."
|
||
|
|
::= { nsIfEntry 21 }
|
||
|
|
|
||
|
|
nsIfDescr OBJECT-TYPE
|
||
|
|
SYNTAX DisplayString (SIZE(0..32))
|
||
|
|
MAX-ACCESS read-only
|
||
|
|
STATUS current
|
||
|
|
DESCRIPTION
|
||
|
|
"Each interface has a a configurable descriptor string."
|
||
|
|
::= { nsIfEntry 22 }
|
||
|
|
|
||
|
|
nsIfSecondaryIpTable OBJECT-TYPE
|
||
|
|
SYNTAX SEQUENCE OF NsIfSecondaryIpEntry
|
||
|
|
MAX-ACCESS not-accessible
|
||
|
|
STATUS current
|
||
|
|
DESCRIPTION
|
||
|
|
"In some ScreenOS, it supports multiple IP addresses and
|
||
|
|
related subnets based on the same interface. This table
|
||
|
|
collects the multiple IP addresses configuration on an
|
||
|
|
interface."
|
||
|
|
::= { netscreenInterface 2 }
|
||
|
|
|
||
|
|
nsIfSecondaryIpEntry OBJECT-TYPE
|
||
|
|
SYNTAX NsIfSecondaryIpEntry
|
||
|
|
MAX-ACCESS not-accessible
|
||
|
|
STATUS current
|
||
|
|
DESCRIPTION
|
||
|
|
"nsIfSecondaryIpEntry collects some attributes about multiple
|
||
|
|
IP configurations on an interface."
|
||
|
|
INDEX
|
||
|
|
{ nsIfSecondaryIpIndex }
|
||
|
|
::= { nsIfSecondaryIpTable 1 }
|
||
|
|
|
||
|
|
nsIfSecondaryIpIndex OBJECT-TYPE
|
||
|
|
SYNTAX Integer32 (0..2147483647)
|
||
|
|
MAX-ACCESS read-only
|
||
|
|
STATUS current
|
||
|
|
DESCRIPTION
|
||
|
|
"The table index used as primary key when retrieving the
|
||
|
|
table."
|
||
|
|
::= { nsIfSecondaryIpEntry 1 }
|
||
|
|
|
||
|
|
nsIfSecondaryIpIfIdx OBJECT-TYPE
|
||
|
|
SYNTAX Integer32
|
||
|
|
MAX-ACCESS read-only
|
||
|
|
STATUS current
|
||
|
|
DESCRIPTION
|
||
|
|
"The index value which uniquely identifies an interface the
|
||
|
|
secodary ip belongs to. The interface identified by a
|
||
|
|
particular value of this index is the same interface as
|
||
|
|
identified by the same value of ifIndex."
|
||
|
|
::= { nsIfSecondaryIpEntry 2 }
|
||
|
|
|
||
|
|
nsIfSecondaryIpVsys OBJECT-TYPE
|
||
|
|
SYNTAX Integer32
|
||
|
|
MAX-ACCESS read-only
|
||
|
|
STATUS current
|
||
|
|
DESCRIPTION
|
||
|
|
"According NetScreen's concepts, each interface belongs to one
|
||
|
|
virtual system. This attribute displays the virtual system ID
|
||
|
|
an interface belongs to. If the device is device which doesn't
|
||
|
|
support vsys such as NS-100, we can logically think all the
|
||
|
|
setting belongs to 'root' vsys."
|
||
|
|
::= { nsIfSecondaryIpEntry 3 }
|
||
|
|
|
||
|
|
nsIfSecondaryIpZone OBJECT-TYPE
|
||
|
|
SYNTAX Integer32
|
||
|
|
MAX-ACCESS read-only
|
||
|
|
STATUS current
|
||
|
|
DESCRIPTION
|
||
|
|
"each interface belongs to one security zone. this attribute
|
||
|
|
displays the security zone name an interface belongs to."
|
||
|
|
::= { nsIfSecondaryIpEntry 4 }
|
||
|
|
|
||
|
|
nsIfSecondaryIpAddress OBJECT-TYPE
|
||
|
|
SYNTAX IpAddress
|
||
|
|
MAX-ACCESS read-only
|
||
|
|
STATUS current
|
||
|
|
DESCRIPTION
|
||
|
|
"Ip Address value."
|
||
|
|
::= { nsIfSecondaryIpEntry 5 }
|
||
|
|
|
||
|
|
nsIfSecondaryIpNetmask OBJECT-TYPE
|
||
|
|
SYNTAX IpAddress
|
||
|
|
MAX-ACCESS read-only
|
||
|
|
STATUS current
|
||
|
|
DESCRIPTION
|
||
|
|
"Subnet of a ip belongs to."
|
||
|
|
::= { nsIfSecondaryIpEntry 6 }
|
||
|
|
|
||
|
|
nsIfSecondaryIpIfInfo OBJECT-TYPE
|
||
|
|
SYNTAX Integer32 (0..2147483647)
|
||
|
|
MAX-ACCESS read-only
|
||
|
|
STATUS current
|
||
|
|
DESCRIPTION
|
||
|
|
"Internal id assigned to this interface. Stays persistent across resets."
|
||
|
|
::= { nsIfSecondaryIpEntry 7 }
|
||
|
|
|
||
|
|
nsIfFlowTable OBJECT-TYPE
|
||
|
|
SYNTAX SEQUENCE OF NsIfFlowEntry
|
||
|
|
MAX-ACCESS not-accessible
|
||
|
|
STATUS current
|
||
|
|
DESCRIPTION
|
||
|
|
"nsIfFlowTable is used to get flow statistical information of
|
||
|
|
the interface."
|
||
|
|
::= { netscreenInterface 3 }
|
||
|
|
|
||
|
|
nsIfFlowEntry OBJECT-TYPE
|
||
|
|
SYNTAX NsIfFlowEntry
|
||
|
|
MAX-ACCESS not-accessible
|
||
|
|
STATUS current
|
||
|
|
DESCRIPTION
|
||
|
|
"Table entry collect some attributes about interface flow
|
||
|
|
counters."
|
||
|
|
INDEX
|
||
|
|
{ nsIfFlowIfIdx }
|
||
|
|
::= { nsIfFlowTable 1 }
|
||
|
|
|
||
|
|
nsIfFlowIfIdx OBJECT-TYPE
|
||
|
|
SYNTAX Integer32 (0..2147483647)
|
||
|
|
MAX-ACCESS read-only
|
||
|
|
STATUS current
|
||
|
|
DESCRIPTION
|
||
|
|
"Unique interface id, also used as table index."
|
||
|
|
::= { nsIfFlowEntry 1 }
|
||
|
|
|
||
|
|
nsIfFlowVsys OBJECT-TYPE
|
||
|
|
SYNTAX Integer32
|
||
|
|
MAX-ACCESS read-only
|
||
|
|
STATUS current
|
||
|
|
DESCRIPTION
|
||
|
|
"According NetScreen's concepts. each interface belongs to one
|
||
|
|
virtual system. This attribute displays the virtual system name
|
||
|
|
an interface belongs to."
|
||
|
|
::= { nsIfFlowEntry 2 }
|
||
|
|
|
||
|
|
nsIfFlowInByte OBJECT-TYPE
|
||
|
|
SYNTAX Counter32
|
||
|
|
MAX-ACCESS read-only
|
||
|
|
STATUS current
|
||
|
|
DESCRIPTION
|
||
|
|
"Incoming byte number arriving at the this interface"
|
||
|
|
::= { nsIfFlowEntry 3 }
|
||
|
|
|
||
|
|
nsIfFlowInPacket OBJECT-TYPE
|
||
|
|
SYNTAX Counter32
|
||
|
|
MAX-ACCESS read-only
|
||
|
|
STATUS current
|
||
|
|
DESCRIPTION
|
||
|
|
"Incoming packet number arriving at the this interface"
|
||
|
|
::= { nsIfFlowEntry 4 }
|
||
|
|
|
||
|
|
nsIfFlowOutByte OBJECT-TYPE
|
||
|
|
SYNTAX Counter32
|
||
|
|
MAX-ACCESS read-only
|
||
|
|
STATUS current
|
||
|
|
DESCRIPTION
|
||
|
|
"Outgoing byte number sending through this interface"
|
||
|
|
::= { nsIfFlowEntry 5 }
|
||
|
|
|
||
|
|
nsIfFlowOutPacket OBJECT-TYPE
|
||
|
|
SYNTAX Counter32
|
||
|
|
MAX-ACCESS read-only
|
||
|
|
STATUS current
|
||
|
|
DESCRIPTION
|
||
|
|
"Outgoing packet number sending through this interface"
|
||
|
|
::= { nsIfFlowEntry 6 }
|
||
|
|
|
||
|
|
nsIfFlowInVpn OBJECT-TYPE
|
||
|
|
SYNTAX Counter32
|
||
|
|
MAX-ACCESS read-only
|
||
|
|
STATUS current
|
||
|
|
DESCRIPTION
|
||
|
|
"VPN packet go through this interface"
|
||
|
|
::= { nsIfFlowEntry 7 }
|
||
|
|
|
||
|
|
nsIfInVlan OBJECT-TYPE
|
||
|
|
SYNTAX Counter32
|
||
|
|
MAX-ACCESS read-only
|
||
|
|
STATUS current
|
||
|
|
DESCRIPTION
|
||
|
|
"Incoming vlan packet"
|
||
|
|
::= { nsIfFlowEntry 8 }
|
||
|
|
|
||
|
|
nsIfOutVlan OBJECT-TYPE
|
||
|
|
SYNTAX Counter32
|
||
|
|
MAX-ACCESS read-only
|
||
|
|
STATUS current
|
||
|
|
DESCRIPTION
|
||
|
|
"Outgoing vlan packet"
|
||
|
|
::= { nsIfFlowEntry 9 }
|
||
|
|
|
||
|
|
nsIfFlowIfInfo OBJECT-TYPE
|
||
|
|
SYNTAX Integer32 (0..2147483647)
|
||
|
|
MAX-ACCESS read-only
|
||
|
|
STATUS current
|
||
|
|
DESCRIPTION
|
||
|
|
"Internal id assigned to this interface. Stays persistent across resets."
|
||
|
|
::= { nsIfFlowEntry 10 }
|
||
|
|
|
||
|
|
nsIfMonTable OBJECT-TYPE
|
||
|
|
SYNTAX SEQUENCE OF NsIfMonEntry
|
||
|
|
MAX-ACCESS not-accessible
|
||
|
|
STATUS current
|
||
|
|
DESCRIPTION
|
||
|
|
"This table collects some of dropped packet counters of
|
||
|
|
interface"
|
||
|
|
::= { netscreenInterface 4 }
|
||
|
|
|
||
|
|
nsIfMonEntry OBJECT-TYPE
|
||
|
|
SYNTAX NsIfMonEntry
|
||
|
|
MAX-ACCESS not-accessible
|
||
|
|
STATUS current
|
||
|
|
DESCRIPTION
|
||
|
|
"An entry containing tunnel information"
|
||
|
|
INDEX
|
||
|
|
{ nsIfMonIfIdx }
|
||
|
|
::= { nsIfMonTable 1 }
|
||
|
|
|
||
|
|
nsIfMonIfIdx OBJECT-TYPE
|
||
|
|
SYNTAX Integer32 (0..2147483647)
|
||
|
|
MAX-ACCESS read-only
|
||
|
|
STATUS current
|
||
|
|
DESCRIPTION
|
||
|
|
"Unique interface id, also used as table index."
|
||
|
|
::= { nsIfMonEntry 1 }
|
||
|
|
|
||
|
|
nsIfMonVsys OBJECT-TYPE
|
||
|
|
SYNTAX Integer32
|
||
|
|
MAX-ACCESS read-only
|
||
|
|
STATUS current
|
||
|
|
DESCRIPTION
|
||
|
|
"According NetScreen's concepts, each interface belongs to one
|
||
|
|
virtual system. This attribute displays the virtual system name
|
||
|
|
an interface belongs to."
|
||
|
|
::= { nsIfMonEntry 2 }
|
||
|
|
|
||
|
|
nsIfMonPlyDeny OBJECT-TYPE
|
||
|
|
SYNTAX Counter32
|
||
|
|
MAX-ACCESS read-only
|
||
|
|
STATUS current
|
||
|
|
DESCRIPTION
|
||
|
|
"Packet drop since denied by policy."
|
||
|
|
::= { nsIfMonEntry 3 }
|
||
|
|
|
||
|
|
nsIfMonAuthFail OBJECT-TYPE
|
||
|
|
SYNTAX Counter32
|
||
|
|
MAX-ACCESS read-only
|
||
|
|
STATUS current
|
||
|
|
DESCRIPTION
|
||
|
|
"Packet drop due to authentication failed."
|
||
|
|
::= { nsIfMonEntry 4 }
|
||
|
|
|
||
|
|
nsIfMonUrlBlock OBJECT-TYPE
|
||
|
|
SYNTAX Counter32
|
||
|
|
MAX-ACCESS read-only
|
||
|
|
STATUS current
|
||
|
|
DESCRIPTION
|
||
|
|
"Packet drop due to URL blocking."
|
||
|
|
::= { nsIfMonEntry 5 }
|
||
|
|
|
||
|
|
nsIfMonTrMngQueue OBJECT-TYPE
|
||
|
|
SYNTAX Counter32
|
||
|
|
MAX-ACCESS read-only
|
||
|
|
STATUS current
|
||
|
|
DESCRIPTION
|
||
|
|
"packet queue up due to traffic management"
|
||
|
|
::= { nsIfMonEntry 6 }
|
||
|
|
|
||
|
|
nsIfMonTrMngDrop OBJECT-TYPE
|
||
|
|
SYNTAX Counter32
|
||
|
|
MAX-ACCESS read-only
|
||
|
|
STATUS current
|
||
|
|
DESCRIPTION
|
||
|
|
"Packet drop due to traffic management"
|
||
|
|
::= { nsIfMonEntry 7 }
|
||
|
|
|
||
|
|
nsIfMonEncFail OBJECT-TYPE
|
||
|
|
SYNTAX Counter32
|
||
|
|
MAX-ACCESS read-only
|
||
|
|
STATUS current
|
||
|
|
DESCRIPTION
|
||
|
|
"IPSec enc failed due to sa not available, no ipak, etc"
|
||
|
|
::= { nsIfMonEntry 8 }
|
||
|
|
|
||
|
|
nsIfMonNoSa OBJECT-TYPE
|
||
|
|
SYNTAX Counter32
|
||
|
|
MAX-ACCESS read-only
|
||
|
|
STATUS current
|
||
|
|
DESCRIPTION
|
||
|
|
"packet drop due to no sa found for incomig spi"
|
||
|
|
::= { nsIfMonEntry 9 }
|
||
|
|
|
||
|
|
nsIfMonNoSaPly OBJECT-TYPE
|
||
|
|
SYNTAX Counter32
|
||
|
|
MAX-ACCESS read-only
|
||
|
|
STATUS current
|
||
|
|
DESCRIPTION
|
||
|
|
"packet drop due to no policy associated with found sa"
|
||
|
|
::= { nsIfMonEntry 10 }
|
||
|
|
|
||
|
|
nsIfMonSaInactive OBJECT-TYPE
|
||
|
|
SYNTAX Counter32
|
||
|
|
MAX-ACCESS read-only
|
||
|
|
STATUS current
|
||
|
|
DESCRIPTION
|
||
|
|
"packet drop due to sa not active"
|
||
|
|
::= { nsIfMonEntry 11 }
|
||
|
|
|
||
|
|
nsIfMonSaPolicyDeny OBJECT-TYPE
|
||
|
|
SYNTAX Counter32
|
||
|
|
MAX-ACCESS read-only
|
||
|
|
STATUS current
|
||
|
|
DESCRIPTION
|
||
|
|
"packet drop due to denial by sa policy"
|
||
|
|
::= { nsIfMonEntry 12 }
|
||
|
|
|
||
|
|
nsIfMonIfInfo OBJECT-TYPE
|
||
|
|
SYNTAX Integer32 (0..2147483647)
|
||
|
|
MAX-ACCESS read-only
|
||
|
|
STATUS current
|
||
|
|
DESCRIPTION
|
||
|
|
"Internal id assigned to this interface. Stays persistent across resets."
|
||
|
|
::= { nsIfMonEntry 13 }
|
||
|
|
|
||
|
|
END
|
||
|
|
|
||
|
|
|