Initial commitHEADmain

1 files changed, 696 insertions, 0 deletions

diff --git a/MIBS/screenos/NETSCREEN-INTERFACE-MIB b/MIBS/screenos/NETSCREEN-INTERFACE-MIB
new file mode 100644
index 0000000..f6914c8
--- /dev/null
+++ b/MIBS/screenos/NETSCREEN-INTERFACE-MIB
@@ -0,0 +1,696 @@
+-- This module defines enterprise MIBs for interface configuration
+-- 
+-- Copyright (c) 1999-2004, Juniper Networks, Inc.
+-- All rights reserved.
+
+NETSCREEN-INTERFACE-MIB DEFINITIONS ::= BEGIN
+
+IMPORTS
+    netscreenInterface
+        FROM NETSCREEN-SMI
+    Counter32, Integer32, IpAddress, MODULE-IDENTITY, OBJECT-TYPE
+        FROM SNMPv2-SMI
+    DisplayString,PhysAddress
+        FROM SNMPv2-TC
+    ;
+
+netscreenInterfaceMibModule MODULE-IDENTITY
+    LAST-UPDATED  "200405032022Z" -- May 03, 2004
+    ORGANIZATION
+        "Juniper Networks, Inc."
+    CONTACT-INFO
+        "Customer Support
+
+         1194 North Mathilda Avenue 
+         Sunnyvale, California 94089-1206
+         USA
+
+         Tel: 1-800-638-8296
+         E-mail: customerservice@juniper.net
+         HTTP://www.juniper.net"
+    DESCRIPTION
+        "This module defines the object that are used to monitor NS's
+         interface configuration"
+    REVISION      "200405030000Z" -- May 03, 2004
+    DESCRIPTION
+        "Modified copyright and contact information"
+    REVISION      "200403030000Z" -- March 03, 2004
+    DESCRIPTION
+        "Converted to SMIv2 by Longview Software"
+    REVISION      "200109280000Z" -- September 28, 2001
+    DESCRIPTION
+        "No Comment"
+    REVISION      "200105110000Z" -- May 11, 2001
+    DESCRIPTION
+        "Creation Date"
+    ::= { netscreenInterface 0 }
+
+NsIfEntry ::= SEQUENCE
+{
+    nsIfIndex         Integer32,
+    nsIfName          DisplayString,
+    nsIfVsys          Integer32,
+    nsIfZone          Integer32,
+    nsIfStatus        INTEGER,
+    nsIfIp            IpAddress,
+    nsIfNetmask       IpAddress,
+    nsIfGateway       IpAddress,
+    nsIfMngIp         IpAddress,
+    nsIfMode          INTEGER,
+    nsIfMAC           PhysAddress,
+    nsIfMngTelnet     INTEGER,
+    nsIfMngSCS        INTEGER,
+    nsIfMngWEB        INTEGER,
+    nsIfMngSSL        INTEGER,
+    nsIfMngSNMP       INTEGER,
+    nsIfMngGlobal     INTEGER,
+    nsIfMngGlobalPro  INTEGER,
+    nsIfMngPing       INTEGER,
+    nsIfMngIdentReset INTEGER,
+    nsIfInfo          Integer32,
+    nsIfDescr         DisplayString
+}
+
+NsIfFlowEntry ::= SEQUENCE
+{
+    nsIfFlowIfIdx     Integer32,
+    nsIfFlowVsys      Integer32,
+    nsIfFlowInByte    Counter32,
+    nsIfFlowInPacket  Counter32,
+    nsIfFlowOutByte   Counter32,
+    nsIfFlowOutPacket Counter32,
+    nsIfFlowInVpn     Counter32,
+    nsIfInVlan        Counter32,
+    nsIfOutVlan       Counter32,
+    nsIfFlowIfInfo    Integer32
+}
+
+NsIfMonEntry ::= SEQUENCE
+{
+    nsIfMonIfIdx        Integer32,
+    nsIfMonVsys         Integer32,
+    nsIfMonPlyDeny      Counter32,
+    nsIfMonAuthFail     Counter32,
+    nsIfMonUrlBlock     Counter32,
+    nsIfMonTrMngQueue   Counter32,
+    nsIfMonTrMngDrop    Counter32,
+    nsIfMonEncFail      Counter32,
+    nsIfMonNoSa         Counter32,
+    nsIfMonNoSaPly      Counter32,
+    nsIfMonSaInactive   Counter32,
+    nsIfMonSaPolicyDeny Counter32,
+    nsIfMonIfInfo       Integer32
+}
+
+NsIfSecondaryIpEntry ::= SEQUENCE
+{
+    nsIfSecondaryIpIndex   Integer32,
+    nsIfSecondaryIpIfIdx   Integer32,
+    nsIfSecondaryIpVsys    Integer32,
+    nsIfSecondaryIpZone    Integer32,
+    nsIfSecondaryIpAddress IpAddress,
+    nsIfSecondaryIpNetmask IpAddress,
+    nsIfSecondaryIpIfInfo  Integer32
+}
+
+nsIfTable OBJECT-TYPE
+    SYNTAX        SEQUENCE OF NsIfEntry
+    MAX-ACCESS    not-accessible
+    STATUS        current
+    DESCRIPTION
+        "All NetScreen devices have a trusted interface and an
+         untrusted interface. The NetScreen-10 and -100 also have a DMZ
+         interface. Additionally, on each of the  virtual systems
+         supported by the NetScreen-1000 there can be on or more tursted
+         subinterfaces linking a particular virtual system to one or
+         more virtual LANs. Other interfaces-some physical, some
+         logical, and some virtual-provide exclusive  channels for
+         administrative traffic, or for communication among member in a
+         redundant group. In this table, it will collect following
+         interface: tursted interface, untrusted  interface, DMZ
+         interface, Management Interface and Subinterface."
+    ::= { netscreenInterface 1 }
+
+nsIfEntry OBJECT-TYPE
+    SYNTAX        NsIfEntry
+    MAX-ACCESS    not-accessible
+    STATUS        current
+    DESCRIPTION
+        "nsIfEntry collects some attributes about NetScreen interface
+         settings."
+    INDEX
+        { nsIfIndex }
+    ::= { nsIfTable 1 }
+
+nsIfIndex OBJECT-TYPE
+    SYNTAX        Integer32 (0..2147483647)
+    MAX-ACCESS    read-only
+    STATUS        current
+    DESCRIPTION
+        "Interface number which uniquely identifies an interface."
+    ::= { nsIfEntry 1 }
+
+nsIfName OBJECT-TYPE
+    SYNTAX        DisplayString (SIZE(0..32))
+    MAX-ACCESS    read-only
+    STATUS        current
+    DESCRIPTION
+        "Each interface has a readable name such as 'trust', 'trust/1',
+         etc."
+    ::= { nsIfEntry 2 }
+
+nsIfVsys OBJECT-TYPE
+    SYNTAX        Integer32
+    MAX-ACCESS    read-only
+    STATUS        current
+    DESCRIPTION
+        "According NetScreen's concepts, each interface belongs to one
+         virtual system. This attribute displays the virtual system name
+         an interface belongs to. If the device is device which doesn't
+         support vsys such as  NS-100, we can logically think all the
+         setting belongs to 'root' vsys."
+    ::= { nsIfEntry 3 }
+
+nsIfZone OBJECT-TYPE
+    SYNTAX        Integer32
+    MAX-ACCESS    read-only
+    STATUS        current
+    DESCRIPTION
+        "Each interface belongs to one security zone. This attribute
+         displays the security zone name an interface belongs to."
+    ::= { nsIfEntry 4 }
+
+nsIfStatus OBJECT-TYPE
+    SYNTAX        INTEGER {
+        down(0),
+        up(1),
+        ready(2),
+        inactive(3)
+    }
+    MAX-ACCESS    read-only
+    STATUS        current
+    DESCRIPTION
+        "The interface status which indicates interface's operational
+         status."
+    ::= { nsIfEntry 5 }
+
+nsIfIp OBJECT-TYPE
+    SYNTAX        IpAddress
+    MAX-ACCESS    read-only
+    STATUS        current
+    DESCRIPTION
+        "Each interface must be assigned an IP address."
+    ::= { nsIfEntry 6 }
+
+nsIfNetmask OBJECT-TYPE
+    SYNTAX        IpAddress
+    MAX-ACCESS    read-only
+    STATUS        current
+    DESCRIPTION
+        "Each interface must belong to a subnet represented by
+         netmask."
+    ::= { nsIfEntry 7 }
+
+nsIfGateway OBJECT-TYPE
+    SYNTAX        IpAddress
+    MAX-ACCESS    read-only
+    STATUS        current
+    DESCRIPTION
+        "Default gateway ip address."
+    ::= { nsIfEntry 8 }
+
+nsIfMngIp OBJECT-TYPE
+    SYNTAX        IpAddress
+    MAX-ACCESS    read-only
+    STATUS        current
+    DESCRIPTION
+        "Trusted, untrusted and DMZ interfaces can have two IP address:
+         an interface IP address that corresponds to the physical port
+         through which that  interface connects to a network, and a
+         Manage IP address that can be used to  receive administrative
+         traffic"
+    ::= { nsIfEntry 9 }
+
+nsIfMode OBJECT-TYPE
+    SYNTAX        INTEGER {
+        transparent(0),
+        nat(1),
+        route(2),
+        not-applicable(3)
+    }
+    MAX-ACCESS    read-only
+    STATUS        current
+    DESCRIPTION
+        "NetScreen interface can has three operation modes. They are
+         transparent, nat and route."
+    ::= { nsIfEntry 10 }
+
+nsIfMAC OBJECT-TYPE
+    SYNTAX        PhysAddress
+    MAX-ACCESS    read-only
+    STATUS        current
+    DESCRIPTION
+        "MAC address the interface has."
+    ::= { nsIfEntry 11 }
+
+nsIfMngTelnet OBJECT-TYPE
+    SYNTAX        INTEGER {
+        disable(0),
+        enable(1)
+    }
+    MAX-ACCESS    read-only
+    STATUS        current
+    DESCRIPTION
+        "This attribute is used to indicate whether the interface
+         permits telnet  management."
+    ::= { nsIfEntry 12 }
+
+nsIfMngSCS OBJECT-TYPE
+    SYNTAX        INTEGER {
+        disable(0),
+        enable(1)
+    }
+    MAX-ACCESS    read-only
+    STATUS        current
+    DESCRIPTION
+        "This attribute is used to indicate whether the interface
+         permits Secure Command Shell management."
+    ::= { nsIfEntry 13 }
+
+nsIfMngWEB OBJECT-TYPE
+    SYNTAX        INTEGER {
+        disable(0),
+        enable(1)
+    }
+    MAX-ACCESS    read-only
+    STATUS        current
+    DESCRIPTION
+        "This attribute is used to indicate whether the interface
+         permits WEB UI  management."
+    ::= { nsIfEntry 14 }
+
+nsIfMngSSL OBJECT-TYPE
+    SYNTAX        INTEGER {
+        disable(0),
+        enable(1)
+    }
+    MAX-ACCESS    read-only
+    STATUS        current
+    DESCRIPTION
+        "This attribute is used to indicate whether the interface
+         permits SSL  management."
+    ::= { nsIfEntry 15 }
+
+nsIfMngSNMP OBJECT-TYPE
+    SYNTAX        INTEGER {
+        disable(0),
+        enable(1)
+    }
+    MAX-ACCESS    read-only
+    STATUS        current
+    DESCRIPTION
+        "This attribute is used to indicate whether the interface
+         permits SNMP  management."
+    ::= { nsIfEntry 16 }
+
+nsIfMngGlobal OBJECT-TYPE
+    SYNTAX        INTEGER {
+        disable(0),
+        enable(1)
+    }
+    MAX-ACCESS    read-only
+    STATUS        current
+    DESCRIPTION
+        "This attribute is used to indicate whether the interface
+         permits NS Global  management."
+    ::= { nsIfEntry 17 }
+
+nsIfMngGlobalPro OBJECT-TYPE
+    SYNTAX        INTEGER {
+        disable(0),
+        enable(1)
+    }
+    MAX-ACCESS    read-only
+    STATUS        current
+    DESCRIPTION
+        "This attribute is used to indicate whether the interface
+         permits NS Global Pro management."
+    ::= { nsIfEntry 18 }
+
+nsIfMngPing OBJECT-TYPE
+    SYNTAX        INTEGER {
+        disable(0),
+        enable(1)
+    }
+    MAX-ACCESS    read-only
+    STATUS        current
+    DESCRIPTION
+        "This attribute is used to indicate whether the interface
+         permits Ping go-through."
+    ::= { nsIfEntry 19 }
+
+nsIfMngIdentReset OBJECT-TYPE
+    SYNTAX        INTEGER {
+        disable(0),
+        enable(1)
+    }
+    MAX-ACCESS    read-only
+    STATUS        current
+    DESCRIPTION
+        "This attribute is used to indicate whether the interface
+         permits ident reset."
+    ::= { nsIfEntry 20 }
+
+nsIfInfo OBJECT-TYPE
+    SYNTAX        Integer32 (0..2147483647)
+    MAX-ACCESS    read-only
+    STATUS        current
+    DESCRIPTION
+        "Internal id assigned to this interface. Stays persistent across resets."
+    ::= { nsIfEntry 21 }
+
+nsIfDescr OBJECT-TYPE
+    SYNTAX        DisplayString (SIZE(0..32))
+    MAX-ACCESS    read-only
+    STATUS        current
+    DESCRIPTION
+        "Each interface has a a configurable descriptor string."
+    ::= { nsIfEntry 22 }
+
+nsIfSecondaryIpTable OBJECT-TYPE
+    SYNTAX        SEQUENCE OF NsIfSecondaryIpEntry
+    MAX-ACCESS    not-accessible
+    STATUS        current
+    DESCRIPTION
+        "In some ScreenOS, it supports multiple IP addresses and
+         related subnets based on the same interface. This table
+         collects the multiple IP addresses configuration on an
+         interface."
+    ::= { netscreenInterface 2 }
+
+nsIfSecondaryIpEntry OBJECT-TYPE
+    SYNTAX        NsIfSecondaryIpEntry
+    MAX-ACCESS    not-accessible
+    STATUS        current
+    DESCRIPTION
+        "nsIfSecondaryIpEntry collects some attributes about multiple
+         IP configurations  on an interface."
+    INDEX
+        { nsIfSecondaryIpIndex }
+    ::= { nsIfSecondaryIpTable 1 }
+
+nsIfSecondaryIpIndex OBJECT-TYPE
+    SYNTAX        Integer32 (0..2147483647)
+    MAX-ACCESS    read-only
+    STATUS        current
+    DESCRIPTION
+        "The table index used as primary key when retrieving the
+         table."
+    ::= { nsIfSecondaryIpEntry 1 }
+
+nsIfSecondaryIpIfIdx OBJECT-TYPE
+    SYNTAX        Integer32
+    MAX-ACCESS    read-only
+    STATUS        current
+    DESCRIPTION
+        "The index value which uniquely identifies an interface the
+         secodary ip belongs to. The interface identified by a
+         particular value  of this index is the same interface as
+         identified by the same value of ifIndex."
+    ::= { nsIfSecondaryIpEntry 2 }
+
+nsIfSecondaryIpVsys OBJECT-TYPE
+    SYNTAX        Integer32
+    MAX-ACCESS    read-only
+    STATUS        current
+    DESCRIPTION
+        "According NetScreen's concepts, each interface belongs to one
+         virtual system. This attribute displays the virtual system ID
+         an interface belongs to. If the device is device which doesn't
+         support vsys such as  NS-100, we can logically think all the
+         setting belongs to 'root' vsys."
+    ::= { nsIfSecondaryIpEntry 3 }
+
+nsIfSecondaryIpZone OBJECT-TYPE
+    SYNTAX        Integer32
+    MAX-ACCESS    read-only
+    STATUS        current
+    DESCRIPTION
+        "each interface belongs to one security zone. this attribute
+         displays the security zone name an interface belongs to."
+    ::= { nsIfSecondaryIpEntry 4 }
+
+nsIfSecondaryIpAddress OBJECT-TYPE
+    SYNTAX        IpAddress
+    MAX-ACCESS    read-only
+    STATUS        current
+    DESCRIPTION
+        "Ip Address value."
+    ::= { nsIfSecondaryIpEntry 5 }
+
+nsIfSecondaryIpNetmask OBJECT-TYPE
+    SYNTAX        IpAddress
+    MAX-ACCESS    read-only
+    STATUS        current
+    DESCRIPTION
+        "Subnet of a ip belongs to."
+    ::= { nsIfSecondaryIpEntry 6 }
+
+nsIfSecondaryIpIfInfo OBJECT-TYPE
+    SYNTAX        Integer32 (0..2147483647)
+    MAX-ACCESS    read-only
+    STATUS        current
+    DESCRIPTION
+        "Internal id assigned to this interface. Stays persistent across resets."
+    ::= { nsIfSecondaryIpEntry 7 }
+
+nsIfFlowTable OBJECT-TYPE
+    SYNTAX        SEQUENCE OF NsIfFlowEntry
+    MAX-ACCESS    not-accessible
+    STATUS        current
+    DESCRIPTION
+        "nsIfFlowTable is used to get flow statistical information of
+         the interface."
+    ::= { netscreenInterface 3 }
+
+nsIfFlowEntry OBJECT-TYPE
+    SYNTAX        NsIfFlowEntry
+    MAX-ACCESS    not-accessible
+    STATUS        current
+    DESCRIPTION
+        "Table entry collect some attributes about interface flow
+         counters."
+    INDEX
+        { nsIfFlowIfIdx }
+    ::= { nsIfFlowTable 1 }
+
+nsIfFlowIfIdx OBJECT-TYPE
+    SYNTAX        Integer32 (0..2147483647)
+    MAX-ACCESS    read-only
+    STATUS        current
+    DESCRIPTION
+        "Unique interface id, also used as table index."
+    ::= { nsIfFlowEntry 1 }
+
+nsIfFlowVsys OBJECT-TYPE
+    SYNTAX        Integer32
+    MAX-ACCESS    read-only
+    STATUS        current
+    DESCRIPTION
+        "According NetScreen's concepts. each interface belongs to one
+         virtual system. This attribute displays the virtual system name
+         an interface belongs to."
+    ::= { nsIfFlowEntry 2 }
+
+nsIfFlowInByte OBJECT-TYPE
+    SYNTAX        Counter32
+    MAX-ACCESS    read-only
+    STATUS        current
+    DESCRIPTION
+        "Incoming byte number arriving at the this interface"
+    ::= { nsIfFlowEntry 3 }
+
+nsIfFlowInPacket OBJECT-TYPE
+    SYNTAX        Counter32
+    MAX-ACCESS    read-only
+    STATUS        current
+    DESCRIPTION
+        "Incoming packet number arriving at the this interface"
+    ::= { nsIfFlowEntry 4 }
+
+nsIfFlowOutByte OBJECT-TYPE
+    SYNTAX        Counter32
+    MAX-ACCESS    read-only
+    STATUS        current
+    DESCRIPTION
+        "Outgoing byte number sending through this interface"
+    ::= { nsIfFlowEntry 5 }
+
+nsIfFlowOutPacket OBJECT-TYPE
+    SYNTAX        Counter32
+    MAX-ACCESS    read-only
+    STATUS        current
+    DESCRIPTION
+        "Outgoing packet number sending through this interface"
+    ::= { nsIfFlowEntry 6 }
+
+nsIfFlowInVpn OBJECT-TYPE
+    SYNTAX        Counter32
+    MAX-ACCESS    read-only
+    STATUS        current
+    DESCRIPTION
+        "VPN packet go through this interface"
+    ::= { nsIfFlowEntry 7 }
+
+nsIfInVlan OBJECT-TYPE
+    SYNTAX        Counter32
+    MAX-ACCESS    read-only
+    STATUS        current
+    DESCRIPTION
+        "Incoming vlan packet"
+    ::= { nsIfFlowEntry 8 }
+
+nsIfOutVlan OBJECT-TYPE
+    SYNTAX        Counter32
+    MAX-ACCESS    read-only
+    STATUS        current
+    DESCRIPTION
+        "Outgoing vlan packet"
+    ::= { nsIfFlowEntry 9 }
+
+nsIfFlowIfInfo OBJECT-TYPE
+    SYNTAX        Integer32 (0..2147483647)
+    MAX-ACCESS    read-only
+    STATUS        current
+    DESCRIPTION
+        "Internal id assigned to this interface. Stays persistent across resets."
+    ::= { nsIfFlowEntry 10 }
+
+nsIfMonTable OBJECT-TYPE
+    SYNTAX        SEQUENCE OF NsIfMonEntry
+    MAX-ACCESS    not-accessible
+    STATUS        current
+    DESCRIPTION
+        "This table collects some of dropped packet counters of
+         interface"
+    ::= { netscreenInterface 4 }
+
+nsIfMonEntry OBJECT-TYPE
+    SYNTAX        NsIfMonEntry
+    MAX-ACCESS    not-accessible
+    STATUS        current
+    DESCRIPTION
+        "An entry containing tunnel information"
+    INDEX
+        { nsIfMonIfIdx }
+    ::= { nsIfMonTable 1 }
+
+nsIfMonIfIdx OBJECT-TYPE
+    SYNTAX        Integer32 (0..2147483647)
+    MAX-ACCESS    read-only
+    STATUS        current
+    DESCRIPTION
+        "Unique interface id, also used as table index."
+    ::= { nsIfMonEntry 1 }
+
+nsIfMonVsys OBJECT-TYPE
+    SYNTAX        Integer32
+    MAX-ACCESS    read-only
+    STATUS        current
+    DESCRIPTION
+        "According NetScreen's concepts, each interface belongs to one
+         virtual system. This attribute displays the virtual system name
+         an interface belongs to."
+    ::= { nsIfMonEntry 2 }
+
+nsIfMonPlyDeny OBJECT-TYPE
+    SYNTAX        Counter32
+    MAX-ACCESS    read-only
+    STATUS        current
+    DESCRIPTION
+        "Packet drop since denied by policy."
+    ::= { nsIfMonEntry 3 }
+
+nsIfMonAuthFail OBJECT-TYPE
+    SYNTAX        Counter32
+    MAX-ACCESS    read-only
+    STATUS        current
+    DESCRIPTION
+        "Packet drop due to authentication failed."
+    ::= { nsIfMonEntry 4 }
+
+nsIfMonUrlBlock OBJECT-TYPE
+    SYNTAX        Counter32
+    MAX-ACCESS    read-only
+    STATUS        current
+    DESCRIPTION
+        "Packet drop due to URL blocking."
+    ::= { nsIfMonEntry 5 }
+
+nsIfMonTrMngQueue OBJECT-TYPE
+    SYNTAX        Counter32
+    MAX-ACCESS    read-only
+    STATUS        current
+    DESCRIPTION
+        "packet queue up due to traffic management"
+    ::= { nsIfMonEntry 6 }
+
+nsIfMonTrMngDrop OBJECT-TYPE
+    SYNTAX        Counter32
+    MAX-ACCESS    read-only
+    STATUS        current
+    DESCRIPTION
+        "Packet drop due to traffic management"
+    ::= { nsIfMonEntry 7 }
+
+nsIfMonEncFail OBJECT-TYPE
+    SYNTAX        Counter32
+    MAX-ACCESS    read-only
+    STATUS        current
+    DESCRIPTION
+        "IPSec enc failed due to sa not available, no ipak, etc"
+    ::= { nsIfMonEntry 8 }
+
+nsIfMonNoSa OBJECT-TYPE
+    SYNTAX        Counter32
+    MAX-ACCESS    read-only
+    STATUS        current
+    DESCRIPTION
+        "packet drop due to no sa found for incomig spi"
+    ::= { nsIfMonEntry 9 }
+
+nsIfMonNoSaPly OBJECT-TYPE
+    SYNTAX        Counter32
+    MAX-ACCESS    read-only
+    STATUS        current
+    DESCRIPTION
+        "packet drop due to no policy associated with found sa"
+    ::= { nsIfMonEntry 10 }
+
+nsIfMonSaInactive OBJECT-TYPE
+    SYNTAX        Counter32
+    MAX-ACCESS    read-only
+    STATUS        current
+    DESCRIPTION
+        "packet drop due to sa not active"
+    ::= { nsIfMonEntry 11 }
+
+nsIfMonSaPolicyDeny OBJECT-TYPE
+    SYNTAX        Counter32
+    MAX-ACCESS    read-only
+    STATUS        current
+    DESCRIPTION
+        "packet drop due to denial by sa policy"
+    ::= { nsIfMonEntry 12 }
+
+nsIfMonIfInfo OBJECT-TYPE
+    SYNTAX        Integer32 (0..2147483647)
+    MAX-ACCESS    read-only
+    STATUS        current
+    DESCRIPTION
+        "Internal id assigned to this interface. Stays persistent across resets."
+    ::= { nsIfMonEntry 13 }
+
+END
+
+