Linux, FreeBSD, Juniper, Cisco / Network security articles and troubleshooting guides

FAQ
It is currently Mon Oct 16, 2017 7:41 pm


Author Message
mandrei99
Post  Post subject: How to monitor CPU usage and flow sessions via SNMP - Juniper SRX Branch - 12.1X44  |  Posted: Tue Jun 18, 2013 6:13 pm

Joined: Tue Aug 04, 2009 9:16 am
Posts: 245

Offline
 

How to monitor CPU usage and flow sessions via SNMP - Juniper SRX Branch - 12.1X44

As every operating system, Junos on SRX has special SNMP MIBs for querying SRX information via the SNMP daemon.

More Info about Junos SRX SPU monitoring MIBs can be found on Juniper website:
http://www.juniper.net/techpubs/en_US/junos11.2/information-products/topic-collections/reference-mibs-and-traps/index.html?topic-25307.html and an OID viewer:
http://www.oidview.com/mibs/2636/JUNIPER-SRX5000-SPU-MONITORING-MIB.html

Following is list of SNMP OIDs contained in the "jnxJsSPUMonitoringMIB" SNMP MIB:

Code:
jnxJsSPUMonitoringMIB   1.3.6.1.4.1.2636.3.39.1.12.1
jnxJsSPUMonitoringObjectsTable   1.3.6.1.4.1.2636.3.39.1.12.1.1
jnxJsSPUMonitoringObjectsEntry   1.3.6.1.4.1.2636.3.39.1.12.1.1.1
jnxJsSPUMonitoringIndex   1.3.6.1.4.1.2636.3.39.1.12.1.1.1.1
jnxJsSPUMonitoringNodeIndex   1.3.6.1.4.1.2636.3.39.1.12.1.1.1.10
jnxJsSPUMonitoringNodeDescr   1.3.6.1.4.1.2636.3.39.1.12.1.1.1.11
jnxJsSPUMonitoringFPCIndex   1.3.6.1.4.1.2636.3.39.1.12.1.1.1.2
jnxJsSPUMonitoringSPUIndex   1.3.6.1.4.1.2636.3.39.1.12.1.1.1.3
jnxJsSPUMonitoringCPUUsage   1.3.6.1.4.1.2636.3.39.1.12.1.1.1.4
jnxJsSPUMonitoringMemoryUsage   1.3.6.1.4.1.2636.3.39.1.12.1.1.1.5
jnxJsSPUMonitoringCurrentFlowSession   1.3.6.1.4.1.2636.3.39.1.12.1.1.1.6
jnxJsSPUMonitoringMaxFlowSession   1.3.6.1.4.1.2636.3.39.1.12.1.1.1.7
jnxJsSPUMonitoringCurrentCPSession   1.3.6.1.4.1.2636.3.39.1.12.1.1.1.8
jnxJsSPUMonitoringMaxCPSession   1.3.6.1.4.1.2636.3.39.1.12.1.1.1.9
jnxJsSPUMonitoringCurrentTotalSession   1.3.6.1.4.1.2636.3.39.1.12.1.2
jnxJsSPUMonitoringMaxTotalSession   1.3.6.1.4.1.2636.3.39.1.12.1.3
jnxSPUClusterObjectsTable   1.3.6.1.4.1.2636.3.39.1.12.1.4
jnxSPUClusterObjectsEntry   1.3.6.1.4.1.2636.3.39.1.12.1.4.1
jnxJsClusterMonitoringNodeIndex   1.3.6.1.4.1.2636.3.39.1.12.1.4.1.1
jnxJsClusterMonitoringNodeDescr   1.3.6.1.4.1.2636.3.39.1.12.1.4.1.2
jnxJsNodeCurrentTotalSession   1.3.6.1.4.1.2636.3.39.1.12.1.4.1.3
jnxJsNodeMaxTotalSession   1.3.6.1.4.1.2636.3.39.1.12.1.4.1.4
jnxJsNodeSessionCreationPerSecond   1.3.6.1.4.1.2636.3.39.1.12.1.4.1.5

Assuming SNMP is allowed in security zones and any RE filters in place, below is how to query Branch SRX CPU usage and number of sessions from Junos CLI

How to monitor CPU usage and number of sessions via SNMP

From Junos CLI, one can use the "> show snmp mib walk" operational command as below.
Code:
user@host> show snmp mib walk decimal .1.3.6.1.4.1.2636.3.39.1.12.1.1.1     
jnxJsSPUMonitoringFPCIndex.0 = 0
jnxJsSPUMonitoringSPUIndex.0 = 0
jnxJsSPUMonitoringCPUUsage.0 = 0
jnxJsSPUMonitoringMemoryUsage.0 = 56
jnxJsSPUMonitoringCurrentFlowSession.0 = 58
jnxJsSPUMonitoringMaxFlowSession.0 = 32768
jnxJsSPUMonitoringCurrentCPSession.0 = 0
jnxJsSPUMonitoringMaxCPSession.0 = 0
jnxJsSPUMonitoringNodeIndex.0 = 0
jnxJsSPUMonitoringNodeDescr.0 = single
jnxJsSPUMonitoringFlowSessIPv4.0 = 58
jnxJsSPUMonitoringFlowSessIPv6.0 = 0
jnxJsSPUMonitoringCPSessIPv4.0 = 0
jnxJsSPUMonitoringCPSessIPv6.0 = 0

user@host> show snmp mib walk decimal .1.3.6.1.4.1.2636.3.39.1.12.1.1.1.1 

user@host> show snmp mib walk decimal .1.3.6.1.4.1.2636.3.39.1.12.1.1.1.2   
jnxJsSPUMonitoringFPCIndex.0 = 0

user@host> show snmp mib walk decimal .1.3.6.1.4.1.2636.3.39.1.12.1.1.1.3   
jnxJsSPUMonitoringSPUIndex.0 = 0

user@host> show snmp mib walk decimal .1.3.6.1.4.1.2636.3.39.1.12.1.1.1.4   
jnxJsSPUMonitoringCPUUsage.0 = 0

user@host> show snmp mib walk decimal .1.3.6.1.4.1.2636.3.39.1.12.1.1.1.5   
jnxJsSPUMonitoringMemoryUsage.0 = 56

user@host> show snmp mib walk decimal .1.3.6.1.4.1.2636.3.39.1.12.1.1.1.6   
jnxJsSPUMonitoringCurrentFlowSession.0 = 60

user@host> show snmp mib walk decimal .1.3.6.1.4.1.2636.3.39.1.12.1.1.1.7   
jnxJsSPUMonitoringMaxFlowSession.0 = 32768

user@host> show snmp mib walk decimal .1.3.6.1.4.1.2636.3.39.1.12.1.1.1.8   
jnxJsSPUMonitoringCurrentCPSession.0 = 0

user@host> show snmp mib walk decimal .1.3.6.1.4.1.2636.3.39.1.12.1.1.1.9   
jnxJsSPUMonitoringMaxCPSession.0 = 0

user@host> show snmp mib walk decimal .1.3.6.1.4.1.2636.3.39.1.12.1.1.1.10   
jnxJsSPUMonitoringNodeIndex.0 = 0

user@host> show snmp mib walk decimal .1.3.6.1.4.1.2636.3.39.1.12.1.1.1.11   
jnxJsSPUMonitoringNodeDescr.0 = single

user@host> show snmp mib walk decimal .1.3.6.1.4.1.2636.3.39.1.12.1.1.1.12   
jnxJsSPUMonitoringFlowSessIPv4.0 = 58

user@host> show snmp mib walk decimal .1.3.6.1.4.1.2636.3.39.1.12.1.1.1.13   
jnxJsSPUMonitoringFlowSessIPv6.0 = 0

user@host> show snmp mib walk decimal .1.3.6.1.4.1.2636.3.39.1.12.1.1.1.14   
jnxJsSPUMonitoringCPSessIPv4.0 = 0


Below is how to query Branch Juniper SRX CPU usage and number of session via snmpwalk utility from a Unix host:
Code:
# snmpwalk -v2c -c public 10.10.2.2 .1.3.6.1.4.1.2636.3.39.1.12.1.1.1             
SNMPv2-SMI::enterprises.2636.3.39.1.12.1.1.1.2.0 = Gauge32: 0
SNMPv2-SMI::enterprises.2636.3.39.1.12.1.1.1.3.0 = Gauge32: 0
SNMPv2-SMI::enterprises.2636.3.39.1.12.1.1.1.4.0 = Gauge32: 0
SNMPv2-SMI::enterprises.2636.3.39.1.12.1.1.1.5.0 = Gauge32: 56
SNMPv2-SMI::enterprises.2636.3.39.1.12.1.1.1.6.0 = Gauge32: 65
SNMPv2-SMI::enterprises.2636.3.39.1.12.1.1.1.7.0 = Gauge32: 32768
SNMPv2-SMI::enterprises.2636.3.39.1.12.1.1.1.8.0 = Gauge32: 0
SNMPv2-SMI::enterprises.2636.3.39.1.12.1.1.1.9.0 = Gauge32: 0
SNMPv2-SMI::enterprises.2636.3.39.1.12.1.1.1.10.0 = Gauge32: 0
SNMPv2-SMI::enterprises.2636.3.39.1.12.1.1.1.11.0 = STRING: "single"
SNMPv2-SMI::enterprises.2636.3.39.1.12.1.1.1.12.0 = Gauge32: 66
SNMPv2-SMI::enterprises.2636.3.39.1.12.1.1.1.13.0 = Gauge32: 0
SNMPv2-SMI::enterprises.2636.3.39.1.12.1.1.1.14.0 = Gauge32: 0
SNMPv2-SMI::enterprises.2636.3.39.1.12.1.1.1.15.0 = Gauge32: 0





Top
Display posts from previous:  Sort by  
E-mail friendPrint view

Topics related to - "How to monitor CPU usage and flow sessions via SNMP - Juniper SRX Branch - 12.1X44"
 Topics   Author   Replies   Views   Last post 
There are no new unread posts for this topic. SRX: How to list firewall flow sessions table

mandrei99

0

5910

Tue Mar 10, 2015 6:08 pm

mandrei99 View the latest post

There are no new unread posts for this topic. Juniper - SRX: SNMP monitoring of interface input output bytes per second

mandrei99

0

6879

Wed Oct 16, 2013 9:45 am

mandrei99 View the latest post

There are no new unread posts for this topic. Attachment(s) Juniper SRX Branch - Blocking HTTPS websites using the AppFW (application-firewall) feature - Part 1

mandrei99

0

7740

Sat Jul 27, 2013 3:48 pm

mandrei99 View the latest post

There are no new unread posts for this topic. Juniper SRX Branch - Blocking HTTPS websites using the AppFW (application-firewall) feature - Part 2

mandrei99

0

3468

Sat Jul 27, 2013 3:59 pm

mandrei99 View the latest post

There are no new unread posts for this topic. Juniper SRX IPv6 forwarding - flow mode or packet mode.

mandrei99

0

1938

Thu Jan 15, 2015 6:13 am

mandrei99 View the latest post

There are no new unread posts for this topic. Juniper SRX Packet mode - how to switch between flow mode and packet mode

mandrei99

0

5821

Thu Jan 15, 2015 6:36 am

mandrei99 View the latest post

There are no new unread posts for this topic. How to recover a branch SRX root password \w protected console (insecure)

mandrei99

0

1944

Tue Jan 27, 2015 6:37 pm

mandrei99 View the latest post

There are no new unread posts for this topic. Juniper SRX - How to collect RSI (Request Support Information) to provide it to Juniper TAC

mandrei99

0

13832

Fri Jul 12, 2013 9:46 am

mandrei99 View the latest post

There are no new unread posts for this topic. Juniper SRX: How to access/vty on the PFE from CLI

mandrei99

0

3486

Mon Jan 26, 2015 6:39 am

mandrei99 View the latest post

There are no new unread posts for this topic. Juniper SRX cluster - How the hostname is configured

mandrei99

0

2879

Sat Jan 31, 2015 7:04 pm

mandrei99 View the latest post

 

Who is online
Users browsing this forum: No registered users and 0 guests
You can post new topics in this forum
You can reply to topics in this forum
You cannot edit your posts in this forum
You cannot delete your posts in this forum
You cannot post attachments in this forum
Jump to:  
News News Site map Site map SitemapIndex SitemapIndex RSS Feed RSS Feed Channel list Channel list


Delete all board cookies | The team | All times are UTC - 5 hours [ DST ]



phpBB SEO