Help us improve your experience.

Let us know what you think.

Do you have time for a two-minute survey?

Next Gen Services SNMP MIBs and Traps

 

This topic describes the SNMP MIBS and traps for Next Gen Services with the MX-SPC3 services. As a reference, it also compares MX-SPC3 services card MIBS and traps with the MPC services card.

Service-Set Related SNMP MIBs

Table 1, Table 2, and Table 3 describe the MIB objects in the service-set related SNMP MIB tables supported in jnxSPMIB. This MIB is supported for both MS-MPC services cards and MX-SPC3 services cards with the exception of the following:

  • The MX-SPC3 services card supports counters, such as memory usage and cpu usage, at the per service-set and per pic level, whereas MS-MPC services cards support these counters at the service level, for example, stateful firewall (SFW) and NAT).

    The MX-SPC3 card uses the jnxSpSvcSetTable MIB for these counters and the MS-MPC services card uses the jnxSpSvcSetSvcTypeTable MIB for these counters.

  • InTable 1 the jnxSpSvcSetTable, the object jnxSpSvcSetSvcType field will show a value of “ALL” since no per service-type specific counters are supported.

Table 1: Service-Set SNMP MIB Table (jnxSpSvcSetTable)

MIB Object

jnxSpSvcSet Entry Number

Description

jnxSpSvcSetIfName

jnxSpSvcSetEntry 4

The name of the interface identifying the AS PIC. If more than one interface is associated with the AS PIC, the name associated with the lower layer interface is used.

jnxSpSvcSetIfIndex

jnxSpSvcSetEntry 5

An index number associated with the interface name.

jnxSpSvcSetMemoryUsage

jnxSpSvcSetEntry 6

Amount of memory used by the service set, in bytes.

jnxSpSvcSetCpuUtil

jnxSpSvcSetEntry 7

Amount of CPU processing used by the service set, expressed as a percentage of total CPU usage.

J Series Services Routers do not have a dedicated CPU for services. CPU usage on these routers appears as 0.

jnxSpSvcSetSvcStyle

jnxSpSvcSetEntry 8

Type of service for the service set. Service types include:

  • Unknown—The service type is not known.

  • Interface-service—The service is interface based.

  • Next-hop-service—The service is next-hop based.

jnxSpSvcSetMemLimitPktDrops

jnxSpSvcSetEntry 9

Number of packets dropped because the service set exceeded its memory limits (operating in the Red zone).

jnxSpSvcSetCpuLimitPktDrops

jnxSpSvcSetEntry 10

Number of packets dropped because the service set exceeded the average CPU limits (when total CPU usage exceeds 85 percent).

jnxSpSvcSetFlowLimitPktDrops

jnxSpSvcSetEntry 11

Number of packets dropped because the service set exceeded the flow limit.

jnxSpSvcSetMemoryUsage64

Amount of memory used by the service set, in bytes.

jnxSpSvcSetMemLimitPktDrops64

Number of packets dropped because the service set exceeded its memory limits (operating in the Red zone).

jnxSpSvcSetCpuLimitPktDrops64

Number of packets dropped because the service set exceeded the average CPU limits (when total CPU usage exceeds 85 percent).

jnxSpSvcSetFlowLimitPktDrops64

Number of packets dropped because the service set exceeded the flow limit.

jnxSpSvcSetSessCount

Number of valid sessions in the service-set.

Table 2: Service-Set Service Type SNMP MIB Table (jnxSpSvcSetSvcTypeTable)

MIB Object

(jnxSpSvcSetSvcType Entry Number

Description

jnxSpSvcSetSvcTypeIndex

jnxSpSvcSetSvcTypeEntry 1

An integer used to identify the service type.

jnxSpSvcSetSvcTypeIfName

jnxSpSvcSetSvcTypeEntry 2

The name of the interface identifying the AS PIC. If more than one interface is associated with the AS PIC, the name associated with the lower layer interface is used.

jnxSpSvcSetSvcTypeName

jnxSpSvcSetSvcTypeEntry 3

The name of the service type.

jnxSpSvcSetSvcTypeSvcSets

jnxSpSvcSetSvcTypeEntry 4

Number of service sets configured on the AS PIC that use this service type.

jnxSpSvcSetSvcTypeMemoryUsage

jnxSpSvcSetSvcTypeEntry 5

Amount of memory used by this service type, expressed in bytes.

jnxSpSvcSetSvcTypePctMemoryUsage

jnxSpSvcSetSvcTypeEntry 6

Amount of memory used by this service type, expressed as a percentage of total memory.

jnxSpSvcSetSvcTypeCpuUtil

jnxSpSvcSetSvcTypeEntry 7

Amount of CPU processing used by the service set, expressed as a percentage of total CPU usage.

J Series Services Routers do not have a dedicated CPU for services. CPU usage on these routers appears as 0.

Table 3: Service-Set Interface SNMP MIB Table (jnxSpSvcSetIfTable)

MIB Object

jnxSpSvcSetIf Entry Number

Description

jnxSpSvcSetIfTableName

jnxSpSvcSetIfEntry 1

The name of the interface used to identify the AS PIC. If more than one interface is associated with the AS PIC, the name associated with the lower layer interface is used.

jnxSpSvcSetIfsvcSets

jnxSpSvcSetIfEntry 2

The number of service sets configured on the AS PIC.

jnxSpSvcSetIfMemoryUsage

jnxSpSvcSetIfEntry 3

Amount of memory used by the AS PIC, expressed in bytes.

jnxSpSvcSetIfPctMemoryUsage

jnxSpSvcSetIfEntry 4

Amount of memory used by the AS PIC, expressed as a percentage of total memory.

jnxSpSvcSetIfPolMemoryUsage

jnxSpSvcSetIfEntry 5

Amount of policy memory used by the AS PIC, expressed in bytes.

jnxSpSvcSetIfPctPolMemoryUsage

jnxSpSvcSetIfEntry 6

Amount of policy memory used by the AS PIC, expressed as a percentage of the total.

jnxSpSvcSetIfMemoryZone

jnxSpSvcSetIfEntry 7

The memory usage zone currently occupied by the AS PIC. The definitions of each zone are:

  • Green—All new flows are allowed.

  • Yellow—Unused memory is reclaimed. All new flows are allowed.

  • Orange—New flows are allowed only for service sets that use less than their equal share of memory.

  • Red—No new flows are allowed.

jnxSpSvcSetIfCpuUtil

jnxSpSvcSetIfEntry 8

Amount of CPU processing used by the AS PIC, expressed as a percentage of total CPU usage.

J Series Services Routers do not have a dedicated CPU for services. CPU usage on these routers appears as 0.

jnxSpSvcSetIfMemoryUsage64

Amount of policy memory used by the AS PIC, expressed in bytes.

jnxSpSvcSetIfPolMemoryUsage64

Amount of policy memory used by the AS PIC, expressed as a percentage of the total.

jnxSpSvcSetIfNumTotalSessActive

Total number of active sessions in the PIC.

jnxSpSvcSetIfPeakTotalSessActive

Number of active sessions in the PIC at any time.

jnxSpSvcSetIfNumCreatedSessPerSec

Number of created sessions per second in the PIC

jnxSpSvcSetIfNumDeletedSessPerSec

Number of deleted sessions per second in the PIC

jnxSpSvcSetIfNumTotalTcpSessActive

jnxSpSvcSetIfNumTotalUdpSessActive

jnxSpSvcSetIfNumTotalOtherSessActive

Number of active sessions (TCP, UDP and other )in the PIC

jnxSpSvcSetIfPeakTotalTcpSessActive

jnxSpSvcSetIfPeakTotalUdpSessActive

jnxSpSvcSetIfPeakTotalOtherSessActive

Number of active sessions (TCP, UDP, and others) in the PIC

jnxSpSvcSetIfPeakCreatedSessPerSec

Number of created sessions per sec in the PIC

jnxSpSvcSetIfPeakDeletedSessPerSec

Number of deleted sessions per sec in the PIC

jnxSpSvcSetIfNumTotalTcpIpv4SessActive

jnxSpSvcSetIfNumTotalTcpIpv6SessActive

jnxSpSvcSetIfNumTotalUdpIpv4SessActive

jnxSpSvcSetIfNumTotalUdpIpv6SessActive

jnxSpSvcSetIfNumTotalOtherIpv4SessActive

jnxSpSvcSetIfNumTotalOtherIpv6SessActive

Total number of active sessions (TCP, UDP and other) for IPv4 and IPv6 in the PIC

jnxSpSvcSetIfNumTotalTcpGatedSessActive

jnxSpSvcSetIfNumTotalUdpGatedSessActive

Number of TCP and UDP gated sessions in the PIC

jnxSpSvcSetIfNumTotalTcpRegSessActive

jnxSpSvcSetIfNumTotalUdpRegSessActive

Number of TCP and UDP regular sessions in the PIC

jnxSpSvcSetIfNumTotalTcpTunSessActive

jnxSpSvcSetIfNumTotalUdpTunSessActive

Number of TCP and UDP tunneled sessions in the PIC

jnxSpSvcSetIfSessPktRecv

Number of packets received in session handling

jnxSpSvcSetIfSessPktXmit

Number of packets transmitted as a part of session handling

jnxSpSvcSetIfSessSlowPathDiscard

Number of packets discarded in slow path

jnxSpSvcSetIfSessSlowPathForward

Number of packets forwarded in slow path

jnxSpSvcSetIfMspNumCreatedSubsPerSec

Number of subscribers created per sec

jnxSpSvcSetIfMspNumDeletedSubsPerSec

Number of Subscribers deleted per sec

jnxSpSvcSetIfMspNumTotalSubsActive

Number of active subscribers

jnxSpSvcSetIfMspPeakCreatedSubsPerSec

Peak number of created subscribers per sec in the PIC

jnxSpSvcSetIfMspPeakDeletedSubsPerSec

Peak number of deleted subscribers per sec in the PIC

jnxSpSvcSetIfMspPeakTotalSubsActive

Peak number of total active subscribers in the PIC

Summary Mapping of MX-SPC3 CLI Services Operational Commands to SNMP MIBs

Table 4 summarizes the mapping of the MX-SPC3 services card operations commands to the respective SNMP MIB.

Table 4: Summary Mapping of MX-SPC3 CLI Services Set Command to SNMP MIBs

CLI Command

Variable Name

MIB Tables

MIB Object

show services service-sets cpu-usage

cpu-utilization-percent

jnxSpSvcSetTable

jnxSpSvcSetCpuUtil

show services service-sets memory-usage

bytes-used

jnxSpSvcSetMemoryUsage64

show services service-sets memory-usage zone    

mem-zone

jnxSpSvcSetIfMemoryZone

show services service-sets statistics packet-drops      

cpulimit-drops

jnxSpSvcSetCpuLimitPktDrops64

flowlimit-drops

jnxSpSvcSetFlowLimitPktDrops64

memlimit-drops

jnxSpSvcSetMemLimitPktDrops64

show services service-sets summary      

service-set-bytes-used

jnxSpSvcSetIfTable

jnxSpSvcSetIfMemoryUsage64

service-set-cpu-utilization

jnxSpSvcSetIfCpuUtil

service-set-percent-bytes-used

jnxSpSvcSetIfPctMemoryUsage

service-set-percent-policy-bytes-used

jnxSpSvcSetIfPctPolMemoryUsage

service-set-policy-bytes-used

jnxSpSvcSetIfPolMemoryUsage64

service-sets-configured

jnxSpSvcSetIfSvcSets

show services sessions count 

sess-count

jnxSpSvcSetTable

jnxSpSvcSetSessCount

show services sessions analysis 

num-total-session-active

jnxSpSvcSetIfTable

jnxSpSvcSetIfNumTotalSessActive

peak-total-session-active

jnxSpSvcSetIfPeakTotalSessActive

num-created-session-per-sec

jnxSpSvcSetIfNumCreatedSessPerSec

num-deleted-session-per-sec

jnxSpSvcSetIfNumDeletedSessPerSec

num-total-tcp-session-active

jnxSpSvcSetIfNumTotalTcpSessActive

num-total-udp-session-active

jnxSpSvcSetIfNumTotalUdpSessActive

peak-total-tcp-session-active

jnxSpSvcSetIfPeakTotalTcpSessActive

peak-total-udp-session-active

jnxSpSvcSetIfPeakTotalUdpSessActive

num-total-other-session-active

jnxSpSvcSetIfNumTotalOtherSessActive

peak-created-session-per-second

jnxSpSvcSetIfPeakCreatedSessPerSec

peak-deleted-session-per-second

jnxSpSvcSetIfPeakDeletedSessPerSec

peak-total-other-session-active

jnxSpSvcSetIfPeakTotalOtherSessActive

num-total-tcp-ipv4-session-active

jnxSpSvcSetIfNumTotalTcpIpv4SessActive

num-total-tcp-ipv6-session-active

jnxSpSvcSetIfNumTotalTcpIpv6SessActive

num-total-udp-ipv4-session-active

jnxSpSvcSetIfNumTotalUdpIpv4SessActive

num-total-udp-ipv6-session-active

jnxSpSvcSetIfNumTotalUdpIpv6SessActive

num-total-tcp-gated-session-active

jnxSpSvcSetIfNumTotalTcpGatedSessActive

num-total-udp-gated-session-active

jnxSpSvcSetIfNumTotalUdpGatedSessActive

num-total-other-ipv4-session-active

jnxSpSvcSetIfNumTotalOtherIpv4SessActive

num-total-other-ipv6-session-active

jnxSpSvcSetIfNumTotalOtherIpv6SessActive

num-total-tcp-regular-session-active

jnxSpSvcSetIfNumTotalTcpRegSessActive

num-total-udp-regular-session-active

jnxSpSvcSetIfTable

jnxSpSvcSetIfNumTotalUdpRegSessActive

num-total-tcp-tunneled-session-active

jnxSpSvcSetIfNumTotalTcpTunSessActive

num-total-udp-tunneled-session-active

jnxSpSvcSetIfNumTotalUdpTunSessActive

session-pkts-received

jnxSpSvcSetIfSessPktRecv

session-pkts-transmitted

jnxSpSvcSetIfSessPktXmit

session-slow-path-discard

jnxSpSvcSetIfSessSlowPathDiscard

session-slow-path-forward

jnxSpSvcSetIfSessSlowPathForward

show services subscriber analysis      

msp-num-created-subs-per-sec

jnxSpSvcSetIfMspNumCreatedSubsPerSec

msp-num-deleted-subs-per-sec

jnxSpSvcSetIfMspNumDeletedSubsPerSec

msp-num-total-subs-active

jnxSpSvcSetIfMspNumTotalSubsActive

msp-peak-created-subs-per-second

jnxSpSvcSetIfMspPeakCreatedSubsPerSec

msp-peak-deleted-subs-per-second

jnxSpSvcSetIfMspPeakDeletedSubsPerSec

msp-peak-total-subs-active

jnxSpSvcSetIfMspPeakTotalSubsActive

NAT SNMP MIBs

This section describes the jnxSrcNatStatsTable MIB objects.

Table 5 describes the source NAT SNMP MIB objects for the MS-MPC services card. This table exposes the source NAT translation attributes of the translated addresses.

Table 6 describes the source NAT SNMP MIB objects for the MX-SPC3 services card. This table contains information on source IP address translation only.

Table 5: MS-MPC Services Card Source NAT SNMP MIB Table (jnxSrcNatStatsTable)

jnxSrcNatStatsTable

MIB Object

Description

 

jnxNatSrcPoolName

The name of dynamic source IP address pool

 

jnxNatSrcXlatedAddrType

V4 or V6. The type of dynamic source IP address allocated from the address pool used in the NAT translation

 

jnxNatSrcPoolType

The source port pool type indicates whether the address translation is done with port or without the port, or if it is a static translation. Ex napt-44, nat64 etc

 

jnxNatSrcNumPortAvail

The number of ports available with this pool

 

jnxNatSrcNumPortInuse

The number of ports in use for this NAT address entry

 

jnxNatSrcNumAddressAvail

The total number of addresses available in this pool

 

jnxNatSrcNumAddressInUse

The number of addresses in use from this pool

 

jnxNatSrcNumSessions

The number of sessions are in use based on this NAT address entry

jnxNatRuleTable

 

This table monitors NAT rule hits

 

jnxNatRuleName

NAT rule name

 

jnxNatRuleType

NAT types: Static Source, Static Destination, Dynamic Source and NAPT. Ex: napt44 etc

 

jnxNatRuleTransHits

The number of hits on this NAT rule

jnxNatPoolTable

 

This table monitors NAT pool hits

 

jnxNatPoolName

NAT Pool name

 

jnxNatPoolType

NAT types: Static Source, Static Destination, Dynamic Source and NAPT. Ex: napt44 etc

 

jnxNatPoolTransHits

The number of hits on this NAT Pool

Table 6: MX-SPC3 Source NAT SNMP MIB Table (jnxNatObjects)

jnxJsSrcNatStatsTable

MIB Object

Description

 

jnxJsNatSrcPoolName

The name of dynamic source IP address pool

 

jnxJsNatSrcXlatedAddrType

New MIB. The type of dynamic source IP address allocated from the address pool used in the NAT translation. Value is v4 or v6

 

jnxJsNatSrcPoolType

withPAT or withoutPAT or static

 

jnxJsNatSrcNumPortAvail

New MIB. The number of ports available with this pool

 

jnxJsNatSrcNumPortInuse

The number of ports in use for this NAT address entry

 

jnxJsNatSrcNumSessions

The number of sessions are in use based on this NAT address entry

 

jnxJsNatSrcNumAddressAvail

New MIB. The total number of addresses available in this pool

 

jnxJsNatSrcNumAddressInuse

New MIB. The number of addresses in use from this pool

jnxJsNatRuleTable

 

This table monitors NAT rule hits

 

jnxJsNatRuleName

NAT rule name

 

jnxJsNatRuleType

NAT types: Source, Destination and Static

 

jnxJsNatRuleTransHits

The number of hits on this NAT rule. Status is deprecated. New - jnxJsNatRuleHits

 

jnxJsNatRuleHits

The number of hits on this NAT rule,

 

jnxJsNatRuleNumOfSessions

The number of sessions on this NAT rule

 

jnxJsNatTransType

New MIB. Details below

jnxJsNatPoolTable

 

This table monitors NAT pool hits

 

jnxJsNatPoolName

NAT Pool name

 

jnxJsNatPoolType

NAT types: Source, Destination and Static

 

jnxJsNatPoolTransHits

The number of hits on this NAT pool. Status is deprecated. New - jnxJsNatPoolHits

 

jnxJsNatPoolHits

The number of hits on this NAT pool to deprecate jnxJsNatRuleTransHits.

SNMP Traps

Table 7 describes the SNMP traps supported by both the MS-MPC services card and the MX-SPC3 services card.

Table 7: SNMP Traps

Trap

Description

SPD_TRAP_OIDS(jnxSpSvcSetZoneEntered)

jnxSpSvcSetZoneEntered — Indicates that an AS PIC has entered a more severe memory usage zone from a less severe memory usage zone. The zone entered is identified by JnxSpSvcSetIfMemoryZone

SPD_TRAP_OIDS(jnxSpSvcSetZoneExited)

jnxSpSvcSetZoneExited — Indicates that an AS PIC has exited a more severe memory usage zone to a less severe memory usage zone. The zone entered is identified by JnxSpSvcSetIfMemoryZone.

SPD_TRAP_OIDS(jnxSpSvcSetCpuExceeded)

jnxSpSvcSetCpuExceeded — Indicates that an AS PIC has over 85% CPU usage.

SPD_TRAP_OIDS(jnxSpSvcSetCpuOk)

jnxSpSvcSetCpuOk — Indicates that an AS PIC has returned to less than 85%CPU usage.

SPD_TRAP_OIDS(jnxSpSvcSetFlowLimitUtilized)

jnxSpSvcSetFlowLimitUtilized — Indicates a service-set has reached its upper limit of flows threshold of a maximun flows allowed for a service set.

Configuring SNMP Trap Generation

This sections describes how to configure the MS-MPC service card versus the MX-SPC3 services card to generate SNMP traps.

Configuring SNMP Trap for NAT Ports in a Source NAT Pool

If the current usage is above the raise threshold or below the clear threshold, we will generate a SNMP trap.

Configuring SNMP Traps for NAT Ports in a Source NAT Pool on an MS-MPC
Configuring SNMP Traps for NAT Ports in a Source NAT Pool on an MX-SPC3

Configuring SNMP Trap for Sessions

This is infra trap which configures SNMP flow thresholds for all flows for a service set or flows for all NAT pools configured for a service set.

Configuring a Sessions SNMP Trap on an MS-MPC
Configuring a Sessions SNMP Trap on an MX-SPC3
Example-Configuration for MX-SPC3 NAT for Three SNMP MIB Tables

Example Configuration

user@host> show services | display set

show snmp mib walk jnxJsSrcNatStatsTable

user@host>show snmp mib walk jnxJsSrcNatStatsTable

show snmp mib walk jnxJsNatPoolTable

user@host>show snmp mib walk jnxJsNatPoolTable

show snmp mib walk jnxJsNatRuleTable

user@host>show snmp mib walk jnxJsNatRuleTable

SNMP Trace Logs for Traps

This section provides some example trace logs for these SNMP traps.

CPU-Utilization Trap

Memoryzone Trap

Session Limit Trap