Juniper SECURITY THREAT RESPONSE MANAGER 2008.2 - SNMP AGENT GUIDE REV... User manual

Juniper Networks, Inc.
1194 North Mathilda Avenue
Sunnyvale, CA 94089
USA
408-745-2000
www.juniper.net
Part Number: 530-025621-01, Revision 1
Security Threat Response Manager
SNMP Agent Guide
Release 2008.2

2
Copyright Notice
Copyright © 2008 Juniper Networks, Inc. All rights reserved. Juniper Networks and the Juniper Networks logo are registered trademarks of Juniper
Networks Inc. in the United States and other countries. All other trademarks, service marks, registered trademarks, or registered service marks in this
document are the property of Juniper Networks or their respective owners. All specifications are subject to change without notice. Juniper Networks
assumes no responsibility for any inaccuracies in this document or for any obligation to update information in this document. Juniper Networks reserves
the right to change, modify, transfer, or otherwise revise this publication without notice.
FCC Statement
The following information is for FCC compliance of Class A devices: This equipment has been tested and found to comply with the limits for a Class A
digital device, pursuant to part 15 of the FCC rules. These limits are designed to provide reasonable protection against harmful interference when the
equipment is operated in a commercial environment. The equipment generates, uses, and can radiate radio-frequency energy and, if not installed and
used in accordance with the instruction manual, may cause harmful interference to radio communications. Operation of this equipment in a residential
area is likely to cause harmful interference, in which case users will be required to correct the interference at their own expense. The following
information is for FCC compliance of Class B devices: The equipment described in this manual generates and may radiate radio-frequency energy. If it
is not installed in accordance with NetScreen’s installation instructions, it may cause interferencewith radio and television reception. This equipment has
been tested and found to comply with the limits for a Class B digital device in accordance with the specifications in part 15 of the FCC rules. These
specifications are designed to provide reasonable protection against such interference in a residential installation. However, there is no guarantee that
interference will not occur in a particular installation. If this equipment does cause harmful interference to radio or television reception, which can be
determined by turning the equipment off and on, the user is encouraged to try to correct the interference by one or more of the following measures:
Reorient or relocate the receiving antenna. Increase the separation between the equipment and receiver. Consult the dealer or an experienced radio/TV
technician for help. Connect the equipment to an outlet on a circuit different from that to which the receiver is connected.
Caution: Changes or modifications to this product could void the user's warranty and authority to operate this device.
Disclaimer
THE SOFTWARE LICENSE AND LIMITED WARRANTY FOR THE ACCOMPANYING PRODUCT ARE SET FORTH IN THE INFORMATION PACKET
THAT SHIPPED WITH THE PRODUCT AND ARE INCORPORATED HEREIN BY THIS REFERENCE. IF YOU ARE UNABLE TO LOCATE THE
SOFTWARE LICENSE OR LIMITED WARRANTY, CONTACT YOUR JUNIPER NETWORKS REPRESENTATIVE FOR A COPY.
STRM SNMP Agent Guide
Release 2008.2
Copyright © 2008, Juniper Networks, Inc.
All rights reserved. Printed in USA.
Revision History
June 2008—Revision 1
The information in this document is current as of the date listed in the revision history.

CONTENTS
ABOUT THIS GUIDE
Conventions 3
Technical Documentation 3
Documentation Feedback 3
Requesting Support 4
1ABOUT THE EMBEDDED SNMP AGENT
About the SNMP Agent 5
Accessing the SNMP Agent 6
2USING THE SNMP-LINUX-MIB
Processor Details 7
Disk Space Details 8
Mount Details 8
System Performance Details 9
Processes Table Details 10
Processor Performance Details 10
Page Details 11
Service Details 11
Boot Log Details 12
Cron Log Details 13
Secure Log Details 13
IDE Details 14
Module Details 14
PCI Details 15
SCSI Details 16
Slab Details 16
3USING THE RFC1213-MIB
System Details 19
Interfaces 21
Address Translation 23
IP Details 23
System Details 26
IP Address Table Details 27
IP Route Table Details 28

IP Net to Media Table Details 30
ICMP Table Details 31
TCP Details 33
TCP Connection Details 35
UDP Details 36
UDP Table Details 36
SNMP Details 37
4USING THE HOST-RESOURCES-MIB
System Details 41
Storage Details 42
Device Details 43
Processor Table Details 45
Network Table Details 45
Printer Table Details 45
Disk Storage Details 46
Partition Details 47
File System Details 48
Software Run Details 49
Software Run Performance Details 50
HR Software Installed Table Details 51
ASNMP OVERVIEW
About SNMP 53
What Is an Agent? 53
Who Is a Manager? 54
Manager and Agent Relationship 54
What is a MIB (Management Information Base)? 55
What Are MIB Groups? 56
MIB Data types Available 57
MIB Constructs Available 60
Supported Textual Conventions 61
Nodes 62
Object Identifiers 62
Relative and Absolute Object Identifiers 62
Specifying Object Identifiers Symbolically 62
Object Identifier with Instance Indexes 63
Scalar and Tabular Objects 63
How an Agent Works 64
Traps 64
Specifying SNMP Variables in GET Requests 65

STRM SNMP Agent Guide
ABOUT THIS GUIDE
The STRM SNMP Agent Guide provides you with information on using the
embedded SNMP Agent and viewing MIB information.
Conventions Table 1 lists conventions that are used throughout this guide.
Technical
Documentation You can access technical documentation, technical notes, and release notes
directly from the Juniper networks Support Web site at
http://www.juniper.net/support/.
Documentation
Feedback We encourage you to provide feedback, comments, and suggestions so that we
can improve the documentation. Send your comments to
[e-mail], or fill out the documentation feedback form at
http://www.juniper.net/techpubs/docbug/docbugreport.html. If you are using e-mail, be
sure to include the following information with your comments:
•Document name
•Document part number
•Page number
•Software release version
Table 1 Icons
Icon Type Description
Information note Information that describes important features or
instructions.
Caution Information that alerts you to potential loss of
data or potential damage to an application,
system, device, or network.
Warning Information that alerts you to potential personal
injury.

STRM SNMP Agent Guide
4ABOUT THIS GUIDE
Requesting
Support • Open a support case using the Case Management link at
http://www.juniper.net/support/ or call 1-888-314-JTAC (from the United States,
Canada, or Mexico) or 1-408-745-9500 (from elsewhere).

STRM SNMP Agent
1ABOUT THE EMBEDDED SNMP
AGENT
The STRM Embedded SNMP Agent is a service that runs on STRM appliances to
monitor system performance and usage metrics such as CPU utilization, memory
usage, disk space usage, and network interface statistics. The SNMP Agent
allows STRM to monitor system health and enables integration with other existing
network management products, such as, HP Openview or IBM Tivoli for system
health monitoring. This chapter provides information regarding the Embedded
SNMP Agent including:
•About the SNMP Agent
•Accessing the SNMP Agent
About the SNMP
Agent The SNMP Agent provides real-time information on the following Management
Information Bases (MIBs):
•SNMP-LINUX-MIB. For more information, see Chapter 2 Using the
SNMP-Linux-MIB.
•RFC1213-MIB. For more information, see Chapter 3 Using the RFC1213-MIB.
•HOST-RESOURCES-MIB. For more information, see Chapter 4 Using the
Host-Resources-MIB.
These MIBs enable SNMP manageability for your Linux systems. The figure below
the architecture for the SNMP Agent.

STRM SNMP Agent
6ABOUT THE EMBEDDED SNMP AGENT
The SNMP Agent gathers all the information from your Linux system pertaining to
SNMP-LINUX-MIB, HOST-RESOURCES-MIB, and RFC-1213-MIB and exposes
that information using the STRM interface and SNMP managers.
Note: For information on configuring SNMP Agent ports, see the Managing STRM
chapter in the STRM Administration Guide.
Accessing the
SNMP Agent To access the embedded SNMP Agent:
Step 1 In the Administration Console, click the System Configuration tab.
The System Configuration panel appears.
Step 2 Click the System Management icon.
The System Management window appears.
Step 3 In the View Agent column, click View Agent for the SNMP agent you wish to
access.
Web
Console
SNMP
Manager
SNMP Agent for Linux
System Details
Process Details
Details relating to
HOST-RESOURCES-MIB,
RFC-1213-MIB,
and SNMP-LINUX-MIB
Linux

STRM SNMP Agent
2USING THE SNMP-LINUX-MIB
The SNMP-Linux-MIB is a pre-defined MIB that retrieves information from your
system. This MIB retrieves the following information:
•Processor Details
•Disk Space Details
•Mount Details
•System Performance Details
•Service Details
•Boot Log Details
•Cron Log Details
•Secure Log Details
•IDE Details
•Module Details
•PCI Details
•SCSI Details
•Slab Details
Processor Details The process details includes:
For example, sample output may include:
Table 2-1 Processor Details
S.No Processor Details
1. Processor Vendor Name
2. Processor Model Name
3. Processor Speed in Mega Hertz
4. Processor Cache Size in KB

STRM SNMP Agent
8USING THE SNMP-LINUX-MIB
Disk Space Details The disk space details includes:
For example, sample output may include:
Mount Details The mount details includes:
Table 2-2 Disk Space Details
S.No Disk Space Details
1. File System Type
2. Total Disk Space in MegaBytes
3. Used Space in MegeBytes
4. Percentage of Free Space
5. Percentage of Used Space
6. The Mount Point of the Device
Table 2-3 Mount Details
S.No Mount Details
1. Device Name
2. Mount Point of the Device
3. File System Type