MIBs Depot

NETSCREEN-POLICY-MIB

Registered at
1.3.6.1.4.1.3224.10.0
Last updated
2004-05-03 20:22
Organization
Juniper Networks, Inc.
Revisions
2004-05-03 00:00, 2004-03-03 00:00, 2003-08-13 00:00, 2001-05-14 00:00
Namespace
screenos
Source file
NETSCREEN-POLICY-MIB
Digest
sha256:abb8c19e4f8e852a3e072fd1a6d67dc4d3cd63d908d73d6e691ea84f02367395

Description

This module defines NetScreen private MIBs for Policy Monitoring

Contact

Customer Support 1194 North Mathilda Avenue Sunnyvale, California 94089-1206 USA Tel: 1-800-638-8296 E-mail: customerservice@juniper.net HTTP://www.juniper.net

Imports

FromSymbols
NETSCREEN-SMInetscreenPolicy
SNMPv2-CONFMODULE-COMPLIANCE, NOTIFICATION-GROUP
SNMPv2-SMICounter32, Integer32, MODULE-IDENTITY, NOTIFICATION-TYPE, OBJECT-IDENTITY, OBJECT-TYPE, iso
SNMPv2-TCDisplayString, TEXTUAL-CONVENTION

Imported by

Nothing in this corpus imports this module.

Load order

Every file a consumer needs in order to load this module, dependencies first.

NETSCREEN-POLICY-MIB
NETSCREEN-SMI
SNMPv2-CONF
SNMPv2-SMI
SNMPv2-TC

Objects

NameOIDSyntaxAccessStatus
nsPlyTable
OBJECT-TYPE
A firewall provides a network boundary with a single point of entry and exit-a choke point.You can screen and direct all that traffic through the implementation of a set of access policies. Access policies allow you to permit, deny, encrypt, authenticate, prioritize, schedule, and monitor the traffic attemption to cross your firewall. This table collects all the policy configuration information existing in NetScreen Device.
1.3.6.1.4.1.3224.10.1not-accessiblecurrent
nsPlyEntry
OBJECT-TYPE
Each entry in the nsPlyTable holds a set of configuration parameters associatied with an instance of policy.
1.3.6.1.4.1.3224.10.1.1not-accessiblecurrent
nsPlyId
OBJECT-TYPE
Each policy is identified by a unique policy ID.
1.3.6.1.4.1.3224.10.1.1.1Integer32 (0..2147483647)read-onlycurrent
nsPlyVsys
OBJECT-TYPE
Vitural system's name this polic entry belongs to.
1.3.6.1.4.1.3224.10.1.1.2Integer32 (0..2147483647)read-onlycurrent
nsPlySrcZone
OBJECT-TYPE
Traffic through a firewall means that traffic flows from one security zone to another. This object describes the source zone name traffic flow passes.
1.3.6.1.4.1.3224.10.1.1.3DisplayString (SIZE(0..32))read-onlycurrent
nsPlyDstZone
OBJECT-TYPE
Traffic through a firewall means that traffic flows from one security zone to another. This object describes the destination zone name traffic flow passes.
1.3.6.1.4.1.3224.10.1.1.4DisplayString (SIZE(0..32))read-onlycurrent
nsPlySrcAddr
OBJECT-TYPE
Addresses are objects that identify network devices such as hosts and networks by their location in relation to the firwall on which security zone.To create an access policy for specific addresses, you must first create entries for the relevant hosts and networks in the address book.Source IP address indicates the address in source zone, 0.0.0.0 means any address.
1.3.6.1.4.1.3224.10.1.1.5DisplayString (SIZE(0..32))read-onlycurrent
nsPlyDstAddr
OBJECT-TYPE
Addresses are objects that identify network devices such as hosts and networks by their location in relation to the firwall-on which security zone.To create an access policy for specific addresses, you must first create entries for the relevant hosts and networks in the address book.Source IP address indicates the address in destination zone, 0.0.0.0 means any address.
1.3.6.1.4.1.3224.10.1.1.6DisplayString (SIZE(0..32))read-onlycurrent
nsPlyService
OBJECT-TYPE
Sevices are objects that identify application protocols using layer 4 information such as standard and accepted TCP and UDP port numbers for application services like Telnet, FTP, SMTP and HTTP. This object indicates all the traffic service type this policy allows. 'Any' means all this policy allows all service go through. 'Other' could be a configured service or not in the list. See nsPlyServiceName for service name.
1.3.6.1.4.1.3224.10.1.1.7INTEGER {any(0), aol(1), bgp(2), dpcp-relay(3), dns(4), finger(5), ftp(6), ftp-get(7), ftp-put(8), gopher(9), h323(10), http(11), https(12), icmp-info(13), icmp-timestamp(14), ike(15), imap(16), internet-locator-service(17), irc(18), l2tp(19), ldap(20), mail(21), netmeeting(22), nfs(23), nntp(24), ns-global(25), ns-global-pro(26), ntp(27), ospf(28), pc-anywhere(29), ping(30), pop3(31), pptp(32), real-media(33), rip(34), rlogin(35), snmp(36), ssh(37), syslog(38), talk(39), tcp-any(40), telnet(41), tftp(42), traceroute(43), udp-any(44), uucp(45), vdo-live(46), wais(47), winframe(48), x-windows(49), other(50)}read-onlycurrent
nsPlyAction
OBJECT-TYPE
Actions objects that describe what the firewall does to the traffic it receives. Permit allows the packet to pass the firewall. Deny blocks the packet from traversing the firewall. Tunnel encapsulates outgoing IP packets and decapsulates incoming IP packets.
1.3.6.1.4.1.3224.10.1.1.8INTEGER {deny(0), permit(1), tunnel(2)}read-onlycurrent
nsPlyNat
OBJECT-TYPE
You can apply NAT at the interface level or at the policy level. With policy-based NAT, you can translate the source address on either incoming or outging network and VPN traffic. This object indicates if this is a policy-based NAT.
1.3.6.1.4.1.3224.10.1.1.9INTEGER {disable(0), enabled(1)}read-onlycurrent
nsPlyFixPort
OBJECT-TYPE
When in policy-based NAT, the new secure address can come from either a Dynamic IP or from a Mapped IP. This object indicates if poliy-based NAT uses fix port when working on NAT mode.
1.3.6.1.4.1.3224.10.1.1.10INTEGER {no(0), yes(1)}read-onlycurrent
nsPlyDipId
OBJECT-TYPE
This object indicates the Dynamic ID chosen for NAT policy.
1.3.6.1.4.1.3224.10.1.1.11Integer32read-onlycurrent
nsPlyVpnTunnel
OBJECT-TYPE
VPN tunnel this access policy applies to.
1.3.6.1.4.1.3224.10.1.1.12DisplayString (SIZE(0..32))read-onlycurrent
nsPlyL2tpTunnel
OBJECT-TYPE
L2TP tunnel this access policy applies to.
1.3.6.1.4.1.3224.10.1.1.13DisplayString (SIZE(0..32))read-onlycurrent
nsPlyAuth
OBJECT-TYPE
This object indicates the selecting this option requires the user at the source address to authenticate his/her identiry by supplying a user name and password before traffic is allowed to graverw the firewall or enter the VPN tunnel.
1.3.6.1.4.1.3224.10.1.1.14INTEGER {disable(0), enabled(1)}read-onlycurrent
nsPlyLogEnable
OBJECT-TYPE
When you enable logging in an access policy, the NetScreen device logs all connections to which that paticular access policy applies.
1.3.6.1.4.1.3224.10.1.1.15INTEGER {disable(0), enabled(1)}read-onlycurrent
nsPlyCountEnable
OBJECT-TYPE
When you enable counting in an access plicy, the NetScreen device counts the total number of bytes of traffic to which this access policy applies and records the informaiton in historical graphs.
1.3.6.1.4.1.3224.10.1.1.16INTEGER {disable(0), enabled(1)}read-onlycurrent
nsPlyAlarmBPS
OBJECT-TYPE
User can set a threshold that triggers an alarm when the traffic permitted by the access policy exceeds a specified number of bytes per second.
1.3.6.1.4.1.3224.10.1.1.17Integer32read-onlycurrent
nsPlyAlarmBPM
OBJECT-TYPE
User can set a threshold that triggers an alarm when the traffic permitted by the access policy exceeds a specified number of bytes per Minute.
1.3.6.1.4.1.3224.10.1.1.18Integer32read-onlycurrent
nsPlySchedule
OBJECT-TYPE
By associating a schedule to an access policy, you can determine when the access policy is in effect.
1.3.6.1.4.1.3224.10.1.1.19DisplayString (SIZE(0..32))read-onlycurrent
nsPlyTrafficShapeEnable
OBJECT-TYPE
User can set parameters for the control and shaping of traffic for each access policy.
1.3.6.1.4.1.3224.10.1.1.20INTEGER {off(0), on(1)}read-onlycurrent
nsPlyTrafficPriority
OBJECT-TYPE
Traffic priority for this policy.
1.3.6.1.4.1.3224.10.1.1.21INTEGER {high(0), priority2nd(1), priority3rd(2), priority4th(3), priority5th(4), priority6th(5), priority7th(6), priorityLow(7)}read-onlycurrent
nsPlyDSEnable
OBJECT-TYPE
Differentiated Services is a system for tagging traffic at a position within a hierarchy of priority.
1.3.6.1.4.1.3224.10.1.1.22INTEGER {disable(0), enabled(1)}read-onlycurrent
nsPlyActiveStatus
OBJECT-TYPE
Show the status of one policy entry.
1.3.6.1.4.1.3224.10.1.1.23INTEGER {inactive(0), inuse(1), hidden(2)}read-onlycurrent
nsPlyName
OBJECT-TYPE
policy name (optional)
1.3.6.1.4.1.3224.10.1.1.24DisplayString (SIZE(0..32))read-onlycurrent
nsPlyServiceName
OBJECT-TYPE
Sevices name that identify application protocols using layer 4 information such as standard and accepted TCP and UDP port numbers for application services like Telnet, FTP, SMTP and HTTP. This object indicates all the traffic service type this policy allows. 'Any' means all this policy allows all service go through.
1.3.6.1.4.1.3224.10.1.1.25DisplayStringread-onlycurrent
nsPlyMonTable
OBJECT-TYPE
traffic information for the policy-based traffic.
1.3.6.1.4.1.3224.10.2not-accessiblecurrent
nsPlyMonEntry
OBJECT-TYPE
An entry holds a set of traffic counters of a specific policy.
1.3.6.1.4.1.3224.10.2.1not-accessiblecurrent
nsPlyMonId
OBJECT-TYPE
Policy Id, also used as index in this table
1.3.6.1.4.1.3224.10.2.1.1Integer32 (0..2147483647)read-onlycurrent
nsPlyMonVsys
OBJECT-TYPE
vsys this policy belongs to
1.3.6.1.4.1.3224.10.2.1.2Integer32 (0..2147483647)read-onlycurrent
nsPlyMonPackPerSec
OBJECT-TYPE
Packets go through this policy per second
1.3.6.1.4.1.3224.10.2.1.3Integer32read-onlycurrent
nsPlyMonPackPerMin
OBJECT-TYPE
Packets go through this policy per minute
1.3.6.1.4.1.3224.10.2.1.4Integer32read-onlycurrent
nsPlyMonTotalPacket
OBJECT-TYPE
total packets go through this policy
1.3.6.1.4.1.3224.10.2.1.5Counter32read-onlycurrent
nsPlyMonBytePerSec
OBJECT-TYPE
Bytes go through this policy per second
1.3.6.1.4.1.3224.10.2.1.6Integer32read-onlycurrent
nsPlyMonBytePerMin
OBJECT-TYPE
Bytes go through this policy per minute
1.3.6.1.4.1.3224.10.2.1.7Integer32read-onlycurrent
nsPlyMonTotalByte
OBJECT-TYPE
Total bytes go through this policy
1.3.6.1.4.1.3224.10.2.1.8Counter32read-onlycurrent
nsPlyMonSessionPerSec
OBJECT-TYPE
Sessions go through this policy per second
1.3.6.1.4.1.3224.10.2.1.9Integer32read-onlycurrent
nsPlyMonSessionPerMin
OBJECT-TYPE
Sessions go through this policy per minute
1.3.6.1.4.1.3224.10.2.1.10Integer32read-onlycurrent
nsPlyMonTotalSession
OBJECT-TYPE
Total Sessions go through this policy
1.3.6.1.4.1.3224.10.2.1.11Counter32read-onlycurrent