Sie sind auf Seite 1von 412
Junos ® OS Network Management Configuration Guide Release 12.3 Published: 2012-12-08 Copyright © 2012, Juniper

Junos ® OS

Network Management Configuration Guide

Release

12.3

® OS Network Management Configuration Guide Release 12.3 Published: 2012-12-08 Copyright © 2012, Juniper Networks,

Published: 2012-12-08

Juniper Networks, Inc. 1194 North Mathilda Avenue Sunnyvale, California 94089 USA

408-745-2000

www.juniper.net

This product includes the Envoy SNMP Engine, developed by Epilogue Technology, an Integrated Systems Company. Copyright © 1986-1997, Epilogue Technology Corporation. All rights reserved. This program and its documentation were developed at private expense, and no part of them is in the public domain.

This product includes memory allocation software developed by Mark Moraes, copyright © 1988, 1989, 1993, University of Toronto.

This product includes FreeBSD software developed by the University of California, Berkeley, and its contributors. All of the documentation and software included in the 4.4BSD and 4.4BSD-Lite Releases is copyrighted by the Regents of the University of California. Copyright © 1979, 1980, 1983, 1986, 1988, 1989, 1991, 1992, 1993, 1994. The Regents of the University of California. All rights reserved.

GateD software copyright © 1995, the Regents of the University. All rights reserved. Gate Daemon was originated and developed through release 3.0 by Cornell University and its collaborators. Gated is based on Kirton’s EGP, UC Berkeley’s routing daemon (routed), and DCN’s HELLO routing protocol. Development of Gated has been supported in part by the National Science Foundation. Portions of the GateD software copyright © 1988, Regents of the University of California. All rights reserved. Portions of the GateD software copyright © 1991, D. L. S. Associates.

This product includes software developed by Maker Communications, Inc., copyright © 1996, 1997, Maker Communications, Inc.

Juniper Networks, Junos, Steel-Belted Radius, NetScreen, and ScreenOS are registered trademarks of Juniper Networks, Inc. in the United States and other countries. The Juniper Networks Logo, the Junos logo, and JunosE are trademarks of Juniper Networks, Inc. All other trademarks, service marks, registered trademarks, or registered service marks are the property of their respective owners.

Juniper Networks assumes no responsibility for any inaccuracies in this document. Juniper Networks reserves the right to change, modify, transfer, or otherwise revise this publication without notice.

Products made or sold by Juniper Networks or components thereof might be covered by one or more of the following patents that are owned by or licensed to Juniper Networks: U.S. Patent Nos. 5,473,599, 5,905,725, 5,909,440, 6,192,051, 6,333,650, 6,359,479, 6,406,312, 6,429,706, 6,459,579, 6,493,347, 6,538,518, 6,538,899, 6,552,918, 6,567,902, 6,578,186, and 6,590,785.

Junos ® OS Network Management Configuration Guide

12.3

Copyright © 2012, Juniper Networks, Inc. All rights reserved.

The information in this document is current as of the date on the title page.

YEAR 2000 NOTICE

Juniper Networks hardware and software products are Year 2000 compliant. Junos OS has no known time-related limitations through the year 2038. However, the NTP application is known to have some difficulty in the year 2036.

END USER LICENSE AGREEMENT

The Juniper Networks product that is the subject of this technical documentation consists of (or is intended for use with) Juniper Networks software. Use of such software is subject to the terms and conditions of the End User License Agreement (“EULA”) posted at

http://www.juniper.net/support/eula.html. By downloading, installing or using such software, you agree to the terms and conditions of that EULA.

Table of Contents

 

About the Documentation

.

.

.

.

.

.

.

.

 

.

 

.

 

.

 

.

 

.

 

.

 

.

 

.

 

.

 

.

 

.

 

.

 

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

xvii

Documentation and Release Notes

 

xvii

Supported Platforms .

.

.

.

.

.

.

.

.

 

.

 

.

 

.

 

.

 

.

 

.

 

.

 

.

 

.

 

.

 

.

 

.

 

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

xvii

Using the Examples in This Manual

 

xvii

Merging a Full Example .

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

xviii

Merging a Snippet .

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

xviii

Documentation

Conventions

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

xix

. Requesting Technical Support .

Documentation

Feedback

.

.

.

 

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

xxi

xxi

Self-Help Online Tools and Resources

 

xxi

Opening a Case with JTAC .

.

.

.

.

 

.

 

.

 

.

 

.

 

.

 

.

 

.

 

.

 

.

 

.

 

.

 

.

 

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

xxii

Part 1

Overview

Chapter 1

Network Management Technologies and Features

 

3

Understanding Device Management Functions in Junos OS

 

3

Understanding the Integrated Local Management Interface

6

Understanding the SNMP Implementation in Junos OS

6

SNMP

Architecture

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

. 6

. SNMP Traps and Informs .

SNMP MIBs .

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

. 7

. 7

Junos OS SNMP Agent Features .

 

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

. 9

SNMPv3

Overview

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

10

Chapter 2

SNMP Remote Operations and Support for Routing Instances

 

13

SNMP Remote Operations Overview

 

13

SNMP Remote Operation Requirements

 

13

Setting SNMP

Views

.

.

.

.

.

.

.

.

.

.

. Example: Setting SNMP Views

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

14

14

Setting Trap Notification for Remote Operations

 

14

Example: Setting Trap Notification for Remote Operations

 

15

Using Variable-Length String Indexes

15

Example: Set Variable-Length String Indexes

15

Enabling

Logging

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

15

Understanding SNMP Support for Routing Instances

 

16

Support Classes for MIB Objects .

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

17

. Trap Support for Routing Instances

18

Network Management Configuration Guide

Chapter 3

SNMP MIB

Support

 

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

19

Standard SNMP MIBs Supported by Junos OS

 

19

Juniper Networks Enterprise-Specific MIBs

34

Juniper Networks Enterprise-Specific MIBs and Supported Devices

47

SNMP MIB Objects Supported by Junos OS for the Set Operation

56

Standard SNMP Traps Supported on Devices Running Junos OS

63

Juniper Networks Enterprise-Specific SNMP Traps

64

Chapter 4

Remote Monitoring (RMON), Health Monitoring, and Service Quality

 

Monitoring

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

65

Understanding RMON Alarms .

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

65

alarmTable

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

66

 

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

66

 

jnxRmonAlarmTable . MIB Support Details .

Understanding RMON

.

.

Events

.

.

.

.

.

 

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

67

76

eventTable .

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

. Using the Ping MIB for Remote Monitoring Devices Running Junos OS

.

.

.

.

.

.

.

76

77

Using the Traceroute MIB for Remote Monitoring Devices Running Junos OS

77

Understanding Measurement Points, Key Performance Indicators, and Baseline

.

Values

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

78

. Measurement Points .

 

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

78

Basic Key Performance Indicators

 

79

Setting Baselines

 

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

79

Chapter 5

Accounting Options and Source Class Usage and Destination Class Usage

Options . . . . . . . . . . . . . .
Options
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
81
Accounting Options
.
Understanding Source Class Usage and Destination Class Usage Options
Overview
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
81
82
Part 2
Configuration
Chapter 6
SNMP Configuration .
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
87
Configuration Statements at the [edit snmp] Hierarchy Level
Configuring SNMP on a Device Running Junos OS
Configuring the System Contact on a Device Running Junos OS
Configuring the System Location for a Device Running Junos OS
87
91
93
93
Configuring the System Description on a Device Running Junos OS
94
Configuring the
.
Configuring the SNMP Community String
System Name
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
94
95
Examples: Configuring the SNMP Community String
Adding a Group of Clients to an SNMP Community
96
96
.
Filtering Duplicate SNMP Requests
Configuring the Commit Delay Timer
Configuring a Proxy SNMP Agent .
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
98
99
100
Configuring SNMP Trap Options and Groups on a Device Running Junos OS
100
Configuring SNMP Trap Options .
.
Configuring the Source Address for SNMP Traps
Configuring the Agent Address for SNMP Traps
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
101
102
103
Adding snmpTrapEnterprise Object Identifier to Standard SNMP Traps
104
Configuring SNMP Trap Groups .
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
104

Table of Contents

Example: Configuring SNMP Trap Groups

 

107

Configuring the Interfaces on Which SNMP Requests Can Be Accepted

108

Example: Configuring Secured Access List Checking

108

Filtering Interface Information Out of SNMP Get and GetNext Output

 

108

. Example: Ping Proxy MIB .

Configuring MIB Views .

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

109

110

Example: Tracing SNMP Activity .

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

111

Configuring the Local Engine ID .

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

111

Chapter 7

SNMPv3

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

 

.

 

.

 

.

.

 

.

 

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

113

Complete SNMPv3 Configuration Statements

 

114

Minimum SNMPv3 Configuration on a Device Running Junos OS

 

116

Configuring the Local Engine ID .

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

117

. Configuring the SNMPv3 Authentication Type

Creating SNMPv3 Users

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

 

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

118

119

Configuring MD5 Authentication

 

119

Configuring SHA Authentication

119

Configuring No Authentication

.

.

120

Configuring the Encryption Type .

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

120

Configuring the Advanced Encryption Standard Algorithm

 

121

Configuring the Data Encryption Algorithm

121

. Configuring No Encryption .

Configuring Triple

DES

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

. Defining Access Privileges for an SNMP Group

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

121

122

122

Configuring the Access Privileges Granted to a Group

 

123

. Configuring the Security Model

Configuring the Group .

.

.

.

.

.

.

.

.

.

 

.

 

.

 

.

.

 

.

 

.

 

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

124

124

Configuring the Security Level .

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

124

Associating MIB Views with an SNMP User Group

 

125

Configuring the Notify View .

 

.

 

.

 

.

 

.

.

 

.

 

.

 

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

125

 

.