Sie sind auf Seite 1von 922
Junos ® OS Network Management Administration Guide Modified: 2017-03-14 Copyright © 2017, Juniper Networks, Inc.

Junos ® OS

Network Management Administration Guide

Junos ® OS Network Management Administration Guide Modified: 2017-03-14 Copyright © 2017, Juniper Networks, Inc.

Modified: 2017-03-14

Juniper Networks, Inc. 1133 Innovation Way Sunnyvale, California 94089 USA

408-745-2000

www.juniper.net

Juniper Networks, Junos, Steel-Belted Radius, NetScreen, and ScreenOS are registered trademarks of Juniper Networks, Inc. in the United States and other countries. The Juniper Networks Logo, the Junos logo, and JunosE are trademarks of Juniper Networks, Inc. All other trademarks, service marks, registered trademarks, or registered service marks are the property of their respective owners.

Juniper Networks assumes no responsibility for any inaccuracies in this document. Juniper Networks reserves the right to change, modify, transfer, or otherwise revise this publication without notice.

Junos ® OS Network Management Administration Guide

Copyright © 2017, Juniper Networks, Inc. All rights reserved.

The information in this document is current as of the date on the title page.

YEAR 2000 NOTICE

Juniper Networks hardware and software products are Year 2000 compliant. Junos OS has no known time-related limitations through the year 2038. However, the NTP application is known to have some difficulty in the year 2036.

END USER LICENSE AGREEMENT

The Juniper Networks product that is the subject of this technical documentation consists of (or is intended for use with) Juniper Networks software. Use of such software is subject to the terms and conditions of the End User License Agreement (“EULA”) posted at http://www.juniper.net/support/eula.html. By downloading, installing or using such software, you agree to the terms and conditions of that EULA.

Table of Contents

About the Documentation .

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

xxix

Documentation and Release Notes

 

xxix

Supported Platforms

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

xxix

Using the Examples in This Manual

 

xxx

Merging a

Full

Example

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

xxx

Merging

a

Snippet

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

xxxi

Documentation

Conventions

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

xxxi

. Requesting Technical Support

Documentation

.

Feedback

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

xxxiii

xxxiv

Self-Help Online Tools and Resources

 

xxxiv

Opening a Case with JTAC .

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

. xxxiv

Part 1

Overview

Chapter 1

Network Management Overview

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

3

Understanding Device Management Functions in Junos OS

 

3

Understanding the Integrated Local Management Interface

6

Chapter 2

Introduction to Network Monitoring

 

7

Monitoring Overview .

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

. 7

Diagnostic Tools Overview .

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

. 8

. CLI Diagnostic Commands .

J-Web Diagnostic

.

Tools

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

. 8

. 9

Part 2

Network Monitoring Using SNMP

 

Chapter 3

SNMP

Overview

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

13

Understanding SNMP Implementation in Junos OS

 

13

SNMPv3

Overview

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

16

Chapter 4

SNMP MIBs and Traps Supported by Junos OS

 

19

Enterprise-Specific SNMP MIBs Supported by Junos OS

 

19

Standard SNMP MIBs Supported by Junos OS

30

Enterprise-Specific MIBs and Supported Devices

47

Standard SNMP Traps Supported by Junos OS

57

 

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

57

Standard SNMP Version 1 Traps . Standard SNMP Version 2 Traps .

. Enterprise-Specific SNMP Traps Supported by Junos OS

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

60

64

Juniper Networks Enterprise-Specific SNMP Version 1 Traps

 

64

Juniper Networks Enterprise-Specific SNMP Version 2 Traps

70

Network Management Administration Guide

Chapter 5 Loading MIB Files to a Network Management System 79 Loading MIB Files to
Chapter 5
Loading MIB Files to a Network Management System
79
Loading MIB Files to a Network Management System
79
Chapter 6
Configuring
SNMP
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
83
Configuration Statements at the [edit snmp] Hierarchy Level
84
Optimizing the Network Management System Configuration for the Best
.
Changing the Polling Method from Column-by-Column to Row-by-Row
Reducing the Number of Variable Bindings per PDU
Increasing Timeout Values in Polling and Discovery Intervals
Reducing Incoming Packet Rate at the snmpd
Configuring Options on Managed Devices for Better SNMP Response Time
Enabling the stats-cache-lifetime Option
Filtering Out Duplicate SNMP Requests
Excluding Interfaces That Are Slow in Responding to SNMP Queries
Configuring SNMP on Devices Running Junos OS
Configuring Basic Settings for SNMPv1 and SNMPv2
Configuring Basic Settings for SNMPv3
Configuring System Name, Location, Description, and Contact
Results
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
87
87
88
88
88
88
89
89
89
90
91
91
Information
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
93
Configuring the System Contact on a Device Running Junos OS
Configuring the System Location for a Device Running Junos OS
94
95
Configuring the System Description on a Device Running Junos OS
95
Configuring SNMP Details .
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
96
Configuring a Different System Name
Configuring the Commit Delay Timer
Filtering Duplicate SNMP Requests
97
98
98
Configuring
SNMP
Communities
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
99
Examples: Configuring the SNMP Community String
Adding a Group of Clients to an SNMP Community
102
103
Configuring a Proxy SNMP Agent .
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
104
Configuring
SNMP
Traps
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
105
Configuring SNMP Trap Options and Groups on a Device Running Junos OS
107
Configuring SNMP Trap Options .
.
Configuring the Source Address for SNMP Traps
Configuring the Agent Address for SNMP Traps
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
108
109
111
Adding snmpTrapEnterprise Object Identifier to Standard SNMP Traps
111
.
Example: Configuring SNMP Trap Groups
Configuring the Interfaces on Which SNMP Requests Can Be Accepted
Example: Configuring Secured Access List Checking
Configuring SNMP Trap Groups .
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
112
114
114
115
Filtering Interface Information Out of SNMP Get and GetNext Output
115
Configuring MIB Views .
.
Configuring Ping Proxy MIB .
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
116
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
118
Chapter 7
Configuring
SNMPv3
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
121
Minimum SNMPv3 Configuration on a Device Running Junos OS
Example: SNMPv3 Configuration
Configuring the Local Engine ID .
122
123
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
126

Table of Contents

. Example: Creating SNMPv3 Users

Creating SNMPv3

.

Users

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

127

128

Configuring the SNMPv3 Authentication Type

 

128

Configuring MD5 Authentication

129

Configuring SHA Authentication

129

Configuring No Authentication

129

Configuring the SNMPv3 Encryption Type

130

Configuring the Advanced Encryption Standard Algorithm

 

130

Configuring the Data Encryption Algorithm

131

. Configuring No Encryption .

Configuring Triple

DES

.

.

.

.

.

.

.

.

.

.

.

.

.

.

. Defining Access Privileges for an SNMP Group

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

131

131

132

Configuring the Access Privileges Granted to a Group

.

Configuring the Group .

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

 

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

133

133

. Configuring the Security Model .

.

.

.

.

 

.

 

.

 

.

 

.

 

.

 

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

133

Configuring the Security Level .

.

.

.

 

.

 

.

 

.

 

.

 

.

 

.

 

.

 

.

 

.

 

.

 

.

 

.

 

.

 

.

 

.

 

.

 

.

 

.

 

.

.

.

.

.

.

.

.

.

.

134

Associating MIB Views with an SNMP User Group

 

134

Configuring the Notify View .

 

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

135

Configuring the Read View .

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

135

Configuring the

Write

View

.

.

.

 

.

 

.

 

.

 

.

 

.

 

.

 

.

 

.

 

.

 

.

 

.

 

.

 

.

 

.

 

.

 

.

 

.

 

.

 

.

.

.

.

.

.

.

.

.

.

136

Example: Configuring the Access Privileges Granted to a Group

 

136

Assigning Security Model and Security Name to a Group

137

Configuring the Security Model .

 

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

137

Assigning Security Names to Groups

 

138

Configuring the Group .

.

.

.

.

.

.

.

. Example: Security Group Configuration

.

 

.

 

.

 

.

 

.

 

.

 

.

 

.

 

.

 

.

 

.

 

.

 

.

 

.

 

.

 

.

 

.

 

.

 

.

 

.

 

.

.

.

.

.

.

.

.

.

.

138

138

Configuring SNMPv3 Traps on a Device Running Junos OS

 

139

Configuring the SNMPv3 Trap Notification

140

Example: Configuring SNMPv3 Trap Notification

141

Configuring the Trap Notification Filter

141

Configuring the Trap Target Address

142

Configuring the

Address

.

.

.

.

.

.

.

.

.

 

.

 

.

 

.

 

.

 

.

 

.

 

.

 

.

 

.

 

.

 

.

 

.

 

.

 

.

 

.

 

.

 

.

 

.

 

.

.

.

.

.

.

.

.

.

.

143

Configuring the Address Mask .

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

143

. Configuring the Routing Instance

Configuring the

.

Port

.

.

.

.

.

.

.

.

 

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

144

144

Configuring the Trap Target Address

.

Applying Target Parameters

.

.

.

.

.

.

.

.

.

.

 

.

 

.

 

.

 

.

 

.

 

.

 

.

 

.

 

.

 

.

 

.

 

.

 

.

.

.

.

.

.

.

.

.

.

144

145

. Example: Configuring the Tag List .

.

.

.

.

 

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

145

Defining and Configuring the Trap Target Parameters

 

146

Applying the Trap Notification Filter

147

Configuring the Target Parameters

147

Configuring the Message Processing Model

147

Configuring the Security Model

147

Configuring the Security Level

148

Configuring the Security Name

148

. Configuring the Remote Engine and Remote User

Configuring SNMP Informs .

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

149

150

Example: Configuring the Remote Engine ID and Remote User

 

151

Configuring the Inform Notification Type and Target Address

154

Network Management Administration Guide

 

Example: Configuring the Inform Notification Type and Target Address

 

155

Configuring the SNMPv3 Community

156

Configuring the Community Name

157

Configuring the Context .

 

.

.

 

.

 

.

.

 

.

 

.

 

.

 

.

 

.

 

.

 

.

 

.

 

.

 

.

 

.

 

.

 

.

 

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

157

Configuring the Security Names

 

157

Configuring the Tag .

.

. Example: Configuring an SNMPv3 Community

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

158

158

Chapter 8

Configuring SNMP for Routing Instances

 

159

Understanding SNMP Support for Routing Instances

 

159

SNMP MIBs Supported for Routing Instances

160

Support Classes for MIB Objects .

.

 

.

 

.

 

.

 

.

 

.

 

.

 

.

 

.

 

.

 

.

 

.

 

.

 

.

 

.

 

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

170

SNMP Traps Supported for Routing Instances

 

171

Identifying

a

Routing

Instance

 

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

172

Enabling SNMP Access over Routing Instances

 

173

Specifying a Routing Instance in an SNMPv1 or SNMPv2c Community

173

Example: Configuring Interface Settings for a Routing Instance

174

Configuring Access Lists for SNMP Access over Routing Instances

176

Chapter 9

Configuring SNMP Remote Operations

 

177

SNMP Remote Operations Overview

 

177

SNMP Remote Operation Requirements

 

178

Setting SNMP

Views

.

.

.

.

.

.

.

.

.

.

. Example: Setting SNMP Views

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

178

178

Setting Trap Notification for Remote Operations

 

179

Example: Setting Trap Notification for Remote Operations

 

179

Using Variable-Length String Indexes

179

Example: Set Variable-Length String Indexes

179

Enabling Logging .

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

180

Using the Ping MIB for Remote Monitoring Devices Running Junos OS

 

180

Starting a Ping

Test

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.