-- This module defines enterprise MIBs for Policy Monitoring
--
-- Copyright (c) 1999-2004, Juniper Networks, Inc.
-- All rights reserved.NETSCREEN-POLICY-MIB DEFINITIONS::=BEGIN
IMPORTSnetscreenPolicy
FROM NETSCREEN-SMI
Counter32,Integer32,MODULE-IDENTITY,OBJECT-TYPEFROM SNMPv2-SMI
DisplayStringFROM SNMPv2-TC
;netscreenPolicyMibModule MODULE-IDENTITYLAST-UPDATED"200405032022Z"-- May 03, 2004ORGANIZATION"Juniper Networks, Inc."CONTACT-INFO"Customer Support
1194 North Mathilda Avenue
Sunnyvale, California 94089-1206
USA
Tel: 1-800-638-8296
E-mail: customerservice@juniper.net
HTTP://www.juniper.net"DESCRIPTION"This module defines NetScreen private MIBs for Policy
Monitoring"REVISION"200405030000Z"-- May 03, 2004DESCRIPTION"Modified copyright and contact information"REVISION"200403030000Z"-- March 03, 2004DESCRIPTION"Converted to SMIv2 by Longview Software"REVISION"200308130000Z"-- August 13, 2003DESCRIPTION"No Comment"REVISION"200105140000Z"-- May 14, 2001DESCRIPTION"Creation Date"::={ netscreenPolicy 0}
NsPlyEntry ::=SEQUENCE{
nsPlyId Integer32,
nsPlyVsys Integer32,
nsPlySrcZone DisplayString,
nsPlyDstZone DisplayString,
nsPlySrcAddr DisplayString,
nsPlyDstAddr DisplayString,
nsPlyService INTEGER,
nsPlyAction INTEGER,
nsPlyNat INTEGER,
nsPlyFixPort INTEGER,
nsPlyDipId Integer32,
nsPlyVpnTunnel DisplayString,
nsPlyL2tpTunnel DisplayString,
nsPlyAuth INTEGER,
nsPlyLogEnable INTEGER,
nsPlyCountEnable INTEGER,
nsPlyAlarmBPS Integer32,
nsPlyAlarmBPM Integer32,
nsPlySchedule DisplayString,
nsPlyTrafficShapeEnable INTEGER,
nsPlyTrafficPriority INTEGER,
nsPlyDSEnable INTEGER,
nsPlyActiveStatus INTEGER,
nsPlyName DisplayString,
nsPlyServiceName DisplayString}
NsPlyMonEntry ::=SEQUENCE{
nsPlyMonId Integer32,
nsPlyMonVsys Integer32,
nsPlyMonPackPerSec Integer32,
nsPlyMonPackPerMin Integer32,
nsPlyMonTotalPacket Counter32,
nsPlyMonBytePerSec Integer32,
nsPlyMonBytePerMin Integer32,
nsPlyMonTotalByte Counter32,
nsPlyMonSessionPerSec Integer32,
nsPlyMonSessionPerMin Integer32,
nsPlyMonTotalSession Counter32}nsPlyTable OBJECT-TYPESYNTAXSEQUENCEOF NsPlyEntry
MAX-ACCESSnot-accessibleSTATUScurrentDESCRIPTION"A firewall provides a network boundary with a single point of
entry and exit-a choke point.You can screen and direct all that
traffic through the implementation of a set of access policies.
Access policies allow you to permit, deny, encrypt,
authenticate, prioritize, schedule, and monitor the traffic
attemption to cross your firewall. This table collects all the
policy configuration information existing in NetScreen
Device."::={ netscreenPolicy 1}nsPlyEntry OBJECT-TYPESYNTAX NsPlyEntry
MAX-ACCESSnot-accessibleSTATUScurrentDESCRIPTION"Each entry in the nsPlyTable holds a set of configuration
parameters associatied with an instance of policy."INDEX{ nsPlyId, nsPlyVsys }::={ nsPlyTable 1}nsPlyId OBJECT-TYPESYNTAXInteger32(0..2147483647)MAX-ACCESSread-onlySTATUScurrentDESCRIPTION"Each policy is identified by a unique policy ID."::={ nsPlyEntry 1}nsPlyVsys OBJECT-TYPESYNTAXInteger32(0..2147483647)
MAX-ACCESSread-onlySTATUScurrentDESCRIPTION"Vitural system's name this polic entry belongs to."::={ nsPlyEntry 2}nsPlySrcZone OBJECT-TYPESYNTAXDisplayString(SIZE(0..32))MAX-ACCESSread-onlySTATUScurrentDESCRIPTION"Traffic through a firewall means that traffic flows from one
security zone to another. This object describes the source zone
name traffic flow passes."::={ nsPlyEntry 3}nsPlyDstZone OBJECT-TYPESYNTAXDisplayString(SIZE(0..32))MAX-ACCESSread-onlySTATUScurrentDESCRIPTION"Traffic through a firewall means that traffic flows from one
security zone to another. This object describes the destination
zone name traffic flow passes."::={ nsPlyEntry 4}nsPlySrcAddr OBJECT-TYPESYNTAXDisplayString(SIZE(0..32))MAX-ACCESSread-onlySTATUScurrentDESCRIPTION"Addresses are objects that identify network devices such as
hosts and networks by their location in relation to the
firwall on which security zone.To create an access policy for
specific addresses, you must first create entries for the
relevant hosts and networks in the address book.Source IP
address indicates the address in source zone, 0.0.0.0 means any
address."::={ nsPlyEntry 5}nsPlyDstAddr OBJECT-TYPESYNTAXDisplayString(SIZE(0..32))MAX-ACCESSread-onlySTATUScurrentDESCRIPTION"Addresses are objects that identify network devices such as
hosts and networks by their location in relation to the
firwall-on which security zone.To create an access policy for
specific addresses, you must first create entries for the
relevant hosts and networks in the address book.Source IP
address indicates the address in destination zone, 0.0.0.0
means any address."::={ nsPlyEntry 6}nsPlyService OBJECT-TYPESYNTAXINTEGER{any(0),aol(1),bgp(2),dpcp-relay(3),dns(4),finger(5),ftp(6),ftp-get(7),ftp-put(8),gopher(9),
h323(10),http(11),https(12),icmp-info(13),icmp-timestamp(14),ike(15),imap(16),internet-locator-service(17),irc(18),l2tp(19),ldap(20),mail(21),netmeeting(22),nfs(23),nntp(24),ns-global(25),ns-global-pro(26),ntp(27),ospf(28),pc-anywhere(29),ping(30),pop3(31),pptp(32),real-media(33),rip(34),
rlogin(35),snmp(36),ssh(37),syslog(38),talk(39),tcp-any(40),telnet(41),tftp(42),traceroute(43),udp-any(44),uucp(45),vdo-live(46),wais(47),winframe(48),x-windows(49),other(50)}MAX-ACCESSread-onlySTATUScurrentDESCRIPTION"Sevices are objects that identify application protocols using
layer 4 information such as standard and accepted TCP and UDP
port numbers for application services like Telnet, FTP, SMTP
and HTTP. This object indicates all the traffic service type
this policy allows. 'Any' means all this policy allows all
service go through. 'Other' could be a configured service or
not in the list. See nsPlyServiceName for service name."::={ nsPlyEntry 7}nsPlyAction OBJECT-TYPESYNTAXINTEGER{deny(0),
permit(1),tunnel(2)}MAX-ACCESSread-onlySTATUScurrentDESCRIPTION"Actions objects that describe what the firewall does to the
traffic it receives. Permit allows the packet to pass the
firewall. Deny blocks the packet from traversing the firewall.
Tunnel encapsulates outgoing IP packets and decapsulates
incoming IP packets."::={ nsPlyEntry 8}nsPlyNat OBJECT-TYPESYNTAXINTEGER{disable(0),enabled(1)}MAX-ACCESSread-onlySTATUScurrentDESCRIPTION"You can apply NAT at the interface level or at the policy
level. With policy-based NAT, you can translate the source
address on either incoming or outging network and VPN traffic.
This object indicates if this is a policy-based NAT."::={ nsPlyEntry 9}nsPlyFixPort OBJECT-TYPESYNTAXINTEGER{no(0),yes(1)}MAX-ACCESSread-onlySTATUScurrentDESCRIPTION"When in policy-based NAT, the new secure address can come from
either a Dynamic IP or from a Mapped IP. This object indicates
if poliy-based NAT uses fix port when working on NAT mode."::={ nsPlyEntry 10}nsPlyDipId OBJECT-TYPESYNTAXInteger32MAX-ACCESSread-onlySTATUScurrentDESCRIPTION"This object indicates the Dynamic ID chosen for NAT policy."::={ nsPlyEntry 11}nsPlyVpnTunnel OBJECT-TYPESYNTAXDisplayString(SIZE(0..32))MAX-ACCESSread-onlySTATUScurrentDESCRIPTION"VPN tunnel this access policy applies to."::={ nsPlyEntry 12}nsPlyL2tpTunnel OBJECT-TYPESYNTAXDisplayString(SIZE(0..32))MAX-ACCESSread-onlySTATUScurrentDESCRIPTION"L2TP tunnel this access policy applies to."::={ nsPlyEntry 13}nsPlyAuth OBJECT-TYPESYNTAXINTEGER{disable(0),enabled(1)}MAX-ACCESSread-onlySTATUScurrentDESCRIPTION
"This object indicates the selecting this option requires the
user at the source address to authenticate his/her identiry by
supplying a user name and password before traffic is allowed to
graverw the firewall or enter the VPN tunnel."::={ nsPlyEntry 14}nsPlyLogEnable OBJECT-TYPESYNTAXINTEGER{disable(0),enabled(1)}MAX-ACCESSread-onlySTATUScurrentDESCRIPTION"When you enable logging in an access policy, the NetScreen
device logs all connections to which that paticular access
policy applies."::={ nsPlyEntry 15}nsPlyCountEnable OBJECT-TYPESYNTAXINTEGER{disable(0),enabled(1)}MAX-ACCESSread-onlySTATUScurrentDESCRIPTION"When you enable counting in an access plicy, the NetScreen
device counts the total number of bytes of traffic to which
this access policy applies and records the informaiton in
historical graphs."::={ nsPlyEntry 16}nsPlyAlarmBPS OBJECT-TYPESYNTAXInteger32MAX-ACCESSread-onlySTATUScurrentDESCRIPTION"User can set a threshold that triggers an alarm when the
traffic permitted by the access policy exceeds a specified
number of bytes per second."::={ nsPlyEntry 17}nsPlyAlarmBPM OBJECT-TYPESYNTAXInteger32MAX-ACCESSread-onlySTATUScurrentDESCRIPTION"User can set a threshold that triggers an alarm when the
traffic permitted by the access policy exceeds a specified
number of bytes per Minute."::={ nsPlyEntry 18}nsPlySchedule OBJECT-TYPESYNTAXDisplayString(SIZE(0..32))MAX-ACCESSread-onlySTATUScurrentDESCRIPTION"By associating a schedule to an access policy, you can
determine when the access policy is in effect."::={ nsPlyEntry 19}nsPlyTrafficShapeEnable OBJECT-TYPESYNTAXINTEGER{off(0),on(1)}MAX-ACCESSread-onlySTATUScurrentDESCRIPTION"User can set parameters for the control and shaping of traffic
for each access policy."::={ nsPlyEntry 20}nsPlyTrafficPriority OBJECT-TYPESYNTAXINTEGER{high(0),
priority2nd(1),priority3rd(2),priority4th(3),priority5th(4),priority6th(5),priority7th(6),priorityLow(7)}MAX-ACCESSread-onlySTATUScurrentDESCRIPTION"Traffic priority for this policy."::={ nsPlyEntry 21}nsPlyDSEnable OBJECT-TYPESYNTAXINTEGER{disable(0),enabled(1)}MAX-ACCESSread-onlySTATUScurrentDESCRIPTION"Differentiated Services is a system for tagging traffic at a
position within a hierarchy of priority."::={ nsPlyEntry 22}nsPlyActiveStatus OBJECT-TYPESYNTAXINTEGER{inactive(0),inuse(1),hidden(2)}MAX-ACCESSread-onlySTATUScurrent
DESCRIPTION"Show the status of one policy entry."::={ nsPlyEntry 23}nsPlyName OBJECT-TYPESYNTAXDisplayString(SIZE(0..32))MAX-ACCESSread-onlySTATUScurrentDESCRIPTION"policy name (optional)"::={ nsPlyEntry 24}nsPlyServiceName OBJECT-TYPESYNTAXDisplayStringMAX-ACCESSread-onlySTATUScurrentDESCRIPTION"Sevices name that identify application protocols using
layer 4 information such as standard and accepted TCP and UDP
port numbers for application services like Telnet, FTP, SMTP
and HTTP. This object indicates all the traffic service type
this policy allows. 'Any' means all this policy allows all
service go through."::={ nsPlyEntry 25}nsPlyMonTable OBJECT-TYPESYNTAXSEQUENCEOF NsPlyMonEntry
MAX-ACCESSnot-accessibleSTATUScurrentDESCRIPTION"traffic information for the policy-based traffic."::={ netscreenPolicy 2}nsPlyMonEntry OBJECT-TYPESYNTAX NsPlyMonEntry
MAX-ACCESSnot-accessibleSTATUScurrentDESCRIPTION
"An entry holds a set of traffic counters of a specific
policy."INDEX{ nsPlyMonId, nsPlyMonVsys }::={ nsPlyMonTable 1}nsPlyMonId OBJECT-TYPESYNTAXInteger32(0..2147483647)MAX-ACCESSread-onlySTATUScurrentDESCRIPTION"Policy Id, also used as index in this table"::={ nsPlyMonEntry 1}nsPlyMonVsys OBJECT-TYPESYNTAXInteger32(0..2147483647)MAX-ACCESSread-onlySTATUScurrentDESCRIPTION"vsys this policy belongs to"::={ nsPlyMonEntry 2}nsPlyMonPackPerSec OBJECT-TYPESYNTAXInteger32MAX-ACCESSread-onlySTATUScurrentDESCRIPTION"Packets go through this policy per second"::={ nsPlyMonEntry 3}nsPlyMonPackPerMin OBJECT-TYPESYNTAXInteger32MAX-ACCESSread-onlySTATUScurrentDESCRIPTION"Packets go through this policy per minute"::={ nsPlyMonEntry 4}
nsPlyMonTotalPacket OBJECT-TYPESYNTAXCounter32MAX-ACCESSread-onlySTATUScurrentDESCRIPTION"total packets go through this policy"::={ nsPlyMonEntry 5}nsPlyMonBytePerSec OBJECT-TYPESYNTAXInteger32MAX-ACCESSread-onlySTATUScurrentDESCRIPTION"Bytes go through this policy per second"::={ nsPlyMonEntry 6}nsPlyMonBytePerMin OBJECT-TYPESYNTAXInteger32MAX-ACCESSread-onlySTATUScurrentDESCRIPTION"Bytes go through this policy per minute"::={ nsPlyMonEntry 7}nsPlyMonTotalByte OBJECT-TYPESYNTAXCounter32MAX-ACCESSread-onlySTATUScurrentDESCRIPTION"Total bytes go through this policy"::={ nsPlyMonEntry 8}nsPlyMonSessionPerSec OBJECT-TYPESYNTAXInteger32MAX-ACCESSread-onlySTATUScurrentDESCRIPTION"Sessions go through this policy per second"::={ nsPlyMonEntry 9}nsPlyMonSessionPerMin OBJECT-TYPE
SYNTAXInteger32MAX-ACCESSread-onlySTATUScurrentDESCRIPTION"Sessions go through this policy per minute"::={ nsPlyMonEntry 10}nsPlyMonTotalSession OBJECT-TYPESYNTAXCounter32MAX-ACCESSread-onlySTATUScurrentDESCRIPTION"Total Sessions go through this policy"::={ nsPlyMonEntry 11}END