Description
Applicable on all SSG devices. Monitors vpn tunnel. Can be applied on SSG-550 version 6.2.0r10.0 (SN: JN1161AF7ADB, Firewall+VPN). SNMP Obj Id=1.3.6.1.4.1.3224.1.51. Open TCP ports[80,22,23,443,]. DNS name(R)=10.10.0.120
Prerequisites
SNMP should be enabled in end device and device should support NETSCREEN-VPN-MON-MIB OIDs and SNMP credentials should be attached against the device in portal.
How to Apply: While assigning the template, it will show get components discovery button. Once we click on it, it will show values for the following properties: Name
Metric Parameters
| Parameter | Description |
|---|---|
| Frequency | Warning Threshold | If the metric value satisfies the condition defined along with Warning Threshold value, then a notification is sent to the user. |
| Critical Threshold | If the metric value satisfies the condition defined along with Critical Threshold value, then a notification is sent to the user. |
| Alert | The alert value can be set to either Yes or No. If it is Yes, then an alert message is sent to the user. |
Metrics
vpn.tunnel.phase2.status
Metric Details
| Applicable for | Device |
| SNMP OID | 1.3.6.1.4.1.3224.4.1.1.1.13, 1.3.6.1.4.1.3224.4.1.1.1.23, 1.3.6.1.4.1.3224.4.1.1.1.15, 1.3.6.1.4.1.3224.4.1.1.1.24 |
| Expression | nsVpnMonP2State |
| Description | Monitors the IKE's Phase 2 status. Possible values are 0- inactive, 1- active. [OIDs: 1.3.6.1.4.1.3224.4.1.1.1.4, 1.3.6.1.4.1.3224.4.1.1.1.15, 1.3.6.1.4.1.3224.4.1.1.1.23, 1.3.6.1.4.1.3224.4.1.1.1.24, 1.3.6.1.4.1.3224.4.1.1.1.13] |
| Category | SNMP monitors |
| Collector Type | Gateway |
| Monitor Name | Netscreen VPN Tunnel Phases Status |
| Unit |
Possible Inputs
| Metric | Input Value | Range of Values |
|---|---|---|
| Frequency | 15 | 1 – 1440 (mins) |
| Filter | Name | |
| Warning Operator | ||
| Warning Threshold | ||
| Warning Repeat Count | ||
| Critical Operator | EQUAL | Ends with, ==, !=, >=, <=, >, <, In Range, Out of range, Equals, Not equals, Equals Ignore Case, Not Equals Ignore Case, Contains, Not contains, Regex match, Regex no match, In string list, Not in string list, In List, Not in list, Starts with |
| Critical Threshold | 0 | [{"0":"inactive"},{"1":"active"}] |
| Critical Repeat Count | 1 | 1-12 |
| Alert | Yes | Yes/No |
| Graph (Yes/No) | Yes | Yes/No |
Sample Output
No graph
vpn.tunnel.phase1.status
Metric Details
| Applicable for | Device |
| SNMP OID | 1.3.6.1.4.1.3224.4.1.1.1.21, 1.3.6.1.4.1.3224.4.1.1.1.22 |
| Expression | nsVpnMonP1State |
| Description | Monitors the IKE's phase 1 status. Possible values are 0- inactive, 1- active. [OIDs: 1.3.6.1.4.1.3224.4.1.1.1.4, 1.3.6.1.4.1.3224.4.1.1.1.15, 1.3.6.1.4.1.3224.4.1.1.1.13, 1.3.6.1.4.1.3224.4.1.1.1.21, 1.3.6.1.4.1.3224.4.1.1.1.22] |
| Category | SNMP monitors |
| Collector Type | Gateway |
| Monitor Name | Netscreen VPN Tunnel Phases Status |
| Unit |
Possible Inputs
| Metric | Input Value | Range of Values |
|---|---|---|
| Frequency | 15 | 1 – 1440 (mins) |
| Filter | Name | |
| Warning Operator | ||
| Warning Threshold | ||
| Warning Repeat Count | ||
| Critical Operator | EQUAL | Ends with, ==, !=, >=, <=, >, <, In Range, Out of range, Equals, Not equals, Equals Ignore Case, Not Equals Ignore Case, Contains, Not contains, Regex match, Regex no match, In string list, Not in string list, In List, Not in list, Starts with |
| Critical Threshold | 0 | [{"0":"inactive"},{"1":"active"}] |
| Critical Repeat Count | 1 | 1-12 |
| Alert | Yes | Yes/No |
| Graph (Yes/No) | Yes | Yes/No |
Sample Output
No graph