This article describes how to configure an SRX Series device as an SNMP agent and how to verify and troubleshoot your configuration.            

For other topics, go to the SRX Getting Started main page.

This section contains the following:

• J-Web Configuration
• CLI Configuration
• SNMP Monitoring
• Juniper MIBs
• Technical Documentation
• Verification

J-Web Configuration

The following example configures an SRX Series device as an SNMP agent, which allows the device to be managed using SNMP:

1. Select Configure>Services>SNMP .
2. In the System Location box, type lab .
3. In the Contact Information box, type [email protected] .
4. Under Communities, click Add . The Add an SNMP community window appears.
5. In the Community Name box, type public .
6. In the Authorization list, select read-write .
7. Click OK .
8. Click Apply .
9. Select Configure>Security>Zones .
10. Select the security zone named trust . The Edit Security Zone: trust window appears.
11. In the Interfaces Configuration list, click the ge-0/0/0.0 interface, and click Edit .
12. For Host Inbound Traffic, under System Services, click Allow All or Allow Selected Services .
13. If you selected Allow Selected Services, select snmp , and click Add . 
    1. Select http , and click Add . 
    2. Select https , and click Add . 
14. Important: Make sure you added http and/or https; otherwise, you will lose J-Web connectivity to the SRX Series device.
15. Click OK .
16. Click Apply .
17. Make sure that you have added http or https in step 13, and then select Commit .
     

CLI Configuration

The following example configures an SRX Series device as an SNMP agent, which allows the device to be managed using SNMP:

1. Set the system identification and community.

   Note: This example does not use every option available for SNMP configuration. For information about additional SNMP configuration options, see Technical Documentation .

   user@host# set snmp location lab
user@host# set snmp contact "[email protected]"

2. One or more communities must be configured to authorize network management system access to the SRX Series device. Each community has a community name, an authorization, which determines the kind of access the network management system has to the device, and, when applicable, a list of valid clients that can access the device.

   user@host# set snmp community public authorization read-write

3. Enable SNMP access on an interface.

   user@host# set security zones security-zone trust interfaces ge-0/0/0.0 host-inbound-traffic system-services snmp

4. (Optional) Restrict SNMP access to certain sources.

   user@host# set snmp community public clients 172.26.0.0/16
user@host# set snmp community public clients 0.0.0.0/0 restrict

For SNMPv3 configuration, refer to KB22048 - How to configure SNMPv3 on SRX [juniper.net] .

SNMP Monitoring

The following are examples of querying an SRX Series device using SNMP.

Example 1

This example shows how to walk the jnxMibs MIB on the SRX Series device from a remote host using snmpwalk:

MIB walk on the SRX (OID for the jnxMibs is 1.3.6.4.1.2636.3):                 

snmpwalk of the SRX Series device from remote host: (srx240hostname resolves to the interface IP address used for snmp polling in the following example)

Example 2

This example shows how to walk the jnxMibs MIB from the SRX Series device.

root@SRX240> show snmp mib walk jnxOperatingDescr
jnxOperatingDescr.1.1.0.0 = midplane
jnxOperatingDescr.4.1.0.0 = SRX240 PowerSupply fan 1
jnxOperatingDescr.4.2.0.0 = SRX240 PowerSupply fan 2
jnxOperatingDescr.4.3.0.0 = SRX240 CPU fan 1
jnxOperatingDescr.4.4.0.0 = SRX240 CPU fan 2
jnxOperatingDescr.7.1.0.0 = FPC: FPC @ 0/*/*
jnxOperatingDescr.8.1.1.0 = PIC: 16x GE Base PIC @ 0/0/*
jnxOperatingDescr.9.1.0.0 = Routing Engine
jnxOperatingDescr.9.1.1.0 = USB Hub
 

Juniper MIBs

The following links provide information about interpreting the Juniper MIBs. The SNMP OID for Juniper is 1.3.6.1.4.1.2636.

• Juniper Networks SNMP MIB Explorer
• Structure of Management Information MIB
• Juniper Networks Enterprise-Specific MIBs
• Juniper Networks Enterprise-Specific SNMP Traps
• Juniper Networks Enterprise-Specific MIBs
   

Technical Documentation

Verification

To verify the SNMP configuration, use the following operational commands:

• show configuration snmp
• show snmp statistics

For more information about verifying SNMP configuration, see Verifying SNMP Configuration .

2020-06-18: Article reviewed for accuracy.  Added SNMP MIB Explorer reference from pathfinder.