Support Support Downloads Knowledge Base Case Manager My Juniper Community

Knowledge Base

Search our Knowledge Base sites to find answers to your questions.

Ask All Knowledge Base Sites All Knowledge Base Sites JunosE Defect (KA)Knowledge BaseSecurity AdvisoriesTechnical BulletinsTechnotes Sign in to display secure content and recently viewed articles

[EX] SNMP poll over routing instance example

0

0

Article ID: KB17775 KB Last Updated: 03 Mar 2017Version: 3.0
Summary:

How to poll SNMP over routing instance

Symptoms:
This article provides the needed steps to do SNMP polling inside a routing instance on EX system.

If it is not configured correctly, SNMP polling will fail with similar error messages as below:

Jun 11 23:25:54 snmpd[817]: SNMPD_AUTH_RESTRICTED_ADDRESS: nsa_initial_callback: request from address 192.168.100.2 not allowed
Jun 11 23:25:54 snmpd[817]: SNMPD_AUTH_FAILURE: nsa_initial_embedcomm: unauthorized SNMP community from 192.168.100.2 to unknown community name (public)
Jun 11 23:25:56 snmpd[817]: SNMPD_AUTH_RESTRICTED_ADDRESS: nsa_initial_callback: request from address 192.168.100.2 not allowed
Jun 11 23:25:56 snmpd[817]: SNMPD_AUTH_FAILURE: nsa_initial_embedcomm: unauthorized SNMP community from 192.168.100.2 to unknown community name (public)
Solution:
To be able to perform SNMP polling inside a routing instance on the EX platform, refer to the minimal example configuration below:
{master:0}[edit]
root# show routing-instances
VRF1 {
instance-type virtual-router;
interface vlan.100;
}

{master:0}[edit]
root# show snmp
community public {
routing-instance VRF1;
}
routing-instance-access;
In the SNMP configuration, the routing-instance name under the community stanza and routing-instance-access are required.

In order to access MIB objects and perform SNMP operations for the routing-instances, SNMP v1 and v2c clients need to encode the routing-instance name in the community string in their SNMP requests.
The format is:
routing-instance name@community string
As per the above example, the community string for SNMP v1 an v2c requests should use the following:
VRF1@public

Related Links

Comment on this article > Affected Products Browse the Knowledge Base for more articles related to these product categories. Select a category to begin.

Getting Up and Running with Junos

Getting Up and Running with Junos Security Alerts and Vulnerabilities Product Alerts and Software Release Notices Problem Report (PR) Search Tool EOL Notices and Bulletins JTAC User Guide Customer Care User Guide Pathfinder SRX High Availability Configurator SRX VPN Configurator Training Courses and Videos End User Licence Agreement Global Search