CISCO-NAT-CGN-EXT-MIB
72 objects
This MIB module extends the IETF draft NAT MIB available at http://tools.ietf.org/html/draft-ietf-behave-nat-mib-11 The extensions are intended to address the needs of the Carrier Grade NAT (CGN), also known as Large Scale NAT (LSN). GLOSSARY ========== Address mapping - is used to refer to association between a private IP to public IP (in case of NAT44 and DS Lite) or source IPv6 address to IPv4 address in case of NAT64 stateful application. Mapping - A mapping used to refer to a NAT translation record. It is a record held in memory that maps a private IP address and port to a public IP address and port. Subscriber - A subscriber is a record held in memory that provides IP address and other details of an end user device which has one or more mappings. Session - A session is a record maintained in memory that identifies a flow. The flow is uniquely identified by the source IPv4/IPv6 address, source port, translated IP address, translated source port, destination IPv4/IPv6 address and destination port. In to Out packet - A packet originating from a subscriber, with a private source address (or with an IPv6 address in case of NAT64), destined to a host with a public IP address. This packet needs NAT (or NAPT) service. Out to In packet - A packet originating from a host on the public Internet (or any host with a routable/public) source address, whose destination address is a mapped (translated) IP address. This packet needs reverse-NAT. Bulk port allocation - A NAT instance can be configured pre-allocate a range of contiguous ports instead of a single port. A mapping log record is created indicating the range of ports allocated to this subscriber. This is done in anticipation that the subscriber is likely to send packets that require more mappings to be created. For the subsequent mapping requests, one of the pre-allocated port is used and no additional log entries need to be created. This is a technique used to reduce the volume of translation record data.
Imported Objects
| CISCO-SMI | ciscoMgmt |
| NAT-MIB | NatBehaviorType natCountersEntry natInstanceEntry natInstanceIndex NatPoolingType |
| SNMP-FRAMEWORK-MIB | SnmpAdminString |
| SNMPv2-CONF | MODULE-COMPLIANCE NOTIFICATION-GROUP OBJECT-GROUP |
| SNMPv2-SMI | Counter64 Gauge32 Integer32 MODULE-IDENTITY NOTIFICATION-TYPE OBJECT-TYPE Unsigned32 |
| SNMPv2-TC | TEXTUAL-CONVENTION |
| OID | Name | Access | Status | Description |
|---|---|---|---|---|
| 1.3.6.1.4.1.9.9.818 | IdentityciscoNatCgnExtMIB | This MIB module extends the IETF draft NAT MIB available at http://tools.ietf.org/html/draft-ietf-behave-nat-mib-11 The extensions are intended to address the … | ||
| 1.3.6.1.4.1.9.9.818.0 | NodeciscoNatCgnExtMIBNotifs | |||
| 1.3.6.1.4.1.9.9.818.0.1 | NotificationcNatCgnNotifPortUsageWatermarkLow | current | The device generates this notification when the value of cNatCgnCounterCurrentPortAllocation becomes lower than or equal to the value of cNatCgnCounterPortUsag… | |
| 1.3.6.1.4.1.9.9.818.0.2 | NotificationcNatCgnNotifPortUsageWatermarkLowClear | current | The device generates this notification when the value of cNatCgnCounterCurrentPortAllocation becomes higher than or equal to the value of cNatCgnCounterPortUsa… | |
| 1.3.6.1.4.1.9.9.818.0.3 | NotificationcNatCgnNotifPortUsageWatermarkHigh | current | The device generates this notification when the value of cNatCgnCounterCurrentPortAllocation becomes higher than or equal to the cNatCgnCounterPortUsageHighThr… | |
| 1.3.6.1.4.1.9.9.818.0.4 | NotificationcNatCgnNotifPortUsageWatermarkHighClear | current | The device generates this notification when the value of cNatCgnCounterCurrentPortAllocation becomes lower than or equal to the value of cNatCgnCounterPortUsag… | |
| 1.3.6.1.4.1.9.9.818.1 | NodeciscoNatCgnExtMIBObjects | |||
| 1.3.6.1.4.1.9.9.818.1.1 | TablecNatCgnInstanceTable | not-accessible | current | This table lists the NAT instances configured on the device. |
| 1.3.6.1.4.1.9.9.818.1.1.1 | RowcNatCgnInstanceEntry | not-accessible | current | An entry describes a NAT instance configured on the device. The parameters include the type of the NAT instance and the important configuration elements. |
| 1.3.6.1.4.1.9.9.818.1.1.1.1 | ColumncNatCgnInstanceType | read-write | current | This object specifies the type of the NAT instance. If the instance type is changed, the service-type attribute of the corresponding interfaces will also need … |
| 1.3.6.1.4.1.9.9.818.1.1.1.2 | ColumncNatCgnInstanceServiceName | read-write | current | This object specifies the CGN service name of this instance. |
| 1.3.6.1.4.1.9.9.818.1.1.1.3 | ColumncNatCgnInstanceVrf | read-write | current | This object specifies the name the VRF that is bringing in subscriber's traffic that needs to undergo NAT. |
| 1.3.6.1.4.1.9.9.818.1.1.1.4 | ColumncNatCgnInstanceInterface | read-write | current | This object specifies the name the interface that is bringing in subscriber's traffic that needs to undergo NAT. Typically either the cNatCgnInstanceVrf or cNa… |
| 1.3.6.1.4.1.9.9.818.1.1.1.5 | ColumncNatCgnInstanceBehaviorType | read-write | current | This object specifies the configured NAT mapping behavior for this instance. |
| 1.3.6.1.4.1.9.9.818.1.1.1.6 | ColumncNatCgnInstancePoolingType | read-write | current | This object specifies the configured NAT address pooling type for this instance. |
| 1.3.6.1.4.1.9.9.818.1.1.1.7 | ColumncNatCgnInstanceProtocolPortLimit | read-write | current | This object specifies the configured protocol port limit. This is the maximum number of active mappings each subscriber can have at any given time. Value of ze… |
| 1.3.6.1.4.1.9.9.818.1.1.1.8 | ColumncNatCgnInstanceProtocolPortBulkAllocControl | read-write | current | This object specifies the configured bulk port allocation size. Value of 0 means, bulk allocation is not applicable (or not supported). Value of 1 means, it is… |
| 1.3.6.1.4.1.9.9.818.1.2 | NodecNatCgnCounters | |||
| 1.3.6.1.4.1.9.9.818.1.2.1 | TablecNatCgnCounterTable | not-accessible | current | This table lists the counters of NAT instances in the device. |
| 1.3.6.1.4.1.9.9.818.1.2.1.1 | RowcNatCgnCounterEntry | not-accessible | current | An entry contains the additional statistics of a NAT instance. |
| 1.3.6.1.4.1.9.9.818.1.2.1.1.1 | ColumncNatCgnCounterSessionCreations | read-only | current | This object indicates the number of sessions created since the instance is up. |
| 1.3.6.1.4.1.9.9.818.1.2.1.1.2 | ColumncNatCgnCounterSessionRemovals | read-only | current | This object indicates the number of sessions removed since the instance is up. The number of active sessions is equal to cNatCgnCounterSessionCreations - cNatC… |
| 1.3.6.1.4.1.9.9.818.1.2.1.1.3 | ColumncNatCgnCounterOutOfSessionDrops | read-only | current | This object indicates the number of packets dropped because they required a new session entry to be created, however, there is no space to create new sessions. |
| 1.3.6.1.4.1.9.9.818.1.2.1.1.4 | ColumncNatCgnCounterSessionLimitDrops | read-only | current | This object indicates the number of packets in either in to out or out to in direction dropped because of exceeding limit on session entries. |
| 1.3.6.1.4.1.9.9.818.1.2.1.1.5 | ColumncNatCgnCounterNoMappingEntryDrops | read-only | current | This object indicates the number of packets in the out to in direction not translated because there was no mapping found. |
| 1.3.6.1.4.1.9.9.818.1.2.1.1.6 | ColumncNatCgnCounterSourceIPOutOfRangeDrops | read-only | current | This object indicates the number of packets in the in to out direction not translated because source address was out of configured prefix or range. For NAT44 c… |
| 1.3.6.1.4.1.9.9.818.1.2.1.1.7 | ColumncNatCgnCounterEndPointFilteringDrops | read-only | current | This object indicates the number of packets in the out to in direction dropped because of end point dependent filtering policy. Note, the value of this object … |
| 1.3.6.1.4.1.9.9.818.1.2.1.1.8 | ColumncNatCgnCounterTCPSequenceDrops | read-only | current | This object indicates the number of packets in the out to in direction dropped because TCP sequence check failed. |
| 1.3.6.1.4.1.9.9.818.1.2.1.1.9 | ColumncNatCgnCounterTCPMappingDrops | read-only | current | This object indicates the number of TCP packets in the in to out direction dropped because a new mapping was required to be created, however TCP SYN flag was n… |
| 1.3.6.1.4.1.9.9.818.1.2.1.1.10 | ColumncNatCgnCounterFragmentPktsInToOutDrops | read-only | current | This object indicates the number of fragmented packets in the in to out direction dropped due to errors such as timed out waiting for first fragment or no spac… |
| 1.3.6.1.4.1.9.9.818.1.2.1.1.11 | ColumncNatCgnCounterFragmentPktsOutToInDrops | read-only | current | This object indicates the number of fragmented packets in the out to in direction dropped due to errors such as timed out waiting for first fragment or no spac… |
| 1.3.6.1.4.1.9.9.818.1.2.1.1.12 | ColumncNatCgnCounterCurrentPortAllocation | read-only | current | This object indicates the current average port allocation across all available public IP addresses applied to this NAT instance. When bulk allocation is enable… |
| 1.3.6.1.4.1.9.9.818.1.2.1.1.13 | ColumncNatCgnCounterPortUsageLowThreshold | read-write | current | This object specifies the low threshold in percentage of available public ports that are used up. The notification cNatCgnNotifPortUsageWatermarkLow is sent on… |
| 1.3.6.1.4.1.9.9.818.1.2.1.1.14 | ColumncNatCgnCounterPortUsageClearLowThreshold | read-write | current | This object specifies the clear low threshold in percentage of available public ports that are used up. The notification cNatCgnNotifPortUsageWatermarkLowClear… |
| 1.3.6.1.4.1.9.9.818.1.2.1.1.15 | ColumncNatCgnCounterPortUsageHighThreshold | read-write | current | This object specifies the high threshold in percentage of available public ports that are used up. The notification cNatCgnNotifPortUsageWatermarkHigh is sent … |
| 1.3.6.1.4.1.9.9.818.1.2.1.1.16 | ColumncNatCgnCounterPortUsageClearHighThreshold | read-write | current | This object specifies the clear high threshold in percentage of available public ports that are used up. The notification cNatCgnNotifPortUsageWatermarkHighCle… |
| 1.3.6.1.4.1.9.9.818.1.2.1.1.17 | ColumncNatCgnCounterAverageBulkPortUsage | read-only | current | This object indicates the average percentage usage of ports pre-allocated in bulk. This value is valid only if the bulk allocation is configured. That is the v… |
| 1.3.6.1.4.1.9.9.818.1.2.2 | TablecNatCgnLogStatTable | not-accessible | current | This table lists the logging statistics of each NAT instance in the device. |
| 1.3.6.1.4.1.9.9.818.1.2.2.1 | RowcNatCgnLogStatEntry | not-accessible | current | An entry describes the logging related statistics of a NAT instance. |
| 1.3.6.1.4.1.9.9.818.1.2.2.1.1 | ColumncNatCgnLogStatMappingCreateRecords | read-only | current | This object indicates the number of translation create records generated. It could be Netflow or Syslog records. It may not always necessarily be equal to numb… |
| 1.3.6.1.4.1.9.9.818.1.2.2.1.2 | ColumncNatCgnLogStatMappingDeleteRecords | read-only | current | This object indicates the number of translation delete records generated. It could be Netflow or Syslog records. It may not always necessarily be equal to numb… |
| 1.3.6.1.4.1.9.9.818.1.2.2.1.3 | ColumncNatCgnLogStatSessionCreateRecords | read-only | current | This object indicates the number of session create records generated. It could be Netflow or Syslog records. It may not always necessarily be equal to number o… |
| 1.3.6.1.4.1.9.9.818.1.2.2.1.4 | ColumncNatCgnLogStatSessionDeleteRecords | read-only | current | This object indicates the number of session delete records generated. It could be Netflow or Syslog records. It may not always necessarily be equal to number o… |
| 1.3.6.1.4.1.9.9.818.1.2.2.1.5 | ColumncNatCgnLogStatNetflowPackets | read-only | current | This object indicates the number of Netflow packets generated. This includes the packet which could not be sent out due to congestion or other reasons. |
| 1.3.6.1.4.1.9.9.818.1.2.2.1.6 | ColumncNatCgnLogStatNetflowPacketDrops | read-only | current | This object indicates the number of Netflow packets which could not be sent out due to congestion or other errors within the CGN device. This does not include … |
| 1.3.6.1.4.1.9.9.818.1.2.2.1.7 | ColumncNatCgnLogStatSyslogPackets | read-only | current | This object indicates the number of Syslog packets generated. This includes the packet which could not be sent out due to congestion or other reasons. |
| 1.3.6.1.4.1.9.9.818.1.2.2.1.8 | ColumncNatCgnLogStatSyslogPacketDrops | read-only | current | This object indicates the number of Syslog packets which could not be sent out due to congestion or other errors within the CGN device. This does not include a… |
| 1.3.6.1.4.1.9.9.818.1.2.3 | TablecNatCgnALGCountersTable | not-accessible | current | This table lists the application level gateway status and counters for each ALG type and for each NAT instance in the device. |
| 1.3.6.1.4.1.9.9.818.1.2.3.1 | RowcNatCgnALGCountersEntry | not-accessible | current | An entry describes status and counters of a specific ALG type for a specific NAT instance. |
| 1.3.6.1.4.1.9.9.818.1.2.3.1.1 | ColumncNatCgnALGType | not-accessible | current | This object indicates the ALG type which together with natInstanceIndex uniquely identifies the set of counters being reported. |
| 1.3.6.1.4.1.9.9.818.1.2.3.1.2 | ColumncNatCgnALGStatus | read-only | current | This object indicates the status of this ALG type for this NAT instance. notApplicable: This ALG type is not relevant to this NAT instance. unSupported: This A… |
| 1.3.6.1.4.1.9.9.818.1.2.3.1.3 | ColumncNatCgnALGMappingCreations | read-only | current | This object indicates the number of mappings created for this ALG. |
| 1.3.6.1.4.1.9.9.818.1.2.3.1.4 | ColumncNatCgnALGMappingRemovals | read-only | current | This object indicates the number of mappings removed which were created for this ALG. The number of active mappings for this ALG is equal to cNatCgnALGMappingC… |
| 1.3.6.1.4.1.9.9.818.1.2.3.1.5 | ColumncNatCgnALGUnsupportedErrors | read-only | current | This object indicates the number of application level messages/packets which could not be processed as they used options which are not yet supported. This does… |
| 1.3.6.1.4.1.9.9.818.1.2.3.1.6 | ColumncNatCgnALGProtocolErrors | read-only | current | This object indicates the number of application level messages/packets which could not be processed as they did not conform to the protocol. |
| 1.3.6.1.4.1.9.9.818.2 | NodeciscoNatCgnExtMIBConform | |||
| 1.3.6.1.4.1.9.9.818.2.1 | NodecNatCgnMIBCompliances | |||
| 1.3.6.1.4.1.9.9.818.2.1.1 | CompliancecNatCgnModuleCompliance | read-only | current | This compliance statement specifies the minimal requirements an implementation must meet in order to claim full compliance with the definition of the CISCO-NAT… |
| 1.3.6.1.4.1.9.9.818.2.2 | NodecNatCgnMIBGroups | |||
| 1.3.6.1.4.1.9.9.818.2.2.1 | GroupcNatCgnConfigGroup | current | This group contains objects describing basic configuration elements of NAT instances. | |
| 1.3.6.1.4.1.9.9.818.2.2.2 | GroupcNatCgnOptionConfigGroup | current | This group contains objects describing optional configuration elements of NAT instances. | |
| 1.3.6.1.4.1.9.9.818.2.2.3 | GroupcNatCgnCountersGroup | current | This group contains objects describing counters and thresholds. | |
| 1.3.6.1.4.1.9.9.818.2.2.4 | GroupcNatCgnSessionGroup | current | This group contains objects describing counters specific to session level tracking. | |
| 1.3.6.1.4.1.9.9.818.2.2.5 | GroupcNatCgnBulkAllocGroup | current | This group contains objects describing configuration and statistics specific to bulk port allocation. | |
| 1.3.6.1.4.1.9.9.818.2.2.6 | GroupcNatCgnNetflowLoggingGroup | current | This group contains objects describing counters of Netflow based logging. | |
| 1.3.6.1.4.1.9.9.818.2.2.7 | GroupcNatCgnSyslogLoggingGroup | current | This group contains objects describing counters of syslog based logging. | |
| 1.3.6.1.4.1.9.9.818.2.2.8 | GroupcNatCgnFragmentsGroup | current | This group contains objects describing fragment related counters. | |
| 1.3.6.1.4.1.9.9.818.2.2.9 | GroupcNatCgnALGCountersGroup | current | This group contains objects describing counters related to ALG processing. | |
| 1.3.6.1.4.1.9.9.818.2.2.11 | GroupcNatCgnServiceNameGroup | current | This group contains objects describing service related configuration elements | |
| 1.3.6.1.4.1.9.9.818.2.2.15 | GroupcNatCgnNotificationsGroup | current | This group contains notifications supporting NAT instances. |
Type Definitions
| Name | Syntax | Status | Description |
|---|---|---|---|
| NatCgnALGType | INTEGER { algActiveFTP(1), algDNS(2), algH323(3), algHTTP(4), algLDAP(5), algMSRPC(6), algNetBIOS(7), algPCP(8), algPPTP(9), algRCMD(10), algRTSP(11), algSCCP(12), algSIP(13), algSunRPC(14) } | current | A value that represents ALG (Application Level Gateway) protocol type. |
| NatCgnInstanceType | INTEGER { nat44(1), nat64Stateful(2), dsLite(3) } | current | A value that represents a type of NAT instance. nat44(1): This is the traditional Network Address Translation from IPv4 to IPv4, explained in RFC 4787. nat64Stateful(2): This is the IPv6 to IPv4 translation (that is, Ad… |