MIB Viewer

CISCO-NAT-CGN-EXT-MIB

72 objects
This MIB module extends the IETF draft NAT MIB available at http://tools.ietf.org/html/draft-ietf-behave-nat-mib-11 The extensions are intended to address the needs of the Carrier Grade NAT (CGN), also known as Large Scale NAT (LSN). GLOSSARY ========== Address mapping - is used to refer to association between a private IP to public IP (in case of NAT44 and DS Lite) or source IPv6 address to IPv4 address in case of NAT64 stateful application. Mapping - A mapping used to refer to a NAT translation record. It is a record held in memory that maps a private IP address and port to a public IP address and port. Subscriber - A subscriber is a record held in memory that provides IP address and other details of an end user device which has one or more mappings. Session - A session is a record maintained in memory that identifies a flow. The flow is uniquely identified by the source IPv4/IPv6 address, source port, translated IP address, translated source port, destination IPv4/IPv6 address and destination port. In to Out packet - A packet originating from a subscriber, with a private source address (or with an IPv6 address in case of NAT64), destined to a host with a public IP address. This packet needs NAT (or NAPT) service. Out to In packet - A packet originating from a host on the public Internet (or any host with a routable/public) source address, whose destination address is a mapped (translated) IP address. This packet needs reverse-NAT. Bulk port allocation - A NAT instance can be configured pre-allocate a range of contiguous ports instead of a single port. A mapping log record is created indicating the range of ports allocated to this subscriber. This is done in anticipation that the subscriber is likely to send packets that require more mappings to be created. For the subsequent mapping requests, one of the pre-allocated port is used and no additional log entries need to be created. This is a technique used to reduce the volume of translation record data.
Imported Objects
CISCO-SMIciscoMgmt
NAT-MIBNatBehaviorType natCountersEntry natInstanceEntry natInstanceIndex NatPoolingType
SNMP-FRAMEWORK-MIBSnmpAdminString
SNMPv2-CONFMODULE-COMPLIANCE NOTIFICATION-GROUP OBJECT-GROUP
SNMPv2-SMICounter64 Gauge32 Integer32 MODULE-IDENTITY NOTIFICATION-TYPE OBJECT-TYPE Unsigned32
SNMPv2-TCTEXTUAL-CONVENTION
OIDNameAccessStatusDescription
1.3.6.1.4.1.9.9.818IdentityciscoNatCgnExtMIBThis MIB module extends the IETF draft NAT MIB available at http://tools.ietf.org/html/draft-ietf-behave-nat-mib-11 The extensions are intended to address the …
1.3.6.1.4.1.9.9.818.0NodeciscoNatCgnExtMIBNotifs
1.3.6.1.4.1.9.9.818.0.1NotificationcNatCgnNotifPortUsageWatermarkLowcurrentThe device generates this notification when the value of cNatCgnCounterCurrentPortAllocation becomes lower than or equal to the value of cNatCgnCounterPortUsag…
1.3.6.1.4.1.9.9.818.0.2NotificationcNatCgnNotifPortUsageWatermarkLowClearcurrentThe device generates this notification when the value of cNatCgnCounterCurrentPortAllocation becomes higher than or equal to the value of cNatCgnCounterPortUsa…
1.3.6.1.4.1.9.9.818.0.3NotificationcNatCgnNotifPortUsageWatermarkHighcurrentThe device generates this notification when the value of cNatCgnCounterCurrentPortAllocation becomes higher than or equal to the cNatCgnCounterPortUsageHighThr…
1.3.6.1.4.1.9.9.818.0.4NotificationcNatCgnNotifPortUsageWatermarkHighClearcurrentThe device generates this notification when the value of cNatCgnCounterCurrentPortAllocation becomes lower than or equal to the value of cNatCgnCounterPortUsag…
1.3.6.1.4.1.9.9.818.1NodeciscoNatCgnExtMIBObjects
1.3.6.1.4.1.9.9.818.1.1TablecNatCgnInstanceTablenot-accessiblecurrentThis table lists the NAT instances configured on the device.
1.3.6.1.4.1.9.9.818.1.1.1RowcNatCgnInstanceEntrynot-accessiblecurrentAn entry describes a NAT instance configured on the device. The parameters include the type of the NAT instance and the important configuration elements.
1.3.6.1.4.1.9.9.818.1.1.1.1ColumncNatCgnInstanceTyperead-writecurrentThis object specifies the type of the NAT instance. If the instance type is changed, the service-type attribute of the corresponding interfaces will also need …
1.3.6.1.4.1.9.9.818.1.1.1.2ColumncNatCgnInstanceServiceNameread-writecurrentThis object specifies the CGN service name of this instance.
1.3.6.1.4.1.9.9.818.1.1.1.3ColumncNatCgnInstanceVrfread-writecurrentThis object specifies the name the VRF that is bringing in subscriber's traffic that needs to undergo NAT.
1.3.6.1.4.1.9.9.818.1.1.1.4ColumncNatCgnInstanceInterfaceread-writecurrentThis object specifies the name the interface that is bringing in subscriber's traffic that needs to undergo NAT. Typically either the cNatCgnInstanceVrf or cNa…
1.3.6.1.4.1.9.9.818.1.1.1.5ColumncNatCgnInstanceBehaviorTyperead-writecurrentThis object specifies the configured NAT mapping behavior for this instance.
1.3.6.1.4.1.9.9.818.1.1.1.6ColumncNatCgnInstancePoolingTyperead-writecurrentThis object specifies the configured NAT address pooling type for this instance.
1.3.6.1.4.1.9.9.818.1.1.1.7ColumncNatCgnInstanceProtocolPortLimitread-writecurrentThis object specifies the configured protocol port limit. This is the maximum number of active mappings each subscriber can have at any given time. Value of ze…
1.3.6.1.4.1.9.9.818.1.1.1.8ColumncNatCgnInstanceProtocolPortBulkAllocControlread-writecurrentThis object specifies the configured bulk port allocation size. Value of 0 means, bulk allocation is not applicable (or not supported). Value of 1 means, it is…
1.3.6.1.4.1.9.9.818.1.2NodecNatCgnCounters
1.3.6.1.4.1.9.9.818.1.2.1TablecNatCgnCounterTablenot-accessiblecurrentThis table lists the counters of NAT instances in the device.
1.3.6.1.4.1.9.9.818.1.2.1.1RowcNatCgnCounterEntrynot-accessiblecurrentAn entry contains the additional statistics of a NAT instance.
1.3.6.1.4.1.9.9.818.1.2.1.1.1ColumncNatCgnCounterSessionCreationsread-onlycurrentThis object indicates the number of sessions created since the instance is up.
1.3.6.1.4.1.9.9.818.1.2.1.1.2ColumncNatCgnCounterSessionRemovalsread-onlycurrentThis object indicates the number of sessions removed since the instance is up. The number of active sessions is equal to cNatCgnCounterSessionCreations - cNatC…
1.3.6.1.4.1.9.9.818.1.2.1.1.3ColumncNatCgnCounterOutOfSessionDropsread-onlycurrentThis object indicates the number of packets dropped because they required a new session entry to be created, however, there is no space to create new sessions.
1.3.6.1.4.1.9.9.818.1.2.1.1.4ColumncNatCgnCounterSessionLimitDropsread-onlycurrentThis object indicates the number of packets in either in to out or out to in direction dropped because of exceeding limit on session entries.
1.3.6.1.4.1.9.9.818.1.2.1.1.5ColumncNatCgnCounterNoMappingEntryDropsread-onlycurrentThis object indicates the number of packets in the out to in direction not translated because there was no mapping found.
1.3.6.1.4.1.9.9.818.1.2.1.1.6ColumncNatCgnCounterSourceIPOutOfRangeDropsread-onlycurrentThis object indicates the number of packets in the in to out direction not translated because source address was out of configured prefix or range. For NAT44 c…
1.3.6.1.4.1.9.9.818.1.2.1.1.7ColumncNatCgnCounterEndPointFilteringDropsread-onlycurrentThis object indicates the number of packets in the out to in direction dropped because of end point dependent filtering policy. Note, the value of this object …
1.3.6.1.4.1.9.9.818.1.2.1.1.8ColumncNatCgnCounterTCPSequenceDropsread-onlycurrentThis object indicates the number of packets in the out to in direction dropped because TCP sequence check failed.
1.3.6.1.4.1.9.9.818.1.2.1.1.9ColumncNatCgnCounterTCPMappingDropsread-onlycurrentThis object indicates the number of TCP packets in the in to out direction dropped because a new mapping was required to be created, however TCP SYN flag was n…
1.3.6.1.4.1.9.9.818.1.2.1.1.10ColumncNatCgnCounterFragmentPktsInToOutDropsread-onlycurrentThis object indicates the number of fragmented packets in the in to out direction dropped due to errors such as timed out waiting for first fragment or no spac…
1.3.6.1.4.1.9.9.818.1.2.1.1.11ColumncNatCgnCounterFragmentPktsOutToInDropsread-onlycurrentThis object indicates the number of fragmented packets in the out to in direction dropped due to errors such as timed out waiting for first fragment or no spac…
1.3.6.1.4.1.9.9.818.1.2.1.1.12ColumncNatCgnCounterCurrentPortAllocationread-onlycurrentThis object indicates the current average port allocation across all available public IP addresses applied to this NAT instance. When bulk allocation is enable…
1.3.6.1.4.1.9.9.818.1.2.1.1.13ColumncNatCgnCounterPortUsageLowThresholdread-writecurrentThis object specifies the low threshold in percentage of available public ports that are used up. The notification cNatCgnNotifPortUsageWatermarkLow is sent on…
1.3.6.1.4.1.9.9.818.1.2.1.1.14ColumncNatCgnCounterPortUsageClearLowThresholdread-writecurrentThis object specifies the clear low threshold in percentage of available public ports that are used up. The notification cNatCgnNotifPortUsageWatermarkLowClear…
1.3.6.1.4.1.9.9.818.1.2.1.1.15ColumncNatCgnCounterPortUsageHighThresholdread-writecurrentThis object specifies the high threshold in percentage of available public ports that are used up. The notification cNatCgnNotifPortUsageWatermarkHigh is sent …
1.3.6.1.4.1.9.9.818.1.2.1.1.16ColumncNatCgnCounterPortUsageClearHighThresholdread-writecurrentThis object specifies the clear high threshold in percentage of available public ports that are used up. The notification cNatCgnNotifPortUsageWatermarkHighCle…
1.3.6.1.4.1.9.9.818.1.2.1.1.17ColumncNatCgnCounterAverageBulkPortUsageread-onlycurrentThis object indicates the average percentage usage of ports pre-allocated in bulk. This value is valid only if the bulk allocation is configured. That is the v…
1.3.6.1.4.1.9.9.818.1.2.2TablecNatCgnLogStatTablenot-accessiblecurrentThis table lists the logging statistics of each NAT instance in the device.
1.3.6.1.4.1.9.9.818.1.2.2.1RowcNatCgnLogStatEntrynot-accessiblecurrentAn entry describes the logging related statistics of a NAT instance.
1.3.6.1.4.1.9.9.818.1.2.2.1.1ColumncNatCgnLogStatMappingCreateRecordsread-onlycurrentThis object indicates the number of translation create records generated. It could be Netflow or Syslog records. It may not always necessarily be equal to numb…
1.3.6.1.4.1.9.9.818.1.2.2.1.2ColumncNatCgnLogStatMappingDeleteRecordsread-onlycurrentThis object indicates the number of translation delete records generated. It could be Netflow or Syslog records. It may not always necessarily be equal to numb…
1.3.6.1.4.1.9.9.818.1.2.2.1.3ColumncNatCgnLogStatSessionCreateRecordsread-onlycurrentThis object indicates the number of session create records generated. It could be Netflow or Syslog records. It may not always necessarily be equal to number o…
1.3.6.1.4.1.9.9.818.1.2.2.1.4ColumncNatCgnLogStatSessionDeleteRecordsread-onlycurrentThis object indicates the number of session delete records generated. It could be Netflow or Syslog records. It may not always necessarily be equal to number o…
1.3.6.1.4.1.9.9.818.1.2.2.1.5ColumncNatCgnLogStatNetflowPacketsread-onlycurrentThis object indicates the number of Netflow packets generated. This includes the packet which could not be sent out due to congestion or other reasons.
1.3.6.1.4.1.9.9.818.1.2.2.1.6ColumncNatCgnLogStatNetflowPacketDropsread-onlycurrentThis object indicates the number of Netflow packets which could not be sent out due to congestion or other errors within the CGN device. This does not include …
1.3.6.1.4.1.9.9.818.1.2.2.1.7ColumncNatCgnLogStatSyslogPacketsread-onlycurrentThis object indicates the number of Syslog packets generated. This includes the packet which could not be sent out due to congestion or other reasons.
1.3.6.1.4.1.9.9.818.1.2.2.1.8ColumncNatCgnLogStatSyslogPacketDropsread-onlycurrentThis object indicates the number of Syslog packets which could not be sent out due to congestion or other errors within the CGN device. This does not include a…
1.3.6.1.4.1.9.9.818.1.2.3TablecNatCgnALGCountersTablenot-accessiblecurrentThis table lists the application level gateway status and counters for each ALG type and for each NAT instance in the device.
1.3.6.1.4.1.9.9.818.1.2.3.1RowcNatCgnALGCountersEntrynot-accessiblecurrentAn entry describes status and counters of a specific ALG type for a specific NAT instance.
1.3.6.1.4.1.9.9.818.1.2.3.1.1ColumncNatCgnALGTypenot-accessiblecurrentThis object indicates the ALG type which together with natInstanceIndex uniquely identifies the set of counters being reported.
1.3.6.1.4.1.9.9.818.1.2.3.1.2ColumncNatCgnALGStatusread-onlycurrentThis object indicates the status of this ALG type for this NAT instance. notApplicable: This ALG type is not relevant to this NAT instance. unSupported: This A…
1.3.6.1.4.1.9.9.818.1.2.3.1.3ColumncNatCgnALGMappingCreationsread-onlycurrentThis object indicates the number of mappings created for this ALG.
1.3.6.1.4.1.9.9.818.1.2.3.1.4ColumncNatCgnALGMappingRemovalsread-onlycurrentThis object indicates the number of mappings removed which were created for this ALG. The number of active mappings for this ALG is equal to cNatCgnALGMappingC…
1.3.6.1.4.1.9.9.818.1.2.3.1.5ColumncNatCgnALGUnsupportedErrorsread-onlycurrentThis object indicates the number of application level messages/packets which could not be processed as they used options which are not yet supported. This does…
1.3.6.1.4.1.9.9.818.1.2.3.1.6ColumncNatCgnALGProtocolErrorsread-onlycurrentThis object indicates the number of application level messages/packets which could not be processed as they did not conform to the protocol.
1.3.6.1.4.1.9.9.818.2NodeciscoNatCgnExtMIBConform
1.3.6.1.4.1.9.9.818.2.1NodecNatCgnMIBCompliances
1.3.6.1.4.1.9.9.818.2.1.1CompliancecNatCgnModuleComplianceread-onlycurrentThis compliance statement specifies the minimal requirements an implementation must meet in order to claim full compliance with the definition of the CISCO-NAT…
1.3.6.1.4.1.9.9.818.2.2NodecNatCgnMIBGroups
1.3.6.1.4.1.9.9.818.2.2.1GroupcNatCgnConfigGroupcurrentThis group contains objects describing basic configuration elements of NAT instances.
1.3.6.1.4.1.9.9.818.2.2.2GroupcNatCgnOptionConfigGroupcurrentThis group contains objects describing optional configuration elements of NAT instances.
1.3.6.1.4.1.9.9.818.2.2.3GroupcNatCgnCountersGroupcurrentThis group contains objects describing counters and thresholds.
1.3.6.1.4.1.9.9.818.2.2.4GroupcNatCgnSessionGroupcurrentThis group contains objects describing counters specific to session level tracking.
1.3.6.1.4.1.9.9.818.2.2.5GroupcNatCgnBulkAllocGroupcurrentThis group contains objects describing configuration and statistics specific to bulk port allocation.
1.3.6.1.4.1.9.9.818.2.2.6GroupcNatCgnNetflowLoggingGroupcurrentThis group contains objects describing counters of Netflow based logging.
1.3.6.1.4.1.9.9.818.2.2.7GroupcNatCgnSyslogLoggingGroupcurrentThis group contains objects describing counters of syslog based logging.
1.3.6.1.4.1.9.9.818.2.2.8GroupcNatCgnFragmentsGroupcurrentThis group contains objects describing fragment related counters.
1.3.6.1.4.1.9.9.818.2.2.9GroupcNatCgnALGCountersGroupcurrentThis group contains objects describing counters related to ALG processing.
1.3.6.1.4.1.9.9.818.2.2.11GroupcNatCgnServiceNameGroupcurrentThis group contains objects describing service related configuration elements
1.3.6.1.4.1.9.9.818.2.2.15GroupcNatCgnNotificationsGroupcurrentThis group contains notifications supporting NAT instances.
Type Definitions
NameSyntaxStatusDescription
NatCgnALGTypeINTEGER { algActiveFTP(1), algDNS(2), algH323(3), algHTTP(4), algLDAP(5), algMSRPC(6), algNetBIOS(7), algPCP(8), algPPTP(9), algRCMD(10), algRTSP(11), algSCCP(12), algSIP(13), algSunRPC(14) }currentA value that represents ALG (Application Level Gateway) protocol type.
NatCgnInstanceTypeINTEGER { nat44(1), nat64Stateful(2), dsLite(3) }currentA value that represents a type of NAT instance. nat44(1): This is the traditional Network Address Translation from IPv4 to IPv4, explained in RFC 4787. nat64Stateful(2): This is the IPv6 to IPv4 translation (that is, Ad…