MIBs Depot

CISCO-NAT-CGN-EXT-MIB

Registered at
1.3.6.1.4.1.9.9.818
Last updated
2014-04-03 00:00
Organization
Cisco Systems, Inc.
Revisions
2014-04-03 00:00
Namespace
cisco
Source file
CISCO-NAT-CGN-EXT-MIB
Digest
sha256:2fb94c335bbba5be5b95226f87f05ffc3203dc11c097bceb4743994e1a6a6e21

Description

This MIB module extends the IETF draft NAT MIB available at http://tools.ietf.org/html/draft-ietf-behave-nat-mib-11 The extensions are intended to address the needs of the Carrier Grade NAT (CGN), also known as Large Scale NAT (LSN). GLOSSARY ========== Address mapping - is used to refer to association between a private IP to public IP (in case of NAT44 and DS Lite) or source IPv6 address to IPv4 address in case of NAT64 stateful application. Mapping - A mapping used to refer to a NAT translation record. It is a record held in memory that maps a private IP address and port to a public IP address and port. Subscriber - A subscriber is a record held in memory that provides IP address and other details of an end user device which has one or more mappings. Session - A session is a record maintained in memory that identifies a flow. The flow is uniquely identified by the source IPv4/IPv6 address, source port, translated IP address, translated source port, destination IPv4/IPv6 address and destination port. In to Out packet - A packet originating from a subscriber, with a private source address (or with an IPv6 address in case of NAT64), destined to a host with a public IP address. This packet needs NAT (or NAPT) service. Out to In packet - A packet originating from a host on the public Internet (or any host with a routable/public) source address, whose destination address is a mapped (translated) IP address. This packet needs reverse-NAT. Bulk port allocation - A NAT instance can be configured pre-allocate a range of contiguous ports instead of a single port. A mapping log record is created indicating the range of ports allocated to this subscriber. This is done in anticipation that the subscriber is likely to send packets that require more mappings to be created. For the subsequent mapping requests, one of the pre-allocated port is used and no additional log entries need to be created. This is a technique used to reduce the volume of translation record data.

Contact

Cisco Systems Customer Service Postal: 170 W Tasman Drive San Jose, CA 95134 USA Tel: +1 800 553-NETS E-mail: cs-snmp@cisco.com

Imports

FromSymbols
CISCO-SMIciscoMgmt
NAT-MIBNatBehaviorType, NatPoolingType, natCountersEntry, natInstanceEntry, natInstanceIndex
SNMP-FRAMEWORK-MIBSnmpAdminString
SNMPv2-CONFMODULE-COMPLIANCE, NOTIFICATION-GROUP, OBJECT-GROUP
SNMPv2-SMICounter64, Gauge32, Integer32, MODULE-IDENTITY, NOTIFICATION-TYPE, OBJECT-IDENTITY, OBJECT-TYPE, Unsigned32, iso
SNMPv2-TCDisplayString, TEXTUAL-CONVENTION

Imported by

Nothing in this corpus imports this module.

Load order

Every file a consumer needs in order to load this module, dependencies first.

CISCO-NAT-CGN-EXT-MIB
CISCO-SMI
IANAifType-MIB
IF-MIB
INET-ADDRESS-MIB
NAT-MIB
SNMP-FRAMEWORK-MIB
SNMPv2-CONF
SNMPv2-MIB
SNMPv2-SMI
SNMPv2-TC

Textual conventions

NameOIDSyntaxAccessStatus
NatCgnALGType
TEXTUAL-CONVENTION
A value that represents ALG (Application Level Gateway) protocol type.
current
NatCgnInstanceType
TEXTUAL-CONVENTION
A value that represents a type of NAT instance. nat44(1): This is the traditional Network Address Translation from IPv4 to IPv4, explained in RFC 4787. nat64Stateful(2): This is the IPv6 to IPv4 translation (that is, Address Family translation), explained in RFC 6146. dsLite(3): This is the Dual Stack Lite, explained in RFC 6333.
current

Objects

NameOIDSyntaxAccessStatus
ciscoNatCgnExtMIBNotifs
OBJECT-IDENTITY
1.3.6.1.4.1.9.9.818.0
ciscoNatCgnExtMIBObjects
OBJECT-IDENTITY
1.3.6.1.4.1.9.9.818.1
cNatCgnInstanceTable
OBJECT-TYPE
This table lists the NAT instances configured on the device.
1.3.6.1.4.1.9.9.818.1.1not-accessiblecurrent
cNatCgnInstanceEntry
OBJECT-TYPE
An entry describes a NAT instance configured on the device. The parameters include the type of the NAT instance and the important configuration elements.
1.3.6.1.4.1.9.9.818.1.1.1not-accessiblecurrent
cNatCgnInstanceType
OBJECT-TYPE
This object specifies the type of the NAT instance. If the instance type is changed, the service-type attribute of the corresponding interfaces will also need to be changed.
1.3.6.1.4.1.9.9.818.1.1.1.1NatCgnInstanceTyperead-writecurrent
cNatCgnInstanceServiceName
OBJECT-TYPE
This object specifies the CGN service name of this instance.
1.3.6.1.4.1.9.9.818.1.1.1.2SnmpAdminString (SIZE(0..32))read-writecurrent
cNatCgnInstanceVrf
OBJECT-TYPE
This object specifies the name the VRF that is bringing in subscriber's traffic that needs to undergo NAT.
1.3.6.1.4.1.9.9.818.1.1.1.3SnmpAdminString (SIZE(0..64))read-writecurrent
cNatCgnInstanceInterface
OBJECT-TYPE
This object specifies the name the interface that is bringing in subscriber's traffic that needs to undergo NAT. Typically either the cNatCgnInstanceVrf or cNatCgnInstanceInterface is needed to be configured, but not both.
1.3.6.1.4.1.9.9.818.1.1.1.4SnmpAdminString (SIZE(0..64))read-writecurrent
cNatCgnInstanceBehaviorType
OBJECT-TYPE
This object specifies the configured NAT mapping behavior for this instance.
1.3.6.1.4.1.9.9.818.1.1.1.5NatBehaviorTyperead-writecurrent
cNatCgnInstancePoolingType
OBJECT-TYPE
This object specifies the configured NAT address pooling type for this instance.
1.3.6.1.4.1.9.9.818.1.1.1.6NatPoolingTyperead-writecurrent
cNatCgnInstanceProtocolPortLimit
OBJECT-TYPE
This object specifies the configured protocol port limit. This is the maximum number of active mappings each subscriber can have at any given time. Value of zero means, it is unlimited.
1.3.6.1.4.1.9.9.818.1.1.1.7Unsigned32 (0..65535)read-writecurrent
cNatCgnInstanceProtocolPortBulkAllocControl
OBJECT-TYPE
This object specifies the configured bulk port allocation size. Value of 0 means, bulk allocation is not applicable (or not supported). Value of 1 means, it is not enabled, that is, ports are allocated individually and not in bulk.
1.3.6.1.4.1.9.9.818.1.1.1.8Unsigned32 (0..65535)read-writecurrent
cNatCgnCounters
OBJECT-IDENTITY
1.3.6.1.4.1.9.9.818.1.2
cNatCgnCounterTable
OBJECT-TYPE
This table lists the counters of NAT instances in the device.
1.3.6.1.4.1.9.9.818.1.2.1not-accessiblecurrent
cNatCgnCounterEntry
OBJECT-TYPE
An entry contains the additional statistics of a NAT instance.
1.3.6.1.4.1.9.9.818.1.2.1.1not-accessiblecurrent
cNatCgnCounterSessionCreations
OBJECT-TYPE
This object indicates the number of sessions created since the instance is up.
1.3.6.1.4.1.9.9.818.1.2.1.1.1Counter64read-onlycurrent
cNatCgnCounterSessionRemovals
OBJECT-TYPE
This object indicates the number of sessions removed since the instance is up. The number of active sessions is equal to cNatCgnCounterSessionCreations - cNatCgnCounterSessionRemovals.
1.3.6.1.4.1.9.9.818.1.2.1.1.2Counter64read-onlycurrent
cNatCgnCounterOutOfSessionDrops
OBJECT-TYPE
This object indicates the number of packets dropped because they required a new session entry to be created, however, there is no space to create new sessions.
1.3.6.1.4.1.9.9.818.1.2.1.1.3Counter64read-onlycurrent
cNatCgnCounterSessionLimitDrops
OBJECT-TYPE
This object indicates the number of packets in either in to out or out to in direction dropped because of exceeding limit on session entries.
1.3.6.1.4.1.9.9.818.1.2.1.1.4Counter64read-onlycurrent
cNatCgnCounterNoMappingEntryDrops
OBJECT-TYPE
This object indicates the number of packets in the out to in direction not translated because there was no mapping found.
1.3.6.1.4.1.9.9.818.1.2.1.1.5Counter64read-onlycurrent
cNatCgnCounterSourceIPOutOfRangeDrops
OBJECT-TYPE
This object indicates the number of packets in the in to out direction not translated because source address was out of configured prefix or range. For NAT44 configured in predefined mode, NAT64 stateful or DS Lite, it could be drops due to source IP address not matching the configured prefix bits.
1.3.6.1.4.1.9.9.818.1.2.1.1.6Counter64read-onlycurrent
cNatCgnCounterEndPointFilteringDrops
OBJECT-TYPE
This object indicates the number of packets in the out to in direction dropped because of end point dependent filtering policy. Note, the value of this object should be interpreted in conjunction with the value of cNatCgnInstanceBehaviorType. If the NAT instance is configured with endpointIndependent behavior, the instance is not supposed to filter or drop any packets based on the destination. In such case this counter could either be zero or could be the number of packets passed which would have otherwise be filtered and dropped if cNatCgnInstanceBehaviorType is set to addressDependent or addressAndPortDependent.
1.3.6.1.4.1.9.9.818.1.2.1.1.7Counter64read-onlycurrent
cNatCgnCounterTCPSequenceDrops
OBJECT-TYPE
This object indicates the number of packets in the out to in direction dropped because TCP sequence check failed.
1.3.6.1.4.1.9.9.818.1.2.1.1.8Counter64read-onlycurrent
cNatCgnCounterTCPMappingDrops
OBJECT-TYPE
This object indicates the number of TCP packets in the in to out direction dropped because a new mapping was required to be created, however TCP SYN flag was not set.
1.3.6.1.4.1.9.9.818.1.2.1.1.9Counter64read-onlycurrent
cNatCgnCounterFragmentPktsInToOutDrops
OBJECT-TYPE
This object indicates the number of fragmented packets in the in to out direction dropped due to errors such as timed out waiting for first fragment or no space to hold the fragment.
1.3.6.1.4.1.9.9.818.1.2.1.1.10Counter64read-onlycurrent
cNatCgnCounterFragmentPktsOutToInDrops
OBJECT-TYPE
This object indicates the number of fragmented packets in the out to in direction dropped due to errors such as timed out waiting for first fragment or no space to hold the fragment.
1.3.6.1.4.1.9.9.818.1.2.1.1.11Counter64read-onlycurrent
cNatCgnCounterCurrentPortAllocation
OBJECT-TYPE
This object indicates the current average port allocation across all available public IP addresses applied to this NAT instance. When bulk allocation is enabled (that is, the value of cNatCgnInstanceProtocolPortBulkAllocControl is more than 1), this value will include all the ports pre-allocated in bulk (whether they are in use or not).
1.3.6.1.4.1.9.9.818.1.2.1.1.12Integer32 (0..100)read-onlycurrent
cNatCgnCounterPortUsageLowThreshold
OBJECT-TYPE
This object specifies the low threshold in percentage of available public ports that are used up. The notification cNatCgnNotifPortUsageWatermarkLow is sent once the value of cNatCgnCounterAveragePortAllocation becomes less than or equal to this value. If this object is set to zero, the notification is not generated.
1.3.6.1.4.1.9.9.818.1.2.1.1.13Integer32 (0..100)read-writecurrent
cNatCgnCounterPortUsageClearLowThreshold
OBJECT-TYPE
This object specifies the clear low threshold in percentage of available public ports that are used up. The notification cNatCgnNotifPortUsageWatermarkLowClear is sent once the value of cNatCgnCounterAveragePortAllocation becomes more than or equal to this value. If this object is set to zero, the notification is not generated. Implementations must ensure that values of objects cNatCgnCounterPortUsageClearLowThreshold and cNatCgnCounterPortUsageLowThreshold remain consistent. For example, an implementation must respond with an inconsistentValue error if an attempt is made to set the the value of cNatCgnCounterPortUsageClearLowThreshold to be less than or equal to that of cNatCgnCounterPortUsageLowThreshold and vice versa.
1.3.6.1.4.1.9.9.818.1.2.1.1.14Integer32 (0..100)read-writecurrent
cNatCgnCounterPortUsageHighThreshold
OBJECT-TYPE
This object specifies the high threshold in percentage of available public ports that are used up. The notification cNatCgnNotifPortUsageWatermarkHigh is sent once the value of cNatCgnCounterAveragePortAllocation becomes higher than or equal to this value. If this field is set to zero, the notification is not generated.
1.3.6.1.4.1.9.9.818.1.2.1.1.15Integer32 (0..100)read-writecurrent
cNatCgnCounterPortUsageClearHighThreshold
OBJECT-TYPE
This object specifies the clear high threshold in percentage of available public ports that are used up. The notification cNatCgnNotifPortUsageWatermarkHighClear is sent once the value of cNatCgnCounterAveragePortAllocation becomes less than or equal to this value. If this object is set to zero, the notification is not generated. Implementations must ensure that values of objects cNatCgnCounterPortUsageClearHighThreshold and cNatCgnCounterPortUsageHighThreshold remain consistent. For example, an implementation must respond with an inconsistentValue error if an attempt is made to set the the value of cNatCgnCounterPortUsageClearHighThreshold to be more than or equal to that of cNatCgnCounterPortUsageHighThreshold and vice versa.
1.3.6.1.4.1.9.9.818.1.2.1.1.16Integer32 (0..100)read-writecurrent
cNatCgnCounterAverageBulkPortUsage
OBJECT-TYPE
This object indicates the average percentage usage of ports pre-allocated in bulk. This value is valid only if the bulk allocation is configured. That is the value specified by the cNatCgnInstanceProtocolPortBulkAllocControl is more than 1. This value gives hints about effectiveness of bulk port allocation technique. A very low percentage of bulk port usage may suggest that, bulk allocation size be reduced. On the other hand, a value close to 100 may hint at increasing the bulk size to further reduce log data volume.
1.3.6.1.4.1.9.9.818.1.2.1.1.17Gauge32 (0..100)read-onlycurrent
cNatCgnLogStatTable
OBJECT-TYPE
This table lists the logging statistics of each NAT instance in the device.
1.3.6.1.4.1.9.9.818.1.2.2not-accessiblecurrent
cNatCgnLogStatEntry
OBJECT-TYPE
An entry describes the logging related statistics of a NAT instance.
1.3.6.1.4.1.9.9.818.1.2.2.1not-accessiblecurrent
cNatCgnLogStatMappingCreateRecords
OBJECT-TYPE
This object indicates the number of translation create records generated. It could be Netflow or Syslog records. It may not always necessarily be equal to number of mappings created (natMappingCreations of the NAT-MIB). If bulk allocation is enabled, this number could be much smaller than natMappingCreations. If the NAT mode is configured to be pre-defined or if logging is not configured, this could be zero.
1.3.6.1.4.1.9.9.818.1.2.2.1.1Counter64read-onlycurrent
cNatCgnLogStatMappingDeleteRecords
OBJECT-TYPE
This object indicates the number of translation delete records generated. It could be Netflow or Syslog records. It may not always necessarily be equal to number of mappings deleted (natMappingRemovals of the NAT-MIB). If bulk allocation is enabled, this number could be much smaller than natMappingRemovals. If the NAT mode is configured to be pre-defined or if logging is not configured, this could be zero.
1.3.6.1.4.1.9.9.818.1.2.2.1.2Counter64read-onlycurrent
cNatCgnLogStatSessionCreateRecords
OBJECT-TYPE
This object indicates the number of session create records generated. It could be Netflow or Syslog records. It may not always necessarily be equal to number of sessions created (cNatCgnCounterSessionCreations). If logging is not configured or if session logging is not configured, this could be zero.
1.3.6.1.4.1.9.9.818.1.2.2.1.3Counter64read-onlycurrent
cNatCgnLogStatSessionDeleteRecords
OBJECT-TYPE
This object indicates the number of session delete records generated. It could be Netflow or Syslog records. It may not always necessarily be equal to number of sessions deleted (cNatCgnCounterSessionRemovals). If the logging is not configured or if session logging is not configured, this could be zero.
1.3.6.1.4.1.9.9.818.1.2.2.1.4Counter64read-onlycurrent
cNatCgnLogStatNetflowPackets
OBJECT-TYPE
This object indicates the number of Netflow packets generated. This includes the packet which could not be sent out due to congestion or other reasons.
1.3.6.1.4.1.9.9.818.1.2.2.1.5Counter64read-onlycurrent
cNatCgnLogStatNetflowPacketDrops
OBJECT-TYPE
This object indicates the number of Netflow packets which could not be sent out due to congestion or other errors within the CGN device. This does not include any drops along the way to the collector.
1.3.6.1.4.1.9.9.818.1.2.2.1.6Counter64read-onlycurrent
cNatCgnLogStatSyslogPackets
OBJECT-TYPE
This object indicates the number of Syslog packets generated. This includes the packet which could not be sent out due to congestion or other reasons.
1.3.6.1.4.1.9.9.818.1.2.2.1.7Counter64read-onlycurrent
cNatCgnLogStatSyslogPacketDrops
OBJECT-TYPE
This object indicates the number of Syslog packets which could not be sent out due to congestion or other errors within the CGN device. This does not include any drops along the way to the collector.
1.3.6.1.4.1.9.9.818.1.2.2.1.8Counter64read-onlycurrent
cNatCgnALGCountersTable
OBJECT-TYPE
This table lists the application level gateway status and counters for each ALG type and for each NAT instance in the device.
1.3.6.1.4.1.9.9.818.1.2.3not-accessiblecurrent
cNatCgnALGCountersEntry
OBJECT-TYPE
An entry describes status and counters of a specific ALG type for a specific NAT instance.
1.3.6.1.4.1.9.9.818.1.2.3.1not-accessiblecurrent
cNatCgnALGType
OBJECT-TYPE
This object indicates the ALG type which together with natInstanceIndex uniquely identifies the set of counters being reported.
1.3.6.1.4.1.9.9.818.1.2.3.1.1NatCgnALGTypenot-accessiblecurrent
cNatCgnALGStatus
OBJECT-TYPE
This object indicates the status of this ALG type for this NAT instance. notApplicable: This ALG type is not relevant to this NAT instance. unSupported: This ALG type is relevant to this NAT instance, however it is not supported. notEnabled: This ALG is supported on this NAT instance, however it is not enabled in the configuration. enabled: This ALG is enabled on this NAT instance. The rest of the objects of this entry are valid only if the cNatCgnALGStatus is set to enabled.
1.3.6.1.4.1.9.9.818.1.2.3.1.2INTEGER {notApplicable(1), unSupported(2), notEnabled(3), enabled(4)}read-onlycurrent
cNatCgnALGMappingCreations
OBJECT-TYPE
This object indicates the number of mappings created for this ALG.
1.3.6.1.4.1.9.9.818.1.2.3.1.3Counter64read-onlycurrent
cNatCgnALGMappingRemovals
OBJECT-TYPE
This object indicates the number of mappings removed which were created for this ALG. The number of active mappings for this ALG is equal to cNatCgnALGMappingCreations - cNatCgnALGMappingRemovals.
1.3.6.1.4.1.9.9.818.1.2.3.1.4Counter64read-onlycurrent
cNatCgnALGUnsupportedErrors
OBJECT-TYPE
This object indicates the number of application level messages/packets which could not be processed as they used options which are not yet supported. This does not include messages/packets that did not conform to the protocol.
1.3.6.1.4.1.9.9.818.1.2.3.1.5Counter64read-onlycurrent
cNatCgnALGProtocolErrors
OBJECT-TYPE
This object indicates the number of application level messages/packets which could not be processed as they did not conform to the protocol.
1.3.6.1.4.1.9.9.818.1.2.3.1.6Counter64read-onlycurrent
ciscoNatCgnExtMIBConform
OBJECT-IDENTITY
1.3.6.1.4.1.9.9.818.2
cNatCgnMIBCompliances
OBJECT-IDENTITY
1.3.6.1.4.1.9.9.818.2.1
cNatCgnMIBGroups
OBJECT-IDENTITY
1.3.6.1.4.1.9.9.818.2.2

Notifications

NameOIDStatus
cNatCgnNotifPortUsageWatermarkLow
NOTIFICATION-TYPE
The device generates this notification when the value of cNatCgnCounterCurrentPortAllocation becomes lower than or equal to the value of cNatCgnCounterPortUsageLowThreshold. The device will not generate notification if cNatCgnCounterPortUsageLowThreshold is set to zero.
1.3.6.1.4.1.9.9.818.0.1current
cNatCgnNotifPortUsageWatermarkLowClear
NOTIFICATION-TYPE
The device generates this notification when the value of cNatCgnCounterCurrentPortAllocation becomes higher than or equal to the value of cNatCgnCounterPortUsageClearLowThreshold and if cNatCgnNotifPortUsageWatermarkLow is already generated. The device will not generate notification if cNatCgnCounterPortUsageClearLowThreshold is set to zero.
1.3.6.1.4.1.9.9.818.0.2current
cNatCgnNotifPortUsageWatermarkHigh
NOTIFICATION-TYPE
The device generates this notification when the value of cNatCgnCounterCurrentPortAllocation becomes higher than or equal to the cNatCgnCounterPortUsageHighThreshold. The device will not generate notification if cNatCgnCounterPortUsageHighThreshold is set to zero.
1.3.6.1.4.1.9.9.818.0.3current
cNatCgnNotifPortUsageWatermarkHighClear
NOTIFICATION-TYPE
The device generates this notification when the value of cNatCgnCounterCurrentPortAllocation becomes lower than or equal to the value of cNatCgnCounterPortUsageClearLowThreshold and if cNatCgnNotifPortUsageWatermarkHigh is already generated. The device will not generate notification if cNatCgnCounterPortUsageClearHighThreshold is set to zero.
1.3.6.1.4.1.9.9.818.0.4current

Conformance

NameOIDStatus
cNatCgnModuleCompliance
MODULE-COMPLIANCE
This compliance statement specifies the minimal requirements an implementation must meet in order to claim full compliance with the definition of the CISCO-NAT-CGN-EXT-MIB.
1.3.6.1.4.1.9.9.818.2.1.1current
cNatCgnConfigGroup
OBJECT-GROUP
This group contains objects describing basic configuration elements of NAT instances.
1.3.6.1.4.1.9.9.818.2.2.1current
cNatCgnOptionConfigGroup
OBJECT-GROUP
This group contains objects describing optional configuration elements of NAT instances.
1.3.6.1.4.1.9.9.818.2.2.2current
cNatCgnCountersGroup
OBJECT-GROUP
This group contains objects describing counters and thresholds.
1.3.6.1.4.1.9.9.818.2.2.3current
cNatCgnSessionGroup
OBJECT-GROUP
This group contains objects describing counters specific to session level tracking.
1.3.6.1.4.1.9.9.818.2.2.4current
cNatCgnBulkAllocGroup
OBJECT-GROUP
This group contains objects describing configuration and statistics specific to bulk port allocation.
1.3.6.1.4.1.9.9.818.2.2.5current
cNatCgnNetflowLoggingGroup
OBJECT-GROUP
This group contains objects describing counters of Netflow based logging.
1.3.6.1.4.1.9.9.818.2.2.6current
cNatCgnSyslogLoggingGroup
OBJECT-GROUP
This group contains objects describing counters of syslog based logging.
1.3.6.1.4.1.9.9.818.2.2.7current
cNatCgnFragmentsGroup
OBJECT-GROUP
This group contains objects describing fragment related counters.
1.3.6.1.4.1.9.9.818.2.2.8current
cNatCgnALGCountersGroup
OBJECT-GROUP
This group contains objects describing counters related to ALG processing.
1.3.6.1.4.1.9.9.818.2.2.9current
cNatCgnServiceNameGroup
OBJECT-GROUP
This group contains objects describing service related configuration elements
1.3.6.1.4.1.9.9.818.2.2.11current
cNatCgnNotificationsGroup
NOTIFICATION-GROUP
This group contains notifications supporting NAT instances.
1.3.6.1.4.1.9.9.818.2.2.15current