NATV2-MIB

File: NATV2-MIB.mib (110836 bytes)

Imported modules

SNMPv2-SMI SNMPv2-TC SNMPv2-CONF
SNMP-FRAMEWORK-MIB INET-ADDRESS-MIB

Imported symbols

MODULE-IDENTITY OBJECT-TYPE Integer32
Unsigned32 Counter64 mib-2
NOTIFICATION-TYPE TEXTUAL-CONVENTION DisplayString
TimeStamp MODULE-COMPLIANCE NOTIFICATION-GROUP
OBJECT-GROUP SnmpAdminString InetAddressType
InetAddress InetAddressPrefixLength InetPortNumber

Defined Types

ProtocolNumber  
A protocol number, from the IANA Protocol Numbers registry.
TEXTUAL-CONVENTION    
  Unsigned32 0..255  

Natv2SubscriberIndex  
A unique value, greater than zero, for each subscriber in the managed system. The value for each subscriber MUST remain constant at least from one update of the entity's natv2SubscriberDiscontinuityTime object until the next update of that object. If a subscriber is deleted, its assigned index value MUST NOT be assigned to another subscriber at least until reinitialization of the entity's management system.
TEXTUAL-CONVENTION    
  Unsigned32 1..4294967295  

Natv2SubscriberIndexOrZero  
This textual convention is an extension of the Natv2SubscriberIndex convention. The latter defines a greater than zero value used to identify a subscriber in the managed system. This extension permits the additional value of zero, which serves as a placeholder when no subscriber is associated with the object.
TEXTUAL-CONVENTION    
  Unsigned32 0 | 1..4294967295  

Natv2InstanceIndex  
A unique value, greater than zero, for each NAT instance in the managed system. It is RECOMMENDED that values are assigned contiguously starting from 1. The value for each NAT instance MUST remain constant at least from one update of the entity's natv2InstanceDiscontinuityTime object until the next update of that object. If a NAT instance is deleted, its assigned index value MUST NOT be assigned to another NAT instance at least until reinitialization of the entity's management system.
TEXTUAL-CONVENTION    
  Unsigned32 1..4294967295  

Natv2PoolIndex  
A unique value over the containing NAT instance, greater than zero, for each address pool supported by that NAT instance. It is RECOMMENDED that values are assigned contiguously starting from 1. The value for each address pool MUST remain constant at least from one update of the entity's natv2PoolDiscontinuityTime object until the next update of that object. If an address pool is deleted, its assigned index value MUST NOT be assigned to another address pool for the same NAT instance at least until reinitialization of the entity's management system.
TEXTUAL-CONVENTION    
  Unsigned32 1..4294967295  

Natv2PoolIndexOrZero  
This textual convention is an extension of the Natv2PoolIndex convention. The latter defines a greater than zero value used to identify address pools in the managed system. This extension permits the additional value of zero, which serves as a placeholder when the implementation does not support address pools or no address pool is configured in a given external realm.
TEXTUAL-CONVENTION    
  Unsigned32 0 | 1..4294967295  

Natv2SubscriberEntry  
SEQUENCE    
  natv2SubscriberIndex Natv2SubscriberIndex
  natv2SubscriberInternalRealm SnmpAdminString
  natv2SubscriberInternalPrefixType InetAddressType
  natv2SubscriberInternalPrefix InetAddress
  natv2SubscriberInternalPrefixLength InetAddressPrefixLength
  natv2SubscriberAddressMapEntries Unsigned32
  natv2SubscriberPortMapEntries Unsigned32
  natv2SubscriberTranslations Counter64
  natv2SubscriberAddressMapCreations Counter64
  natv2SubscriberPortMapCreations Counter64
  natv2SubscriberAddressMapFailureDrops Counter64
  natv2SubscriberPortMapFailureDrops Counter64
  natv2SubscriberDiscontinuityTime TimeStamp
  natv2SubscriberLimitPortMapEntries Unsigned32
  natv2SubscriberThresholdPortMapEntriesHigh Integer32
  natv2SubscriberNotificationInterval Unsigned32

Natv2InstanceEntry  
SEQUENCE    
  natv2InstanceIndex Natv2InstanceIndex
  natv2InstanceAlias DisplayString
  natv2InstancePortMappingBehavior INTEGER
  natv2InstanceFilteringBehavior INTEGER
  natv2InstancePoolingBehavior INTEGER
  natv2InstanceFragmentBehavior INTEGER
  natv2InstanceAddressMapEntries Unsigned32
  natv2InstancePortMapEntries Unsigned32
  natv2InstanceTranslations Counter64
  natv2InstanceAddressMapCreations Counter64
  natv2InstancePortMapCreations Counter64
  natv2InstanceAddressMapEntryLimitDrops Counter64
  natv2InstancePortMapEntryLimitDrops Counter64
  natv2InstanceSubscriberActiveLimitDrops Counter64
  natv2InstanceAddressMapFailureDrops Counter64
  natv2InstancePortMapFailureDrops Counter64
  natv2InstanceFragmentDrops Counter64
  natv2InstanceOtherResourceFailureDrops Counter64
  natv2InstanceDiscontinuityTime TimeStamp
  natv2InstanceThresholdAddressMapEntriesHigh Integer32
  natv2InstanceThresholdPortMapEntriesHigh Integer32
  natv2InstanceNotificationInterval Unsigned32
  natv2InstanceLimitAddressMapEntries Unsigned32
  natv2InstanceLimitPortMapEntries Unsigned32
  natv2InstanceLimitPendingFragments Unsigned32
  natv2InstanceLimitSubscriberActives Unsigned32

Natv2ProtocolEntry  
SEQUENCE    
  natv2ProtocolInstanceIndex Natv2InstanceIndex
  natv2ProtocolNumber ProtocolNumber
  natv2ProtocolPortMapEntries Unsigned32
  natv2ProtocolTranslations Counter64
  natv2ProtocolPortMapCreations Counter64
  natv2ProtocolPortMapFailureDrops Counter64

Natv2PoolEntry  
SEQUENCE    
  natv2PoolInstanceIndex Natv2InstanceIndex
  natv2PoolIndex Natv2PoolIndex
  natv2PoolRealm SnmpAdminString
  natv2PoolAddressType InetAddressType
  natv2PoolMinimumPort InetPortNumber
  natv2PoolMaximumPort InetPortNumber
  natv2PoolAddressMapEntries Unsigned32
  natv2PoolPortMapEntries Unsigned32
  natv2PoolAddressMapCreations Counter64
  natv2PoolPortMapCreations Counter64
  natv2PoolAddressMapFailureDrops Counter64
  natv2PoolPortMapFailureDrops Counter64
  natv2PoolDiscontinuityTime TimeStamp
  natv2PoolThresholdUsageLow Integer32
  natv2PoolThresholdUsageHigh Integer32
  natv2PoolNotifiedPortMapEntries Unsigned32
  natv2PoolNotifiedPortMapProtocol ProtocolNumber
  natv2PoolNotificationInterval Unsigned32

Natv2PoolRangeEntry  
SEQUENCE    
  natv2PoolRangeInstanceIndex Natv2InstanceIndex
  natv2PoolRangePoolIndex Natv2PoolIndex
  natv2PoolRangeRowIndex Unsigned32
  natv2PoolRangeBegin InetAddress
  natv2PoolRangeEnd InetAddress

Natv2AddressMapEntry  
SEQUENCE    
  natv2AddressMapInstanceIndex Natv2InstanceIndex
  natv2AddressMapInternalRealm SnmpAdminString
  natv2AddressMapInternalAddressType InetAddressType
  natv2AddressMapInternalAddress InetAddress
  natv2AddressMapRowIndex Unsigned32
  natv2AddressMapInternalMappedAddressType InetAddressType
  natv2AddressMapInternalMappedAddress InetAddress
  natv2AddressMapExternalRealm SnmpAdminString
  natv2AddressMapExternalAddressType InetAddressType
  natv2AddressMapExternalAddress InetAddress
  natv2AddressMapExternalPoolIndex Natv2PoolIndexOrZero
  natv2AddressMapSubscriberIndex Natv2SubscriberIndexOrZero

Natv2PortMapEntry  
SEQUENCE    
  natv2PortMapInstanceIndex Natv2InstanceIndex
  natv2PortMapProtocol ProtocolNumber
  natv2PortMapExternalRealm SnmpAdminString
  natv2PortMapExternalAddressType InetAddressType
  natv2PortMapExternalAddress InetAddress
  natv2PortMapExternalPort InetPortNumber
  natv2PortMapInternalRealm SnmpAdminString
  natv2PortMapInternalAddressType InetAddressType
  natv2PortMapInternalAddress InetAddress
  natv2PortMapInternalMappedAddressType InetAddressType
  natv2PortMapInternalMappedAddress InetAddress
  natv2PortMapInternalPort InetPortNumber
  natv2PortMapExternalPoolIndex Natv2PoolIndexOrZero
  natv2PortMapSubscriberIndex Natv2SubscriberIndexOrZero

Defined Values

natv2MIB 1.3.6.1.2.1.234
This MIB module defines the generic managed objects for NAT. Copyright (c) 2015 IETF Trust and the persons identified as authors of the code. All rights reserved. Redistribution and use in source and binary forms, with or without modification, is permitted pursuant to, and subject to the license terms contained in, the Simplified BSD License set forth in Section 4.c of the IETF Trust's Legal Provisions Relating to IETF Documents (http://trustee.ietf.org/license-info). This version of this MIB module is part of RFC 7659; see the RFC itself for full legal notices.
MODULE-IDENTITY    

natv2MIBNotifications 1.3.6.1.2.1.234.0
OBJECT IDENTIFIER    

natv2NotificationPoolUsageLow 1.3.6.1.2.1.234.0.1
This notification is triggered when an address pool's usage becomes less than or equal to the value of the natv2PoolThresholdUsageLow object for that pool, unless the notification has been disabled by setting the value of the threshold to -1. It is reported subject to the rate limitation specified by natv2PortMapNotificationInterval. Address pool usage is calculated as the percentage of the total number of ports allocated to the address pool that are already in use, for the most-mapped protocol at the time the notification is triggered. The two returned objects are members of natv2PoolTable indexed by the NAT instance and pool indices for which the event is being reported. They give the number of port map entries using external addresses configured on the pool for the most-mapped protocol and identify that protocol at the time the notification was triggered.
Status: current Access: read-only
NOTIFICATION-TYPE    

natv2NotificationPoolUsageHigh 1.3.6.1.2.1.234.0.2
This notification is triggered when an address pool's usage becomes greater than or equal to the value of the natv2PoolThresholdUsageHigh object for that pool, unless the notification has been disabled by setting the value of the threshold to -1. It is reported subject to the rate limitation specified by natv2PortMapNotificationInterval. Address pool usage is calculated as the percentage of the total number of ports allocated to the address pool that are already in use, for the most-mapped protocol at the time the notification is triggered. The two returned objects are members of natv2PoolTable indexed by the NAT instance and pool indices for which the event is being reported. They give the number of port map entries using external addresses configured on the pool for the most-mapped protocol and identify that protocol at the time the notification was triggered.
Status: current Access: read-only
NOTIFICATION-TYPE    

natv2NotificationInstanceAddressMapEntriesHigh 1.3.6.1.2.1.234.0.3
This notification is triggered when the value of natv2InstanceAddressMapEntries equals or exceeds the value of the natv2InstanceThresholdAddressMapEntriesHigh object for the NAT instance, unless disabled by setting that threshold to -1. Reporting is subject to the rate limitation given by natv2InstanceNotificationInterval. natv2InstanceAddressMapEntries and natv2InstanceAddressMapCreations are members of table natv2InstanceTable indexed by the identifier of the NAT instance for which the event is being reported. The values reported are those observed at the moment the notification was triggered.
Status: current Access: read-only
NOTIFICATION-TYPE    

natv2NotificationInstancePortMapEntriesHigh 1.3.6.1.2.1.234.0.4
This notification is triggered when the value of natv2InstancePortMapEntries becomes greater than or equal to the value of natv2InstanceThresholdPortMapEntriesHigh, unless disabled by setting that threshold to -1. Reporting is subject to the rate limitation given by natv2InstanceNotificationInterval. natv2InstancePortMapEntries and natv2InstancePortMapCreations are members of table natv2InstanceTable indexed by the identifier of the NAT instance for which the event is being reported. The values reported are those observed at the moment the notification was triggered.
Status: current Access: read-only
NOTIFICATION-TYPE    

natv2NotificationSubscriberPortMappingEntriesHigh 1.3.6.1.2.1.234.0.5
This notification is triggered when the value of natv2SubscriberPortMapEntries for an individual subscriber becomes greater than or equal to the value of the natv2SubscriberThresholdPortMapEntriesHigh object for that subscriber, unless disabled by setting that threshold to -1. Reporting is subject to the rate limitation given by natv2SubscriberNotificationInterval. natv2SubscriberPortMapEntries and natv2SubscriberPortMapCreations are members of table natv2SubscriberTable indexed by the subscriber for which the event is being reported. The values reported are those observed at the moment the notification was triggered.
Status: current Access: read-only
NOTIFICATION-TYPE    

natv2MIBDeviceObjects 1.3.6.1.2.1.234.1
OBJECT IDENTIFIER    

natv2SubscriberTable 1.3.6.1.2.1.234.1.1
Table of subscribers. As well as the subscriber index, it provides per-subscriber state and counter objects, a last discontinuity time object for the counters, and a writable threshold value and limit on port consumption.
Status: current Access: not-accessible
OBJECT-TYPE    
  SEQUENCE OF  
    Natv2SubscriberEntry

natv2SubscriberEntry 1.3.6.1.2.1.234.1.1.1
Each entry describes a single subscriber.
Status: current Access: not-accessible
OBJECT-TYPE    
  Natv2SubscriberEntry  

natv2SubscriberIndex 1.3.6.1.2.1.234.1.1.1.1
A unique value, greater than zero, for each subscriber in the managed system. The value for each subscriber MUST remain constant at least from one update of the entity's natv2SubscriberDiscontinuityTime object until the next update of that object. If a subscriber is deleted, its assigned index value MUST NOT be assigned to another subscriber at least until reinitialization of the entity's management system.
Status: current Access: not-accessible
OBJECT-TYPE    
  Natv2SubscriberIndex  

natv2SubscriberInternalRealm 1.3.6.1.2.1.234.1.1.1.2
The address realm to which this subscriber belongs. A realm defines an address space. All NATs support at least two realms. The default realm for subscribers is 'internal'. Administrators can set other values for individual subscribers when they are configured. The administrator MAY configure a new value of natv2SubscriberRealm at any time subsequent to initial configuration of the subscriber. If this happens, it MUST be treated as a point of discontinuity requiring an update of natv2SubscriberDiscontinuityTime. When the subscriber sends a packet to the NAT through a DS-Lite (RFC 6333) tunnel, this is the realm of the outer packet header source address. Other tunneled access is out of scope.
Status: current Access: read-only
OBJECT-TYPE    
  SnmpAdminString Size(0..32)  

natv2SubscriberInternalPrefixType 1.3.6.1.2.1.234.1.1.1.3
Subscriber's internal prefix type. Any value other than ipv4(1) or ipv6(2) would be unexpected. In the case of DS-Lite access, this is the prefix type (IPv6(2)) used in the outer packet header.
Status: current Access: read-only
OBJECT-TYPE    
  InetAddressType  

natv2SubscriberInternalPrefix 1.3.6.1.2.1.234.1.1.1.4
Prefix assigned to a subscriber's Customer Premises Equipment (CPE). The type of this prefix is given by natv2SubscriberInternalPrefixType. Source addresses of packets outgoing from the subscriber will be contained within this prefix. In the case of DS-Lite access, the source address taken from the prefix will be that of the outer header.
Status: current Access: read-only
OBJECT-TYPE    
  InetAddress  

natv2SubscriberInternalPrefixLength 1.3.6.1.2.1.234.1.1.1.5
Length of the prefix assigned to a subscriber's CPE, in bits. If a single address is assigned, this will be 32 for IPv4 and 128 for IPv6.
Status: current Access: read-only
OBJECT-TYPE    
  InetAddressPrefixLength  

natv2SubscriberAddressMapEntries 1.3.6.1.2.1.234.1.1.1.6
The current number of address map entries for the subscriber, including static mappings. An address map entry maps from a given internal address and realm to an external address in a particular external realm. This definition includes 'hairpin' mappings, where the external realm is the same as the internal one. Address map entries are also tracked per instance and per address pool within the instance.
Status: current Access: read-only
OBJECT-TYPE    
  Unsigned32  

natv2SubscriberPortMapEntries 1.3.6.1.2.1.234.1.1.1.7
The current number of port map entries in the port map table for the subscriber, including static mappings. A port map entry maps from a given external realm, address, and port for a given protocol to an internal realm, address, and port. This definition includes 'hairpin' mappings, where the external realm is the same as the internal one. Port map entries are also tracked per instance and per protocol and address pool within the instance.
Status: current Access: read-only
OBJECT-TYPE    
  Unsigned32  

natv2SubscriberTranslations 1.3.6.1.2.1.234.1.1.1.8
The cumulative number of translated packets received from or sent to this subscriber. This value MUST be monotone increasing in the periods between updates of the entity's natv2SubscriberDiscontinuityTime. If a manager detects a change in the latter since the last time it sampled this counter, it SHOULD NOT make use of the difference between the latest value of the counter and any value retrieved before the new value of natv2SubscriberDiscontinuityTime.
Status: current Access: read-only
OBJECT-TYPE    
  Counter64  

natv2SubscriberAddressMapCreations 1.3.6.1.2.1.234.1.1.1.9
The cumulative number of address map entries created for this subscriber, including static mappings. Address map entries are also tracked per instance and per protocol and address pool within the instance. This value MUST be monotone increasing in the periods between updates of the entity's natv2SubscriberDiscontinuityTime. If a manager detects a change in the latter since the last time it sampled this counter, it SHOULD NOT make use of the difference between the latest value of the counter and any value retrieved before the new value of natv2SubscriberDiscontinuityTime.
Status: current Access: read-only
OBJECT-TYPE    
  Counter64  

natv2SubscriberPortMapCreations 1.3.6.1.2.1.234.1.1.1.10
The cumulative number of port map entries created for this subscriber, including static mappings. Port map entries are also tracked per instance and per protocol and address pool within the instance. This value MUST be monotone increasing in the periods between updates of the entity's natv2SubscriberDiscontinuityTime. If a manager detects a change in the latter since the last time it sampled this counter, it SHOULD NOT make use of the difference between the latest value of the counter and any value retrieved before the new value of natv2SubscriberDiscontinuityTime.
Status: current Access: read-only
OBJECT-TYPE    
  Counter64  

natv2SubscriberAddressMapFailureDrops 1.3.6.1.2.1.234.1.1.1.11
The cumulative number of packets originated by this subscriber that were dropped because the packet would have triggered the creation of a new address map entry, but no address could be allocated in the selected external realm because all addresses from the selected address pool (or the whole realm, if no address pool has been configured for that realm) have already been fully allocated. This value MUST be monotone increasing in the periods between updates of the entity's natv2SubscriberDiscontinuityTime. If a manager detects a change in the latter since the last time it sampled this counter, it SHOULD NOT make use of the difference between the latest value of the counter and any value retrieved before the new value of natv2SubscriberDiscontinuityTime.
Status: current Access: read-only
OBJECT-TYPE    
  Counter64  

natv2SubscriberPortMapFailureDrops 1.3.6.1.2.1.234.1.1.1.12
The cumulative number of packets dropped because the packet would have triggered the creation of a new port mapping, but no port could be allocated for the protocol concerned. The usual case for this will be for a NAT instance that supports address pooling and the 'Paired' pooling behavior recommended by RFC 4787, where the internal endpoint has used up all of the ports allocated to it for the address it was mapped to in the selected address pool in the external realm concerned and cannot be given more ports because - policy or implementation prevents it from having a second address in the same pool, and - policy or unavailability prevents it from acquiring more ports at its originally assigned address. If the NAT instance supports address pooling but its pooling behavior is 'Arbitrary' (meaning that the NAT instance can allocate a new port mapping for the given internal endpoint on any address in the selected address pool and is not bound to what it has already mapped for that endpoint), then this counter is incremented when all ports for the protocol concerned over the whole of the selected address pool are already in use. As a third case, if no address pools have been configured for the external realm concerned, then this counter is incremented because all ports for the protocol involved over the whole set of addresses available for that external realm are already in use. Finally, this counter is incremented if the packet would have triggered the creation of a new port mapping, but the current value of natv2SubscriberPortMapEntries equals or exceeds the value of natv2SubscriberLimitPortMapEntries for this subscriber (unless that limit is disabled). This value MUST be monotone increasing in the periods between updates of the entity's natv2SubscriberDiscontinuityTime. If a manager detects a change in the latter since the last time it sampled this counter, it SHOULD NOT make use of the difference between the latest value of the counter and any value retrieved before the new value of natv2SubscriberDiscontinuityTime.
Status: current Access: read-only
OBJECT-TYPE    
  Counter64  

natv2SubscriberDiscontinuityTime 1.3.6.1.2.1.234.1.1.1.14
Snapshot of the value of the sysUpTime object at the beginning of the latest period of continuity of the statistical counters associated with this subscriber.
Status: current Access: read-only
OBJECT-TYPE    
  TimeStamp  

natv2SubscriberLimitPortMapEntries 1.3.6.1.2.1.234.1.1.1.15
Limit on total number of port mappings active for this subscriber (natv2SubscriberPortMapEntries). Once this limit is reached, packets that might have triggered new port mappings are dropped. The number of such packets dropped is counted in natv2InstancePortMapFailureDrops. Limit is disabled if set to zero.
Status: current Access: read-write
OBJECT-TYPE    
  Unsigned32  

natv2SubscriberThresholdPortMapEntriesHigh 1.3.6.1.2.1.234.1.1.1.16
Notification threshold for total number of port mappings active for this subscriber. Whenever natv2SubscriberPortMapEntries is updated, if it equals or exceeds natv2SubscriberThresholdPortMapEntriesHigh, the notification natv2NotificationSubscriberPortMappingEntriesHigh is triggered, unless the notification is disabled by setting the threshold to -1. Reporting is subject to the minimum inter-notification interval given by natv2SubscriberNotificationInterval. If multiple notifications are triggered during one interval, the agent MUST report only the one containing the highest value of natv2SubscriberPortMapEntries and discard the others.
Status: current Access: read-write
OBJECT-TYPE    
  Integer32  

natv2SubscriberNotificationInterval 1.3.6.1.2.1.234.1.1.1.17
Minimum number of seconds between successive reporting of notifications for this subscriber. Controls the reporting of natv2NotificationSubscriberPortMappingEntriesHigh.
Status: current Access: read-write
OBJECT-TYPE    
  Unsigned32 1..3600  

natv2MIBInstanceObjects 1.3.6.1.2.1.234.2
OBJECT IDENTIFIER    

natv2InstanceTable 1.3.6.1.2.1.234.2.1
Table of NAT instances. As well as state and counter objects, it provides the instance index, instance name, and the last discontinuity time object that is applicable to the counters. It also contains writable thresholds for reporting of notifications and limits on usage of resources at the level of the NAT instance. It is assumed that NAT instances can be created and deleted dynamically, but this MIB module does not provide the means to do so. For restrictions on assignment and maintenance of the NAT index instance, see the description of natv2InstanceIndex in the table below. For the requirements on maintenance of the values of the counters in this table, see the description of natv2InstanceDiscontinuityTime in this table. Each NAT instance has its own resources and behavior. The resources include memory as reflected in space for map entries, processing power as reflected in the rate of map creation and deletion, and mappable addresses in each realm that can play the role of an external realm for at least some mappings for that instance. The NAT instance table includes limits and notification thresholds that relate to memory usage for mapping at the level of the whole instance. The limit on number of subscribers with active mappings is a limit to some extent on processor usage. The mappable 'external' addresses may or may not be organized into address pools. For a definition of address pools, see the description of natv2PoolTable. If the instance does support address pools, it also has a pooling behavior. Mapping, filtering, and pooling behavior are defined in the descriptions of the natv2InstancePortMappingBehavior, natv2InstanceFilteringBehavior, and natv2InstancePoolingBehavior objects in this table. The instance also has a fragmentation behavior, defined in the description of the natv2InstanceFragmentBehavior object.
Status: current Access: not-accessible
OBJECT-TYPE    
  SEQUENCE OF  
    Natv2InstanceEntry

natv2InstanceEntry 1.3.6.1.2.1.234.2.1.1
Objects related to a single NAT instance.
Status: current Access: not-accessible
OBJECT-TYPE    
  Natv2InstanceEntry  

natv2InstanceIndex 1.3.6.1.2.1.234.2.1.1.1
NAT instance index. It is up to the implementation to determine which values correspond to in-service NAT instances. This object is used as an index for all tables defined below.
Status: current Access: not-accessible
OBJECT-TYPE    
  Natv2InstanceIndex  

natv2InstanceAlias 1.3.6.1.2.1.234.2.1.1.2
This object is an 'alias' name for the NAT instance as specified by a network manager and provides a non-volatile 'handle' for the instance. An example of the value that a network manager might store in this object for a NAT instance is the name/identifier of the interface that brings in internal traffic for this NAT instance or the name of the Virtual Routing and Forwarding (VRF) for internal traffic.
Status: current Access: read-only
OBJECT-TYPE    
  DisplayString Size(0..64)  

natv2InstancePortMappingBehavior 1.3.6.1.2.1.234.2.1.1.3
Port mapping behavior is the policy governing the selection of external address and port in a given realm for a given five-tuple of source address and port, destination address and port, and protocol. endpointIndependent(0), the behavior REQUIRED by RFC 4787, REQ-1, maps the source address and port to the same external address and port for all destination address and port combinations reached through the same external realm and using the given protocol. addressDependent(1) maps to the same external address and port for all destination ports at the same destination address reached through the same external realm and using the given protocol. addressAndPortDependent(2) maps to a separate external address and port combination for each different destination address and port combination reached through the same external realm.
Status: current Access: read-only
OBJECT-TYPE    
  INTEGER endpointIndependent(0), addressDependent(1), addressAndPortDependent(2)  

natv2InstanceFilteringBehavior 1.3.6.1.2.1.234.2.1.1.4
Filtering behavior is the policy governing acceptance or the dropping of packets incoming from remote sources via a given external realm and destined to a specific three-tuple of external address, port, and protocol at the NAT instance that has been assigned in a port mapping. endpointIndependent(0) accepts for translation packets from all combinations of remote address and port destined to the mapped external address and port via the given external realm and using the given protocol. addressDependent(1) accepts for translation packets from all remote ports from the same remote source address destined to the mapped external address and port via the given external realm and using the given protocol. addressAndPortDependent(2) accepts for translation only those packets with the same remote source address, port, and protocol incoming from the same external realm as identified when the applicable port map entry was created. RFC 4787, REQ-8 recommends either endpointIndependent(0) or addressDependent(1) filtering behavior depending on whether application friendliness or security takes priority.
Status: current Access: read-only
OBJECT-TYPE    
  INTEGER endpointIndependent(0), addressDependent(1), addressAndPortDependent(2)  

natv2InstancePoolingBehavior 1.3.6.1.2.1.234.2.1.1.5
Pooling behavior is the policy used to select the address for a new port mapping within a given address pool to which the internal address has already been mapped. arbitrary(0) pooling behavior means that the NAT instance may create the new port mapping using any address in the pool that has a free port for the protocol concerned. paired(1) pooling behavior, the behavior RECOMMENDED by RFC 4787, REQ-2, means that once a given internal address has been mapped to a particular address in a particular pool, further mappings of the same internal address to that pool will reuse the previously assigned pool member address.
Status: current Access: read-only
OBJECT-TYPE    
  INTEGER arbitrary(0), paired(1)  

natv2InstanceFragmentBehavior 1.3.6.1.2.1.234.2.1.1.6
Fragment behavior is the NAT instance's capability to receive and translate fragments incoming from remote sources. fragmentNone(0) implies no capability to translate incoming fragments, so all received fragments are dropped. Each dropped fragment is counted in natv2InstanceFragmentDrops. fragmentInOrder(1) implies the ability to translate fragments only if they are received in order, so that in particular the header is in the first packet. If a fragment is received out of order, it is dropped and counted in natv2InstanceFragmentDrops. fragmentOutOfOrder(2), the capability REQUIRED by RFC 4787, REQ-14, implies the capability to translate fragments even when they arrive out of order, subject to a protective limit natv2InstanceLimitPendingFragments on total number of fragments awaiting the first fragment of the chain. If the implementation supports this capability, natv2InstanceFragmentDrops is incremented only when a new fragment arrives but is dropped because the limit on pending fragments has already been reached.
Status: current Access: read-only
OBJECT-TYPE    
  INTEGER fragmentNone(0), fragmentInOrder(1), fragmentOutOfOrder(2)  

natv2InstanceAddressMapEntries 1.3.6.1.2.1.234.2.1.1.7
The current number of address map entries in total over the whole NAT instance, including static mappings. An address map entry maps from a given internal address and realm to an external address in a particular external realm. This definition includes 'hairpin' mappings, where the external realm is the same as the internal one. Address map entries are also tracked per subscriber and per address pool within the instance.
Status: current Access: read-only
OBJECT-TYPE    
  Unsigned32  

natv2InstancePortMapEntries 1.3.6.1.2.1.234.2.1.1.8
The current number of entries in the port map table in total over the whole NAT instance, including static mappings. A port map entry maps from a given external realm, address, and port for a given protocol to an internal realm, address, and port. This definition includes 'hairpin' mappings, where the external realm is the same as the internal one. Port map entries are also tracked per subscriber and per protocol and address pool within the instance.
Status: current Access: read-only
OBJECT-TYPE    
  Unsigned32  

natv2InstanceTranslations 1.3.6.1.2.1.234.2.1.1.9
The cumulative number of translated packets passing through this NAT instance. This value MUST be monotone increasing in the periods between updates of natv2InstanceDiscontinuityTime. If a manager detects a change in the latter since the last time it sampled this counter, it SHOULD NOT make use of the difference between the latest value of the counter and any value retrieved before the new value of natv2InstanceDiscontinuityTime.
Status: current Access: read-only
OBJECT-TYPE    
  Counter64  

natv2InstanceAddressMapCreations 1.3.6.1.2.1.234.2.1.1.10
The cumulative number of address map entries created by the NAT instance, including static mappings. Address map creations are also tracked per address pool within the instance and per subscriber. This value MUST be monotone increasing in the periods between updates of natv2InstanceDiscontinuityTime. If a manager detects a change in the latter since the last time it sampled this counter, it SHOULD NOT make use of the difference between the latest value of the counter and any value retrieved before the new value of natv2InstanceDiscontinuityTime.
Status: current Access: read-only
OBJECT-TYPE    
  Counter64  

natv2InstancePortMapCreations 1.3.6.1.2.1.234.2.1.1.11
The cumulative number of port map entries created by the NAT instance, including static mappings. Port map creations are also tracked per protocol and address pool within the instance and per subscriber. This value MUST be monotone increasing in the periods between updates of natv2InstanceDiscontinuityTime. If a manager detects a change in the latter since the last time it sampled this counter, it SHOULD NOT make use of the difference between the latest value of the counter and any value retrieved before the new value of natv2InstanceDiscontinuityTime.
Status: current Access: read-only
OBJECT-TYPE    
  Counter64  

natv2InstanceAddressMapEntryLimitDrops 1.3.6.1.2.1.234.2.1.1.12
The cumulative number of packets dropped rather than translated because the packet would have triggered the creation of a new address map entry, but the limit on number of address map entries for the NAT instance given by natv2InstanceLimitAddressMapEntries has already been reached. This value MUST be monotone increasing in the periods between updates of the entity's natv2InstanceDiscontinuityTime. If a manager detects a change in the latter since the last time it sampled this counter, it SHOULD NOT make use of the difference between the latest value of the counter and any value retrieved before the new value of natv2InstanceDiscontinuityTime.
Status: current Access: read-only
OBJECT-TYPE    
  Counter64  

natv2InstancePortMapEntryLimitDrops 1.3.6.1.2.1.234.2.1.1.13
The cumulative number of packets dropped rather than translated because the packet would have triggered the creation of a new port map entry, but the limit on number of port map entries for the NAT instance given by natv2InstanceLimitPortMapEntries has already been reached. This value MUST be monotone increasing in the periods between updates of the entity's natv2InstanceDiscontinuityTime. If a manager detects a change in the latter since the last time it sampled this counter, it SHOULD NOT make use of the difference between the latest value of the counter and any value retrieved before the new value of natv2InstanceDiscontinuityTime.
Status: current Access: read-only
OBJECT-TYPE    
  Counter64  

natv2InstanceSubscriberActiveLimitDrops 1.3.6.1.2.1.234.2.1.1.14
The cumulative number of packets dropped rather than translated because the packet would have triggered the creation of a new mapping for a subscriber with no other active mappings, but the limit on number of active subscribers for the NAT instance given by natv2InstanceLimitSubscriberActives has already been reached. This value MUST be monotone increasing in the periods between updates of the entity's natv2InstanceDiscontinuityTime. If a manager detects a change in the latter since the last time it sampled this counter, it SHOULD NOT make use of the difference between the latest value of the counter and any value retrieved before the new value of natv2InstanceDiscontinuityTime.
Status: current Access: read-only
OBJECT-TYPE    
  Counter64  

natv2InstanceAddressMapFailureDrops 1.3.6.1.2.1.234.2.1.1.15
The cumulative number of packets dropped because the packet would have triggered the creation of a new address map entry, but no address could be allocated in the selected external realm because all addresses from the selected address pool (or the whole realm, if no address pool has been configured for that realm) have already been fully allocated. This value MUST be monotone increasing in the periods between updates of the entity's natv2InstanceDiscontinuityTime. If a manager detects a change in the latter since the last time it sampled this counter, it SHOULD NOT make use of the difference between the latest value of the counter and any value retrieved before the new value of natv2InstanceDiscontinuityTime.
Status: current Access: read-only
OBJECT-TYPE    
  Counter64  

natv2InstancePortMapFailureDrops 1.3.6.1.2.1.234.2.1.1.16
The cumulative number of packets dropped because the packet would have triggered the creation of a new port map entry, but no port could be allocated for the protocol concerned. The usual case for this will be for a NAT instance that supports address pooling and the 'Paired' pooling behavior recommended by RFC 4787, where the internal endpoint has used up all of the ports allocated to it for the address it was mapped to in the selected address pool in the external realm concerned and cannot be given more ports because - policy or implementation prevents it from having a second address in the same pool, and - policy or unavailability prevents it from acquiring more ports at its originally assigned address. If the NAT instance supports address pooling but its pooling behavior is 'Arbitrary' (meaning that the NAT instance can allocate a new port mapping for the given internal endpoint on any address in the selected address pool and is not bound to what it has already mapped for that endpoint), then this counter is incremented when all ports for the protocol concerned over the whole of the selected address pool are already in use. Finally, if no address pools have been configured for the external realm concerned, then this counter is incremented because all ports for the protocol involved over the whole set of addresses available for that external realm are already in use. This value MUST be monotone increasing in the periods between updates of the entity's natv2InstanceDiscontinuityTime. If a manager detects a change in the latter since the last time it sampled this counter, it SHOULD NOT make use of the difference between the latest value of the counter and any value retrieved before the new value of natv2InstanceDiscontinuityTime.
Status: current Access: read-only
OBJECT-TYPE    
  Counter64  

natv2InstanceFragmentDrops 1.3.6.1.2.1.234.2.1.1.17
The cumulative number of fragments received by the NAT instance but dropped rather than translated. When the NAT instance supports the 'Receive Fragment Out of Order' capability as required by RFC 4787, this occurs because the fragment was received out of order and would be added to the queue of fragments awaiting the initial fragment of the chain, but the queue has already reached the limit set by natv2InstanceLimitsPendingFragments. Counting in other cases is specified in the description of natv2InstanceFragmentBehavior. This value MUST be monotone increasing in the periods between updates of the entity's natv2InstanceDiscontinuityTime. If a manager detects a change in the latter since the last time it sampled this counter, it SHOULD NOT make use of the difference between the latest value of the counter and any value retrieved before the new value of natv2InstanceDiscontinuityTime.
Status: current Access: read-only
OBJECT-TYPE    
  Counter64  

natv2InstanceOtherResourceFailureDrops 1.3.6.1.2.1.234.2.1.1.18
The cumulative number of packets dropped because of unavailability of a resource other than an address or port that would have been required to process it. The most likely case is where the upper-layer protocol in the packet is not supported by the NAT instance. This value MUST be monotone increasing in the periods between updates of the entity's natv2InstanceDiscontinuityTime. If a manager detects a change in the latter since the last time it sampled this counter, it SHOULD NOT make use of the difference between the latest value of the counter and any value retrieved before the new value of natv2InstanceDiscontinuityTime.
Status: current Access: read-only
OBJECT-TYPE    
  Counter64  

natv2InstanceDiscontinuityTime 1.3.6.1.2.1.234.2.1.1.19
Snapshot of the value of the sysUpTime object at the beginning of the latest period of continuity of the statistical counters associated with this NAT instance.
Status: current Access: read-only
OBJECT-TYPE    
  TimeStamp  

natv2InstanceThresholdAddressMapEntriesHigh 1.3.6.1.2.1.234.2.1.1.20
Notification threshold for total number of address map entries held by this NAT instance. Whenever natv2InstanceAddressMapEntries is updated, if it equals or exceeds natv2InstanceThresholdAddressMapEntriesHigh, then natv2NotificationInstanceAddressMapEntriesHigh may be triggered, unless the notification is disabled by setting the threshold to -1. Reporting is subject to the minimum inter-notification interval given by natv2InstanceNotificationInterval. If multiple notifications are triggered during one interval, the agent MUST report only the one containing the highest value of natv2InstanceAddressMapEntries and discard the others.
Status: current Access: read-write
OBJECT-TYPE    
  Integer32  

natv2InstanceThresholdPortMapEntriesHigh 1.3.6.1.2.1.234.2.1.1.21
Notification threshold for total number of port map entries held by this NAT instance. Whenever natv2InstancePortMapEntries is updated, if it equals or exceeds natv2InstanceThresholdPortMapEntriesHigh, then natv2NotificationInstancePortMapEntriesHigh may be triggered, unless the notification is disabled by setting the threshold to -1. Reporting is subject to the minimum inter-notification interval given by natv2InstanceNotificationInterval. If multiple notifications are triggered during one interval, the agent MUST report only the one containing the highest value of natv2InstancePortMapEntries and discard the others.
Status: current Access: read-write
OBJECT-TYPE    
  Integer32  

natv2InstanceNotificationInterval 1.3.6.1.2.1.234.2.1.1.22
Minimum number of seconds between successive notifications for this NAT instance. Controls the reporting of natv2NotificationInstanceAddressMapEntriesHigh and natv2NotificationInstancePortMapEntriesHigh.
Status: current Access: read-write
OBJECT-TYPE    
  Unsigned32 1..3600  

natv2InstanceLimitAddressMapEntries 1.3.6.1.2.1.234.2.1.1.23
Limit on total number of address map entries supported by the NAT instance. When natv2InstanceAddressMapEntries has reached this limit, subsequent packets that would normally trigger creation of a new address map entry will be dropped and counted in natv2InstanceAddressMapEntryLimitDrops. Warning of an approach to this limit can be achieved by setting natv2InstanceThresholdAddressMapEntriesHigh to a non-zero value, for example, 80% of the limit. The limit is disabled by setting its value to zero. For further information, please see the descriptions of natv2NotificationInstanceAddressMapEntriesHigh and natv2InstanceAddressMapEntries.
Status: current Access: read-write
OBJECT-TYPE    
  Unsigned32  

natv2InstanceLimitPortMapEntries 1.3.6.1.2.1.234.2.1.1.24
Limit on total number of port map entries supported by the NAT instance. When natv2InstancePortMapEntries has reached this limit, subsequent packets that would normally trigger creation of a new port map entry will be dropped and counted in natv2InstancePortMapEntryLimitDrops. Warning of an approach to this limit can be achieved by setting natv2InstanceThresholdPortMapEntriesHigh to a non-zero value, for example, 80% of the limit. The limit is disabled by setting its value to zero. For further information, please see the descriptions of natv2NotificationInstancePortMapEntriesHigh and natv2InstancePortMapEntries.
Status: current Access: read-write
OBJECT-TYPE    
  Unsigned32  

natv2InstanceLimitPendingFragments 1.3.6.1.2.1.234.2.1.1.25
Limit on number of out-of-order fragments received by the NAT instance from remote sources and held until head of chain appears. While the number of held fragments is at this limit, subsequent packets that contain fragments not relating to those already held will be dropped and counted in natv2InstancePendingFragmentLimitDrops. The limit is disabled by setting the value to zero. Applicable only when the NAT instance supports 'Receive Fragments Out of Order' behavior; leave at default otherwise. See the description of natv2InstanceFragmentBehavior.
Status: current Access: read-write
OBJECT-TYPE    
  Unsigned32  

natv2InstanceLimitSubscriberActives 1.3.6.1.2.1.234.2.1.1.26
Limit on number of total number of active subscribers supported by the NAT instance. An active subscriber is defined as any subscriber with at least one map entry, including static mappings. While the number of active subscribers is at this limit, subsequent packets that would otherwise trigger first mappings for newly active subscribers will be dropped and counted in natv2InstanceSubscriberActiveLimitDrops. The limit is disabled by setting the value to zero.
Status: current Access: read-write
OBJECT-TYPE    
  Unsigned32  

natv2ProtocolTable 1.3.6.1.2.1.234.2.2
Table of protocols with per-protocol counters. Conceptual rows of the table are indexed by the combination of the NAT instance number and the IANA-assigned upper-layer protocol number as given by the ProtocolNumber Textual Convention (TC) and contained in the packet IP header. It is up to the agent implementation to determine and operate upon only those upper-layer protocol numbers supported by the NAT instance.
Status: current Access: not-accessible
OBJECT-TYPE    
  SEQUENCE OF  
    Natv2ProtocolEntry

natv2ProtocolEntry 1.3.6.1.2.1.234.2.2.1
Per-protocol counters.
Status: current Access: not-accessible
OBJECT-TYPE    
  Natv2ProtocolEntry  

natv2ProtocolInstanceIndex 1.3.6.1.2.1.234.2.2.1.1
NAT instance index. It is up to the implementation to determine and operate upon only those values that correspond to in-service NAT instances.
Status: current Access: not-accessible
OBJECT-TYPE    
  Natv2InstanceIndex  

natv2ProtocolNumber 1.3.6.1.2.1.234.2.2.1.2
Counters in this conceptual row apply to packets indicating the upper-layer protocol identified by the value of this object. It is up to the implementation to determine and operate upon only those values that correspond to protocols supported by the NAT instance.
Status: current Access: not-accessible
OBJECT-TYPE    
  ProtocolNumber  

natv2ProtocolPortMapEntries 1.3.6.1.2.1.234.2.2.1.3
The current number of entries in the port map table in total over the whole NAT instance for a given protocol, including static mappings. A port map entry maps from a given external realm, address, and port for a given protocol to an internal realm, address, and port. This definition includes 'hairpin' mappings, where the external realm is the same as the internal one. Port map entries are also tracked per subscriber, per instance, and per address pool within the instance.
Status: current Access: read-only
OBJECT-TYPE    
  Unsigned32  

natv2ProtocolTranslations 1.3.6.1.2.1.234.2.2.1.4
The cumulative number of packets translated by the NAT instance in either direction for the given protocol. This value MUST be monotone increasing in the periods between updates of the NAT instance natv2InstanceDiscontinuityTime. If a manager detects a change in the latter since the last time it sampled this counter, it SHOULD NOT make use of the difference between the latest value of the counter and any value retrieved before the new value of natv2InstanceDiscontinuityTime.
Status: current Access: read-only
OBJECT-TYPE    
  Counter64  

natv2ProtocolPortMapCreations 1.3.6.1.2.1.234.2.2.1.5
The cumulative number of port map entries created by the NAT instance for the given protocol. This value MUST be monotone increasing in the periods between updates of the NAT instance natv2InstanceDiscontinuityTime. If a manager detects a change in the latter since the last time it sampled this counter, it SHOULD NOT make use of the difference between the latest value of the counter and any value retrieved before the new value of natv2InstanceDiscontinuityTime.
Status: current Access: read-only
OBJECT-TYPE    
  Counter64  

natv2ProtocolPortMapFailureDrops 1.3.6.1.2.1.234.2.2.1.6
The cumulative number of packets dropped because the packet would have triggered the creation of a new port map entry, but no port could be allocated for the protocol concerned. The usual case for this will be for a NAT instance that supports address pooling and the 'Paired' pooling behavior recommended by RFC 4787, where the internal endpoint has used up all of the ports allocated to it for the address it was mapped to in the selected address pool in the external realm concerned and cannot be given more ports because - policy or implementation prevents it from having a second address in the same pool, and - policy or unavailability prevents it from acquiring more ports at its originally assigned address. If the NAT instance supports address pooling but its pooling behavior is 'Arbitrary' (meaning that the NAT instance can allocate a new port mapping for the given internal endpoint on any address in the selected address pool and is not bound to what it has already mapped for that endpoint), then this counter is incremented when all ports for the protocol concerned over the whole of the selected address pool are already in use. Finally, if the NAT instance has no configured address pooling, then this counter is incremented because all ports for the protocol concerned over the whole of the NAT instance for the external realm concerned are already in use. This value MUST be monotone increasing in the periods between updates of the NAT instance natv2InstanceDiscontinuityTime. If a manager detects a change in the latter since the last time it sampled this counter, it SHOULD NOT make use of the difference between the latest value of the counter and any value retrieved before the new value of natv2InstanceDiscontinuityTime.
Status: current Access: read-only
OBJECT-TYPE    
  Counter64  

natv2PoolTable 1.3.6.1.2.1.234.2.3
Table of address pools, applicable only if these are supported by the NAT instance. An address pool is a set of addresses and ports in a particular realm, available for assignment to the 'external' portion of a mapping. Where more than one pool has been configured for the realm, policy determines which subscribers and/or services are mapped to which pool. natv2PoolTable provides basic information, state, statistics, and two notification thresholds for each pool. natv2PoolRangeTable is an expansion table for natv2PoolTable that identifies particular address ranges allocated to the pool.
Status: current Access: not-accessible
OBJECT-TYPE    
  SEQUENCE OF  
    Natv2PoolEntry

natv2PoolEntry 1.3.6.1.2.1.234.2.3.1
Entry in the table of address pools.
Status: current Access: not-accessible
OBJECT-TYPE    
  Natv2PoolEntry  

natv2PoolInstanceIndex 1.3.6.1.2.1.234.2.3.1.1
NAT instance index. It is up to the agent implementation to determine and operate upon only those values that correspond to in-service NAT instances.
Status: current Access: not-accessible
OBJECT-TYPE    
  Natv2InstanceIndex  

natv2PoolIndex 1.3.6.1.2.1.234.2.3.1.2
Index of an address pool that is unique for a given NAT instance. It is up to the agent implementation to determine and operate upon only those values that correspond to provisioned pools.
Status: current Access: not-accessible
OBJECT-TYPE    
  Natv2PoolIndex  

natv2PoolRealm 1.3.6.1.2.1.234.2.3.1.3
Address realm to which this pool's addresses belong.
Status: current Access: read-only
OBJECT-TYPE    
  SnmpAdminString Size(0..32)  

natv2PoolAddressType 1.3.6.1.2.1.234.2.3.1.4
Address type supplied by this address pool. This will be the same for all pools in a given realm (by definition of an address realm). Values other than ipv4(1) or ipv6(2) would be unexpected.
Status: current Access: read-only
OBJECT-TYPE    
  InetAddressType  

natv2PoolMinimumPort 1.3.6.1.2.1.234.2.3.1.5
Minimum port number of the range that can be allocated in this pool. Applies to all protocols supported by the NAT instance.
Status: current Access: read-only
OBJECT-TYPE    
  InetPortNumber  

natv2PoolMaximumPort 1.3.6.1.2.1.234.2.3.1.6
Maximum port number of the range that can be allocated in this pool. Applies to all protocols supported by the NAT instance.
Status: current Access: read-only
OBJECT-TYPE    
  InetPortNumber  

natv2PoolAddressMapEntries 1.3.6.1.2.1.234.2.3.1.7
The current number of address map entries using external addresses drawn from this pool, including static mappings. This definition includes 'hairpin' mappings, where the external realm is the same as the internal one. Address map entries are also tracked per subscriber and per instance.
Status: current Access: read-only
OBJECT-TYPE    
  Unsigned32  

natv2PoolPortMapEntries 1.3.6.1.2.1.234.2.3.1.8
The current number of entries in the port map table using external addresses and ports drawn from this pool, including static mappings. This definition includes 'hairpin' mappings, where the external realm is the same as the internal one. Port map entries are also tracked per subscriber, per instance, and per protocol within the instance.
Status: current Access: read-only
OBJECT-TYPE    
  Unsigned32  

natv2PoolAddressMapCreations 1.3.6.1.2.1.234.2.3.1.9
The cumulative number of address map entries created in this pool, including static mappings. Address map entries are also tracked per instance and per subscriber. This value MUST be monotone increasing in the periods between updates of the entity's natv2PoolDiscontinuityTime. If a manager detects a change in the latter since the last time it sampled this counter, it SHOULD NOT make use of the difference between the latest value of the counter and any value retrieved before the new value of natv2PoolDiscontinuityTime.
Status: current Access: read-only
OBJECT-TYPE    
  Counter64  

natv2PoolPortMapCreations 1.3.6.1.2.1.234.2.3.1.10
The cumulative number of port map entries created in this pool, including static mappings. Port map entries are also tracked per instance, per protocol, and per subscriber. This value MUST be monotone increasing in the periods between updates of the entity's natv2PoolDiscontinuityTime. If a manager detects a change in the latter since the last time it sampled this counter, it SHOULD NOT make use of the difference between the latest value of the counter and any value retrieved before the new value of natv2PoolDiscontinuityTime.
Status: current Access: read-only
OBJECT-TYPE    
  Counter64  

natv2PoolAddressMapFailureDrops 1.3.6.1.2.1.234.2.3.1.11
The cumulative number of packets originated by the subscriber that were dropped because the packet would have triggered the creation of a new address map entry, but no address could be allocated from this address pool because all addresses in the pool have already been fully allocated. Counters of this event are also provided per instance, per protocol, and per subscriber. This value MUST be monotone increasing in the periods between updates of the entity's natv2PoolDiscontinuityTime. If a manager detects a change in the latter since the last time it sampled this counter, it SHOULD NOT make use of the difference between the latest value of the counter and any value retrieved before the new value of natv2PoolDiscontinuityTime.
Status: current Access: read-only
OBJECT-TYPE    
  Counter64  

natv2PoolPortMapFailureDrops 1.3.6.1.2.1.234.2.3.1.12
The cumulative number of packets dropped because the packet would have triggered the creation of a new port map entry, but no port could be allocated for the protocol concerned. The usual case for this will be for a NAT instance that supports the 'Paired' pooling behavior recommended by RFC 4787, where the internal endpoint has used up all of the ports allocated to it for the address it was mapped to in this pool and cannot be given more ports because - policy or implementation prevents it from having a second address in the same pool, and - policy or unavailability prevents it from acquiring more ports at its originally assigned address. If the NAT instance pooling behavior is 'Arbitrary' (meaning that the NAT instance can allocate a new port mapping for the given internal endpoint on any address in the selected address pool and is not bound to what it has already mapped for that endpoint), then this counter is incremented when all ports for the protocol concerned over the whole of this address pool are already in use. This value MUST be monotone increasing in the periods between updates of the entity's natv2PoolDiscontinuityTime. If a manager detects a change in the latter since the last time it sampled this counter, it SHOULD NOT make use of the difference between the latest value of the counter and any value retrieved before the new value of natv2PoolDiscontinuityTime.
Status: current Access: read-only
OBJECT-TYPE    
  Counter64  

natv2PoolDiscontinuityTime 1.3.6.1.2.1.234.2.3.1.13
Snapshot of the value of the sysUpTime object at the beginning of the latest period of continuity of the statistical counters associated with this address pool. This MUST be initialized when the address pool is configured and MUST be updated whenever the port or address ranges allocated to the pool change.
Status: current Access: read-only
OBJECT-TYPE    
  TimeStamp  

natv2PoolThresholdUsageLow 1.3.6.1.2.1.234.2.3.1.14
Threshold for reporting low utilization of the address pool. Utilization at a given instant is calculated as the percentage of ports allocated in port map entries for the most-used protocol at that instant. If utilization is less than or equal to natv2PoolThresholdUsageLow, an instance of natv2NotificationPoolUsageLow may be triggered, unless disabled by setting it to -1. Reporting is subject to the per-pool notification interval given by natv2PoolNotificationInterval. If multiple notifications are triggered during one interval, the agent MUST report only the one with the lowest value of natv2PoolNotifiedPortMapEntries and discard the others. Implementation note: the percentage specified by this object can be converted to a number of port map entries at configuration time (after port and address ranges have been configured or reconfigured) and compared to the current value of natv2PoolNotifiedPortMapEntries.
Status: current Access: read-write
OBJECT-TYPE    
  Integer32 -1 | 0..100  

natv2PoolThresholdUsageHigh 1.3.6.1.2.1.234.2.3.1.15
Threshold for reporting high utilization of the address pool. Utilization at a given instant is calculated as the percentage of ports allocated in port map entries for the most-used protocol at that instant. If utilization is greater than or equal to natv2PoolThresholdUsageHigh, an instance of natv2NotificationPoolUsageHigh may be triggered, unless disabled by setting it to -1. Reporting is subject to the per-pool notification interval given by natv2PoolNotificationInterval. If multiple notifications are triggered during one interval, the agent MUST report only the one with the highest value of natv2PoolNotifiedPortMapEntries and discard the others. In the rare case where both upper and lower thresholds are crossed in the same interval, the agent MUST report only the upper-threshold notification. Implementation note: the percentage specified by this object can be converted to a number of port map entries at configuration time (after port and address ranges have been configured or reconfigured) and compared to the current value of natv2PoolNotifiedPortMapEntries.
Status: current Access: read-write
OBJECT-TYPE    
  Integer32 -1 | 0..100  

natv2PoolNotifiedPortMapEntries 1.3.6.1.2.1.234.2.3.1.16
Number of port map entries using addresses and ports from this address pool for the most-used protocol at a given instant. One of the objects returned by natv2NotificationPoolUsageLow and natv2NotificationPoolUsageHigh.
Status: current Access: accessible-for-notify
OBJECT-TYPE    
  Unsigned32  

natv2PoolNotifiedPortMapProtocol 1.3.6.1.2.1.234.2.3.1.17
The most-used protocol (i.e., with the largest number of port map entries) mapped into this address pool at a given instant. One of the objects returned by natv2NotificationPoolUsageLow and natv2NotificationPoolUsageHigh.
Status: current Access: accessible-for-notify
OBJECT-TYPE    
  ProtocolNumber  

natv2PoolNotificationInterval 1.3.6.1.2.1.234.2.3.1.18
Minimum number of seconds between successive notifications for this address pool. Controls the generation of natv2NotificationPoolUsageLow and natv2NotificationPoolUsageHigh.
Status: current Access: read-write
OBJECT-TYPE    
  Unsigned32 1..3600  

natv2PoolRangeTable 1.3.6.1.2.1.234.2.4
This table contains address ranges used by pool entries. It is an expansion of natv2PoolTable.
Status: current Access: not-accessible
OBJECT-TYPE    
  SEQUENCE OF  
    Natv2PoolRangeEntry

natv2PoolRangeEntry 1.3.6.1.2.1.234.2.4.1
NAT pool address range.
Status: current Access: not-accessible
OBJECT-TYPE    
  Natv2PoolRangeEntry  

natv2PoolRangeInstanceIndex 1.3.6.1.2.1.234.2.4.1.1
Index of the NAT instance on which the address pool and this address range are configured. See Natv2InstanceIndex.
Status: current Access: not-accessible
OBJECT-TYPE    
  Natv2InstanceIndex  

natv2PoolRangePoolIndex 1.3.6.1.2.1.234.2.4.1.2
Index of the address pool to which this address range belongs. See Natv2PoolIndex.
Status: current Access: not-accessible
OBJECT-TYPE    
  Natv2PoolIndex  

natv2PoolRangeRowIndex 1.3.6.1.2.1.234.2.4.1.3
Row index for successive range entries for the same address pool.
Status: current Access: not-accessible
OBJECT-TYPE    
  Unsigned32  

natv2PoolRangeBegin 1.3.6.1.2.1.234.2.4.1.4
Lowest address included in this range. The type of address (IPv4 or IPv6) is given by natv2PoolAddressType in natv2PoolTable.
Status: current Access: read-only
OBJECT-TYPE    
  InetAddress  

natv2PoolRangeEnd 1.3.6.1.2.1.234.2.4.1.5
Highest address included in this range. The type of address (IPv4 or IPv6) is given by natv2PoolAddressType in natv2PoolTable.
Status: current Access: read-only
OBJECT-TYPE    
  InetAddress  

natv2AddressMapTable 1.3.6.1.2.1.234.2.5
Table of mappings from the internal to external address. By definition, this is a snapshot of NAT instance state at a given moment. Indexed by NAT instance, internal realm, and internal address in that realm. Provides the mapped external address and, depending on implementation support, identifies the address pool from which the external address and port were taken and the index of the subscriber to which the mapping has been allocated. In the case of DS-Lite (RFC 6333), the indexing realm and address are those of the IPv6 encapsulation rather than the IPv4 inner packet.
Status: current Access: not-accessible
OBJECT-TYPE    
  SEQUENCE OF  
    Natv2AddressMapEntry

natv2AddressMapEntry 1.3.6.1.2.1.234.2.5.1
Mapping from internal to external address.
Status: current Access: not-accessible
OBJECT-TYPE    
  Natv2AddressMapEntry  

natv2AddressMapInstanceIndex 1.3.6.1.2.1.234.2.5.1.1
Index of the NAT instance that generated this address map.
Status: current Access: not-accessible
OBJECT-TYPE    
  Natv2InstanceIndex  

natv2AddressMapInternalRealm 1.3.6.1.2.1.234.2.5.1.2
Realm to which the internal address belongs. In most cases, this is the realm defining the address space of the packet being translated. However, in the case of DS-Lite (RFC 6333), this realm defines the IPv6 outer header address space. It is the combination of that outer header and the inner IPv4 packet header that is remapped to the external address and realm. The corresponding IPv4 realm is restricted in scope to the tunnel, so there is no point in identifying it. The mapped IPv4 address will normally be the well-known value 192.0.0.2, or at least lie in the reserved 192.0.0.0/29 range. If natv2AddressMapSubscriberIndex in this table is a valid subscriber index (i.e., greater than zero), then the value of natv2AddressMapInternalRealm MUST be identical to the value of natv2SubscriberRealm associated with that index.
Status: current Access: not-accessible
OBJECT-TYPE    
  SnmpAdminString Size(0..32)  

natv2AddressMapInternalAddressType 1.3.6.1.2.1.234.2.5.1.3
Address type in the header of packets on the interior side of this mapping. Any value other than ipv4(1) or ipv6(2) would be unexpected. In the DS-Lite case, the address type is ipv6(2).
Status: current Access: not-accessible
OBJECT-TYPE    
  InetAddressType  

natv2AddressMapInternalAddress 1.3.6.1.2.1.234.2.5.1.4
Source address of packets originating from the interior of the association provided by this mapping. The address type is given by natv2AddressMapInternalAddressType. In the case of DS-Lite (RFC 6333), this is the IPv6 tunnel source address. The mapping in this case is considered to be from the combination of the IPv6 tunnel source address natv2AddressMapInternalRealmAddress and the well-known IPv4 inner source address natv2AddressMapInternalMappedAddress to the external address.
Status: current Access: not-accessible
OBJECT-TYPE    
  InetAddress Size(0..16)  

natv2AddressMapRowIndex 1.3.6.1.2.1.234.2.5.1.5
Index of a conceptual row corresponding to a mapping of the given internal realm and address to a single external realm and address. Multiple rows will be present because of a promiscuous external address selection policy, policies associating the same internal address with different address pools, or because the same internal realm-address combination is communicating with multiple external address realms.
Status: current Access: not-accessible
OBJECT-TYPE    
  Unsigned32  

natv2AddressMapInternalMappedAddressType 1.3.6.1.2.1.234.2.5.1.6
Internal address type actually translated by this mapping. Any value other than ipv4(1) or ipv6(2) would be unexpected. In the general case, this is the same as given by natv2AddressMapInternalRealmAddressType. In the tunneled case, it is the address type used in the encapsulated packet header. In particular, in the DS-Lite case, the mapped address type is ipv4(1).
Status: current Access: read-only
OBJECT-TYPE    
  InetAddressType  

natv2AddressMapInternalMappedAddress 1.3.6.1.2.1.234.2.5.1.7
Internal address actually translated by this mapping. In the general case, this is the same as natv2AddressMapInternalRealmAddress. The address type is given by natv2AddressMapInternalMappedAddressType. In the case of DS-Lite (RFC 6333), this is the source address of the encapsulated IPv4 packet, normally lying in the well-known range 192.0.0.0/29. The mapping in this case is considered to be from the combination of the IPv6 tunnel source address natv2AddressMapInternalRealmAddress and the well-known IPv4 inner source address natv2AddressMapInternalMappedAddress to the external address.
Status: current Access: read-only
OBJECT-TYPE    
  InetAddress  

natv2AddressMapExternalRealm 1.3.6.1.2.1.234.2.5.1.8
External address realm to which this mapping maps the internal address. This can be the same as the internal realm in the case of a 'hairpin' connection, but otherwise will be different.
Status: current Access: read-only
OBJECT-TYPE    
  SnmpAdminString Size(0..32)  

natv2AddressMapExternalAddressType 1.3.6.1.2.1.234.2.5.1.9
Address type for the external realm. Any value other than ipv4(1) or ipv6(2) would be unexpected.
Status: current Access: read-only
OBJECT-TYPE    
  InetAddressType  

natv2AddressMapExternalAddress 1.3.6.1.2.1.234.2.5.1.10
External address to which the internal address is mapped. The address type is given by natv2AddressMapExternalAddressType. In the DS-Lite case, the mapping is from the combination of the internal IPv6 tunnel source address as presented in this table and the well-known IPv4 source address of the encapsulated IPv4 packet.
Status: current Access: read-only
OBJECT-TYPE    
  InetAddress  

natv2AddressMapExternalPoolIndex 1.3.6.1.2.1.234.2.5.1.11
Index of the address pool in the external realm from which the mapped external address given in natv2AddressMapExternalAddress was taken. Zero if the implementation does not support address pools but has chosen to support this object or if no pool was configured for the given external realm.
Status: current Access: read-only
OBJECT-TYPE    
  Natv2PoolIndexOrZero  

natv2AddressMapSubscriberIndex 1.3.6.1.2.1.234.2.5.1.12
Index of the subscriber to which this address mapping applies, or zero if no subscribers are configured on this NAT instance.
Status: current Access: read-only
OBJECT-TYPE    
  Natv2SubscriberIndexOrZero  

natv2PortMapTable 1.3.6.1.2.1.234.2.6
Table of port map entries indexed by the NAT instance, protocol, and external realm and address. A port map entry associates an internal upper-layer protocol endpoint with an endpoint for the same protocol in the given external realm. By definition, this is a snapshot of NAT instance state at a given moment. The table provides the basic mapping information. In the case of DS-Lite (RFC 6333), the table provides the internal IPv6 tunnel source address in natv2PortMapInternalRealmAddress and the IPv4 source address of the encapsulated packet that is actually translated in natv2PortMapInternalMappedAddress. In the general (non-DS- Lite) case, those two objects will have the same value.
Status: current Access: not-accessible
OBJECT-TYPE    
  SEQUENCE OF  
    Natv2PortMapEntry

natv2PortMapEntry 1.3.6.1.2.1.234.2.6.1
A single NAT mapping.
Status: current Access: not-accessible
OBJECT-TYPE    
  Natv2PortMapEntry  

natv2PortMapInstanceIndex 1.3.6.1.2.1.234.2.6.1.1
Index of the NAT instance that created this port map entry.
Status: current Access: not-accessible
OBJECT-TYPE    
  Natv2InstanceIndex  

natv2PortMapProtocol 1.3.6.1.2.1.234.2.6.1.2
The map entry's upper-layer protocol number.
Status: current Access: not-accessible
OBJECT-TYPE    
  ProtocolNumber  

natv2PortMapExternalRealm 1.3.6.1.2.1.234.2.6.1.3
The realm to which natv2PortMapExternalAddress belongs.
Status: current Access: not-accessible
OBJECT-TYPE    
  SnmpAdminString Size(0..32)  

natv2PortMapExternalAddressType 1.3.6.1.2.1.234.2.6.1.4
Address type for the external realm. A value other than ipv4(1) or ipv6(2) would be unexpected.
Status: current Access: not-accessible
OBJECT-TYPE    
  InetAddressType  

natv2PortMapExternalAddress 1.3.6.1.2.1.234.2.6.1.5
The mapping's assigned external address. (This address is taken from the address pool identified by natv2PortMapExternalPoolIndex, if the implementation supports address pools and pools are configured for the given external realm.) This is the source address for translated outgoing packets. The address type is given by natv2PortMapExternalAddressType.
Status: current Access: not-accessible
OBJECT-TYPE    
  InetAddress Size(0..16)  

natv2PortMapExternalPort 1.3.6.1.2.1.234.2.6.1.6
The mapping's assigned external port number. This is the source port for translated outgoing packets. If the internal port number given by natv2PortMapInternalPort is zero, this value MUST also be zero. Otherwise, this MUST be a non-zero value.
Status: current Access: not-accessible
OBJECT-TYPE    
  InetPortNumber  

natv2PortMapInternalRealm 1.3.6.1.2.1.234.2.6.1.7
The realm to which natv2PortMapInternalRealmAddress belongs. In the general case, this realm contains the address that is being translated. In the DS-Lite (RFC 6333) case, this realm defines the IPv6 address space from which the tunnel source address is taken. The realm of the encapsulated IPv4 address is restricted in scope to the tunnel, so there is no point in identifying it separately.
Status: current Access: read-only
OBJECT-TYPE    
  SnmpAdminString Size(0..32)  

natv2PortMapInternalAddressType 1.3.6.1.2.1.234.2.6.1.8
Address type for addresses in the realm identified by natv2PortMapInternalRealm.
Status: current Access: read-only
OBJECT-TYPE    
  InetAddressType  

natv2PortMapInternalAddress 1.3.6.1.2.1.234.2.6.1.9
Source address for packets received under this mapping on the internal side of the NAT instance. In the general case, this address is the same as the address given in natv2PortMapInternalMappedAddress. In the DS-Lite case, natv2PortMapInternalAddress is the IPv6 tunnel source address. The address type is given by natv2PortMapInternalAddressType.
Status: current Access: read-only
OBJECT-TYPE    
  InetAddress  

natv2PortMapInternalMappedAddressType 1.3.6.1.2.1.234.2.6.1.10
Internal address type actually translated by this mapping. Any value other than ipv4(1) or ipv6(2) would be unexpected. In the general case, this is the same as given by natv2AddressMapInternalAddressType. In the DS-Lite case, the address type is ipv4(1).
Status: current Access: read-only
OBJECT-TYPE    
  InetAddressType  

natv2PortMapInternalMappedAddress 1.3.6.1.2.1.234.2.6.1.11
Internal address actually translated by this mapping. In the general case, this is the same as natv2PortMapInternalRealmAddress. The address type is given by natv2PortMapInternalMappedAddressType. In the case of DS-Lite (RFC 6333), this is the source address of the encapsulated IPv4 packet, normally selected from the well-known range 192.0.0.0/29. The mapping in this case is considered to be from the external address to the combination of the IPv6 tunnel source address natv2PortMapInternalRealmAddress and the well-known IPv4 inner source address natv2PortMapInternalMappedAddress.
Status: current Access: read-only
OBJECT-TYPE    
  InetAddress  

natv2PortMapInternalPort 1.3.6.1.2.1.234.2.6.1.12
The mapping's internal port number. If this is zero, ports are not translated (i.e., the NAT instance is a pure NAT rather than a Network Address and Port Translator (NAPT)).
Status: current Access: read-only
OBJECT-TYPE    
  InetPortNumber  

natv2PortMapExternalPoolIndex 1.3.6.1.2.1.234.2.6.1.13
Identifies the address pool from which the external address in this port map entry was taken. Zero if the implementation does not support address pools but has chosen to support this object or if no pools are configured for the given external realm.
Status: current Access: read-only
OBJECT-TYPE    
  Natv2PoolIndexOrZero  

natv2PortMapSubscriberIndex 1.3.6.1.2.1.234.2.6.1.14
Subscriber using this map entry. Zero if the implementation does not support subscribers but has chosen to support this object.
Status: current Access: read-only
OBJECT-TYPE    
  Natv2SubscriberIndexOrZero  

natv2MIBConformance 1.3.6.1.2.1.234.3
OBJECT IDENTIFIER    

natv2MIBCompliances 1.3.6.1.2.1.234.3.1
OBJECT IDENTIFIER    

natv2MIBGroups 1.3.6.1.2.1.234.3.2
OBJECT IDENTIFIER    

natv2MIBBasicCompliance 1.3.6.1.2.1.234.3.1.1
Describes the requirements for conformance to the basic NAT application of NATV2-MIB.
Status: current Access: read-only
MODULE-COMPLIANCE    

natv2MIBPooledNATCompliance 1.3.6.1.2.1.234.3.1.2
Describes the requirements for conformance to the pooled NAT application of NATV2-MIB.
Status: current Access: read-only
MODULE-COMPLIANCE    

natv2MIBCGNCompliance 1.3.6.1.2.1.234.3.1.3
Describes the requirements for conformance to the carrier-grade NAT application of NATV2-MIB.
Status: current Access: read-only
MODULE-COMPLIANCE    

natv2BasicNotificationGroup 1.3.6.1.2.1.234.3.2.1
Notifications that MUST be supported by all NAT applications.
Status: current Access: read-only
NOTIFICATION-GROUP    

natv2BasicInstanceLevelGroup 1.3.6.1.2.1.234.3.2.2
Per-instance objects that MUST be supported by implementations of all NAT applications.
Status: current Access: read-only
OBJECT-GROUP    

natv2PooledNotificationGroup 1.3.6.1.2.1.234.3.2.3
Notifications that MUST be supported by pooled and carrier-grade NAT applications.
Status: current Access: read-only
NOTIFICATION-GROUP    

natv2PooledInstanceLevelGroup 1.3.6.1.2.1.234.3.2.4
Per-instance objects that MUST be supported by implementations of the pooled and carrier-grade NAT applications.
Status: current Access: read-only
OBJECT-GROUP    

natv2CGNNotificationGroup 1.3.6.1.2.1.234.3.2.5
Notification that MUST be supported by implementations of the carrier-grade NAT application.
Status: current Access: read-only
NOTIFICATION-GROUP    

natv2CGNDeviceLevelGroup 1.3.6.1.2.1.234.3.2.6
Device-level objects that MUST be supported by the carrier-grade NAT application.
Status: current Access: read-only
OBJECT-GROUP    

natv2CGNInstanceLevelGroup 1.3.6.1.2.1.234.3.2.7
Per-instance objects that MUST be supported by the carrier-grade NAT application.
Status: current Access: read-only
OBJECT-GROUP