ALTIGA-NAT-STATS-MIB

All MIBs › ALTIGA-NAT-STATS-MIB

Organization: Cisco Systems, Inc.

Last Updated: 2002-09-05

Category: VPN and Security, Vendor: Altiga

Description: Altiga (Cisco VPN 3000) NAT statistics MIB for monitoring network address translation session counts and mappings.

Start monitoring vendor-neutral, standards-based MIB, any SNMPv3-capable network device (SNMP engine identity/boot/clock status) with a free 30-day trial of IPNetwork Monitor. Import MIBs, browse SNMP OIDs, create custom SNMP monitors, configure alerts, and monitor any SNMP-enabled network device from a single console.

What Is ALTIGA-NAT-STATS-MIB?

ALTIGA-NAT-STATS-MIB is an Altiga Networks MIB, inherited by Cisco after its acquisition and used on the Cisco VPN 3000 Concentrator series, for monitoring Network Address Translation (NAT) activity. It exposes packet and session counters as well as a live table of active address/port translation mappings. Its monitoring purpose is squarely performance and operational status: an administrator can track alNatStatsPacketsIn/Out, alNatStatsTotalTranslations, alNatStatsActiveTranslations, and alNatStatsMaxTranslations to gauge current NAT load and detect when the device is approaching translation table exhaustion, which would cause new sessions to fail. It is a standalone Altiga/Cisco enterprise MIB with no strong dependency on other standard MIBs beyond basic SNMPv2-SMI conventions. It is typically deployed on Cisco VPN 3000 series concentrators performing NAT for remote-access or site-to-site VPN traffic. Engineers can download the ALTIGA-NAT-STATS-MIB file directly to load it into their MIB browser.

IPNetwork Monitor allows you to monitor SNMP objects defined in ALTIGA-NAT-STATS-MIB. Use the built-in SNMP Monitoring Browser to explore available variables, view their current values and descriptions, and select the objects you want to monitor. You can then create SNMP monitors, configure thresholds, and receive alerts when monitored values change.

Supported Devices

Cisco VPN 3000 Series Concentrator (formerly Altiga Networks)

Monitoring Examples

An operator would poll alNatStatsActiveTranslations against alNatStatsMaxTranslations to see how close the device is to its NAT table capacity, and watch alNatStatsPacketsIn/alNatStatsPacketsOut for traffic volume trends. The alNatTranslationTable (alNatTranslationEntry) can be walked to see individual mappings of alNatTranslationSrcAddress/alNatTranslationSrcPort to alNatTranslationDestAddress/alNatTranslationDestPort and the translated alNatTranslationAddress, useful for troubleshooting a specific user's connectivity or verifying that NAT is exhausting available translations.

What Can Be Monitored

NAT packets in/out
total NAT translations performed
active NAT translations
maximum NAT translations reached
individual NAT translation mappings

Imported Objects

From ALTIGA-GLOBAL-REG

alNatMibModule

OBJECT-IDENTITY

From ALTIGA-MIB

alNatGroup	OBJECT-IDENTITY
alStatsNat	OBJECT-IDENTITY

From SNMPv2-CONF

MODULE-COMPLIANCE
OBJECT-GROUP

From SNMPv2-SMI

Counter32
Integer32
IpAddress
MODULE-IDENTITY
OBJECT-TYPE
Unsigned32

How to Use in IPNetwork Monitor

Example using alNatStatsPacketsIn OID:

Select a Cisco (Altiga) VPN 3000 Series Concentrator (legacy) as the target host to create a monitor — the SNMP service should be up and running on it. Click New Monitor, then check SNMP Custom on the Favorites tab, click Next, and confirm the host. On the next page, click Select... to open the built-in SNMP MIB Browser and type alNatStatsPacketsIn into the Find box to locate it in the OID tree, then select it and click OK. The total number of inbound packets that have been translated. On the monitor's Main parameters page you can set the target's SNMP port (default 161), credentials, polling interval, and other settings — see the SNMP Monitor help for details. On the State conditions and Alerting tabs, configure when the monitor should change state and trigger an alert; since this is a Counter32-type OID, Value bounds is the most useful condition here — trigger an alert if the counter increases sharply between polls relative to its normal baseline, since an unexpected spike often reflects a real change in traffic or activity. Click Finish to create the monitor; you can adjust any parameter later.

OIDs

OID symbolic	OID numeric	Type	Access	Description
altigaNatStatsMibModule	1.3.6.1.4.1.3076.1.1.28.2			The Altiga NAT Statistics MIB models counters and objects that are of management interest for NAT. Acronyms The following acronyms are used in this document: MIB: Management Information Base NAT: Network Address Translation
altigaNatStatsMibConformance	1.3.6.1.4.1.3076.1.1.28.2.1
altigaNatStatsMibCompliances	1.3.6.1.4.1.3076.1.1.28.2.1.1
altigaNatStatsMibCompliance	1.3.6.1.4.1.3076.1.1.28.2.1.1.1			The compliance statement for agents which implement the Altiga NAT Statistics MIB.
altigaNatStatsGroup	1.3.6.1.4.1.3076.2.1.1.1.23.2			The objects for NAT statistics
alStatsNatGlobal	1.3.6.1.4.1.3076.2.1.2.23.1
C32 alNatStatsPacketsInEx	1.3.6.1.4.1.3076.2.1.2.23.1.1	Counter32	read-only	The total number of inbound packets that have been translated.
C32 alNatStatsPacketsOut	1.3.6.1.4.1.3076.2.1.2.23.1.2	Counter32	read-only	The total number of outbound packets that have been translated.
C32 alNatStatsTotalTranslations	1.3.6.1.4.1.3076.2.1.2.23.1.3	Counter32	read-only	The total number of sessions that have been established.
C32 alNatStatsActiveTranslations	1.3.6.1.4.1.3076.2.1.2.23.1.4	Counter32	read-only	The active number of sessions that are established.
C32 alNatStatsMaxTranslations	1.3.6.1.4.1.3076.2.1.2.23.1.5	Counter32	read-only	The maximum number of sessions that have been established at any one time.
alNatTranslationTable	1.3.6.1.4.1.3076.2.1.2.23.2		not-accessible	List of active NAT sessions.
alNatTranslationEntry	1.3.6.1.4.1.3076.2.1.2.23.2.1		not-accessible	An entry in the alNatTranslationTable.
IP alNatTranslationSrcAddress	1.3.6.1.4.1.3076.2.1.2.23.2.1.1	IpAddress	read-only	The internal source address to be translated.
I32 alNatTranslationSrcPort	1.3.6.1.4.1.3076.2.1.2.23.2.1.2	Integer32	read-only	The internal source port to be translated.
IP alNatTranslationDestAddress	1.3.6.1.4.1.3076.2.1.2.23.2.1.3	IpAddress	read-only	The external destination address.
I32 alNatTranslationDestPort	1.3.6.1.4.1.3076.2.1.2.23.2.1.4	Integer32	read-only	The external destinatin port.
IP alNatTranslationAddress	1.3.6.1.4.1.3076.2.1.2.23.2.1.5	IpAddress	read-only	The translated internal source address.
I32 alNatTranslationPort	1.3.6.1.4.1.3076.2.1.2.23.2.1.6	Integer32	read-only	The translated internal source port.
U32 alNatTranslationAge	1.3.6.1.4.1.3076.2.1.2.23.2.1.7	Unsigned32	read-only	The age of this entry in seconds.
INT alNatTranslationType	1.3.6.1.4.1.3076.2.1.2.23.2.1.8	INTEGER	read-only	The type of this entry.
INT alNatTranslationDirection	1.3.6.1.4.1.3076.2.1.2.23.2.1.9	INTEGER	read-only	The direction that this rule acts upon.
C32 alNatTranslationBytes	1.3.6.1.4.1.3076.2.1.2.23.2.1.10	Counter32	read-only	The total number of bytes that have been translated.
C32 alNatTranslationPackets	1.3.6.1.4.1.3076.2.1.2.23.2.1.11	Counter32	read-only	The total number of packets that have been translated.
alNatAllTranslationTable	1.3.6.1.4.1.3076.2.1.2.23.3		not-accessible	List of active NAT sessions.
alNatAllTranslationEntry	1.3.6.1.4.1.3076.2.1.2.23.3.1		not-accessible	An entry in the alNatAllTranslationTable.
IP alNatAllTranslationSrcAddress	1.3.6.1.4.1.3076.2.1.2.23.3.1.1	IpAddress	read-only	The internal source address to be translated.
I32 alNatAllTranslationSrcPort	1.3.6.1.4.1.3076.2.1.2.23.3.1.2	Integer32	read-only	The internal source port to be translated.
IP alNatAllTranslationDestAddress	1.3.6.1.4.1.3076.2.1.2.23.3.1.3	IpAddress	read-only	The external destination address.
I32 alNatAllTranslationDestPort	1.3.6.1.4.1.3076.2.1.2.23.3.1.4	Integer32	read-only	The external destinatin port.
IP alNatAllTranslationAddress	1.3.6.1.4.1.3076.2.1.2.23.3.1.5	IpAddress	read-only	The translated internal source address.
I32 alNatAllTranslationPort	1.3.6.1.4.1.3076.2.1.2.23.3.1.6	Integer32	read-only	The translated internal source port.
U32 alNatAllTranslationAge	1.3.6.1.4.1.3076.2.1.2.23.3.1.7	Unsigned32	read-only	The age of this entry in seconds.
INT alNatAllTranslationType	1.3.6.1.4.1.3076.2.1.2.23.3.1.8	INTEGER	read-only	The type of this entry.
INT alNatAllTranslationDirection	1.3.6.1.4.1.3076.2.1.2.23.3.1.9	INTEGER	read-only	The direction that this rule acts upon.
C32 alNatAllTranslationBytes	1.3.6.1.4.1.3076.2.1.2.23.3.1.10	Counter32	read-only	The total number of bytes that have been translated.
C32 alNatAllTranslationPackets	1.3.6.1.4.1.3076.2.1.2.23.3.1.11	Counter32	read-only	The total number of packets that have been translated.

RFC description

Manages NAT (Network Address Translation) statistics and counters for Altiga VPN gateways, tracking inbound and outbound translated packets.

Start monitoring Cisco (Altiga) VPN 3000 Series Concentrators (legacy) with a free 30-day trial of IPNetwork Monitor. Import MIBs, browse SNMP OIDs, create custom SNMP monitors, configure alerts, and monitor any SNMP-enabled network device from a single console.

Download ALTIGA-NAT-STATS-MIB