All MIBs › CISCO-IETF-NAT-MIB
Organization: Cisco Systems, Inc
Last Updated: 2001-03-01
Category: Cisco Devices, VPN and Security
Description: Contains objects for monitoring and managing Network Address Translation (NAT) operations including NAT configuration, address bindings, and runtime statistics.
IPNetwork Monitor uses several OIDs from this MIB in network discovery and polling the applicable devices. Start monitoring CISCO-IETF-NAT-MIB with a free 30-day trial of IPNetwork Monitor.
What Is CISCO-IETF-NAT-MIB?
CISCO-IETF-NAT-MIB is Cisco's implementation of a generic Network Address Translation (NAT) management module, modeled on IETF NAT MIB concepts, for configuring and monitoring NAT operation on Cisco routers and firewalls. It belongs to Cisco's IP services/security MIB family and exposes NAT configuration profiles (service type, protocol idle/negotiation timeouts for ICMP, UDP, and TCP) alongside address-binding and configuration-storage objects. Its monitoring value is chiefly in the NAT software service's operational configuration and binding behavior: administrators track timeout settings and binding lifetimes to understand and troubleshoot how quickly translated sessions age out, which can explain premature session drops or lingering stale translations. It is explicitly modeled after IETF NAT MIB work, adapted to Cisco's configuration model, rather than a strict RFC implementation. It is deployed on Cisco routers and security appliances performing NAT/PAT for enterprise or service-provider edge networks. Engineers can download the CISCO-IETF-NAT-MIB file directly to load it into their MIB browser.
IPNetwork Monitor allows you to monitor SNMP objects defined in CISCO-IETF-NAT-MIB. Use the built-in SNMP Monitoring Browser to explore available variables, view their current values and descriptions, and select the objects you want to monitor. You can then create SNMP monitors, configure thresholds, and receive alerts when monitored values change.
Supported Devices
- Cisco router or security appliance performing NAT/PAT
Monitoring Examples
An administrator would inspect cnatConfTable/cnatConfEntry by cnatConfName to review cnatConfServiceType along with cnatConfTimeoutTcpIdle, cnatConfTimeoutUdpIdle, and cnatConfTimeoutIcmpIdle for a given NAT policy. Comparing cnatConfMaxBindLeaseTime and cnatConfMaxBindIdleTime against observed session-drop complaints can reveal whether translations are timing out too aggressively. Under cnatConfig/cnatBind, checking cnatConfStorageType confirms whether NAT configuration persists across a reload, relevant when unexpected NAT policy resets are reported after a device restart.
What Can Be Monitored
- NAT configuration profiles
- protocol-specific idle/negotiation timeouts (TCP/UDP/ICMP)
- maximum binding lease and idle time
- NAT binding table
- configuration storage type
This MIB depends on
Related MIBs
Imported Objects
From CISCO-SMI
| ciscoExperiment | OBJECT-IDENTITY |
From IF-MIB
| InterfaceIndex |
From SNMP-FRAMEWORK-MIB
| SnmpAdminString |
From SNMPv2-CONF
| MODULE-COMPLIANCE | |
| OBJECT-GROUP |
From SNMPv2-SMI
| Counter32 | |
| Gauge32 | |
| Integer32 | |
| IpAddress | |
| MODULE-IDENTITY | |
| OBJECT-TYPE | |
| TimeTicks | |
| Unsigned32 | |
| mib-2 |
From SNMPv2-TC
| RowStatus | |
| StorageType | |
| TEXTUAL-CONVENTION |
How to Use in IPNetwork Monitor
Example using cnatAddrBindInTranslate OID:
Select a Cisco router or security appliance performing NAT/PAT as the target host to create a monitor — the SNMP service should be up and running on it. Click New Monitor, then check SNMP Custom on the Favorites tab, click Next, and confirm the host. On the next page, click Select... to open the built-in SNMP MIB Browser and type cnatAddrBindInTranslate into the Find box to locate it in the OID tree, selecting the specific row/instance you want to monitor since this is a table column, then select it and click OK. The number of inbound packets that were translated as per this BIND entry. On the monitor's Main parameters page you can set the target's SNMP port (default 161), credentials, polling interval, and other settings — see the SNMP Monitor help for details. On the State conditions and Alerting tabs, configure when the monitor should change state and trigger an alert; since this is a Counter32-type OID, Value bounds is the most useful condition here — trigger an alert if the counter increases sharply between polls relative to its normal baseline, since an unexpected spike often reflects a real change in traffic or activity. Click Finish to create the monitor; you can adjust any parameter later.
OIDs
| OID symbolic | OID numeric | Type | Access | Description |
|---|---|---|---|---|
| ciscoIetfNatMIB | 1.3.6.1.4.1.9.10.77 | This MIB module defines the generic managed objects for NAT. | ||
| ciscoNatMIBObjects | 1.3.6.1.4.1.9.10.77.1 | |||
| cnatConfig | 1.3.6.1.4.1.9.10.77.1.1 | |||
| cnatConfTable | 1.3.6.1.4.1.9.10.77.1.1.1 | not-accessible | This table specifies the configuration attributes for a device supporting NAT function. | |
| cnatConfEntry | 1.3.6.1.4.1.9.10.77.1.1.1.1 | not-accessible | Each entry in the cnatConfTable holds a set of configuration parameters associated with an instance of NAT. Entries in the cnatConfTable are created and deleted using the cnatConfStatus object. | |
| STR cnatConfName | 1.3.6.1.4.1.9.10.77.1.1.1.1.1 | SnmpAdminString | not-accessible | The locally arbitrary, but unique identifier associated with this cnatConfEntry. |
| INT cnatConfServiceType | 1.3.6.1.4.1.9.10.77.1.1.1.1.2 | INTEGER | read-create | An indication of the direction in which new sessions are permitted and the extent of translation done within the IP and transport headers. |
| I32 cnatConfTimeoutIcmpIdle | 1.3.6.1.4.1.9.10.77.1.1.1.1.3 | Integer32 | read-create | The interval of time for which an ICMP protocol session, associated with this configuration, is allowed to remain valid without any activity. |
| I32 cnatConfTimeoutUdpIdle | 1.3.6.1.4.1.9.10.77.1.1.1.1.4 | Integer32 | read-create | The interval of time for which a UDP protocol session, associated with this configuration, is allowed to remain valid without any activity. |
| I32 cnatConfTimeoutTcpIdle | 1.3.6.1.4.1.9.10.77.1.1.1.1.5 | Integer32 | read-create | The interval of time for which a TCP protocol session, associated with this configuration, is allowed to remain valid without any activity. This timeout value applies to a TCP session during its data transfer phase. |
| I32 cnatConfTimeoutTcpNeg | 1.3.6.1.4.1.9.10.77.1.1.1.1.6 | Integer32 | read-create | The interval of time for which a TCP protocol session, associated with this configuration, is allowed to remain valid without any activity. This timeout value applies to a TCP session during its establishment and termination phases. |
| I32 cnatConfTimeoutOther | 1.3.6.1.4.1.9.10.77.1.1.1.1.7 | Integer32 | read-create | The interval of time for which a protocol session other than ICMP, UDP and TCP, associated with this configuration, is allowed to remain valid, without any activity. |
| I32 cnatConfMaxBindLeaseTime | 1.3.6.1.4.1.9.10.77.1.1.1.1.8 | Integer32 | read-create | The maximum lease time for the BIND, associated with this configuration. Unless the lease time is renewed, a BIND will not be valid past the lease time. As a special case, a value of 0 may be assumed to indicate no lease time limit. Typically, this attribute is of relevance only in conjunction with Realm-Specific-IP (RSIP) operation. |
| I32 cnatConfMaxBindIdleTime | 1.3.6.1.4.1.9.10.77.1.1.1.1.9 | Integer32 | read-create | The maximum time, associated with this configuration, to allow a dynamic BIND to remain valid with no NAT session hanging off this BIND. By default for NATIVE NAT maximum Idle time is 0. External agents could control this parameter differently. Static Binds and lease time limited BINDs are not affected by this parameter. |
| STO cnatConfStorageType | 1.3.6.1.4.1.9.10.77.1.1.1.1.10 | StorageType | read-create | The storage type for this conceptual row. |
| ROW cnatConfStatus | 1.3.6.1.4.1.9.10.77.1.1.1.1.11 | RowStatus | read-create | The status of this conceptual row. |
| cnatConfStaticAddrMapTable | 1.3.6.1.4.1.9.10.77.1.1.2 | not-accessible | This table lists configuration for static NAT entries. This table has an expansion dependent relationship on the cnatConfTable. When an SNMP entity deletes a conceptual row from the cnatConfTable, then the corresponding entries are deleted from cnatConfStaticAddrMapTable. | |
| cnatConfStaticAddrMapEntry | 1.3.6.1.4.1.9.10.77.1.1.2.1 | not-accessible | A description of a static NAT entry. This entry contributes to the static NAT table of the device. | |
| STR cnatConfStaticAddrMapName | 1.3.6.1.4.1.9.10.77.1.1.2.1.1 | SnmpAdminString | not-accessible | An arbitrary, but unique identifier associated with this cnatConfStaticAddrMapEntry. The value of this object is unique across both the static address map and the dynamic address map tables. |
| INT cnatConfStaticAddrMapType | 1.3.6.1.4.1.9.10.77.1.1.2.1.2 | INTEGER | read-create | Address (and Transport-ID) maps may be defined for both inbound and outbound direction. Outbound address map refers to mapping a selected set of addresses from private realm to a selected set of addresses in external realm; whereas inbound address map refers to mapping a set of addresses from the external realm to private realm. |
| IP cnatConfStaticLocalAddrFrom | 1.3.6.1.4.1.9.10.77.1.1.2.1.3 | IpAddress | read-create | This object specifies the first IP address of the range of IP addresses mapped by this translation entry. |
| IP cnatConfStaticLocalAddrTo | 1.3.6.1.4.1.9.10.77.1.1.2.1.4 | IpAddress | read-create | This object specifies the last IP address of the range of IP addresses mapped by this translation entry. If only a single address being mapped, the value of this object is equal to the value of cnatConfStaticLocalAddrFrom. The number addresses in the range defined by cnatConfStaticLocalAddrFrom and cnatConfStaticLocalAddrTo should be equal to the number of addresses in the range defined by cnatConfStaticGlobalAddrFrom and cnatConfStaticGlobalAddrTo. |
| I32 cnatConfStaticLocalPortFrom | 1.3.6.1.4.1.9.10.77.1.1.2.1.5 | Integer32 | read-create | If this conceptual row describes a basic NAT, then the value of this object is '0'. If this conceptual row describes NAPT, then the value of this object specifies the first port number in the range of ports being mapped. If the translation specifies a single port, then the value of this object is equal to the value of cnatConfStaticLocalPortTo. |
| I32 cnatConfStaticLocalPortTo | 1.3.6.1.4.1.9.10.77.1.1.2.1.6 | Integer32 | read-create | If this conceptual row describes a basic NAT, then the value of this object is '0'. If this conceptual row describes NAPT, then the value of this object specifies the last port number in the range of ports being mapped. If the translation specifies a single port, then the value of this object is equal to the value of cnatConfStaticLocalPortFrom. |
| IP cnatConfStaticGlobalAddrFrom | 1.3.6.1.4.1.9.10.77.1.1.2.1.7 | IpAddress | read-create | This object specifies the first IP address of the range of IP addresses being mapped to. |
| IP cnatConfStaticGlobalAddrTo | 1.3.6.1.4.1.9.10.77.1.1.2.1.8 | IpAddress | read-create | This object specifies the last IP address of the range of IP addresses being mapped to. If only a single address is being mapped to, the value of this object is equal to the value of cnatConfStaticGlobalAddrFrom.The number addresses in the range defined by cnatConfStaticGlobalAddrFrom and cnatConfStaticGlobalAddrTo should be equal to the number of addresses in the range defined by cnatConfStaticLocalAddrFrom and cnatConfStaticLocalAddrTo. |
| I32 cnatConfStaticGlobalPortFrom | 1.3.6.1.4.1.9.10.77.1.1.2.1.9 | Integer32 | read-create | If this conceptual row describes a basic NAT, then the value of this object is '0'. If this conceptual row describes NAPT, then the value of this object specifies the first port number in the range of ports being mapped to. If the translation specifies a single port, then the value of this object is equal to the value cnatConfStaticGlobalPortTo. |
| I32 cnatConfStaticGlobalPortTo | 1.3.6.1.4.1.9.10.77.1.1.2.1.10 | Integer32 | read-create | If this conceptual row describes a basic NAT, then the value of this object is '0'. If this conceptual describes NAPT, then the value of this object specifies the last port number in the range of ports being to. If the translation specifies a single port, then the value of this object is equal to the value of cnatConfStaticGlobalPortFrom. |
| BIT cnatConfStaticProtocol | 1.3.6.1.4.1.9.10.77.1.1.2.1.11 | Bits | read-create | This object specifies a protocol identifier. If the value of this object is '0', then this basic NAT entry applies to all IP traffic. If the value of this object is non-zero, then this NAT entry only applies to IP traffic with the specified protocol. |
| STO cnatConfStaticAddrMapStorageType | 1.3.6.1.4.1.9.10.77.1.1.2.1.12 | StorageType | read-create | The storage type for this conceptual row. |
| ROW cnatConfStaticAddrMapStatus | 1.3.6.1.4.1.9.10.77.1.1.2.1.13 | RowStatus | read-create | The status of this conceptual row. To create a row in this table, a manager must set this object to either createAndGo(4) or createAndWait(5). |
| cnatConfDynAddrMapTable | 1.3.6.1.4.1.9.10.77.1.1.3 | not-accessible | This table lists dynamic NAT entries. This table has an expansion dependent relationship on the cnatConfTable. When an SNMP entity deletes a conceptual row from the cnatConfTable, then the corresponding entries are deleted from cnatConfDynAddrMapTable. | |
| cnatConfDynAddrMapEntry | 1.3.6.1.4.1.9.10.77.1.1.3.1 | not-accessible | A description of a dynamic NAT entry. This entry contributes to the dynamic NAT table of the device. | |
| STR cnatConfDynAddrMapName | 1.3.6.1.4.1.9.10.77.1.1.3.1.1 | SnmpAdminString | not-accessible | An arbitrary, but unique identifier associated with this cnatConfDynAddrMapEntry. The value of this object is unique across both the static address map and the dynamic address map tables. |
| INT cnatConfDynAddressMapType | 1.3.6.1.4.1.9.10.77.1.1.3.1.2 | INTEGER | read-create | Address (and Transport-ID) maps may be defined for both inbound and outbound direction. Outbound address map refers to mapping a selected set of addresses from private realm to a selected set of addresses in external realm; whereas inbound address map refers to mapping a set of addresses from the external realm to private realm. |
| IP cnatConfDynLocalAddrFrom | 1.3.6.1.4.1.9.10.77.1.1.3.1.3 | IpAddress | read-create | This object specifies the first IP address of the range of IP addresses mapped by this translation entry. |
| IP cnatConfDynLocalAddrTo | 1.3.6.1.4.1.9.10.77.1.1.3.1.4 | IpAddress | read-create | This object specifies the last IP address of the range of IP addresses mapped by this translation entry. |
| I32 cnatConfDynLocalPortFrom | 1.3.6.1.4.1.9.10.77.1.1.3.1.5 | Integer32 | read-create | If this conceptual row describes a basic NAT, then the value of this object is '0'. If this conceptual row describes NAPT, then the value of this object specifies the first port number in the range of ports being mapped. If the translation specifies a single port, then the value of this object is equal to the value of cnatConfDynLocalPortTo. |
| I32 cnatConfDynLocalPortTo | 1.3.6.1.4.1.9.10.77.1.1.3.1.6 | Integer32 | read-only | If this conceptual row describes a basic NAT, then the value of this object is '0'. If this conceptual row describes NAPT, then the value of this object specifies the last port number in the range of ports being mapped. If the translation specifies a single port, then the value of this object is equal to the value of cnatConfDynLocalPortFrom. |
| IP cnatConfDynGlobalAddrFrom | 1.3.6.1.4.1.9.10.77.1.1.3.1.7 | IpAddress | read-create | This object specifies the first IP address of the range of IP addresses being mapped to. |
| IP cnatConfDynGlobalAddrTo | 1.3.6.1.4.1.9.10.77.1.1.3.1.8 | IpAddress | read-create | This object specifies the last IP address of the range of IP addresses being mapped to. |
| I32 cnatConfDynGlobalPortFrom | 1.3.6.1.4.1.9.10.77.1.1.3.1.9 | Integer32 | read-create | If this conceptual row describes a basic NAT, then the value of this object is '0'. If this conceptual row describes NAPT, then the value of this object specifies the first port number in the range of ports being mapped to. If the translation specifies a single port, then the value of this object is equal to the value of cnatConfDynGlobalPortTo. |
| I32 cnatConfDynGlobalPortTo | 1.3.6.1.4.1.9.10.77.1.1.3.1.10 | Integer32 | read-create | If this conceptual row describes a basic NAT, then the value of this object is '0'. If this conceptual row describes NAPT, then the value of this object specifies the last port number in the range of ports being mapped to. If the translation specifies a single port, then the value of this object is equal to the value of cnatConfDynGlobalPortFrom. |
| BIT cnatConfDynProtocol | 1.3.6.1.4.1.9.10.77.1.1.3.1.11 | Bits | read-create | This object specifies a protocol identifier. If the value of this object is '0', then this basic NAT entry applies to all IP traffic. If the value of this object is non-zero, then this NAT entry only applies to IP traffic with the specified protocol. |
| STO cnatConfDynAddrMapStorageType | 1.3.6.1.4.1.9.10.77.1.1.3.1.12 | StorageType | read-create | The storage type for this conceptual row. |
| ROW cnatConfDynAddrMapStatus | 1.3.6.1.4.1.9.10.77.1.1.3.1.13 | RowStatus | read-create | The status of this conceptual row. To create a row in this table, a manager must set this object to either createAndGo(4) or createAndWait(5). |
| cnatInterfaceTable | 1.3.6.1.4.1.9.10.77.1.1.4 | not-accessible | This table holds information regarding the interface on which NAT is enabled. | |
| cnatInterfaceEntry | 1.3.6.1.4.1.9.10.77.1.1.4.1 | not-accessible | Each entry in the NAT Interface Table holds information regarding an interface on which NAT is enabled. | |
| NUM cnatInterfaceIndex | 1.3.6.1.4.1.9.10.77.1.1.4.1.1 | InterfaceIndex | not-accessible | The ifIndex of the interface on which NAT is enabled. |
| INT cnatInterfaceRealm | 1.3.6.1.4.1.9.10.77.1.1.4.1.2 | INTEGER | read-create | This object identifies whether this interface is connected to the private or the public realm. |
| STO cnatInterfaceStorageType | 1.3.6.1.4.1.9.10.77.1.1.4.1.3 | StorageType | read-create | The storage type for this conceptual row. |
| ROW cnatInterfaceStatus | 1.3.6.1.4.1.9.10.77.1.1.4.1.4 | RowStatus | read-create | Status of NAT on this interface. An active status indicates that NAT is enabled on this interface. |
| cnatBind | 1.3.6.1.4.1.9.10.77.1.2 | |||
| G32 cnatAddrBindNumberOfEntries | 1.3.6.1.4.1.9.10.77.1.2.1 | Gauge32 | read-only | This object maintains a count of the number of entries that currently exist in the cnatAddrBindTable. |
| cnatAddrBindTable | 1.3.6.1.4.1.9.10.77.1.2.2 | not-accessible | This table holds information about the currently active NAT BINDs. | |
| cnatAddrBindEntry | 1.3.6.1.4.1.9.10.77.1.2.2.1 | not-accessible | Each entry in the NAT BIND table holds information about a NAT BIND that is currently active. | |
| IP cnatAddrBindLocalAddr | 1.3.6.1.4.1.9.10.77.1.2.2.1.1 | IpAddress | not-accessible | This object represents the private-realm specific network layer address, which maps to the public-realm address represented by cnatAddrBindGlobalAddr. |
| IP cnatAddrBindGlobalAddr | 1.3.6.1.4.1.9.10.77.1.2.2.1.2 | IpAddress | read-only | This object represents the public-realm network layer address that maps to the private-realm network layer address represented by cnatAddrBindLocalAddr. |
| U32 cnatAddrBindId | 1.3.6.1.4.1.9.10.77.1.2.2.1.3 | Unsigned32 | read-only | This object represents a BIND id that is dynamically assigned to each BIND by a NAT enabled device. Each BIND is represented by a unique BIND id across both, the Address bind and Address-Port bind tables. |
| INT cnatAddrBindDirection | 1.3.6.1.4.1.9.10.77.1.2.2.1.4 | INTEGER | read-only | This object represents the direction of the BIND. A BIND may be either uni-directional or bi-directional, same as the orientation of the address map, based on which this bind is formed. The direction of this bind is with reference to the private realm. |
| INT cnatAddrBindType | 1.3.6.1.4.1.9.10.77.1.2.2.1.5 | INTEGER | read-only | This object indicates whether the BIND is static or dynamic. |
| STR cnatAddrBindConfName | 1.3.6.1.4.1.9.10.77.1.2.2.1.6 | SnmpAdminString | read-only | This object is a pointer to the cnatConfTable entry (and the parameters of that entry) which was used in creating this BIND. |
| G32 cnatAddrBindSessionCount | 1.3.6.1.4.1.9.10.77.1.2.2.1.7 | Gauge32 | read-only | Number of sessions currently using this BIND. |
| TIK cnatAddrBindCurrentIdleTime | 1.3.6.1.4.1.9.10.77.1.2.2.1.8 | TimeTicks | read-only | At any given instance of time, this object indicates the time that this BIND has been idle with no sessions attached to it. The value represented by this object is of relevance only when the value of Maximum Idle time (cnatConfMaxBindIdleTime) is non-zero. |
| C32 cnatAddrBindInTranslateEx | 1.3.6.1.4.1.9.10.77.1.2.2.1.9 | Counter32 | read-only | The number of inbound packets that were translated as per this BIND entry. |
| C32 cnatAddrBindOutTranslate | 1.3.6.1.4.1.9.10.77.1.2.2.1.10 | Counter32 | read-only | The number of outbound packets that were translated as per this BIND entry. |
| G32 cnatAddrPortBindNumberOfEntries | 1.3.6.1.4.1.9.10.77.1.2.3 | Gauge32 | read-only | This object maintains a count of the number of entries that currently exist in the cnatAddrPortBindTable. |
| cnatAddrPortBindTable | 1.3.6.1.4.1.9.10.77.1.2.4 | not-accessible | This table holds information about the currently active NAPT BINDs. | |
| cnatAddrPortBindEntry | 1.3.6.1.4.1.9.10.77.1.2.4.1 | not-accessible | Each entry in the this table holds information a NAPT BIND that is currently active. | |
| IP cnatAddrPortBindLocalAddr | 1.3.6.1.4.1.9.10.77.1.2.4.1.1 | IpAddress | not-accessible | This object represents the private-realm specific network layer address which, in conjunction with cnatAddrPortBindLocalPort, maps to the public-realm network layer address and transport id represented by cnatAddrPortBindGlobalAddr and cnatAddrPortBindGlobalPort respectively. |
| I32 cnatAddrPortBindLocalPort | 1.3.6.1.4.1.9.10.77.1.2.4.1.2 | Integer32 | not-accessible | This object represents the private-realm specific port number (or query ID in case of ICMP messages) which, in conjunction with cnatAddrPortBindLocalAddr, maps to the public-realm network layer address and transport id represented by cnatAddrPortBindGlobalAddr and cnatAddrPortBindGlobalPort respectively. |
| BIT cnatAddrPortBindProtocol | 1.3.6.1.4.1.9.10.77.1.2.4.1.3 | Bits | not-accessible | This object specifies a protocol identifier. If the value of this object is '0', then this BIND entry applies to all IP traffic. If the value of this object is non-zero, then this NAT entry only applies to IP traffic with the specified protocol. |
| IP cnatAddrPortBindGlobalAddr | 1.3.6.1.4.1.9.10.77.1.2.4.1.4 | IpAddress | read-only | This object represents the public-realm specific network layer address that, in conjunction with cnatAddrPortBindGlobalPort, maps to the private-realm network layer address and transport id represented by cnatAddrPortBindLocalAddr and cnatAddrPortBindLocalPort respectively. |
| I32 cnatAddrPortBindGlobalPort | 1.3.6.1.4.1.9.10.77.1.2.4.1.5 | Integer32 | read-only | This object represents the port number (or query id in case of ICMP) that, in conjunction with cnatAddrPortBindGlobalAddr, maps to the private-realm network layer address and transport id represented by cnatAddrPortBindLocalAddr and cnatAddrPortBindLocalPort respectively. |
| U32 cnatAddrPortBindId | 1.3.6.1.4.1.9.10.77.1.2.4.1.6 | Unsigned32 | read-only | This object represents a BIND id that is dynamically assigned to each BIND by a NAT enabled device. Each BIND is represented by a unique BIND id across both, the Address Bind and Address-Port Bind tables. |
| INT cnatAddrPortBindDirection | 1.3.6.1.4.1.9.10.77.1.2.4.1.7 | INTEGER | read-only | This object represents the direction of the BIND. A BIND may be either uni-directional or bi-directional, same as the orientation of the address map, based on which this bind is formed. The direction of this bind is with reference to the private realm. |
| INT cnatAddrPortBindType | 1.3.6.1.4.1.9.10.77.1.2.4.1.8 | INTEGER | read-only | This object indicates whether the BIND is static or dynamic. |
| STR cnatAddrPortBindConfName | 1.3.6.1.4.1.9.10.77.1.2.4.1.9 | SnmpAdminString | read-only | This object is a pointer to the cnatConfTable entry (and the parameters of that entry) which was used in creating this BIND. |
| G32 cnatAddrPortBindSessionCount | 1.3.6.1.4.1.9.10.77.1.2.4.1.10 | Gauge32 | read-only | Number of sessions currently using this BIND. |
| TIK cnatAddrPortBindCurrentIdleTime | 1.3.6.1.4.1.9.10.77.1.2.4.1.11 | TimeTicks | read-only | At any given instance of time, this object indicates the time that this BIND has been idle with no sessions attached to it. The value represented by this object is of relevance only when the value of Maximum Idle time (cnatConfMaxBindIdleTime) is non-zero. |
| C32 cnatAddrPortBindInTranslate | 1.3.6.1.4.1.9.10.77.1.2.4.1.12 | Counter32 | read-only | The number of inbound packets that were translated as per this BIND entry. |
| C32 cnatAddrPortBindOutTranslate | 1.3.6.1.4.1.9.10.77.1.2.4.1.13 | Counter32 | read-only | The number of outbound packets that were translated as per this BIND entry. |
| cnatSessionTable | 1.3.6.1.4.1.9.10.77.1.2.5 | not-accessible | The (conceptual) table containing one entry for each NAT session currently active on this NAT device. | |
| cnatSessionEntry | 1.3.6.1.4.1.9.10.77.1.2.5.1 | not-accessible | An entry (conceptual row) containing information about an active NAT session on this NAT device. | |
| U32 cnatSessionBindId | 1.3.6.1.4.1.9.10.77.1.2.5.1.1 | Unsigned32 | not-accessible | This object represents a BIND id that is dynamically assigned to each BIND by a NAT enabled device. This bind id is that same as represented by the BindId objects in the Address bind and Address-Port bind tables. |
| U32 cnatSessionId | 1.3.6.1.4.1.9.10.77.1.2.5.1.2 | Unsigned32 | not-accessible | The session ID for this NAT session. |
| INT cnatSessionDirection | 1.3.6.1.4.1.9.10.77.1.2.5.1.3 | INTEGER | read-only | The direction of this session with respect to the local network. 'inbound' indicates that this session was initiated from the public network into the private network. 'outbound' indicates that this session was initiated from the private network into the public network. |
| TIK cnatSessionUpTime | 1.3.6.1.4.1.9.10.77.1.2.5.1.4 | TimeTicks | read-only | The up time of this session in one-hundredths of a second. |
| NAT cnatSessionProtocolType | 1.3.6.1.4.1.9.10.77.1.2.5.1.5 | NATProtocolType | read-only | The protocol type of this session. TCP and UDP sessions are uniquely identified by the tuple of (source IP address, source UDP/TCP port, destination IP address, destination TCP/UCP port). ICMP query sessions are identified by the tuple of (source IP address, ICMP query ID, destination IP address). |
| IP cnatSessionOrigPrivateAddr | 1.3.6.1.4.1.9.10.77.1.2.5.1.6 | IpAddress | read-only | The original IP address of the session endpoint that lies in the private network. |
| IP cnatSessionTransPrivateAddr | 1.3.6.1.4.1.9.10.77.1.2.5.1.7 | IpAddress | read-only | The translated IP address of the session endpoint that lies in the private network. The value of this object is equal to that of the original public IP Address (cnatSessionOrigPrivateAddr) when there is no translation. |
| I32 cnatSessionOrigPrivatePort | 1.3.6.1.4.1.9.10.77.1.2.5.1.8 | Integer32 | read-only | The original transport port of the session endpoint that belongs to the private network. If this is an ICMP session then the value is the ICMP request ID. |
| I32 cnatSessionTransPrivatePort | 1.3.6.1.4.1.9.10.77.1.2.5.1.9 | Integer32 | read-only | The translated transport port of the session that lies in the private network. The value of this object is equal to that of the original transport port (cnatSessionOrigPrivatePort) when there is no translation. |
| IP cnatSessionOrigPublicAddr | 1.3.6.1.4.1.9.10.77.1.2.5.1.10 | IpAddress | read-only | The original IP address of the session endpoint that lies in the public network. |
| IP cnatSessionTransPublicAddr | 1.3.6.1.4.1.9.10.77.1.2.5.1.11 | IpAddress | read-only | The translated IP address of the session endpoint that belongs to the public network. The value of this object is equal to that of the original public IP Address (cnatSessionOrigPublicAddr) when there is no translation. |
| I32 cnatSessionOrigPublicPort | 1.3.6.1.4.1.9.10.77.1.2.5.1.12 | Integer32 | read-only | The original transport port of the session endpoint that belongs to the public network. If this is an ICMP session then the value contains the ICMP request ID. |
| I32 cnatSessionTransPublicPort | 1.3.6.1.4.1.9.10.77.1.2.5.1.13 | Integer32 | read-only | The translated transport port of the session endpoint that belongs to the public network. The value of this object is equal to that of the original transport port (cnatSessionOrigPublicPort) when there is no translation. |
| TIK cnatSessionCurrentIdletime | 1.3.6.1.4.1.9.10.77.1.2.5.1.14 | TimeTicks | read-only | The time in one-hundredths of a second since a packet belonging to this session was last detected. |
| U32 cnatSessionSecondBindId | 1.3.6.1.4.1.9.10.77.1.2.5.1.15 | Unsigned32 | read-only | The natBindId of the 'other' NAT binding incase of Twice NAT. An instance of this object contains a valid value only if the binding type for this session is TwiceNAT. |
| C32 cnatSessionInTranslate | 1.3.6.1.4.1.9.10.77.1.2.5.1.16 | Counter32 | read-only | The number of inbound packets that were translated by this session. |
| C32 cnatSessionOutTranslate | 1.3.6.1.4.1.9.10.77.1.2.5.1.17 | Counter32 | read-only | The number of outbound packets that were translated by this session. |
| cnatStatistics | 1.3.6.1.4.1.9.10.77.1.3 | |||
| cnatProtocolStatsTable | 1.3.6.1.4.1.9.10.77.1.3.1 | not-accessible | The (conceptual) table containing per protocol NAT statistics. | |
| cnatProtocolStatsEntry | 1.3.6.1.4.1.9.10.77.1.3.1.1 | not-accessible | An entry (conceptual row) containing NAT statistics pertaining to a particular protocol. | |
| NAT cnatProtocolStatsName | 1.3.6.1.4.1.9.10.77.1.3.1.1.1 | NATProtocolType | not-accessible | This object represents the protocol pertaining to which statistics are reported. |
| C32 cnatProtocolStatsInTranslate | 1.3.6.1.4.1.9.10.77.1.3.1.1.2 | Counter32 | read-only | The number of inbound packets, pertaining to the protocol identified by cnatProtocolStatsName, that underwent NAT. |
| C32 cnatProtocolStatsOutTranslate | 1.3.6.1.4.1.9.10.77.1.3.1.1.3 | Counter32 | read-only | The number of outbound packets, pertaining to the protocol identified by cnatProtocolStatsName, that underwent NAT. |
| C32 cnatProtocolStatsRejectCount | 1.3.6.1.4.1.9.10.77.1.3.1.1.4 | Counter32 | read-only | The number of packets, pertaining to the protocol identified by cnatProtocolStatsName, that had to be rejected/dropped due to lack of resources. These rejections could be due to session timeout, resource unavailability etc. |
| cnatAddrMapStatsTable | 1.3.6.1.4.1.9.10.77.1.3.2 | not-accessible | The (conceptual) table containing per address map NAT statistics. | |
| cnatAddrMapStatsEntry | 1.3.6.1.4.1.9.10.77.1.3.2.1 | not-accessible | An entry (conceptual row) containing NAT statistics per address map. | |
| STR cnatAddrMapStatsConfName | 1.3.6.1.4.1.9.10.77.1.3.2.1.1 | SnmpAdminString | not-accessible | The name of the configuration (from the cnatConfTable), regarding which statistics are being reported. The configuration name along with Map name uniquely identifies an entry across both (static and dynamic) Address Map tables. |
| STR cnatAddrMapStatsMapName | 1.3.6.1.4.1.9.10.77.1.3.2.1.2 | SnmpAdminString | not-accessible | The name of the Address Map (from the cnatConfStaticAddrMapTable/cnatConfDynAddrMapTable), regarding which statistics are being reported. The configuration name along with Map name uniquely identifies an entry across both (static and dynamic) Address Map tables. |
| C32 cnatAddrMapStatsInTranslate | 1.3.6.1.4.1.9.10.77.1.3.2.1.3 | Counter32 | read-only | The number of inbound packets, pertaining to this address map entry, that were translated. |
| C32 cnatAddrMapStatsOutTranslate | 1.3.6.1.4.1.9.10.77.1.3.2.1.4 | Counter32 | read-only | The number of outbound packets, pertaining to this address map entry, that were translated. |
| C32 cnatAddrMapStatsNoResource | 1.3.6.1.4.1.9.10.77.1.3.2.1.5 | Counter32 | read-only | The number of packets, pertaining to this address map entry, that were dropped due to lack of addresses in the address pool identified by this address map. The value of this object should always be zero in case of static address map. |
| G32 cnatAddrMapStatsAddrUsed | 1.3.6.1.4.1.9.10.77.1.3.2.1.6 | Gauge32 | read-only | The number of addresses, pertaining to this address map, that are currently being used from the nat pool. The value of this object is irrelevant if the address map in question is a static address map. |
| cnatInterfaceStatsTable | 1.3.6.1.4.1.9.10.77.1.3.3 | not-accessible | This table augments the cnatInterfaceTable and provides statistics information pertaining to the specified interface. | |
| cnatInterfaceStatsEntry | 1.3.6.1.4.1.9.10.77.1.3.3.1 | not-accessible | Each entry of the cnatInterfaceStatsTable represents stats pertaining to one interface, which is identified by its ifIndex. | |
| C32 cnatInterfacePktsIn | 1.3.6.1.4.1.9.10.77.1.3.3.1.1 | Counter32 | read-only | Number of packets received on this interface that were translated. |
| C32 cnatInterfacePktsOut | 1.3.6.1.4.1.9.10.77.1.3.3.1.2 | Counter32 | read-only | Number of translated packets that were sent out this interface. |
| ciscoNatMIBNotificationPrefix | 1.3.6.1.4.1.9.10.77.2 | |||
| ciscoNatMIBNotifications | 1.3.6.1.4.1.9.10.77.2.0 | |||
| ciscoNatMIBConformance | 1.3.6.1.4.1.9.10.77.3 | |||
| ciscoNatMIBCompliances | 1.3.6.1.4.1.9.10.77.3.1 | |||
| ciscoNatMIBCompliance | 1.3.6.1.4.1.9.10.77.3.1.1 | The compliance statement for devices running NAT. | ||
| ciscoNatMIBGroups | 1.3.6.1.4.1.9.10.77.3.2 | |||
| cnatConfigGroup | 1.3.6.1.4.1.9.10.77.3.2.1 | A collection of configuration-related information required to support management of devices supporting NAT. | ||
| cnatBindGroup | 1.3.6.1.4.1.9.10.77.3.2.2 | A collection of BIND-related objects required to support management of devices supporting NAT. | ||
| cnatStatsGroup | 1.3.6.1.4.1.9.10.77.3.2.3 | A collection of NAT statistics related objects required to support troubleshooting/monitoring NAT operation. |
RFC description
Generic NAT configuration, bindings, and statistics management for Cisco devices.
Start monitoring Cisco router or security appliance performing NAT/PAT with a free 30-day trial of IPNetwork Monitor. Import MIBs, browse SNMP OIDs, create custom SNMP monitors, configure alerts, and monitor any SNMP-enabled network device from a single console.