All MIBs › HM2-NAT-MIB
Organization: Hirschmann Automation and Control GmbH
Last Updated: 2011-11-30
Category: Vendor: Belden
Description: Hirschmann HiOS (HM2) Network Address Translation (NAT) MIB for configuring NAT rules and session tables.
Start monitoring vendor-neutral, standards-based MIB, any SNMPv3-capable network device (SNMP engine identity/boot/clock status) with a free 30-day trial of IPNetwork Monitor. Import MIBs, browse SNMP OIDs, create custom SNMP monitors, configure alerts, and monitor any SNMP-enabled network device from a single console.
What Is HM2-NAT-MIB?
HM2-NAT-MIB is a Hirschmann HiOS (HM2) MIB for configuring Network Address Translation, covering destination NAT (DNAT), source NAT (SNAT/masquerade), double NAT, and 1:1 NAT rule sets, along with per-rule-type maximum rule counts and rule tables. It exposes rule configuration (indexed rule entries) plus operational bookkeeping objects such as rule counts, pending-action tracking, and a statistics-reset control. Monitoring with this MIB centers on verifying NAT rule provisioning and rule-count utilization — checking how many DNAT rules are configured against the maximum allowed, and whether pending rule changes have been committed — which is a software/configuration-state concern rather than physical hardware monitoring. It relies on the underlying interface/IP addressing model of the device for the addresses and interfaces referenced by NAT rules. It is deployed on Hirschmann industrial switches/routers providing NAT-based network segmentation in automation environments. Engineers can download the HM2-NAT-MIB file directly to load it into their MIB browser.
IPNetwork Monitor allows you to monitor SNMP objects defined in HM2-NAT-MIB. Use the built-in SNMP Monitoring Browser to explore available variables, view their current values and descriptions, and select the objects you want to monitor. You can then create SNMP monitors, configure thresholds, and receive alerts when monitored values change.
Supported Devices
- Hirschmann industrial Ethernet switches/routers (HiOS)
Monitoring Examples
An administrator can poll hm2DnatRuleCount against hm2DnatMaxRules to check how close the device is to its DNAT rule capacity, and review hm2DnatRuleTable (via hm2DnatRuleIndex) to audit individual rule definitions. hm2DnatRulePendingActions indicates whether recently configured rules are still awaiting commit via hm2DnatCommitPendingActions, and hm2NatResetStatistics provides a way to clear counters before a fresh troubleshooting cycle; hm2NatNotifications would alert on NAT-related fault conditions.
What Can Be Monitored
- DNAT/SNAT/double-NAT rule counts vs maximum
- individual NAT rule definitions
- pending NAT rule changes awaiting commit
- NAT statistics reset state
- NAT fault notifications
This MIB depends on
Related MIBs
Imported Objects
From HM2-TC-MIB
| HmActionValue | |
| HmTimeSeconds1970 | |
| hm2ConfigurationMibs | OBJECT-IDENTITY |
From IF-MIB
| InterfaceIndex | |
| InterfaceIndexOrZero |
From SNMPv2-CONF
| MODULE-COMPLIANCE | |
| NOTIFICATION-GROUP | |
| OBJECT-GROUP |
From SNMPv2-SMI
| Counter64 | |
| Integer32 | |
| MODULE-IDENTITY | |
| NOTIFICATION-TYPE | |
| OBJECT-TYPE | |
| Unsigned32 |
From SNMPv2-TC
| DisplayString | |
| RowStatus | |
| StorageType | |
| TruthValue |
How to Use in IPNetwork Monitor
Example using hm2DnatStatsTotalPck OID:
Select a Hirschmann HiOS industrial switch/router (DNAT/SNAT/1:1 NAT) as the target host to create a monitor — the SNMP service should be up and running on it. Click New Monitor, then check SNMP Custom on the Favorites tab, click Next, and confirm the host. On the next page, click Select... to open the built-in SNMP MIB Browser and type hm2DnatStatsTotalPck into the Find box to locate it in the OID tree, then select it and click OK. It reports the total number of packets processed by the DNAT firewall. On the monitor's Main parameters page you can set the target's SNMP port (default 161), credentials, polling interval, and other settings — see the SNMP Monitor help for details. On the State conditions and Alerting tabs, configure when the monitor should change state and trigger an alert; since this is a Counter64-type OID, Value bounds is the most useful condition here — trigger an alert if the counter increases sharply between polls relative to its normal baseline, since an unexpected spike often reflects a real change in traffic or activity. Click Finish to create the monitor; you can adjust any parameter later.
OIDs
| OID symbolic | OID numeric | Type | Access | Description |
|---|---|---|---|---|
| hm2NatMib | 1.3.6.1.4.1.248.11.80 | This MIB defines the SNMP interface for Hirschmann DNAT/SNAT/ Double NAT/1:1 NAT implementations Copyright (C) | ||
| hm2NatNotifications | 1.3.6.1.4.1.248.11.80.0 | |||
| NTF hm2DnatRuleAppliedTrap | 1.3.6.1.4.1.248.11.80.0.1 | A rule of DNAT was applied. The rule is identified by the given rule index of the rule table. | ||
| NTF hm2DnatRuleAppliedAndLoggedTrap | 1.3.6.1.4.1.248.11.80.0.2 | A rule of DNAT was applied and logged according to the current logging mechanism. The rule is identified by the given rule index of the rule table. | ||
| NTF hm21to1RuleAppliedTrap | 1.3.6.1.4.1.248.11.80.0.5 | A rule of 1:1 NAT was applied. The rule is identified by the given rule index of the rule table. | ||
| NTF hm21to1RuleAppliedAndLoggedTrap | 1.3.6.1.4.1.248.11.80.0.6 | A rule of 1:1 NAT was applied and logged according the current logging mechanism. The rule is identified by the given rule index of the rule table. | ||
| NTF hm2MasqRuleAppliedTrap | 1.3.6.1.4.1.248.11.80.0.7 | A rule of masquerading was applied. The rule is identified by the given rule index of the rule table. | ||
| NTF hm2MasqRuleAppliedAndLoggedTrap | 1.3.6.1.4.1.248.11.80.0.8 | A rule of masquerading was applied and logged according the current logging mechanism. The rule is identified by the given rule index of the rule table. | ||
| NTF hm2DonatRuleAppliedTrap | 1.3.6.1.4.1.248.11.80.0.9 | A rule of double NAT was applied. The rule is identified by the given rule index of the rule table. | ||
| NTF hm2DonatRuleAppliedAndLoggedTrap | 1.3.6.1.4.1.248.11.80.0.10 | A rule of double NAT was applied and logged according the current logging mechanism. The rule is identified by the given rule index of the rule table. | ||
| hm2NatObjects | 1.3.6.1.4.1.248.11.80.1 | |||
| hm2NatGeneralSettings | 1.3.6.1.4.1.248.11.80.1.1 | |||
| I32 hm2DnatMaxRules | 1.3.6.1.4.1.248.11.80.1.1.2 | Integer32 | read-only | Maximum number of allowed rules for DNAT. |
| I32 hm2OneToOneNatMaxRules | 1.3.6.1.4.1.248.11.80.1.1.3 | Integer32 | read-only | Maximum number of allowed rules for 1:1 NAT. |
| I32 hm2MasqMaxRules | 1.3.6.1.4.1.248.11.80.1.1.4 | Integer32 | read-only | Maximum number of allowed rules for Masquerading. |
| I32 hm2DoubleNatMaxRules | 1.3.6.1.4.1.248.11.80.1.1.5 | Integer32 | read-only | Maximum number of allowed rules for Double NAT. |
| HMA hm2NatResetStatistics | 1.3.6.1.4.1.248.11.80.1.1.6 | HmActionValue | read-write | Setting this value to action(2) will reset the statistics of the whole NAT module. It will be set to noop(1) automatically after reset. |
| hm2Dnat | 1.3.6.1.4.1.248.11.80.1.2 | |||
| hm2DnatRules | 1.3.6.1.4.1.248.11.80.1.2.1 | |||
| hm2DnatRulesObjects | 1.3.6.1.4.1.248.11.80.1.2.1.1 | |||
| I32 hm2DnatRuleCount | 1.3.6.1.4.1.248.11.80.1.2.1.1.1 | Integer32 | read-only | Number of current DNAT rules |
| I32 hm2DnatIfMappingRuleCount | 1.3.6.1.4.1.248.11.80.1.2.1.1.2 | Integer32 | read-only | Number of current DNAT IF mapping entries. |
| T/F hm2DnatRulePendingActions | 1.3.6.1.4.1.248.11.80.1.2.1.1.3 | TruthValue | read-only | This value describes, whether the DNAT rule table was modified but not yet written to the firewall implementation (set to true). After writing all modifications to the firewall, the value switches automatically back to false. |
| HMA hm2DnatCommitPendingActions | 1.3.6.1.4.1.248.11.80.1.2.1.1.4 | HmActionValue | read-write | Setting this value to action(2) writes not yet committed changes to the firewall (DNAT and Interface Mapping Table). After writing all modifications, the value switches automatically back to noop(1). |
| hm2DnatRulesTables | 1.3.6.1.4.1.248.11.80.1.2.1.2 | |||
| hm2DnatRuleTable | 1.3.6.1.4.1.248.11.80.1.2.1.2.1 | not-accessible | The list of DNAT rules for this firewall. | |
| hm2DnatRuleEntry | 1.3.6.1.4.1.248.11.80.1.2.1.2.1.1 | not-accessible | DNAT rule entry. | |
| I32 hm2DnatRuleIndex | 1.3.6.1.4.1.248.11.80.1.2.1.2.1.1.1 | Integer32 | accessible-for-notify | Rule index of this DNAT rule. |
| STR hm2DnatSourceAddress | 1.3.6.1.4.1.248.11.80.1.2.1.2.1.1.3 | DisplayString | read-create | Source address of packets to be NATed. Can be: - Single address (a.b.c.d), - address range in CIDR notation (a.b.c.d/n) - the name of a Netobject ($NetobjectName) - 'any' for no filtering at all - a prepending '!' selects the complement set |
| STR hm2DnatSourcePort | 1.3.6.1.4.1.248.11.80.1.2.1.2.1.1.4 | DisplayString | read-create | The source port of the packet to reroute. Allowed formats are: - keyword 'any' for no filtering or a protocol without ports - single port ('10') - port range with first and last port separated by hyphen ('10-15') - comma separated list of ports ('1235,25,123') - combination of the points above ('10,25-30,125,1993') The number of named ports (1 for each individual port, 2 for port ranges) must not exceed 15. |
| STR hm2DnatTargetAddress | 1.3.6.1.4.1.248.11.80.1.2.1.2.1.1.5 | DisplayString | read-create | Destination address of packets to be NATed. Can be: - Single address (a.b.c.d), - address range in CIDR notation (a.b.c.d/n) - the name of a Netobject ($NetobjectName) - 'any' for no filtering at all - a prepending '!' selects the complement set |
| STR hm2DnatTargetPort | 1.3.6.1.4.1.248.11.80.1.2.1.2.1.1.6 | DisplayString | read-create | The target port of the packet to reroute. Allowed formats are: - keyword 'any' - single port ('10') - port range with first and last port separated by hyphen ('10-15') - comma separated list of ports ('1235,25,123') - combination of the points above ('10,25-30,125,1993') The number of named ports (1 for each individual port, 2 for port ranges) must not exceed 15. |
| STR hm2DnatNewTargetAddress | 1.3.6.1.4.1.248.11.80.1.2.1.2.1.1.7 | DisplayString | read-create | The IP address of the machine to reroute packets to. Must be a single IP address (a.b.c.d). |
| STR hm2DnatNewTargetPort | 1.3.6.1.4.1.248.11.80.1.2.1.2.1.1.8 | DisplayString | read-create | The port to reroute packets to. Must be a single port or 'any'. |
| INT hm2DnatProto | 1.3.6.1.4.1.248.11.80.1.2.1.2.1.1.9 | INTEGER | read-create | The IP protocol (RFC 791) for protocol-independent filtering. The following values are currently supported: o icmp(1): Internet Control Message Protocol (RFC 792) o igmp(2): Internet Group Management Protocol o ipip(3): IP in IP tunneling (RFC 1853) o tcp(4): Transmission Control Protocol (RFC 793) o udp(5): User Datagram Protocol (RFC 768) o esp(6): IPsec Encapsulated Security Payload (RFC 2406) o ah(7): IPsec Authentication Header (RFC 2402) o icmpv6(8): Internet Control Message Protocol for IPv6 o any(9): apply to all protocols |
| STR hm2DnatRuleParams | 1.3.6.1.4.1.248.11.80.1.2.1.2.1.1.10 | DisplayString | read-create | Additional parameters to this rule as string. Currently only the value 'none' is valid. Reserved for future use. |
| T/F hm2DnatLog | 1.3.6.1.4.1.248.11.80.1.2.1.2.1.1.11 | TruthValue | read-create | Set to true if application of this rule shall be logged. |
| T/F hm2DnatTrap | 1.3.6.1.4.1.248.11.80.1.2.1.2.1.1.12 | TruthValue | read-create | Set to true if application of this rule shall send a trap. |
| ROW hm2DnatRowStatus | 1.3.6.1.4.1.248.11.80.1.2.1.2.1.1.13 | RowStatus | read-create | This is a standard row status value: - active(1): The rule is active. Note that until committed, the rule will not be applied. - notInService(2): The rule is inactive because of user action. - notReady(3):The rule is inactive because it has an incomplete configuration. - createAndGo(4): Create the rule with default parameters activated. - createAndWait(5): Create the rule inactive. - destroy(6): Delete the rule. You cannot delete a rule with interface mappings to it. |
| STR hm2DnatDescription | 1.3.6.1.4.1.248.11.80.1.2.1.2.1.1.14 | DisplayString | read-create | User defined textual description related to this rule. |
| hm2DnatRuleIfMappingTable | 1.3.6.1.4.1.248.11.80.1.2.1.2.2 | not-accessible | Table for mapping DNAT rules to interfaces. | |
| hm2DnatRuleIfMappingEntry | 1.3.6.1.4.1.248.11.80.1.2.1.2.2.1 | not-accessible | Entry in rule interface mapping table. | |
| I32 hm2DnatIfmRuleIndex | 1.3.6.1.4.1.248.11.80.1.2.1.2.2.1.1 | Integer32 | not-accessible | The index of the DNAT rule this mapping entry is assigned to. |
| INT hm2DnatIfmDirection | 1.3.6.1.4.1.248.11.80.1.2.1.2.2.1.2 | INTEGER | not-accessible | For DNAT, this can only be set to ingress, which is the interface on which a packet that is to be forwarded will arrive. |
| U32 hm2DnatIfmPriority | 1.3.6.1.4.1.248.11.80.1.2.1.2.2.1.3 | Unsigned32 | read-create | The priority is the sorting key for rules in the chain to this interface. They don't need to be unique per interface, but in that case, no clear order can be assumed. Priorities are processed in ascending order (0 highest priority). |
| NUM hm2DnatIfmInterface | 1.3.6.1.4.1.248.11.80.1.2.1.2.2.1.4 | InterfaceIndex | not-accessible | The interface this mapping entry is assigned to. This has to be either an hm2AgentSwitchIpInterfaceIfIndex or an hm2AgentSwitchIpVlanIfIndex. Note that for physical interfaces this only works if the corresponding hm2AgentSwitchIpInterfaceRoutingMode is set to enable. |
| ROW hm2DnatIfmRowStatus | 1.3.6.1.4.1.248.11.80.1.2.1.2.2.1.5 | RowStatus | read-create | The RowStatus value for this entry with the usual meanings: - active(1): The interface mapping is in place - notInService(2): The interface mapping is not in place because the user said so - notReady(3): The interface mapping is not in place because the agent said so - createAndGo(4): Create this mapping with the default priority and activate it. - createAndWait(5): Create this mapping deactivated. - destroy(6): Destroy this interface mapping. |
| hm2DnatStats | 1.3.6.1.4.1.248.11.80.1.2.2 | |||
| hm2DnatGlobalStats | 1.3.6.1.4.1.248.11.80.1.2.2.1 | |||
| C64 hm2DnatStatsTotalPckEx | 1.3.6.1.4.1.248.11.80.1.2.2.1.1 | Counter64 | read-only | Total number of packets processed by the DNAT firewall. |
| C64 hm2DnatStatsTotalPckSize | 1.3.6.1.4.1.248.11.80.1.2.2.1.2 | Counter64 | read-only | Total number of bytes processed by the DNAT firewall. |
| C64 hm2DnatStatsTotalPckDenDrop | 1.3.6.1.4.1.248.11.80.1.2.2.1.3 | Counter64 | read-only | Total number of packets dropped or denied by the DNAT firewall. |
| C64 hm2DnatStatsTotalPckAccepted | 1.3.6.1.4.1.248.11.80.1.2.2.1.4 | Counter64 | read-only | Total number of packets accepted by the DNAT firewall. |
| hm2DnatRuleStats | 1.3.6.1.4.1.248.11.80.1.2.2.2 | |||
| hm2DnatStatsRuleTable | 1.3.6.1.4.1.248.11.80.1.2.2.2.1 | not-accessible | Table of per-rule statistics of the DNAT firewall. | |
| hm2DnatStatsRuleTableEntry | 1.3.6.1.4.1.248.11.80.1.2.2.2.1.1 | not-accessible | Statistics table entry for DNAT. | |
| C64 hm2DnatStatsPckCount | 1.3.6.1.4.1.248.11.80.1.2.2.2.1.1.1 | Counter64 | read-only | Number of packets DNATed. |
| C64 hm2DnatStatsPckSize | 1.3.6.1.4.1.248.11.80.1.2.2.2.1.1.2 | Counter64 | read-only | Number of bytes DNATed. |
| HMT hm2DnatStatsLastApplied | 1.3.6.1.4.1.248.11.80.1.2.2.2.1.1.3 | HmTimeSeconds1970 | read-only | Time of last application of the rule in seconds since 1.1.1970. |
| hm21to1 | 1.3.6.1.4.1.248.11.80.1.4 | |||
| hm21to1RuleObjects | 1.3.6.1.4.1.248.11.80.1.4.1 | |||
| I32 hm21to1RuleCount | 1.3.6.1.4.1.248.11.80.1.4.1.1 | Integer32 | read-only | Number of current 1:1 NAT rules. |
| I32 hm21to1IfMappingRuleCount | 1.3.6.1.4.1.248.11.80.1.4.1.2 | Integer32 | read-only | Number of current 1:1 NAT IF mapping entries. |
| T/F hm21to1RulePendingActions | 1.3.6.1.4.1.248.11.80.1.4.1.3 | TruthValue | read-only | This value describes, whether the 1:1 NAT rule table was modified but not yet written to the firewall implementation (set to true). After writing all modifications to the firewall, the value switches automatically back to false. |
| HMA hm21to1CommitPendingActions | 1.3.6.1.4.1.248.11.80.1.4.1.4 | HmActionValue | read-write | Setting this value to action(2) writes not yet committed changes to the firewall (1:1 NAT and Interface Mapping Table). After writing all modifications, the value switches automatically back to noop(1). |
| BIT hm21to1Alg | 1.3.6.1.4.1.248.11.80.1.4.1.5 | Bits | read-write | Global bitmask for application level gateway of all the 1:1 NAT rules. |
| NUM hm21to1PublicIntf | 1.3.6.1.4.1.248.11.80.1.4.1.6 | InterfaceIndexOrZero | read-write | The index of the public interface defined on the uplink port. |
| hm21to1RuleTables | 1.3.6.1.4.1.248.11.80.1.4.2 | |||
| hm21to1RuleTable | 1.3.6.1.4.1.248.11.80.1.4.2.1 | not-accessible | The list of 1:1 NAT rules for this firewall. | |
| hm21to1RuleEntry | 1.3.6.1.4.1.248.11.80.1.4.2.1.1 | not-accessible | 1:1 NAT rule entry. | |
| I32 hm21to1RuleIndex | 1.3.6.1.4.1.248.11.80.1.4.2.1.1.1 | Integer32 | accessible-for-notify | Rule index of this 1:1 NAT rule. |
| STR hm21to1TargetAddress | 1.3.6.1.4.1.248.11.80.1.4.2.1.1.2 | DisplayString | read-create | Destination address of packets to be NATed. Can be: - Single address (a.b.c.d), - address range in CIDR notation (a.b.c.d/n) - the name of a Netobject ($NetobjectName) - 'any' for no filtering at all |
| STR hm21to1NewTargetAddress | 1.3.6.1.4.1.248.11.80.1.4.2.1.1.3 | DisplayString | read-create | New Destination address of packets to be NATed. Can be: - Single address (a.b.c.d), - address range in CIDR notation (a.b.c.d/n) - the name of a Netobject ($NetobjectName) - 'any' for no filtering at all |
| STR hm21to1RuleParams | 1.3.6.1.4.1.248.11.80.1.4.2.1.1.4 | DisplayString | read-create | Additional parameters to this rule as string. Currently only the value 'none' is valid. Reserved for future use. |
| T/F hm21to1Log | 1.3.6.1.4.1.248.11.80.1.4.2.1.1.5 | TruthValue | read-create | Set to true if application of this rule shall be logged. |
| T/F hm21to1Trap | 1.3.6.1.4.1.248.11.80.1.4.2.1.1.6 | TruthValue | read-create | Set to true if application of this rule shall send a trap. |
| ROW hm21to1RowStatus | 1.3.6.1.4.1.248.11.80.1.4.2.1.1.7 | RowStatus | read-create | This is a standard row status value: - active(1): The rule is active. Note that until committed, the rule will not be applied. - notInService(2): The rule is inactive because of user action. - notReady(3):The rule is inactive because it has an incomplete configuration. - createAndGo(4): Create the rule with default parameters activated. - createAndWait(5): Create the rule inactive. - destroy(6): Delete the rule. You cannot delete a rule with interface mappings to it. |
| STR hm21to1Description | 1.3.6.1.4.1.248.11.80.1.4.2.1.1.8 | DisplayString | read-create | User defined textual description related to this rule. |
| NUM hm21to1IngressIntf | 1.3.6.1.4.1.248.11.80.1.4.2.1.1.9 | InterfaceIndexOrZero | read-create | The index of the interface on which packets going to the target address will arrive. This has to be either an hm2AgentSwitchIpInterfaceIfIndex or an hm2AgentSwitchIpVlanIfIndex. Note that for physical interfaces this only works if the corresponding hm2AgentSwitchIpInterfaceRoutingMode is set to enable. |
| NUM hm21to1EgressIntf | 1.3.6.1.4.1.248.11.80.1.4.2.1.1.10 | InterfaceIndexOrZero | read-create | The index of the interface from which the new target address can be reached. This has to be either an hm2AgentSwitchIpInterfaceIfIndex or an hm2AgentSwitchIpVlanIfIndex. Note that for physical interfaces this only works if the corresponding hm2AgentSwitchIpInterfaceRoutingMode is set to enable. |
| U32 hm21to1Priority | 1.3.6.1.4.1.248.11.80.1.4.2.1.1.11 | Unsigned32 | read-create | The priority is the sorting key for rules in the chain to this interface. They don't need to be unique per interface, but in that case, no clear order can be assumed. Priorities are processed in ascending order (0 highest priority). |
| STO hm21to1StorageType | 1.3.6.1.4.1.248.11.80.1.4.2.1.1.12 | StorageType | read-create | The storage type for this row. Rows having the value 'volatile' are not saved. |
| hm21to1Stats | 1.3.6.1.4.1.248.11.80.1.4.3 | |||
| hm21to1GeneralStats | 1.3.6.1.4.1.248.11.80.1.4.3.1 | |||
| C64 hm21to1StatsTotalPck | 1.3.6.1.4.1.248.11.80.1.4.3.1.1 | Counter64 | read-only | Total number of packets processed by 1:1 NAT. |
| C64 hm21to1StatsTotalPckSize | 1.3.6.1.4.1.248.11.80.1.4.3.1.2 | Counter64 | read-only | Total number of bytes processed by the 1:1 NAT. |
| C64 hm21to1StatsTotalPckDenDrop | 1.3.6.1.4.1.248.11.80.1.4.3.1.3 | Counter64 | read-only | Total number of packets dropped or denied by 1:1 NAT. |
| C64 hm21to1StatsTotalPckAccepted | 1.3.6.1.4.1.248.11.80.1.4.3.1.4 | Counter64 | read-only | Total number of packets accepted by 1:1 NAT. |
| hm21to1StatsTables | 1.3.6.1.4.1.248.11.80.1.4.3.2 | |||
| hm21to1StatsRuleTable | 1.3.6.1.4.1.248.11.80.1.4.3.2.1 | not-accessible | Table of per-rule statistics of 1:1 NAT. | |
| hm21to1StatsRuleTableEntry | 1.3.6.1.4.1.248.11.80.1.4.3.2.1.1 | not-accessible | Statistics table entry for 1:1 NAT. | |
| C64 hm21to1StatsPckCount | 1.3.6.1.4.1.248.11.80.1.4.3.2.1.1.1 | Counter64 | read-only | Number of packets matched by this rule. |
| C64 hm21to1StatsPckSize | 1.3.6.1.4.1.248.11.80.1.4.3.2.1.1.2 | Counter64 | read-only | Number of bytes processed by this rule. |
| HMT hm21to1StatsLastApplied | 1.3.6.1.4.1.248.11.80.1.4.3.2.1.1.3 | HmTimeSeconds1970 | read-only | Time of last application of the rule in seconds since 1.1.1970. |
| hm2Masquerading | 1.3.6.1.4.1.248.11.80.1.5 | |||
| hm2MasqRuleObjects | 1.3.6.1.4.1.248.11.80.1.5.1 | |||
| I32 hm2MasqRuleCount | 1.3.6.1.4.1.248.11.80.1.5.1.1 | Integer32 | read-only | Number of current masquerading rules. |
| I32 hm2MasqIfMappingRuleCount | 1.3.6.1.4.1.248.11.80.1.5.1.2 | Integer32 | read-only | Number of current masquerading IF mapping entries. |
| T/F hm2MasqRulePendingActions | 1.3.6.1.4.1.248.11.80.1.5.1.3 | TruthValue | read-only | This value describes, whether the masquerading rule table was modified but not yet written to the firewall implementation (set to true). After writing all modifications to the firewall, the value switches automatically back to false. |
| HMA hm2MasqCommitPendingActions | 1.3.6.1.4.1.248.11.80.1.5.1.4 | HmActionValue | read-write | Setting this value to action(2) writes not yet committed changes to the firewall (DNAT and Interface Mapping Table). After writing all modifications, the value switches automatically back to noop(1). |
| hm2MasqRuleTables | 1.3.6.1.4.1.248.11.80.1.5.2 | |||
| hm2MasqRuleTable | 1.3.6.1.4.1.248.11.80.1.5.2.1 | not-accessible | The list of masquerading rules for this firewall. | |
| hm2MasqRuleEntry | 1.3.6.1.4.1.248.11.80.1.5.2.1.1 | not-accessible | Masquerading rule entry. | |
| I32 hm2MasqRuleIndex | 1.3.6.1.4.1.248.11.80.1.5.2.1.1.1 | Integer32 | accessible-for-notify | Rule index of this masquerading rule. |
| STR hm2MasqSourceAddress | 1.3.6.1.4.1.248.11.80.1.5.2.1.1.2 | DisplayString | read-create | The source address of the packets to reroute. Allowed formats are: - keyword 'any' - IP address ('10.0.0.1') - IP address range ('10.0.0.0/8') - a prepending '!' selects the complement set |
| STR hm2MasqSourcePort | 1.3.6.1.4.1.248.11.80.1.5.2.1.1.3 | DisplayString | read-create | The source port of the packet to reroute. Allowed formats are: - keyword 'any' - single ('10') - range with first and last separated by hyphen ('10-15') - comma separated list of s ('1235,25,123') - combination of the points above ('10,25-30,125,1993') The number of named ports (1 for each individual port, 2 for port ranges) must not exceed 15. |
| INT hm2MasqProto | 1.3.6.1.4.1.248.11.80.1.5.2.1.1.4 | INTEGER | read-create | The IP protocol (RFC 791) for protocol-independent filtering. The following values are currently supported: o tcp(4): transmission control protocol (RFC 793) o udp(5): user datagram protocol (RFC 768) o any(9): apply to all protocols |
| STR hm2MasqRuleParams | 1.3.6.1.4.1.248.11.80.1.5.2.1.1.5 | DisplayString | read-create | Additional parameters to this rule as string. Currently only the value 'none' is valid. Reserved for future use. |
| T/F hm2MasqLog | 1.3.6.1.4.1.248.11.80.1.5.2.1.1.6 | TruthValue | read-create | Set to true if application of this rule shall be logged. |
| T/F hm2MasqTrap | 1.3.6.1.4.1.248.11.80.1.5.2.1.1.7 | TruthValue | read-create | Set to true if application of this rule shall send a trap. |
| ROW hm2MasqRowStatus | 1.3.6.1.4.1.248.11.80.1.5.2.1.1.8 | RowStatus | read-create | This is a standard row status value: - active(1): The rule is active. Note that until committed, the rule will not be applied. - notInService(2): The rule is inactive because of user action. - notReady(3):The rule is inactive because it has an incomplete configuration. - createAndGo(4): Create the rule with default parameters activated. - createAndWait(5): Create the rule inactive. - destroy(6): Delete the rule. You cannot delete a rule with interface mappings to it. |
| STR hm2MasqDescription | 1.3.6.1.4.1.248.11.80.1.5.2.1.1.9 | DisplayString | read-create | User defined textual description related to this rule. |
| T/F hm2MasqIpsecExempt | 1.3.6.1.4.1.248.11.80.1.5.2.1.1.10 | TruthValue | read-create | Set to true if application of this rule should ignore IPsec traffic. |
| hm2MasqRuleIfMappingTable | 1.3.6.1.4.1.248.11.80.1.5.2.2 | not-accessible | Table for mapping masquerading rules to interfaces. | |
| hm2MasqRuleIfMappingEntry | 1.3.6.1.4.1.248.11.80.1.5.2.2.1 | not-accessible | Entry in rule interface mapping table. | |
| I32 hm2MasqIfmRuleIndex | 1.3.6.1.4.1.248.11.80.1.5.2.2.1.1 | Integer32 | not-accessible | The index of the 1:1 NAT rule this mapping entry is assigned to. |
| INT hm2MasqIfmDirection | 1.3.6.1.4.1.248.11.80.1.5.2.2.1.2 | INTEGER | not-accessible | For masquerading, this can only be set to egress which is the interface packets will be masqueraded to. |
| U32 hm2MasqIfmPriority | 1.3.6.1.4.1.248.11.80.1.5.2.2.1.3 | Unsigned32 | read-create | The priority is the sorting key for rules in the chain to this interface. They don't need to be unique per interface, but in that case, no clear order can be assumed. Priorities are processed in ascending order (0 highest priority). |
| NUM hm2MasqIfmInterface | 1.3.6.1.4.1.248.11.80.1.5.2.2.1.4 | InterfaceIndex | not-accessible | The interface this mapping entry is assigned to. This has to be either an hm2AgentSwitchIpInterfaceIfIndex or an hm2AgentSwitchIpVlanIfIndex. Note that for physical interfaces this only works if the corresponding hm2AgentSwitchIpInterfaceRoutingMode is set to enable. |
| ROW hm2MasqIfmRowStatus | 1.3.6.1.4.1.248.11.80.1.5.2.2.1.5 | RowStatus | read-create | The RowStatus value for this entry with the usual meanings: - active(1): The interface mapping is in place - notInService(2): The interface mapping is not in place because the user said so - notReady(3): The interface mapping is not in place because the agent said so - createAndGo(4): Create this mapping with the default priority and activate it. - createAndWait(5): Create this mapping deactivated. - destroy(6): Destroy this interface mapping. |
| hm2MasqStats | 1.3.6.1.4.1.248.11.80.1.5.3 | |||
| hm2MasqGeneralStats | 1.3.6.1.4.1.248.11.80.1.5.3.1 | |||
| C64 hm2MasqStatsTotalPck | 1.3.6.1.4.1.248.11.80.1.5.3.1.1 | Counter64 | read-only | Total number of packets processed by Masquerading |
| C64 hm2MasqStatsTotalPckSize | 1.3.6.1.4.1.248.11.80.1.5.3.1.2 | Counter64 | read-only | Total number of bytes processed by Masquerading |
| C64 hm2MasqStatsTotalPckDenDrop | 1.3.6.1.4.1.248.11.80.1.5.3.1.3 | Counter64 | read-only | Total number of packets dropped or denied by Masquerading |
| C64 hm2MasqStatsTotalPckAccepted | 1.3.6.1.4.1.248.11.80.1.5.3.1.4 | Counter64 | read-only | Total number of packets accepted by masquerading. |
| hm2MasqStatsRuleTables | 1.3.6.1.4.1.248.11.80.1.5.3.2 | |||
| hm2MasqStatsRuleTable | 1.3.6.1.4.1.248.11.80.1.5.3.2.1 | not-accessible | Table of per-rule statistics of masquerading. | |
| hm2MasqStatsRuleTableEntry | 1.3.6.1.4.1.248.11.80.1.5.3.2.1.1 | not-accessible | Statistics table entry for masquerading. | |
| C64 hm2MasqStatsPckCount | 1.3.6.1.4.1.248.11.80.1.5.3.2.1.1.1 | Counter64 | read-only | Number of packets matched by this rule. |
| C64 hm2MasqStatsPckSize | 1.3.6.1.4.1.248.11.80.1.5.3.2.1.1.2 | Counter64 | read-only | Number of bytes processed by this rule. |
| HMT hm2MasqStatsLastApplied | 1.3.6.1.4.1.248.11.80.1.5.3.2.1.1.3 | HmTimeSeconds1970 | read-only | Time of last application of the rule in seconds since 1.1.1970 |
| hm2DoubleNat | 1.3.6.1.4.1.248.11.80.1.6 | |||
| hm2DoubleNatRuleObjects | 1.3.6.1.4.1.248.11.80.1.6.1 | |||
| I32 hm2DoubleNatRuleCount | 1.3.6.1.4.1.248.11.80.1.6.1.1 | Integer32 | read-only | Current number of rules for double NAT. |
| I32 hm2DoubleNatIfMappingRuleCount | 1.3.6.1.4.1.248.11.80.1.6.1.2 | Integer32 | read-only | Number of current double NAT IF mapping entries. |
| T/F hm2DoubleNatRulePendingActions | 1.3.6.1.4.1.248.11.80.1.6.1.3 | TruthValue | read-only | This value describes, whether the double NAT rule table was modified but not yet written to the firewall implementation (set to true). After writing all modifications to the firewall, the value switches automatically back to false. |
| HMA hm2DoubleNatCommitPendingActions | 1.3.6.1.4.1.248.11.80.1.6.1.4 | HmActionValue | read-write | Setting this value to action(2) writes not yet committed changes to the firewall (double NAT and interface mapping table). After writing all modifications, the value switches automatically back to noop(1). |
| hm2DoubleNatRuleTables | 1.3.6.1.4.1.248.11.80.1.6.2 | |||
| hm2DoubleNatRuleTable | 1.3.6.1.4.1.248.11.80.1.6.2.1 | not-accessible | Table of double NAT rules. | |
| hm2DoubleNatRuleEntry | 1.3.6.1.4.1.248.11.80.1.6.2.1.1 | not-accessible | Entry within double NAT rule table. | |
| I32 hm2DonatRuleIndex | 1.3.6.1.4.1.248.11.80.1.6.2.1.1.1 | Integer32 | accessible-for-notify | Index of the rule within table. |
| STR hm2DonatLocalInternalIp | 1.3.6.1.4.1.248.11.80.1.6.2.1.1.2 | DisplayString | read-create | The real IP address of the first net/machine you want to double NAT. Allowed formats are: - keyword 'any' - IP address ('10.0.0.1') - IP address range ('10.0.0.0/8') |
| STR hm2DonatLocalExternalIp | 1.3.6.1.4.1.248.11.80.1.6.2.1.1.3 | DisplayString | read-create | The IP address where you want the first net/machine to be reachable from the second net/machine. Allowed formats are: - keyword 'any' - IP address ('10.0.0.1') - IP address range ('10.0.0.0/8') |
| STR hm2DonatRemoteInternalIp | 1.3.6.1.4.1.248.11.80.1.6.2.1.1.4 | DisplayString | read-create | The real IP address of the second net/machine you want to double NAT. Allowed formats are: - keyword 'any' - IP address ('10.0.0.1') - IP address range ('10.0.0.0/8') |
| STR hm2DonatRemoteExternalIp | 1.3.6.1.4.1.248.11.80.1.6.2.1.1.5 | DisplayString | read-create | The IP address where you want the second net/machine to be reachable from the first net/machine. Allowed formats are: - keyword 'any' - IP address ('10.0.0.1') - IP address range ('10.0.0.0/8') |
| STR hm2DonatRuleParams | 1.3.6.1.4.1.248.11.80.1.6.2.1.1.6 | DisplayString | read-create | Additional parameters to this rule as string. Currently only the value 'none' is valid. Reserved for future use. |
| T/F hm2DonatLog | 1.3.6.1.4.1.248.11.80.1.6.2.1.1.7 | TruthValue | read-create | Set to true if application of this rule shall be logged. |
| T/F hm2DonatTrap | 1.3.6.1.4.1.248.11.80.1.6.2.1.1.8 | TruthValue | read-create | Set to true if application of this rule shall send a trap. |
| ROW hm2DonatRowStatus | 1.3.6.1.4.1.248.11.80.1.6.2.1.1.9 | RowStatus | read-create | This is a standard row status value: - active(1): The rule is active. Note that until committed, the rule will not be applied. - notInService(2): The rule is inactive because of user action. - notReady(3):The rule is inactive because it has an incomplete configuration. - createAndGo(4): Create the rule with default parameters activated. - createAndWait(5): Create the rule inactive. - destroy(6): Delete the rule. You cannot delete a rule with interface mappings to it. |
| STR hm2DonatDescription | 1.3.6.1.4.1.248.11.80.1.6.2.1.1.10 | DisplayString | read-create | User defined textual description related to this rule. |
| hm2DonatRuleIfMappingTable | 1.3.6.1.4.1.248.11.80.1.6.2.2 | not-accessible | Table for mapping double NAT rules to interfaces. | |
| hm2DonatRuleIfMappingEntry | 1.3.6.1.4.1.248.11.80.1.6.2.2.1 | not-accessible | Entry in rule interface mapping table. | |
| I32 hm2DonatIfmRuleIndex | 1.3.6.1.4.1.248.11.80.1.6.2.2.1.1 | Integer32 | not-accessible | The index of the double NAT rule this mapping entry is assigned to. |
| INT hm2DonatIfmDirection | 1.3.6.1.4.1.248.11.80.1.6.2.2.1.2 | INTEGER | not-accessible | Meanings: - ingress(1): The first net/machine can be reached through this interface - egress(2): The second net/machine can be reached through this interface - both(3): Both machines/nets can be reached through this interface |
| U32 hm2DonatIfmPriority | 1.3.6.1.4.1.248.11.80.1.6.2.2.1.3 | Unsigned32 | read-create | The priority is the sorting key for rules in the chain to this interface. They don't need to be unique per interface, but in that case, no clear order can be assumed. Priorities are processed in ascending order (0 highest priority). |
| NUM hm2DonatIfmInterface | 1.3.6.1.4.1.248.11.80.1.6.2.2.1.4 | InterfaceIndex | not-accessible | The interface this mapping entry is assigned to. This has to be either an hm2AgentSwitchIpInterfaceIfIndex or an hm2AgentSwitchIpVlanIfIndex. Note that for physical interfaces this only works if the corresponding hm2AgentSwitchIpInterfaceRoutingMode is set to enable. |
| ROW hm2DonatIfmRowStatus | 1.3.6.1.4.1.248.11.80.1.6.2.2.1.5 | RowStatus | read-create | The RowStatus value for this entry with the usual meanings: - active(1): The interface mapping is in place - notInService(2): The interface mapping is not in place because the user said so - notReady(3): The interface mapping is not in place because the agent said so - createAndGo(4): Create this mapping with the default priority and activate it. - createAndWait(5): Create this mapping deactivated. - destroy(6): Destroy this interface mapping. |
| hm2DonatStats | 1.3.6.1.4.1.248.11.80.1.6.3 | |||
| hm2DonatGeneralStats | 1.3.6.1.4.1.248.11.80.1.6.3.1 | |||
| C64 hm2DonatStatsTotalPck | 1.3.6.1.4.1.248.11.80.1.6.3.1.1 | Counter64 | read-only | Total number of packets processed by double NAT. |
| C64 hm2DonatStatsTotalPckSize | 1.3.6.1.4.1.248.11.80.1.6.3.1.2 | Counter64 | read-only | Total number of bytes processed by double NAT. |
| C64 hm2DonatStatsTotalPckDenDrop | 1.3.6.1.4.1.248.11.80.1.6.3.1.3 | Counter64 | read-only | Total number of packets dropped or denied by double NAT. |
| C64 hm2DonatStatsTotalPckAcc | 1.3.6.1.4.1.248.11.80.1.6.3.1.4 | Counter64 | read-only | Total number of packets accepted by double NAT. |
| hm2DonatStatsRuleTables | 1.3.6.1.4.1.248.11.80.1.6.3.2 | |||
| hm2DonatStatsRuleTable | 1.3.6.1.4.1.248.11.80.1.6.3.2.1 | not-accessible | Table of per-rule statistics of double NAT. | |
| hm2DonatStatsRuleTableEntry | 1.3.6.1.4.1.248.11.80.1.6.3.2.1.1 | not-accessible | Statistics table entry for double NAT. | |
| C64 hm2DonatStatsPckCount | 1.3.6.1.4.1.248.11.80.1.6.3.2.1.1.1 | Counter64 | read-only | Number of packets matched by this rule. |
| C64 hm2DonatStatsPckSize | 1.3.6.1.4.1.248.11.80.1.6.3.2.1.1.2 | Counter64 | read-only | Number of bytes processed by this rule. |
| HMT hm2DonatStatsLastApplied | 1.3.6.1.4.1.248.11.80.1.6.3.2.1.1.3 | HmTimeSeconds1970 | read-only | Time of last application of the rule in seconds since 1.1.1970. |
| hm2NatConformance | 1.3.6.1.4.1.248.11.80.2 | |||
| hm2NatCompliances | 1.3.6.1.4.1.248.11.80.2.1 | |||
| hm2NatCompliance | 1.3.6.1.4.1.248.11.80.2.1.1 | The compliance statement for an SNMP entity which implements the Hirschmann NAT MIB. | ||
| hm2NatGroups | 1.3.6.1.4.1.248.11.80.2.2 | |||
| hm2NatGeneralGroup | 1.3.6.1.4.1.248.11.80.2.2.1 | A collection of all Hirschmann objects provided by the Firewall module. | ||
| hm2NatNotificationsGroup | 1.3.6.1.4.1.248.11.80.2.2.2 | A collection of all Hirschmann notifications provided by the NAT module. |
RFC description
Defines Hirschmann SNMP interface for DNAT, SNAT, Double NAT, and 1:1 NAT implementations.
Start monitoring Hirschmann HiOS industrial switch/router (DNAT/SNAT/1:1 NAT) with a free 30-day trial of IPNetwork Monitor. Import MIBs, browse SNMP OIDs, create custom SNMP monitors, configure alerts, and monitor any SNMP-enabled network device from a single console.