HUAWEI-NAT-MIB

All MIBs › HUAWEI-NAT-MIB

Organization: Huawei Technologies Co., Ltd.

Last Updated: 2003-03-18

Category: IP and Core Protocols, Vendor: Huawei

Description: Huawei NAT (Network Address Translation) MIB for managing NAT rules, address pools, and translation session tables.

Start monitoring vendor-neutral, standards-based MIB, any SNMPv3-capable network device (SNMP engine identity/boot/clock status) with a free 30-day trial of IPNetwork Monitor. Import MIBs, browse SNMP OIDs, create custom SNMP monitors, configure alerts, and monitor any SNMP-enabled network device from a single console.

What Is HUAWEI-NAT-MIB?

HUAWEI-NAT-MIB is a Huawei MIB for core Network Address Translation functionality, applicable across Huawei's general datacomm product line (routers and firewalls), covering NAT rule configuration and address pool management. It exposes configuration data for NAT rules and pools alongside state data for active translation sessions and usage statistics. Its monitoring value is software/service status: address-pool utilization and active translation session counts, which reveal pool exhaustion (causing new connections to fail) or an abnormal spike in sessions that could indicate an attack or misbehaving application. It pairs with HUAWEI-NAT-EUDM-MIB, which adds per-subscriber logging on top of this base NAT management, and conceptually parallels the IETF NAT-MIB (RFC 4008) as a proprietary alternative. It is deployed on Huawei routers and firewalls performing NAT or carrier-grade NAT (CGN) at network edges. Engineers can download the HUAWEI-NAT-MIB file directly to load it into their MIB browser.

IPNetwork Monitor allows you to monitor SNMP objects defined in HUAWEI-NAT-MIB. Use the built-in SNMP Monitoring Browser to explore available variables, view their current values and descriptions, and select the objects you want to monitor. You can then create SNMP monitors, configure thresholds, and receive alerts when monitored values change.

Supported Devices

Huawei routers
Huawei firewalls (general Huawei datacomm devices)

Monitoring Examples

No sample object names were provided for this module. Based on the module description, an administrator would monitor NAT address-pool utilization and active translation session counts to detect pool exhaustion causing new outbound connections to fail, or a sudden spike in sessions suggesting abnormal traffic.

What Can Be Monitored

NAT rule configuration
address pool utilization
active translation session count
translation statistics

Imported Objects

From HUAWEI-MIB

hwDatacomm

OBJECT-IDENTITY

From SNMPv2-CONF

OBJECT-GROUP

From SNMPv2-SMI

Counter32
Counter64
Integer32
IpAddress
MODULE-IDENTITY
OBJECT-TYPE

From SNMPv2-TC

RowStatus
TEXTUAL-CONVENTION
TruthValue

How to Use in IPNetwork Monitor

Example using hwNatHashStatPatCount OID:

Select a Huawei router or firewall (NAT rules/address pools, general datacomm) as the target host to create a monitor — the SNMP service should be up and running on it. Click New Monitor, then check SNMP Custom on the Favorites tab, click Next, and confirm the host. On the next page, click Select... to open the built-in SNMP MIB Browser and type hwNatHashStatPatCount into the Find box to locate it in the OID tree, then select it and click OK. The hash count NAT with pat. On the monitor's Main parameters page you can set the target's SNMP port (default 161), credentials, polling interval, and other settings — see the SNMP Monitor help for details. On the State conditions and Alerting tabs, configure when the monitor should change state and trigger an alert; since this is a Counter32-type OID, Value bounds is the most useful condition here — trigger an alert if the counter increases sharply between polls relative to its normal baseline, since an unexpected spike often reflects a real change in traffic or activity. Click Finish to create the monitor; you can adjust any parameter later.

OIDs

OID symbolic	OID numeric	Type	Access	Description
hwNAT	1.3.6.1.4.1.2011.5.25.7
hwNATCommon	1.3.6.1.4.1.2011.5.25.7.1			V1.00 The NAT mib is for all datacomm product..
hwNatMibObjects	1.3.6.1.4.1.2011.5.25.7.1.1
hwNatAddressGroupInfoTable	1.3.6.1.4.1.2011.5.25.7.1.1.1		not-accessible	NAT address pool inforation table
hwNatAddressGroupInfoEntry	1.3.6.1.4.1.2011.5.25.7.1.1.1.1		not-accessible	NAT address pool inforation table entry.
I32 hwNatAddrGrpIndex	1.3.6.1.4.1.2011.5.25.7.1.1.1.1.1	Integer32	not-accessible	The index of address pool This item is index.
IP hwNatAddrGrpBeginningIpAddr	1.3.6.1.4.1.2011.5.25.7.1.1.1.1.2	IpAddress	read-create	The beginning IP address of address pool
IP hwNatAddrGrpEndingIpAddr	1.3.6.1.4.1.2011.5.25.7.1.1.1.1.3	IpAddress	read-create	The ending IP address of address pool
I32 hwNatAddrGrpRefCount	1.3.6.1.4.1.2011.5.25.7.1.1.1.1.4	Integer32	read-only	This address pool reference count.
ROW hwNatAddrGrpRowstatus	1.3.6.1.4.1.2011.5.25.7.1.1.1.1.5	RowStatus	read-create	Row status Only support CreateAndGo and Destroy.
I32 hwNatAddrGrpVrrpID	1.3.6.1.4.1.2011.5.25.7.1.1.1.1.6	Integer32	read-create	VRRP ID of address pool
OCT hwNatAddrGrpVrfName	1.3.6.1.4.1.2011.5.25.7.1.1.1.1.7	OCTET STRING	read-create	The VPN Name of address pool
hwNatInternalServerTable	1.3.6.1.4.1.2011.5.25.7.1.1.2		not-accessible	The NAT internal server information table.
hwNatInternalServerEntry	1.3.6.1.4.1.2011.5.25.7.1.1.2.1		not-accessible	The NAT internal server information table entry.
I32 hwNatServerIndex	1.3.6.1.4.1.2011.5.25.7.1.1.2.1.1	Integer32	not-accessible	The index of NAT server array. This item is index.
I32 hwNatServerProtocol	1.3.6.1.4.1.2011.5.25.7.1.1.2.1.2	Integer32	read-create	The protocal number.
IP hwNatServerInsideBeginIpAddr	1.3.6.1.4.1.2011.5.25.7.1.1.2.1.3	IpAddress	read-create	The beginning local IP address of NAT servers.
IP hwNatServerInsideEndIpAddr	1.3.6.1.4.1.2011.5.25.7.1.1.2.1.4	IpAddress	read-create	The ending local IP address of NAT servers.
I32 hwNatServerInsidePort	1.3.6.1.4.1.2011.5.25.7.1.1.2.1.5	Integer32	read-create	The local port number of NAT servers.
IP hwNatServerOutsideIpAddr	1.3.6.1.4.1.2011.5.25.7.1.1.2.1.6	IpAddress	read-create	The global IP address of NAT server.
I32 hwNatServerOutsideBeginPort	1.3.6.1.4.1.2011.5.25.7.1.1.2.1.7	Integer32	read-create	The global beginning port of NAT server.
I32 hwNatServerOutsideEndPort	1.3.6.1.4.1.2011.5.25.7.1.1.2.1.8	Integer32	read-create	The global ending port of NAT server.
ROW hwNatServerRowStatus	1.3.6.1.4.1.2011.5.25.7.1.1.2.1.9	RowStatus	read-create	Row status Only support CreateAndGo and Destroy.
I32 hwNatServerVrrpID	1.3.6.1.4.1.2011.5.25.7.1.1.2.1.10	Integer32	read-create	VRRP ID of Inner Server
OCT hwNatServerVrfName	1.3.6.1.4.1.2011.5.25.7.1.1.2.1.11	OCTET STRING	read-create	The VPN Name of Inner Server
hwNatTimeoutTable	1.3.6.1.4.1.2011.5.25.7.1.1.3		not-accessible	The NAT session aging time table.
hwNatTimeoutEntry	1.3.6.1.4.1.2011.5.25.7.1.1.3.1		not-accessible	The NAT session aging time table entry.
SES hwNatTimeoutSessionType	1.3.6.1.4.1.2011.5.25.7.1.1.3.1.1	SessionType	not-accessible	The protocal type.
I32 hwNatTimeoutValue	1.3.6.1.4.1.2011.5.25.7.1.1.3.1.2	Integer32	read-write	aging time, tcp:240, udp:40, icmp:20
hwNatAlgEnableTable	1.3.6.1.4.1.2011.5.25.7.1.1.4		not-accessible	NAT ALG enable table
hwNatAlgEnableEntry	1.3.6.1.4.1.2011.5.25.7.1.1.4.1		not-accessible	nat alg table entry.
ALG hwNatAlgEnableProtocol	1.3.6.1.4.1.2011.5.25.7.1.1.4.1.1	AlgType	not-accessible	The alg protocal type.
T/F hwNatAlgEnableFlag	1.3.6.1.4.1.2011.5.25.7.1.1.4.1.2	TruthValue	read-write	enable or disable. true is enable,false is disable.
hwNatMonitorObjects	1.3.6.1.4.1.2011.5.25.7.1.2
hwNatMonitorGlobalHash	1.3.6.1.4.1.2011.5.25.7.1.2.1
C32 hwNatHashStatPatCountEx	1.3.6.1.4.1.2011.5.25.7.1.2.1.1	Counter32	read-only	The hash count NAT with pat.
C32 hwNatHashStatNoPatCount	1.3.6.1.4.1.2011.5.25.7.1.2.1.2	Counter32	read-only	The hash count NAT with no-pat.
C32 hwNatHashStatServerHashCount	1.3.6.1.4.1.2011.5.25.7.1.2.1.3	Counter32	read-only	The hash count of NAT internal server.
C32 hwNatHashStatFragHashCount	1.3.6.1.4.1.2011.5.25.7.1.2.1.4	Counter32	read-only	The hash count of fragment packets.
hwNatMonitorGlobalPkts	1.3.6.1.4.1.2011.5.25.7.1.2.2
C64 hwNatStatPktsCount	1.3.6.1.4.1.2011.5.25.7.1.2.2.1	Counter64	read-only	The packet count of success address translation.
C64 hwNatStatFailedPktsCount	1.3.6.1.4.1.2011.5.25.7.1.2.2.2	Counter64	read-only	The packet count of failed address translation.
C64 hwNatStatTCPPktsCount	1.3.6.1.4.1.2011.5.25.7.1.2.2.3	Counter64	read-only	The TCP packet count of success address translation.
C64 hwNatStatUDPPktsCount	1.3.6.1.4.1.2011.5.25.7.1.2.2.4	Counter64	read-only	The UDP packet count of success address translation.
C64 hwNatStatICMPPktsCount	1.3.6.1.4.1.2011.5.25.7.1.2.2.5	Counter64	read-only	The ICMP packet count of success address translation.
hwNatConformance	1.3.6.1.4.1.2011.5.25.7.1.3
hwNatMibGroups	1.3.6.1.4.1.2011.5.25.7.1.3.1
hwNatCfgGroup	1.3.6.1.4.1.2011.5.25.7.1.3.1.1			Description.
hwNatMonitorGroup	1.3.6.1.4.1.2011.5.25.7.1.3.1.2			Description.

RFC description

Huawei Network Address Translation MIB for monitoring NAT functionality on Huawei firewalls and routers. Provides SNMP management of IP address translation and NAT session monitoring.

Start monitoring Huawei router or firewall (NAT rules/address pools, general datacomm) with a free 30-day trial of IPNetwork Monitor. Import MIBs, browse SNMP OIDs, create custom SNMP monitors, configure alerts, and monitor any SNMP-enabled network device from a single console.

Download HUAWEI-NAT-MIB