All MIBs › HUAWEI-SECURITY-FULLCONE-MIB
Category: Domain: Security, Vendor: Huawei
Description: Huawei security full-cone NAT MIB for managing full-cone NAT mapping entries and static port mapping rules.
Start monitoring vendor-neutral, standards-based MIB, any SNMPv3-capable network device (SNMP engine identity/boot/clock status) with a free 30-day trial of IPNetwork Monitor. Import MIBs, browse SNMP OIDs, create custom SNMP monitors, configure alerts, and monitor any SNMP-enabled network device from a single console.
What Is HUAWEI-SECURITY-FULLCONE-MIB?
HUAWEI-SECURITY-FULLCONE-MIB is a Huawei-proprietary security module for managing full-cone NAT on Huawei's Eudemon/USG firewall product lines. It exposes dynamic full-cone NAT mapping table entries as well as configured static port-mapping rules used for inbound access to internal hosts. Its main monitoring value is software/process status: the size and occupancy of the NAT mapping table indicate how heavily the firewall's NAT resources are utilized, and static mapping entries reveal whether configured port forwards are active and correctly applied. It complements other Huawei firewall security MIBs, such as HUAWEI-SECURITY-GLOBALIPCAR-MIB and HUAWEI-SECURITY-IPSEC-MIB, and conceptually parallels the standard NAT-MIB (RFC 4008). It is typically deployed on Eudemon/USG firewalls at a network edge providing full-cone NAT for applications like VoIP or peer-to-peer traffic that require symmetric-friendly translation behavior. Network engineers evaluating or troubleshooting this functionality can download the HUAWEI-SECURITY-FULLCONE-MIB file directly to load it into their MIB browser.
IPNetwork Monitor allows you to monitor SNMP objects defined in HUAWEI-SECURITY-FULLCONE-MIB. Use the built-in SNMP Monitoring Browser to explore available variables, view their current values and descriptions, and select the objects you want to monitor. You can then create SNMP monitors, configure thresholds, and receive alerts when monitored values change.
Supported Devices
- Huawei Eudemon firewalls
- Huawei USG firewalls
Monitoring Examples
An admin would poll a mapping table (an hwNatFullconeMapTable/hwNatFullconeMapEntry pattern) showing each active internal-to-external IP:port translation and its static-mapping table for configured inbound rules. A mapping table nearing its maximum entry count signals NAT resource exhaustion that could start blocking new outbound sessions. Checking the static port-mapping entries after a configuration change confirms an inbound service (e.g., a hosted game server) is correctly reachable from outside.
What Can Be Monitored
- full-cone NAT mapping table size/occupancy
- active dynamic NAT mappings
- configured static port-mapping rules
- NAT resource utilization
Imported Objects
From RFC1155-SMI
| enterprises |
From SNMPv2-CONF
| OBJECT-GROUP |
From SNMPv2-SMI
| Counter64 | |
| Gauge32 | |
| Integer32 | |
| IpAddress | |
| MODULE-IDENTITY | |
| OBJECT-TYPE |
From SNMPv2-TC
| TruthValue |
OIDs
RFC description
Huawei security full-cone NAT MIB for managing full-cone Network Address Translation behavior and statistics.
Start monitoring Huawei Eudemon/USG firewall (full-cone NAT) with a free 30-day trial of IPNetwork Monitor. Import MIBs, browse SNMP OIDs, create custom SNMP monitors, configure alerts, and monitor any SNMP-enabled network device from a single console.