JUNIPER-JS-NAT-MIB

All MIBs › JUNIPER-JS-NAT-MIB

Organization: Juniper Networks, Inc.

Last Updated: 2012-03-01

Category: Domain: Security, Vendor: Juniper

Description: Provides managed objects for Network Address Translation (NAT) sessions, pools, and rule statistics on Juniper Networks SRX security devices.

Start monitoring vendor-neutral, standards-based MIB, any SNMPv3-capable network device (SNMP engine identity/boot/clock status) with a free 30-day trial of IPNetwork Monitor. Import MIBs, browse SNMP OIDs, create custom SNMP monitors, configure alerts, and monitor any SNMP-enabled network device from a single console.

What Is JUNIPER-JS-NAT-MIB?

JUNIPER-JS-NAT-MIB is Juniper's enterprise MIB for monitoring NAT (Network Address Translation) sessions, pools, and rule statistics on SRX security devices. It exposes NAT session state/counts, address-pool utilization, and per-rule translation statistics. It is used to monitor the software-level status of the NAT subsystem—active translation counts, how much of a NAT pool's address space is in use, and how often specific NAT rules are hit—a resource/capacity monitoring use case rather than physical hardware. It is a Juniper enterprise-specific MIB (jnx tree) tied to JUNOS SRX NAT configuration rather than a standard IETF NAT MIB. It is typically deployed on Juniper SRX firewalls/security gateways performing NAT at enterprise or service-provider network edges. Engineers can download the JUNIPER-JS-NAT-MIB file directly to load it into their MIB browser.

IPNetwork Monitor allows you to monitor SNMP objects defined in JUNIPER-JS-NAT-MIB. Use the built-in SNMP Monitoring Browser to explore available variables, view their current values and descriptions, and select the objects you want to monitor. You can then create SNMP monitors, configure thresholds, and receive alerts when monitored values change.

Supported Devices

Juniper Networks SRX security devices

Monitoring Examples

No object names were included in the sample data for this MIB, but consistent with its stated purpose an admin would expect to poll NAT session-count and pool-utilization tables to detect when a NAT pool is nearing exhaustion (risking new connections failing to get an address), and per-rule hit-count tables to confirm a specific NAT rule is actively translating traffic as intended.

What Can Be Monitored

active NAT session counts
NAT pool address utilization
NAT rule hit/match counts

Imported Objects

From IF-MIB

InterfaceIndex

From INET-ADDRESS-MIB

InetAddress
InetAddressIPv4
InetAddressType

From JUNIPER-JS-SMI

jnxJsNAT

OBJECT-IDENTITY

From SNMPv2-SMI

Counter32
Gauge32
Integer32
MODULE-IDENTITY
NOTIFICATION-TYPE
OBJECT-TYPE

From SNMPv2-TC

DateAndTime
DisplayString

OIDs

OID symbolic	OID numeric	Type	Access	Description
jnxJsNatMIB	1.3.6.1.4.1.2636.3.39.1.7.1			This module defines the object that are used to monitor network address translation attributes.
jnxJsNatNotifications	1.3.6.1.4.1.2636.3.39.1.7.1.0
NTF jnxJsNatAddrPoolThresholdStatus	1.3.6.1.4.1.2636.3.39.1.7.1.0.1			The NAT address pool untilization threshold status trap signifies that the address pool utilization is either exceeds certain percentage, or clear of that percentage. jnxJsNatSrcIpPoolName is the name of the resource pool jnxJsNatAddrPoolUtil is the percentage of utilization of the address pool.
NTF jnxJsSrcNatPoolThresholdStatus	1.3.6.1.4.1.2636.3.39.1.7.1.0.2			The Source NAT pool untilization threshold status trap signifies that the address pool or PAT utilization is either exceeds certain percentage, or clear of that percentage. jnxJsNatTrapPoolName is the name of source pool jnxJsNatAddrPoolUtil is the percentage of utilization of the address pool.
jnxJsNatObjects	1.3.6.1.4.1.2636.3.39.1.7.1.1
G32 jnxJsSrcNatNumOfEntries	1.3.6.1.4.1.2636.3.39.1.7.1.1.1	Gauge32	read-only	Total number of dynamic addresses being translated. jnxJsSrcNatNumOfEntries provides the total number of entries in the jnxJsSrcNatTable.
jnxJsSrcNatTable	1.3.6.1.4.1.2636.3.39.1.7.1.1.2		not-accessible	This table exposes the source NAT translation attributes of the translated addresses. When performing source IP address translation, the device translates the original source IP address and/or port number to different one. The resource, address source pools provide the security device with a supply of addresses from which to draw when performing source network address translation. The security device has the following types of source pools: - source pool with PAT (Port Address Translation) - source pool without PAT - Static Source Pool This table contains information on source IP address translation only.
jnxJsSrcNatEntry	1.3.6.1.4.1.2636.3.39.1.7.1.1.2.1		not-accessible	Source NAT address entries. It is indexed by the address pool table and the address allocated.
STR jnxJsNatSrcIpPoolName	1.3.6.1.4.1.2636.3.39.1.7.1.1.2.1.1	DisplayString	accessible-for-notify	The name of dynamic source IP address pool. This is the address pool where the translated address is allocated from.
ADR jnxJsNatSrcGlobalAddr	1.3.6.1.4.1.2636.3.39.1.7.1.1.2.1.2	InetAddressIPv4	not-accessible	The name of dynamic source IP address allocated from the address pool used in the NAT translation.
INT jnxJsNatSrcPortPoolType	1.3.6.1.4.1.2636.3.39.1.7.1.1.2.1.3	INTEGER	read-only	Source NAT can do address translation with or without port address translation (PAT). The source port pool type indicates whether the address translation is done with port or without the port, or if it is a static translation. withPAT(Source Pool with PAT): the security device translates both source IP address and port number of the packets withoutPAT (Source Pool without PAT): the device performs source network address translation for the IP address without performing port address translation (PAT) for the source port number. Static translation means that one range of IP addresses is statically mapped one to one to a shifted range of IP addresses.
INT jnxJsNatSrcNumOfPortInuse	1.3.6.1.4.1.2636.3.39.1.7.1.1.2.1.4	INTEGER	read-only	The number of ports in use for this NAT address entry. This attribute is only applicable to NAT translation with PAT.
INT jnxJsNatSrcNumOfSessions	1.3.6.1.4.1.2636.3.39.1.7.1.1.2.1.5	INTEGER	read-only	The number of sessions are in use based on this NAT address entry. This attribute is only applicable to NAT translation without PAT.
NUM jnxJsNatSrcAssocatedIf	1.3.6.1.4.1.2636.3.39.1.7.1.1.2.1.6	InterfaceIndex	read-only	The index of interface associated with this NAT address entry. This is an unique value, greater than zero, for each interface.
jnxJsNatIfSrcPoolPortTable	1.3.6.1.4.1.2636.3.39.1.7.1.1.3		not-accessible	This table monitors the port usage of the NAT interface source IP address pool. Interface source pool is pre-defined. This source pool is referenced in a policy it is configured. The security device translates the source IP address to the address of the egress interface for the traffic matching a policy which references interface source pool. The security device always applies port address translation (PAT) for interface source pool.
jnxJsNatIfSrcPoolPortEntry	1.3.6.1.4.1.2636.3.39.1.7.1.1.3.1		not-accessible	Source NAT address entries. It is indexed by the address pool table and the address.
INT jnxJsNatIfSrcPoolIndex	1.3.6.1.4.1.2636.3.39.1.7.1.1.3.1.1	INTEGER	not-accessible	The index of the port pool of this address pool.
INT jnxJsNatIfSrcPoolTotalSinglePorts	1.3.6.1.4.1.2636.3.39.1.7.1.1.3.1.2	INTEGER	read-only	The total number of single ports in a port pool.
INT jnxJsNatIfSrcPoolAllocSinglePorts	1.3.6.1.4.1.2636.3.39.1.7.1.1.3.1.3	INTEGER	read-only	The number of single ports in a port pool allocated or inuse.
INT jnxJsNatIfSrcPoolTotalTwinPorts	1.3.6.1.4.1.2636.3.39.1.7.1.1.3.1.4	INTEGER	read-only	The total number of twin ports in a port pool.
INT jnxJsNatIfSrcPoolAllocTwinPorts	1.3.6.1.4.1.2636.3.39.1.7.1.1.3.1.5	INTEGER	read-only	The number of twin ports in a port pool allocated or inuse.
jnxJsSrcNatStatsTable	1.3.6.1.4.1.2636.3.39.1.7.1.1.4		not-accessible	This table exposes the source NAT translation attributes of the translated addresses. When performing source IP address translation, the device translates the original source IP address and/or port number to different one. The resource, address source pools provide the security device with a supply of addresses from which to draw when performing source network address translation. The security device has the following types of source pools: - source pool with PAT (Port Address Translation) - source pool without PAT - Static Source Pool This table contains information on source IP address translation only.
jnxJsSrcNatStatsEntry	1.3.6.1.4.1.2636.3.39.1.7.1.1.4.1		not-accessible	Source NAT address entries. It is indexed by the address pool table and the address allocated.
STR jnxJsNatSrcPoolName	1.3.6.1.4.1.2636.3.39.1.7.1.1.4.1.1	DisplayString	accessible-for-notify	The name of dynamic source IP address pool. This is the address pool where the translated address is allocated from.
IPt jnxJsNatSrcXlatedAddrType	1.3.6.1.4.1.2636.3.39.1.7.1.1.4.1.2	InetAddressType	not-accessible	The type of dynamic source IP address allocated from the address pool used in the NAT translation. For NAT MIB, supporting ipv4(1) and ipv6(2) only.
IP jnxJsNatSrcXlatedAddr	1.3.6.1.4.1.2636.3.39.1.7.1.1.4.1.3	InetAddress	not-accessible	The name of dynamic source IP address allocated from the address pool used in the NAT translation. For NAT MIB, supporting IPv4 and IPv6 address only.
INT jnxJsNatSrcPoolType	1.3.6.1.4.1.2636.3.39.1.7.1.1.4.1.4	INTEGER	read-only	Source NAT can do address translation with or without port address translation (PAT). The source port pool type indicates whether the address translation is done with port or without the port, or if it is a static translation. withPAT(Source Pool with PAT): the security device translates both source IP address and port number of the packets withoutPAT (Source Pool without PAT): the device performs source network address translation for the IP address without performing port address translation (PAT) for the source port number. Static translation means that one range of IP addresses is statically mapped one to one to a shifted range of IP addresses.
INT jnxJsNatSrcNumPortInuse	1.3.6.1.4.1.2636.3.39.1.7.1.1.4.1.5	INTEGER	read-only	The number of ports in use for this NAT address entry. This attribute is only applicable to NAT translation with PAT.
INT jnxJsNatSrcNumSessions	1.3.6.1.4.1.2636.3.39.1.7.1.1.4.1.6	INTEGER	read-only	The number of sessions are in use based on this NAT address entry. This attribute is only applicable to NAT translation without PAT.
jnxJsNatRuleTable	1.3.6.1.4.1.2636.3.39.1.7.1.1.5		not-accessible	This table monitors NAT rule hits
jnxJsNatRuleEntry	1.3.6.1.4.1.2636.3.39.1.7.1.1.5.1		not-accessible	NAT rule hit entries. It is indexed by the rule index
STR jnxJsNatRuleName	1.3.6.1.4.1.2636.3.39.1.7.1.1.5.1.1	DisplayString	read-only	NAT rule name
INT jnxJsNatRuleType	1.3.6.1.4.1.2636.3.39.1.7.1.1.5.1.2	INTEGER	read-only	NAT types: Source, Destination and Static
INT jnxJsNatRuleTransHits	1.3.6.1.4.1.2636.3.39.1.7.1.1.5.1.3	INTEGER	read-only	The number of hits on this NAT rule, Deprecated to avoid negative value.
C32 jnxJsNatRuleHits	1.3.6.1.4.1.2636.3.39.1.7.1.1.5.1.4	Counter32	read-only	The number of hits on this NAT rule to deprecate jnxJsNatRuleTransHits
jnxJsNatPoolTable	1.3.6.1.4.1.2636.3.39.1.7.1.1.6		not-accessible	This table monitors NAT pool hits
jnxJsNatPoolEntry	1.3.6.1.4.1.2636.3.39.1.7.1.1.6.1		not-accessible	NAT pool hit entries. It is indexed by the pool index
STR jnxJsNatPoolName	1.3.6.1.4.1.2636.3.39.1.7.1.1.6.1.1	DisplayString	read-only	NAT Pool name
INT jnxJsNatPoolType	1.3.6.1.4.1.2636.3.39.1.7.1.1.6.1.2	INTEGER	read-only	NAT types: Source, Destination and Static
INT jnxJsNatPoolTransHits	1.3.6.1.4.1.2636.3.39.1.7.1.1.6.1.3	INTEGER	read-only	The number of hits on this NAT Pool, Deprecated to avoid negative value.
C32 jnxJsNatPoolHits	1.3.6.1.4.1.2636.3.39.1.7.1.1.6.1.4	Counter32	read-only	The number of hits on this NAT Pool to deprecate jnxJsNatPoolTransHits.
jnxJsNatTrapVars	1.3.6.1.4.1.2636.3.39.1.7.1.2
I32 jnxJsNatAddrPoolUtil	1.3.6.1.4.1.2636.3.39.1.7.1.2.1	Integer32	accessible-for-notify	The dynamic address pool utilization in percentage.
STR jnxJsNatTrapPoolName	1.3.6.1.4.1.2636.3.39.1.7.1.2.2	DisplayString	accessible-for-notify	Source NAT Pool name who issues trap

RFC description

Monitors network address translation (NAT) rules, pools, and translation statistics on Juniper SRX security appliances.

Start monitoring Juniper Networks SRX security device (NAT sessions/pools/rules) with a free 30-day trial of IPNetwork Monitor. Import MIBs, browse SNMP OIDs, create custom SNMP monitors, configure alerts, and monitor any SNMP-enabled network device from a single console.

Download JUNIPER-JS-NAT-MIB

What Is JUNIPER-JS-NAT-MIB?

Supported Devices

Monitoring Examples

What Can Be Monitored

This MIB depends on

Related MIBs

RFC description