JUNIPER-NAT-MIB

All MIBs › JUNIPER-NAT-MIB

Organization: Juniper Networks, Inc.

Last Updated: 2010-07-12

Category: Vendor: Juniper

Description: Juniper Networks MIB for monitoring Network Address Translation (NAT) session statistics and pool utilization on Juniper devices.

Start monitoring vendor-neutral, standards-based MIB, any SNMPv3-capable network device (SNMP engine identity/boot/clock status) with a free 30-day trial of IPNetwork Monitor. Import MIBs, browse SNMP OIDs, create custom SNMP monitors, configure alerts, and monitor any SNMP-enabled network device from a single console.

What Is JUNIPER-NAT-MIB?

This Juniper enterprise MIB is used to monitor Network Address Translation (NAT) attributes on Juniper security/routing platforms such as the SRX Series. It exposes NAT-related counters and configuration data covering translation session activity and NAT pool utilization, per its stated purpose of monitoring NAT attributes. Monitoring emphasis is on software/service capacity status — NAT session counts and pool exhaustion are key indicators of firewall/NAT gateway health, since a saturated pool causes new outbound connections to fail, though the specific object list was not supplied for this module. It complements Juniper's broader security/firewall MIB set, including logical-system-scoped NAT resource MIBs such as JUNIPER-LSYSSP-NATSRCPATAD-MIB. It is deployed on SRX firewalls and NAT gateways performing address/port translation for outbound or inbound traffic, where JUNIPER-NAT-MIB SNMP monitoring gives administrators visibility into pool exhaustion and session activity.

IPNetwork Monitor allows you to monitor SNMP objects defined in JUNIPER-NAT-MIB. Use the built-in SNMP Monitoring Browser to explore available variables, view their current values and descriptions, and select the objects you want to monitor. You can then create SNMP monitors, configure thresholds, and receive alerts when monitored values change.

Supported Devices

Juniper SRX Series firewall/NAT gateway

Monitoring Examples

No object or table names were provided in the input data for this module, so specific OIDs cannot be cited here. Conceptually, an administrator would poll NAT pool and session tables to compare active translations against pool capacity, flagging pool exhaustion when new sessions begin to be rejected. Exact table/object names would need to be confirmed against the actual MIB source.

What Can Be Monitored

NAT session count
NAT pool utilization
NAT translation failures/pool exhaustion

Imported Objects

From IF-MIB

InterfaceIndex

From INET-ADDRESS-MIB

InetAddress
InetAddressIPv4
InetAddressType

From JUNIPER-SMI

jnxSvcsMibRoot

OBJECT-IDENTITY

From SNMPv2-SMI

Gauge32
Integer32
MODULE-IDENTITY
NOTIFICATION-TYPE
OBJECT-TYPE
Unsigned32

From SNMPv2-TC

DateAndTime
DisplayString

OIDs

OID symbolic	OID numeric	Type	Access	Description
jnxNatMIB	1.3.6.1.4.1.2636.3.59.1			This module defines the object that are used to monitor network address translation attributes.
jnxNatNotifications	1.3.6.1.4.1.2636.3.59.1.0
NTF jnxNatAddrPoolThresholdStatus	1.3.6.1.4.1.2636.3.59.1.0.1			The Source NAT address pool utilization threshold status trap signifies that the address pool utilization is either exceeds threshold value, or clear of that value. jnxNatTrapPoolName is the name of the resource pool jnxNatAddrPoolUtil is the number of ports utilized of the address pool.
jnxNatObjects	1.3.6.1.4.1.2636.3.59.1.1
jnxSrcNatStatsTable	1.3.6.1.4.1.2636.3.59.1.1.1		not-accessible	This table exposes the source NAT translation attributes of the translated addresses. When performing source IP address translation, the services pic translates the original source IP address and/or port number to different one. The resource, address source pools provide the service pic with a supply of addresses from which to draw when performing source network address translation. This table contains information on source IP address translation only.
jnxSrcNatStatsEntry	1.3.6.1.4.1.2636.3.59.1.1.1.1		not-accessible	Source NAT address entries. It is indexed by the address pool table and the address allocated.
STR jnxNatSrcPoolName	1.3.6.1.4.1.2636.3.59.1.1.1.1.1	DisplayString	not-accessible	The name of dynamic source IP address pool. This is the address pool where the translated address is allocated from.
INT jnxNatSrcXlatedAddrType	1.3.6.1.4.1.2636.3.59.1.1.1.1.2	INTEGER	read-only	The type of dynamic source IP address allocated from the address pool used in the NAT translation. For NAT MIB, supporting ipv4(1) and ipv6(2) only.
INT jnxNatSrcPoolType	1.3.6.1.4.1.2636.3.59.1.1.1.1.3	INTEGER	read-only	Source NAT can do address translation with or without port translation. The source port pool type indicates whether the address translation is done with port or without the port, or if it is a static translation.
U32 jnxNatSrcNumPortAvail	1.3.6.1.4.1.2636.3.59.1.1.1.1.4	Unsigned32	read-only	The number of ports available with this pool.
U32 jnxNatSrcNumPortInuse	1.3.6.1.4.1.2636.3.59.1.1.1.1.5	Unsigned32	read-only	The number of ports in use for this NAT address entry. This attribute is only applicable to translation with port translation.
U32 jnxNatSrcNumAddressAvail	1.3.6.1.4.1.2636.3.59.1.1.1.1.6	Unsigned32	read-only	The total number of addresses available in this pool.
U32 jnxNatSrcNumAddressInUse	1.3.6.1.4.1.2636.3.59.1.1.1.1.7	Unsigned32	read-only	The number of addresses in use from this pool. This attribute is only applicable to pools used with source dynamic translations.
U32 jnxNatSrcNumSessions	1.3.6.1.4.1.2636.3.59.1.1.1.1.8	Unsigned32	read-only	The number of sessions are in use based on this NAT address entry.
jnxNatRuleTable	1.3.6.1.4.1.2636.3.59.1.1.2		not-accessible	This table monitors NAT rule hits
jnxNatRuleEntry	1.3.6.1.4.1.2636.3.59.1.1.2.1		not-accessible	NAT rule hit entries. It is indexed by the rule index
STR jnxNatRuleName	1.3.6.1.4.1.2636.3.59.1.1.2.1.1	DisplayString	not-accessible	NAT rule name
INT jnxNatRuleType	1.3.6.1.4.1.2636.3.59.1.1.2.1.2	INTEGER	read-only	NAT types: Static Source, Static Destination, Dynamic Source and NAPT
U32 jnxNatRuleTransHits	1.3.6.1.4.1.2636.3.59.1.1.2.1.3	Unsigned32	read-only	The number of hits on this NAT rule
jnxNatPoolTable	1.3.6.1.4.1.2636.3.59.1.1.3		not-accessible	This table monitors NAT pool hits
jnxNatPoolEntry	1.3.6.1.4.1.2636.3.59.1.1.3.1		not-accessible	NAT pool hit entries. It is indexed by the pool index
STR jnxNatPoolName	1.3.6.1.4.1.2636.3.59.1.1.3.1.1	DisplayString	not-accessible	NAT Pool name
INT jnxNatPoolType	1.3.6.1.4.1.2636.3.59.1.1.3.1.2	INTEGER	read-only	NAT types: Static Source, Static Destination, Dynamic Source and NAPT
U32 jnxNatPoolTransHits	1.3.6.1.4.1.2636.3.59.1.1.3.1.3	Unsigned32	read-only	The number of hits on this NAT Pool
jnxNatTrapVars	1.3.6.1.4.1.2636.3.59.1.2
I32 jnxNatAddrPoolUtil	1.3.6.1.4.1.2636.3.59.1.2.1	Integer32	accessible-for-notify	The dynamic address pool utilization in terms of number of ports utilized.
STR jnxNatTrapSrcPoolName	1.3.6.1.4.1.2636.3.59.1.2.2	DisplayString	accessible-for-notify	Source NAT Pool name who issues trap

RFC description

Monitors network address translation statistics including source NAT translation attributes on Juniper systems.

Start monitoring Juniper SRX Series firewall/NAT gateway with a free 30-day trial of IPNetwork Monitor. Import MIBs, browse SNMP OIDs, create custom SNMP monitors, configure alerts, and monitor any SNMP-enabled network device from a single console.

Download JUNIPER-NAT-MIB

What Is JUNIPER-NAT-MIB?

Supported Devices

Monitoring Examples

What Can Be Monitored

This MIB depends on

Related MIBs

RFC description