MIDCOM-SERVER-MIB

All MIBs › MIDCOM-SERVER-MIB

Organization: IETF Middlebox Communication Working Group

Last Updated: 2003-11-24

Category: IETF Standards, Security

Description: Manages IETF Middlebox Communication server policy rules and session state.

Start monitoring vendor-neutral, standards-based MIB, any SNMPv3-capable network device (SNMP engine identity/boot/clock status) with a free 30-day trial of IPNetwork Monitor. Import MIBs, browse SNMP OIDs, create custom SNMP monitors, configure alerts, and monitor any SNMP-enabled network device from a single console.

What Is MIDCOM-SERVER-MIB?

MIDCOM-SERVER-MIB is an IETF standards-track MIB from the Middlebox Communication (MIDCOM) working group that defines objects for monitoring and configuring MIDCOM servers running on middleboxes such as firewalls and network address translators (NATs). It exposes three broad categories of data: middlebox resource usage on the MIDCOM server, MIDCOM agent/session relationships, and policy rule state for NAT/firewall traversal sessions. Rather than physical hardware, it centers on software/service-level status — tracking active MIDCOM sessions, resource consumption on the middlebox, and rule enforcement state, functioning analogously to monitoring a running service's health and load. Per its module description it explicitly depends on the broader MIDCOM protocol framework defined in companion IETF documents, since this MIB only covers server-side monitoring rather than the protocol itself. It would be deployed on carrier-grade or enterprise firewalls/NAT devices supporting the MIDCOM protocol for application-aware NAT/firewall traversal, such as VoIP signaling. Engineers implementing or auditing this functionality typically reference the MIDCOM-SERVER-MIB RFC/standard documentation for the authoritative specification.

IPNetwork Monitor allows you to monitor SNMP objects defined in MIDCOM-SERVER-MIB. Use the built-in SNMP Monitoring Browser to explore available variables, view their current values and descriptions, and select the objects you want to monitor. You can then create SNMP monitors, configure thresholds, and receive alerts when monitored values change.

Supported Devices

vendor-neutral, standards-based MIB, not tied to a specific manufacturer
firewalls
network address translators (NAT devices)/middleboxes

Monitoring Examples

No sample object names were provided for this MIB, so no concrete polled objects can be grounded from the source data. Based on the module description, a realistic scenario would involve polling MIDCOM resource-usage and session tables to see how many concurrent middlebox rule sessions are open and whether the middlebox is approaching its resource limits, but this cannot be tied to real object names here since sample_objects was empty.

What Can Be Monitored

MIDCOM server resource utilization
active MIDCOM sessions
NAT/firewall policy rule state
middlebox resource limits

Imported Objects

From IF-MIB

InterfaceIndex

From MIDCOM-MIB

midcomGroupIndex	OBJECT-TYPE
midcomRuleIndex	OBJECT-TYPE
midcomSessionOwner

From SNMP-FRAMEWORK-MIB

SnmpAdminString

From SNMPv2-CONF

MODULE-COMPLIANCE
OBJECT-GROUP

From SNMPv2-SMI

MODULE-IDENTITY
OBJECT-TYPE
Unsigned32
mib-2

From SNMPv2-TC

TEXTUAL-CONVENTION

OIDs

OID symbolic	OID numeric	Type	Access	Description
midcomSrvMIB	1.3.6.1.2.1.44445			This MIB module defines a set of basic objects for monitoring and configuring MIDCOM servers on middleboxes that support MIDCOM. Such middleboxes may be firewalls and network address translators. This MIB module does not implement portions of the MIDCOM protocol, but is the MIDCOM SERVER MIB module for monitoring instances of the MIDCOM protocol. There are three groups of managed objects defined by this MIB module: - objects describing the used middlebox resources on a per MIDCOM policy rule base - objects describing the used firewall configuration on a per MIDCOM policy rule base - objects providing statistical information about the MIDCOM MIB module Copyright (C) The Internet Society (2003). This version of this MIB module is part of RFC yyyy; see the RFC itself for full legal notices.
midcomSrvObjects	1.3.6.1.2.1.44445.1
midcomSrvResources	1.3.6.1.2.1.44445.1.1
midcomSrvResourceTable	1.3.6.1.2.1.44445.1.1.1		not-accessible	This table lists all used middlebox resources per MIDCOM policy rule. The midcomSrvMBTable is indexed by session owner, group index, rule index.
midcomSrvResourceEntry	1.3.6.1.2.1.44445.1.1.1.1		not-accessible	An entry describing a particular set of middlebox resources.
MID natSrcBindMode	1.3.6.1.2.1.44445.1.1.1.1.4	MidcomNatBindMode	read-only	An indication whether this policy rule uses an address NAT bind or an address-port NAT bind for the source address.
MID natSrcBindId	1.3.6.1.2.1.44445.1.1.1.1.5	MidcomNatBindId	read-only	The allocated NAT bind for the source address used by this policy rule.
MID natDstBindMode	1.3.6.1.2.1.44445.1.1.1.1.6	MidcomNatBindMode	read-only	An indication whether this policy rule uses an address NAT bind or an address-port NAT bind for the destination address.
MID natDstBindId	1.3.6.1.2.1.44445.1.1.1.1.7	MidcomNatBindId	read-only	The allocated NAT bind for the destination address used by this policy rule.
MID natSessionId1	1.3.6.1.2.1.44445.1.1.1.1.8	MidcomNatSessionId	read-only	A unique ID that is assigned to this specific NAT session at the NAT for this policy rule. A maximum of two NAT sessions can be assigned to one policy rule.
MID natSessionId2	1.3.6.1.2.1.44445.1.1.1.1.9	MidcomNatSessionId	read-only	A unique ID that is assigned to this specific NAT session at the NAT for this policy rule. A maximum of two NAT sessions can be assigned to one policy rule.
U32 fwRuleId	1.3.6.1.2.1.44445.1.1.1.1.10	Unsigned32	read-only	A unique ID that is assigned to this specific firewall rule at the firewall for this policy rule.
midcomSrvFwTable	1.3.6.1.2.1.44445.1.1.2		not-accessible	This table lists the firewal configuration per interface. The midcomSrvFwTable is indexed by midcomifIndex
midcomSrvFwEntry	1.3.6.1.2.1.44445.1.1.2.1		not-accessible	An entry describing a particular set of firewall resources.
NUM midcomifIndex	1.3.6.1.2.1.44445.1.1.2.1.1	InterfaceIndex	not-accessible	The corresponding interface of the middlebox.
STR fwGroup	1.3.6.1.2.1.44445.1.1.2.1.2	SnmpAdminString	read-write	The firewall rule group to which all firewall rules of the MIDCOM server are assigned.
U32 fwPriority	1.3.6.1.2.1.44445.1.1.2.1.3	Unsigned32	read-write	The priority assigned to all firewall rules of the MIDCOM server.
midcomSrvStatistics	1.3.6.1.2.1.44445.1.2
U32 midcomSrvSessionsRejected	1.3.6.1.2.1.44445.1.2.1	Unsigned32	read-only	The number of rejected MIDCOM sessions. The MIDCOM MIB module can rejected sessions that are not authorized or unknown.
U32 midcomSrvSessionsCurrent	1.3.6.1.2.1.44445.1.2.2	Unsigned32	read-only	The number of currently established MIDCOM sessions. This object equals the number of rows in the midcomSessionTable and gives the number of MIDCOM agents (=SNMP managers) that are allowed to read, create, or modify entries in the MIDCOM MIB module.
U32 midcomSrvSessionsTotal	1.3.6.1.2.1.44445.1.2.3	Unsigned32	read-only	The summarized number of all current and past established MIDCOM sessions.
U32 midcomSrvRuleEntriesRejected	1.3.6.1.2.1.44445.1.2.4	Unsigned32	read-only	The number of policy rule entries rejected without any further detailed reason. Policy rules may be rejected due to several reasons. This object counts policy rules rejected without any other specific reason.
U32 midcomSrvRulesIncomplete	1.3.6.1.2.1.44445.1.2.5	Unsigned32	read-only	The total number of policy rules that are incomplete. Policy rules are loaded via row entries in midcomRuleTable. This object counts policy rules that are loaded but not fully specified, i.e. the associated action (reserved or enable) is not set. Those rule are typically removed after sometime and counted.
U32 midcomSrvResRulesRejected	1.3.6.1.2.1.44445.1.2.6	Unsigned32	read-only	The total number of reserved policy rules that are loaded, but are rejected.
U32 midcomSrvResRulesFailed	1.3.6.1.2.1.44445.1.2.7	Unsigned32	read-only	The total number of failed reserved policy rules.
U32 midcomSrvResRulesActive	1.3.6.1.2.1.44445.1.2.8	Unsigned32	read-only	The number of currently active reserved policy rules.
U32 midcomSrvResRulesExpired	1.3.6.1.2.1.44445.1.2.9	Unsigned32	read-only	The number of currently expired reserved policy rules.
U32 midcomSrvResRulesTerminated	1.3.6.1.2.1.44445.1.2.10	Unsigned32	read-only	The number of currently terminated reserved policy rules.
U32 midcomSrvResRulesOnRequest	1.3.6.1.2.1.44445.1.2.11	Unsigned32	read-only	The number of currently on-request reserved policy rules.
U32 midcomSrvEnabledRulesRejected	1.3.6.1.2.1.44445.1.2.12	Unsigned32	read-only	The total number of rejected enabled policy rules.
U32 midcomSrvEnabledRulesFailed	1.3.6.1.2.1.44445.1.2.13	Unsigned32	read-only	The total number of failed enabled policy rules.
U32 midcomSrvEnabledRulesActive	1.3.6.1.2.1.44445.1.2.14	Unsigned32	read-only	The number of currently active enabled policy rules.
U32 midcomSrvEnabledRulesExpired	1.3.6.1.2.1.44445.1.2.15	Unsigned32	read-only	The number of currently expired enabled policy rules.
U32 midcomSrvEnabledRulesTerminated	1.3.6.1.2.1.44445.1.2.16	Unsigned32	read-only	The number of currently terminated enabled policy rules.
U32 midcomSrvEnabledRulesOnRequest	1.3.6.1.2.1.44445.1.2.17	Unsigned32	read-only	The number of currently on-request enabled policy rules.
U32 midcomSrvTransRejected	1.3.6.1.2.1.44445.1.2.18	Unsigned32	read-only	The total number of rejected transactions.
U32 midcomSrvTransFailed	1.3.6.1.2.1.44445.1.2.19	Unsigned32	read-only	The total number of failed transactions.
U32 midcomSrvTransCompleted	1.3.6.1.2.1.44445.1.2.20	Unsigned32	read-only	The total number of completed transactions.
midcomSrvConformance	1.3.6.1.2.1.44445.2
midcomSrvCompliances	1.3.6.1.2.1.44445.2.1
midcomSrvCompliance	1.3.6.1.2.1.44445.2.1.1			The compliance statement for SNMP entities that implement the MIDCOM SERVER MIB.
midcomSrvGroups	1.3.6.1.2.1.44445.2.2
midcomSrvResourceGroup	1.3.6.1.2.1.44445.2.2.1			A collection of objects providing information about the used NAT resources.
midcomSrvFwGroup	1.3.6.1.2.1.44445.2.2.2			A collection of objects providing information about the used firewall resources.
midcomSrvStatisticsGroup	1.3.6.1.2.1.44445.2.2.3			A collection of objects providing statistical information about the MIDCOM server.

RFC description

IETF MIB for monitoring MIDCOM server resource usage on middleboxes including firewalls and network address translators.

Start monitoring Vendor-neutral IETF standard (firewall/NAT middlebox, MIDCOM server monitoring) with a free 30-day trial of IPNetwork Monitor. Import MIBs, browse SNMP OIDs, create custom SNMP monitors, configure alerts, and monitor any SNMP-enabled network device from a single console.

Download MIDCOM-SERVER-MIB

What Is MIDCOM-SERVER-MIB?

Supported Devices

Monitoring Examples

What Can Be Monitored

This MIB depends on

Related MIBs

RFC description