All MIBs › NAT-MIB
Organization: IETF Behavior Engineering for Hindrance Avoidance (BEHAVE) Working Group
Last Updated: 2015-10-02
Category: Network Interfaces, VPN and Security
Description: Manages Network Address Translator (NAT) devices, covering NAT session bindings, address/port mappings, and per-interface NAT statistics.
IPNetwork Monitor uses several OIDs from this MIB in network discovery and polling the applicable devices. Start monitoring NAT-MIB with a free 30-day trial of IPNetwork Monitor.
What Is NAT-MIB?
NAT-MIB is an IETF standards-track (RFC-based, 2015), vendor-neutral MIB defining generic managed objects for Network Address Translation (NAT) devices. It belongs to the IP networking/address-translation technology area. It exposes default idle-timeout configuration for various protocols (TCP, UDP, ICMP, other, and TCP negotiating state), notification-throttling interval settings, and a per-interface NAT table covering realm, service type, and translation counters such as inbound translates. Its monitoring focus is software/protocol-level operational status — how many translations are occurring per interface, whether timeout settings are as configured, and whether NAT notification throttling is active — rather than physical hardware health, letting an admin verify the NAT engine's behavior and load. It is a self-contained IETF MIB but is commonly deployed alongside other IP-MIB/interface MIBs since natInterfaceTable entries correlate to standard interface indices. It's typically deployed on routers, firewalls, or dedicated carrier-grade NAT (CGN) appliances performing address/port translation for outbound or service-provider traffic. Engineers implementing or auditing this functionality typically reference the NAT-MIB RFC/standard documentation for the authoritative specification.
IPNetwork Monitor allows you to monitor SNMP objects defined in NAT-MIB. Use the built-in SNMP Monitoring Browser to explore available variables, view their current values and descriptions, and select the objects you want to monitor. You can then create SNMP monitors, configure thresholds, and receive alerts when monitored values change.
Supported Devices
- vendor-neutral, standards-based MIB, not tied to a specific manufacturer
- NAT-capable router, firewall, or carrier-grade NAT (CGN) appliance
Monitoring Examples
An administrator would poll natInterfaceTable/natInterfaceEntry to check natInterfaceRealm and natInterfaceServiceType per interface, and watch natInterfaceInTranslates to see how many inbound translations have occurred, revealing whether a particular NAT-enabled interface is handling the expected translation volume. The scalar defaults natTcpDefIdleTimeout, natUdpDefIdleTimeout, natIcmpDefIdleTimeout, and natOtherDefIdleTimeout show how long idle sessions of each protocol type are held before being cleared, while natTcpDefNegTimeout covers TCP sessions still negotiating. An unexpectedly low natInterfaceInTranslates count on a heavily used outbound interface could indicate the NAT engine is failing to process traffic or the interface binding is misconfigured.
What Can Be Monitored
- per-interface NAT realm and service type
- inbound translation count
- default idle timeouts (TCP/UDP/ICMP/other)
- TCP negotiating timeout
- notification throttling interval
This MIB depends on
Related MIBs
Imported Objects
From IF-MIB
| ifCounterDiscontinuityGroup | OBJECT-GROUP |
| ifIndex | OBJECT-TYPE |
From INET-ADDRESS-MIB
| InetAddress | |
| InetAddressType | |
| InetPortNumber |
From SNMP-FRAMEWORK-MIB
| SnmpAdminString |
From SNMPv2-CONF
| MODULE-COMPLIANCE | |
| NOTIFICATION-GROUP | |
| OBJECT-GROUP |
From SNMPv2-SMI
| Counter64 | |
| Gauge32 | |
| Integer32 | |
| MODULE-IDENTITY | |
| NOTIFICATION-TYPE | |
| OBJECT-TYPE | |
| TimeTicks | |
| Unsigned32 | |
| mib-2 |
From SNMPv2-TC
| RowStatus | |
| StorageType | |
| TEXTUAL-CONVENTION |
OIDs
| OID symbolic | OID numeric | Type | Access | Description |
|---|---|---|---|---|
| TIK natAddrBindCurrentIdleTime | 1.3.6.1.2.1.123.1.6.1.11 | TimeTicks | read-only | At any given instance, this object indicates the time that this bind has been idle without any sessions attached to it. The value of this object is of relevance only for dynamic NAT. Deprecated in favor of NATV2-MIB. |
| natAddrBindEntry | 1.3.6.1.2.1.123.1.6.1 | not-accessible | Each entry in this table holds information about an active address BIND. These entries are lost upon agent restart. This row has indexing that may create variables with more than 128 subidentifiers. Implementers of this table must be careful not to create entries that would result in OIDs that exceed the 128 subidentifier limit. Otherwise, the information cannot be accessed using SNMPv1, SNMPv2c, or SNMPv3. Deprecated in favor of NATV2-MIB. | |
| IP natAddrBindGlobalAddr | 1.3.6.1.2.1.123.1.6.1.4 | InetAddress | read-only | This object represents the public-realm network-layer address that maps to the private-realm network-layer address represented by natAddrBindLocalAddr. The type of this address is determined by the value of the natAddrBindGlobalAddrType object. Deprecated in favor of NATV2-MIB. |
| IPt natAddrBindGlobalAddrType | 1.3.6.1.2.1.123.1.6.1.3 | InetAddressType | read-only | This object specifies the address type used for natAddrBindGlobalAddr. Deprecated in favor of NATV2-MIB. |
| NAT natAddrBindId | 1.3.6.1.2.1.123.1.6.1.5 | NatBindId | read-only | This object represents a bind ID that is dynamically assigned to each bind by a NAT-enabled device. Each bind is represented by a bind ID that is unique across both the natAddrBindTable and the natAddrPortBindTable. Deprecated in favor of NATV2-MIB. |
| C64 natAddrBindInTranslates | 1.3.6.1.2.1.123.1.6.1.12 | Counter64 | read-only | The number of inbound packets that were successfully translated by using this bind entry. Discontinuities in the value of this counter can occur at reinitialization of the management system and at other times, as indicated by the value of ifCounterDiscontinuityTime on the relevant interface. Deprecated in favor of NATV2-MIB. |
| IP natAddrBindLocalAddr | 1.3.6.1.2.1.123.1.6.1.2 | InetAddress | not-accessible | This object represents the private-realm-specific network-layer address, which maps to the public-realm address represented by natAddrBindGlobalAddr. The type of this address is determined by the value of the natAddrBindLocalAddrType object. Deprecated in favor of NATV2-MIB. |
| IPt natAddrBindLocalAddrType | 1.3.6.1.2.1.123.1.6.1.1 | InetAddressType | not-accessible | This object specifies the address type used for natAddrBindLocalAddr. Deprecated in favor of NATV2-MIB. |
| NAT natAddrBindMapIndex | 1.3.6.1.2.1.123.1.6.1.8 | NatAddrMapId | read-only | This object is a pointer to the natAddrMapTable entry (and the parameters of that entry) that was used in creating this BIND. This object, in conjunction with the ifIndex (which identifies a unique addrMapName) points to a unique entry in the natAddrMapTable. Deprecated in favor of NATV2-MIB. |
| TIK natAddrBindMaxIdleTime | 1.3.6.1.2.1.123.1.6.1.10 | TimeTicks | read-only | This object indicates the maximum time for which this bind can be idle with no sessions attached to it. The value of this object is of relevance only for dynamic NAT. Deprecated in favor of NATV2-MIB. |
| G32 natAddrBindNumberOfEntries | 1.3.6.1.2.1.123.1.5 | Gauge32 | read-only | This object maintains a count of the number of entries that currently exist in the natAddrBindTable. Deprecated in favor of NATV2-MIB. |
| C64 natAddrBindOutTranslates | 1.3.6.1.2.1.123.1.6.1.13 | Counter64 | read-only | The number of outbound packets that were successfully translated using this bind entry. Discontinuities in the value of this counter can occur at reinitialization of the management system and at other times as indicated by the value of ifCounterDiscontinuityTime on the relevant interface. Deprecated in favor of NATV2-MIB. |
| G32 natAddrBindSessions | 1.3.6.1.2.1.123.1.6.1.9 | Gauge32 | read-only | Number of sessions currently using this BIND. Deprecated in favor of NATV2-MIB. |
| natAddrBindTable | 1.3.6.1.2.1.123.1.6 | not-accessible | This table holds information about the currently active NAT BINDs. Deprecated in favor of NATV2-MIB. | |
| NAT natAddrBindTranslationEntity | 1.3.6.1.2.1.123.1.6.1.6 | NatTranslationEntity | read-only | This object represents the direction of sessions for which this bind is applicable and the endpoint entity (source or destination) within the sessions that is subject to translation using the BIND. Orientation of the bind can be a superset of translationEntity of the address map entry that forms the basis for this bind. For example, if the translationEntity of an address map entry is outboundSrcEndPoint, the translationEntity of a bind derived from this map entry may either be outboundSrcEndPoint or it may be bidirectional (a bitmask of outboundSrcEndPoint and inboundDstEndPoint). Deprecated in favor of NATV2-MIB. |
| NAT natAddrBindType | 1.3.6.1.2.1.123.1.6.1.7 | NatAssociationType | read-only | This object indicates whether the bind is static or dynamic. Deprecated in favor of NATV2-MIB. |
| G32 natAddrMapAddrUsed | 1.3.6.1.2.1.123.1.4.1.19 | Gauge32 | read-only | The number of addresses pertaining to this address map that are currently being used from the NAT pool. The value of this object must always be zero in the case of a static address map. Deprecated in favor of NATV2-MIB. |
| C64 natAddrMapDiscards | 1.3.6.1.2.1.123.1.4.1.18 | Counter64 | read-only | The number of packets pertaining to this address map entry that were dropped due to lack of addresses in the address pool identified by this address map. The value of this object must always be zero in case of a static address map. Discontinuities in the value of this counter can occur at reinitialization of the management system and at other times, as indicated by the value of ifCounterDiscontinuityTime on the relevant interface. Deprecated in favor of NATV2-MIB. |
| natAddrMapEntry | 1.3.6.1.2.1.123.1.4.1 | not-accessible | This entry represents an address map to be used for NAT and contributes to the dynamic and/or static address mapping tables of the NAT device. Deprecated in favor of NATV2-MIB. | |
| NAT natAddrMapEntryType | 1.3.6.1.2.1.123.1.4.1.3 | NatAssociationType | read-create | This parameter can be used to set up static or dynamic address maps. Deprecated in favor of NATV2-MIB. |
| IP natAddrMapGlobalAddrFrom | 1.3.6.1.2.1.123.1.4.1.11 | InetAddress | read-create | This object specifies the first IP address of the range of IP addresses being mapped to. The value of this object must be less than or equal to the value of the natAddrMapGlobalAddrTo object. The type of this address is determined by the value of the natAddrMapGlobalAddrType object. Deprecated in favor of NATV2-MIB. |
| IP natAddrMapGlobalAddrTo | 1.3.6.1.2.1.123.1.4.1.12 | InetAddress | read-create | This object specifies the last IP address of the range of IP addresses being mapped to. If only a single address is being mapped to, the value of this object is equal to the value of natAddrMapGlobalAddrFrom. For a static NAT, the number of addresses in the range defined by natAddrMapGlobalAddrFrom and natAddrMapGlobalAddrTo must be equal to the number of addresses in the range defined by natAddrMapLocalAddrFrom and natAddrMapLocalAddrTo. The value of this object must be greater than or equal to the value of the natAddrMapGlobalAddrFrom object. The type of this address is determined by the value of the natAddrMapGlobalAddrType object. Deprecated in favor of NATV2-MIB. |
| IPt natAddrMapGlobalAddrType | 1.3.6.1.2.1.123.1.4.1.10 | InetAddressType | read-create | This object specifies the address type used for natAddrMapGlobalAddrFrom and natAddrMapGlobalAddrTo. Deprecated in favor of NATV2-MIB. |
| INE natAddrMapGlobalPortFrom | 1.3.6.1.2.1.123.1.4.1.13 | InetPortNumber | read-create | If this conceptual row describes a Basic NAT address mapping, then the value of this object must be zero. If this conceptual row describes NAPT, then the value of this object specifies the first port number in the range of ports being mapped to. The value of this object must be less than or equal to the value of the natAddrMapGlobalPortTo object. If the translation specifies a single port, then the value of this object is equal to the value natAddrMapGlobalPortTo. Deprecated in favor of NATV2-MIB. |
| INE natAddrMapGlobalPortTo | 1.3.6.1.2.1.123.1.4.1.14 | InetPortNumber | read-create | If this conceptual row describes a Basic NAT address mapping, then the value of this object must be zero. If this conceptual row describes NAPT, then the value of this object specifies the last port number in the range of ports being mapped to. The value of this object must be greater than or equal to the value of the natAddrMapGlobalPortFrom object. If the translation specifies a single port, then the value of this object is equal to the value of natAddrMapGlobalPortFrom. Deprecated in favor of NATV2-MIB. |
| NAT natAddrMapIndex | 1.3.6.1.2.1.123.1.4.1.1 | NatAddrMapId | not-accessible | Along with ifIndex, this object uniquely identifies an entry in the natAddrMapTable. Address map entries are applied in the order specified by natAddrMapIndex. Deprecated in favor of NATV2-MIB. |
| C64 natAddrMapInTranslates | 1.3.6.1.2.1.123.1.4.1.16 | Counter64 | read-only | The number of inbound packets pertaining to this address map entry that were translated. Discontinuities in the value of this counter can occur at reinitialization of the management system and at other times, as indicated by the value of ifCounterDiscontinuityTime on the relevant interface. Deprecated in favor of NATV2-MIB. |
| IP natAddrMapLocalAddrFrom | 1.3.6.1.2.1.123.1.4.1.6 | InetAddress | read-create | This object specifies the first IP address of the range of IP addresses mapped by this translation entry. The value of this object must be less than or equal to the value of the natAddrMapLocalAddrTo object. The type of this address is determined by the value of the natAddrMapLocalAddrType object. Deprecated in favor of NATV2-MIB. |
| IP natAddrMapLocalAddrTo | 1.3.6.1.2.1.123.1.4.1.7 | InetAddress | read-create | This object specifies the last IP address of the range of IP addresses mapped by this translation entry. If only a single address is being mapped, the value of this object is equal to the value of natAddrMapLocalAddrFrom. For a static NAT, the number of addresses in the range defined by natAddrMapLocalAddrFrom and natAddrMapLocalAddrTo must be equal to the number of addresses in the range defined by natAddrMapGlobalAddrFrom and natAddrMapGlobalAddrTo. The value of this object must be greater than or equal to the value of the natAddrMapLocalAddrFrom object. The type of this address is determined by the value of the natAddrMapLocalAddrType object. Deprecated in favor of NATV2-MIB. |
| IPt natAddrMapLocalAddrType | 1.3.6.1.2.1.123.1.4.1.5 | InetAddressType | read-create | This object specifies the address type used for natAddrMapLocalAddrFrom and natAddrMapLocalAddrTo. Deprecated in favor of NATV2-MIB. |
| INE natAddrMapLocalPortFrom | 1.3.6.1.2.1.123.1.4.1.8 | InetPortNumber | read-create | If this conceptual row describes a Basic NAT address mapping, then the value of this object must be zero. If this conceptual row describes NAPT, then the value of this object specifies the first port number in the range of ports being mapped. The value of this object must be less than or equal to the value of the natAddrMapLocalPortTo object. If the translation specifies a single port, then the value of this object is equal to the value of natAddrMapLocalPortTo. Deprecated in favor of NATV2-MIB. |
| INE natAddrMapLocalPortTo | 1.3.6.1.2.1.123.1.4.1.9 | InetPortNumber | read-create | If this conceptual row describes a Basic NAT address mapping, then the value of this object must be zero. If this conceptual row describes NAPT, then the value of this object specifies the last port number in the range of ports being mapped. The value of this object must be greater than or equal to the value of the natAddrMapLocalPortFrom object. If the translation specifies a single port, then the value of this object is equal to the value of natAddrMapLocalPortFrom. Deprecated in favor of NATV2-MIB. |
| STR natAddrMapName | 1.3.6.1.2.1.123.1.4.1.2 | SnmpAdminString | read-create | Name identifying all map entries in the table associated with the same interface. All map entries with the same ifIndex MUST have the same map name. Deprecated in favor of NATV2-MIB. |
| C64 natAddrMapOutTranslates | 1.3.6.1.2.1.123.1.4.1.17 | Counter64 | read-only | The number of outbound packets pertaining to this address map entry that were translated. Discontinuities in the value of this counter can occur at reinitialization of the management system and at other times, as indicated by the value of ifCounterDiscontinuityTime on the relevant interface. Deprecated in favor of NATV2-MIB. |
| NAT natAddrMapProtocol | 1.3.6.1.2.1.123.1.4.1.15 | NatProtocolMap | read-create | This object specifies a bitmap of protocol identifiers. Deprecated in favor of NATV2-MIB. |
| ROW natAddrMapRowStatus | 1.3.6.1.2.1.123.1.4.1.21 | RowStatus | read-create | The status of this conceptual row. Until instances of all corresponding columns are appropriately configured, the value of the corresponding instance of the natAddrMapRowStatus column is 'notReady'. None of the objects in this row may be modified while the value of this object is active(1). Deprecated in favor of NATV2-MIB. |
| STO natAddrMapStorageType | 1.3.6.1.2.1.123.1.4.1.20 | StorageType | read-create | The storage type for this conceptual row. Conceptual rows having the value 'permanent' need not allow write-access to any columnar objects in the row. Deprecated in favor of NATV2-MIB. |
| natAddrMapTable | 1.3.6.1.2.1.123.1.4 | not-accessible | This table lists address map parameters for NAT. Deprecated in favor of NATV2-MIB. | |
| NAT natAddrMapTranslationEntity | 1.3.6.1.2.1.123.1.4.1.4 | NatTranslationEntity | read-create | The endpoint entity (source or destination) in inbound or outbound sessions (i.e., first packets) that may be translated by an address map entry. Session direction (inbound or outbound) is derived from the direction of the first packet of a session traversing a NAT interface. NAT address (and Transport-ID) maps may be defined to effect inbound or outbound sessions. Traditionally, address maps for Basic NAT and NAPT are configured on a public interface for outbound sessions, effecting translation of source endpoint. The value of this object must be set to outboundSrcEndPoint for those interfaces. Alternately, if address maps for Basic NAT and NAPT were to be configured on a private interface, the desired value for this object for the map entries would be inboundSrcEndPoint (i.e., effecting translation of source endpoint for inbound sessions). If twiceNAT were to be configured on a private interface, the desired value for this object for the map entries would be a bitmask of inboundSrcEndPoint and inboundDstEndPoint. Deprecated in favor of NATV2-MIB. |
| TIK natAddrPortBindCurrentIdleTime | 1.3.6.1.2.1.123.1.8.1.14 | TimeTicks | read-only | At any given instance, this object indicates the time that this bind has been idle without any sessions attached to it. The value of this object is of relevance only for dynamic NAT. Deprecated in favor of NATV2-MIB. |
| natAddrPortBindEntry | 1.3.6.1.2.1.123.1.8.1 | not-accessible | Each entry in the this table holds information about a NAPT bind that is currently active. These entries are lost upon agent restart. This row has indexing that may create variables with more than 128 subidentifiers. Implementers of this table must be careful not to create entries that would result in OIDs that exceed the 128 subidentifier limit. Otherwise, the information cannot be accessed using SNMPv1, SNMPv2c, or SNMPv3. Deprecated in favor of NATV2-MIB. | |
| IP natAddrPortBindGlobalAddr | 1.3.6.1.2.1.123.1.8.1.6 | InetAddress | read-only | This object represents the public-realm-specific network- layer address that, in conjunction with natAddrPortBindGlobalPort, maps to the private-realm network-layer address and transport ID represented by natAddrPortBindLocalAddr and natAddrPortBindLocalPort, respectively. The type of this address is determined by the value of the natAddrPortBindGlobalAddrType object. Deprecated in favor of NATV2-MIB. |
| IPt natAddrPortBindGlobalAddrType | 1.3.6.1.2.1.123.1.8.1.5 | InetAddressType | read-only | This object specifies the address type used for natAddrPortBindGlobalAddr. Deprecated in favor of NATV2-MIB. |
| INE natAddrPortBindGlobalPort | 1.3.6.1.2.1.123.1.8.1.7 | InetPortNumber | read-only | For a protocol value TCP or UDP, this object represents the public-realm-specific port number. On the other hand, for ICMP a bind is created only for query/response- type ICMP messages such as ICMP echo, Timestamp, and Information request messages, and this object represents the public-realm-specific identifier in the ICMP message, as defined in RFC 792 for ICMPv4 and in RFC 4443 for ICMPv6. This object, together with natAddrPortBindProtocol, natAddrPortBindGlobalAddrType, and natAddrPortBindGlobalAddr, constitutes a session endpoint in the public realm. A bind entry binds a public-realm-specific endpoint to a private-realm- specific endpoint, as represented by the tuple of (natAddrPortBindLocalPort, natAddrPortBindProtocol, natAddrPortBindLocalAddrType, and natAddrPortBindLocalAddr). Deprecated in favor of NATV2-MIB. |
| NAT natAddrPortBindId | 1.3.6.1.2.1.123.1.8.1.8 | NatBindId | read-only | This object represents a bind ID that is dynamically assigned to each bind by a NAT-enabled device. Each bind is represented by a unique bind ID across both the natAddrBindTable and the natAddrPortBindTable. Deprecated in favor of NATV2-MIB. |
| C64 natAddrPortBindInTranslates | 1.3.6.1.2.1.123.1.8.1.15 | Counter64 | read-only | The number of inbound packets that were translated as per this bind entry. Discontinuities in the value of this counter can occur at reinitialization of the management system and at other times, as indicated by the value of ifCounterDiscontinuityTime on the relevant interface. Deprecated in favor of NATV2-MIB. |
| IP natAddrPortBindLocalAddr | 1.3.6.1.2.1.123.1.8.1.2 | InetAddress | not-accessible | This object represents the private-realm-specific network-layer address that, in conjunction with natAddrPortBindLocalPort, maps to the public-realm network-layer address and transport ID represented by natAddrPortBindGlobalAddr and natAddrPortBindGlobalPort, respectively. The type of this address is determined by the value of the natAddrPortBindLocalAddrType object. Deprecated in favor of NATV2-MIB. |
| IPt natAddrPortBindLocalAddrType | 1.3.6.1.2.1.123.1.8.1.1 | InetAddressType | not-accessible | This object specifies the address type used for natAddrPortBindLocalAddr. Deprecated in favor of NATV2-MIB. |
| INE natAddrPortBindLocalPort | 1.3.6.1.2.1.123.1.8.1.3 | InetPortNumber | not-accessible | For a protocol value TCP or UDP, this object represents the private-realm-specific port number. On the other hand, for ICMP a bind is created only for query/response- type ICMP messages such as ICMP echo, Timestamp, and Information request messages, and this object represents the private-realm-specific identifier in the ICMP message, as defined in RFC 792 for ICMPv4 and in RFC 4443 for ICMPv6. This object, together with natAddrPortBindProtocol, natAddrPortBindLocalAddrType, and natAddrPortBindLocalAddr, constitutes a session endpoint in the private realm. A bind entry binds a private- realm-specific endpoint to a public-realm-specific endpoint, as represented by the tuple of (natAddrPortBindGlobalPort, natAddrPortBindProtocol, natAddrPortBindGlobalAddrType, and natAddrPortBindGlobalAddr). Deprecated in favor of NATV2-MIB. |
| NAT natAddrPortBindMapIndex | 1.3.6.1.2.1.123.1.8.1.11 | NatAddrMapId | read-only | This object is a pointer to the natAddrMapTable entry (and the parameters of that entry) used in creating this BIND. This object, in conjunction with the ifIndex (which identifies a unique addrMapName), points to a unique entry in the natAddrMapTable. Deprecated in favor of NATV2-MIB. |
| TIK natAddrPortBindMaxIdleTime | 1.3.6.1.2.1.123.1.8.1.13 | TimeTicks | read-only | This object indicates the maximum time for which this bind can be idle without any sessions attached to it. The value of this object is of relevance only for dynamic NAT. Deprecated in favor of NATV2-MIB. |
| G32 natAddrPortBindNumberOfEntries | 1.3.6.1.2.1.123.1.7 | Gauge32 | read-only | This object maintains a count of the number of entries that currently exist in the natAddrPortBindTable. Deprecated in favor of NATV2-MIB. |
| C64 natAddrPortBindOutTranslates | 1.3.6.1.2.1.123.1.8.1.16 | Counter64 | read-only | The number of outbound packets that were translated as per this bind entry. Discontinuities in the value of this counter can occur at reinitialization of the management system and at other times, as indicated by the value of ifCounterDiscontinuityTime on the relevant interface. Deprecated in favor of NATV2-MIB. |
| NAT natAddrPortBindProtocol | 1.3.6.1.2.1.123.1.8.1.4 | NatProtocolType | not-accessible | This object specifies a protocol identifier. If the value of this object is none(1), then this bind entry applies to all IP traffic. Any other value of this object specifies the class of IP traffic to which this BIND applies. Deprecated in favor of NATV2-MIB. |
| G32 natAddrPortBindSessions | 1.3.6.1.2.1.123.1.8.1.12 | Gauge32 | read-only | Number of sessions currently using this BIND. Deprecated in favor of NATV2-MIB. |
| natAddrPortBindTable | 1.3.6.1.2.1.123.1.8 | not-accessible | This table holds information about the currently active NAPT BINDs. Deprecated in favor of NATV2-MIB. | |
| NAT natAddrPortBindTranslationEntity | 1.3.6.1.2.1.123.1.8.1.9 | NatTranslationEntity | read-only | This object represents the direction of sessions for which this bind is applicable and the entity (source or destination) within the sessions that is subject to translation with the BIND. Orientation of the bind can be a superset of the translationEntity of the address map entry that forms the basis for this bind. For example, if the translationEntity of an address map entry is outboundSrcEndPoint, the translationEntity of a bind derived from this map entry may either be outboundSrcEndPoint or may be bidirectional (a bitmask of outboundSrcEndPoint and inboundDstEndPoint). Deprecated in favor of NATV2-MIB. |
| NAT natAddrPortBindType | 1.3.6.1.2.1.123.1.8.1.10 | NatAssociationType | read-only | This object indicates whether the bind is static or dynamic. Deprecated in favor of NATV2-MIB. |
| U32 natBindDefIdleTimeout | 1.3.6.1.2.1.123.1.1.1 | Unsigned32 | read-write | The default Bind (Address Bind or Port Bind) idle timeout parameter. If the agent is capable of storing non-volatile configuration, then the value of this object must be restored after a reinitialization of the management system. Deprecated in favor of NATV2-MIB. |
| natConfigGroup | 1.3.6.1.2.1.123.2.1.1 | A collection of configuration-related information required to support management of devices supporting NAT. Deprecated in favor of NATV2-MIB. | ||
| natDefTimeouts | 1.3.6.1.2.1.123.1.1 | |||
| U32 natIcmpDefIdleTimeout | 1.3.6.1.2.1.123.1.1.3 | Unsigned32 | read-write | The default ICMP idle timeout parameter. If the agent is capable of storing non-volatile configuration, then the value of this object must be restored after a reinitialization of the management system. Deprecated in favor of NATV2-MIB. |
| C64 natInterfaceDiscards | 1.3.6.1.2.1.123.1.3.1.5 | Counter64 | read-only | Number of packets that had to be rejected/dropped due to a lack of resources for this interface. Discontinuities in the value of this counter can occur at reinitialization of the management system and at other times as indicated by the value of ifCounterDiscontinuityTime on the relevant interface. Deprecated in favor of NATV2-MIB. |
| natInterfaceEntry | 1.3.6.1.2.1.123.1.3.1 | not-accessible | Each entry in the natInterfaceTable holds a set of parameters for an interface, instantiated by ifIndex. Therefore, the interface index must have been assigned, according to the applicable procedures, before it can be meaningfully used. Generally, this means that the interface must exist. When natStorageType is of type nonVolatile, however, this may reflect the configuration for an interface whose ifIndex has been assigned but for which the supporting implementation is not currently present. Deprecated in favor of NATV2-MIB. | |
| C64 natInterfaceInTranslates | 1.3.6.1.2.1.123.1.3.1.3 | Counter64 | read-only | Number of packets received on this interface that were translated. Discontinuities in the value of this counter can occur at reinitialization of the management system and at other times as indicated by the value of ifCounterDiscontinuityTime on the relevant interface. Deprecated in favor of NATV2-MIB. |
| C64 natInterfaceOutTranslates | 1.3.6.1.2.1.123.1.3.1.4 | Counter64 | read-only | Number of translated packets that were sent out this interface. Discontinuities in the value of this counter can occur at reinitialization of the management system and at other times as indicated by the value of ifCounterDiscontinuityTime on the relevant interface. Deprecated in favor of NATV2-MIB. |
| INT natInterfaceRealm | 1.3.6.1.2.1.123.1.3.1.1 | INTEGER | read-create | This object identifies whether this interface is connected to the private or the public realm. Deprecated in favor of NATV2-MIB. |
| ROW natInterfaceRowStatus | 1.3.6.1.2.1.123.1.3.1.7 | RowStatus | read-create | The status of this conceptual row. Until instances of all corresponding columns are appropriately configured, the value of the corresponding instance of the natInterfaceRowStatus column is 'notReady'. In particular, a newly created row cannot be made active until the corresponding instance of natInterfaceServiceType has been set. None of the objects in this row may be modified while the value of this object is active(1). Deprecated in favor of NATV2-MIB. |
| BIT natInterfaceServiceType | 1.3.6.1.2.1.123.1.3.1.2 | Bits | read-create | An indication of the direction in which new sessions are permitted and the extent of translation done within the IP and transport headers. Deprecated in favor of NATV2-MIB. |
| STO natInterfaceStorageType | 1.3.6.1.2.1.123.1.3.1.6 | StorageType | read-create | The storage type for this conceptual row. Conceptual rows having the value 'permanent' need not allow write-access to any columnar objects in the row. Deprecated in favor of NATV2-MIB. |
| natInterfaceTable | 1.3.6.1.2.1.123.1.3 | not-accessible | This table specifies the attributes for interfaces on a device supporting NAT function. Deprecated in favor of NATV2-MIB. | |
| natMIB | 1.3.6.1.2.1.123 | This MIB module defines the generic managed objects for NAT. Copyright (c) 2015 IETF Trust and the persons identified as authors of the code. All rights reserved. Redistribution and use in source and binary forms, with or without modification, is permitted pursuant to, and subject to the license terms contained in, the Simplified BSD License set forth in Section 4.c of the IETF Trust's Legal Provisions Relating to IETF Documents (http://trustee.ietf.org/license-info). This version of this MIB module is part of RFC 7658; see the RFC itself for full legal notices. | ||
| natMIBCompliances | 1.3.6.1.2.1.123.2.2 | |||
| natMIBConformance | 1.3.6.1.2.1.123.2 | |||
| natMIBFullCompliance | 1.3.6.1.2.1.123.2.2.1 | When this MIB is implemented with support for read-create, then such an implementation can claim full compliance. Such devices can then be both monitored and configured with this MIB. The following index objects cannot be added as OBJECT clauses but nevertheless have the compliance requirements: Deprecated in favor of NATV2-MIB. | ||
| natMIBGroups | 1.3.6.1.2.1.123.2.1 | |||
| natMIBNotificationGroup | 1.3.6.1.2.1.123.2.1.6 | A collection of notifications generated by devices supporting this MIB. Deprecated in favor of NATV2-MIB. | ||
| natMIBNotifications | 1.3.6.1.2.1.123.0 | |||
| natMIBObjects | 1.3.6.1.2.1.123.1 | |||
| natMIBReadOnlyCompliance | 1.3.6.1.2.1.123.2.2.2 | When this MIB is implemented without support for read-create (i.e., in read-only mode), then such an implementation can claim read-only compliance. Such a device can then be monitored but cannot be configured with this MIB. The following index objects cannot be added as OBJECT clauses but nevertheless have the compliance requirements: Deprecated in favor of NATV2-MIB. | ||
| natNotifCtrl | 1.3.6.1.2.1.123.1.2 | |||
| I32 natNotifThrottlingInterval | 1.3.6.1.2.1.123.1.2.1 | Integer32 | read-write | This object controls the generation of the natPacketDiscard notification. If this object has a value of zero, then no natPacketDiscard notifications will be transmitted by the agent. If this object has a non-zero value, then the agent must not generate more than one natPacketDiscard 'notification-event' in the indicated period, where a 'notification-event' is the generation of a single notification PDU type to a list of notification destinations. If additional NAT packets are discarded within the throttling period, then notification-events for these changes must be suppressed by the agent until the current throttling period expires. If natNotifThrottlingInterval notification generation is enabled, the suggested default throttling period is 60 seconds, but generation of the natPacketDiscard notification should be disabled by default. If the agent is capable of storing non-volatile configuration, then the value of this object must be restored after a reinitialization of the management system. The actual transmission of notifications is controlled via the MIB modules in RFC 3413. Deprecated in favor of NATV2-MIB. |
| U32 natOtherDefIdleTimeout | 1.3.6.1.2.1.123.1.1.4 | Unsigned32 | read-write | The default idle timeout parameter for protocols represented by the value other (2) in NatProtocolType. If the agent is capable of storing non-volatile configuration, then the value of this object must be restored after a reinitialization of the management system. Deprecated in favor of NATV2-MIB. |
| NTF natPacketDiscard | 1.3.6.1.2.1.123.0.1 | This notification is generated when IP packets are discarded by the NAT function; e.g., due to lack of mapping space when NAT is out of addresses or ports. Note that the generation of natPacketDiscard notifications is throttled by the agent, as specified by the 'natNotifThrottlingInterval' object. Deprecated in favor of NATV2-MIB. | ||
| NAT natProtocol | 1.3.6.1.2.1.123.1.10.1.1 | NatProtocolType | not-accessible | This object represents the protocol pertaining to which parameters are reported. Deprecated in favor of NATV2-MIB. |
| C64 natProtocolDiscards | 1.3.6.1.2.1.123.1.10.1.4 | Counter64 | read-only | The number of packets pertaining to the protocol identified by natProtocol that had to be rejected/dropped due to lack of resources. These rejections could be due to session timeout, resource unavailability, lack of address space, etc. Discontinuities in the value of this counter can occur at reinitialization of the management system and at other times, as indicated by the value of ifCounterDiscontinuityTime on the relevant interface. Deprecated in favor of NATV2-MIB. |
| natProtocolEntry | 1.3.6.1.2.1.123.1.10.1 | not-accessible | An entry (conceptual row) containing NAT statistics pertaining to a particular protocol. Deprecated in favor of NATV2-MIB. | |
| C64 natProtocolInTranslates | 1.3.6.1.2.1.123.1.10.1.2 | Counter64 | read-only | The number of inbound packets pertaining to the protocol identified by natProtocol that underwent NAT. Discontinuities in the value of this counter can occur at reinitialization of the management system and at other times, as indicated by the value of ifCounterDiscontinuityTime on the relevant interface. Deprecated in favor of NATV2-MIB. |
| C64 natProtocolOutTranslates | 1.3.6.1.2.1.123.1.10.1.3 | Counter64 | read-only | The number of outbound packets pertaining to the protocol identified by natProtocol that underwent NAT. Discontinuities in the value of this counter can occur at reinitialization of the management system and at other times, as indicated by the value of ifCounterDiscontinuityTime on the relevant interface. Deprecated in favor of NATV2-MIB. |
| natProtocolTable | 1.3.6.1.2.1.123.1.10 | not-accessible | The (conceptual) table containing per-protocol NAT statistics. Deprecated in favor of NATV2-MIB. | |
| NAT natSessionAddrMapIndex | 1.3.6.1.2.1.123.1.9.1.8 | NatAddrMapId | read-only | This object is a pointer to the natAddrMapTable entry (and the parameters of that entry) used in creating this session. This object, in conjunction with the ifIndex (which identifies a unique addrMapName), points to a unique entry in the natAddrMapTable. Deprecated in favor of NATV2-MIB. |
| TIK natSessionCurrentIdleTime | 1.3.6.1.2.1.123.1.9.1.21 | TimeTicks | read-only | The time since a packet belonging to this session was last detected. Deprecated in favor of NATV2-MIB. |
| INT natSessionDirection | 1.3.6.1.2.1.123.1.9.1.6 | INTEGER | read-only | The direction of this session with respect to the local network. 'inbound' indicates that this session was initiated from the public network into the private network. 'outbound' indicates that this session was initiated from the private network into the public network. Deprecated in favor of NATV2-MIB. |
| natSessionEntry | 1.3.6.1.2.1.123.1.9.1 | not-accessible | An entry (conceptual row) containing information about an active NAT session on this NAT device. These entries are lost upon agent restart. Deprecated in favor of NATV2-MIB. | |
| NAT natSessionIndex | 1.3.6.1.2.1.123.1.9.1.1 | NatSessionId | not-accessible | The session ID for this NAT session. Deprecated in favor of NATV2-MIB. |
| C64 natSessionInTranslates | 1.3.6.1.2.1.123.1.9.1.22 | Counter64 | read-only | The number of inbound packets that were translated for this session. Discontinuities in the value of this counter can occur at reinitialization of the management system and at other times, as indicated by the value of ifCounterDiscontinuityTime on the relevant interface. Deprecated in favor of NATV2-MIB. |
| TIK natSessionMaxIdleTime | 1.3.6.1.2.1.123.1.9.1.20 | TimeTicks | read-only | The max time for which this session can be idle without detecting a packet. Deprecated in favor of NATV2-MIB. |
| C64 natSessionOutTranslates | 1.3.6.1.2.1.123.1.9.1.23 | Counter64 | read-only | The number of outbound packets that were translated for this session. Discontinuities in the value of this counter can occur at reinitialization of the management system and at other times, as indicated by the value of ifCounterDiscontinuityTime on the relevant interface. Deprecated in favor of NATV2-MIB. |
| IPt natSessionPrivateAddrType | 1.3.6.1.2.1.123.1.9.1.10 | InetAddressType | read-only | This object specifies the address type used for natSessionPrivateSrcAddr and natSessionPrivateDstAddr. Deprecated in favor of NATV2-MIB. |
| IP natSessionPrivateDstAddr | 1.3.6.1.2.1.123.1.9.1.13 | InetAddress | read-only | The destination IP address of the session endpoint that lies in the private network. The value of this object must be zero when the natSessionPrivateDstEPBindId object has a zero value. In such a scenario, the NAT session lookup will match any IP address to this field. The type of this address is determined by the value of the natSessionPrivateAddrType object. Deprecated in favor of NATV2-MIB. |
| NAT natSessionPrivateDstEPBindId | 1.3.6.1.2.1.123.1.9.1.4 | NatBindIdOrZero | read-only | The bind ID associated between private and public destination endpoints. Deprecated in favor of NATV2-MIB. |
| NAT natSessionPrivateDstEPBindMode | 1.3.6.1.2.1.123.1.9.1.5 | NatBindMode | read-only | This object indicates whether the bind indicated by the object natSessionPrivateDstEPBindId is an address bind or an address port bind. Deprecated in favor of NATV2-MIB. |
| INE natSessionPrivateDstPort | 1.3.6.1.2.1.123.1.9.1.14 | InetPortNumber | read-only | When the value of protocol is TCP or UDP, this object represents the destination port in the first packet of session while in private-realm. On the other hand, when the protocol is ICMP, this object is not relevant and should be set to zero. The value of this object must be zero when the natSessionPrivateDstEPBindId object has a zero value and natSessionPrivateDstEPBindMode is set to addressPortBind(2). In such a case, the NAT session lookup will match any port number to this field. The value of this object must be zero when the object is not a representative field (SrcPort, DstPort, or ICMP identifier) of the session tuple in either the public realm or the private realm. Deprecated in favor of NATV2-MIB. |
| IP natSessionPrivateSrcAddr | 1.3.6.1.2.1.123.1.9.1.11 | InetAddress | read-only | The source IP address of the session endpoint that lies in the private network. The value of this object must be zero only when the natSessionPrivateSrcEPBindId object has a zero value. When the value of this object is zero, the NAT session lookup will match any IP address to this field. The type of this address is determined by the value of the natSessionPrivateAddrType object. Deprecated in favor of NATV2-MIB. |
| NAT natSessionPrivateSrcEPBindId | 1.3.6.1.2.1.123.1.9.1.2 | NatBindIdOrZero | read-only | The bind ID associated between private and public source endpoints. In the case of Symmetric-NAT, this should be set to zero. Deprecated in favor of NATV2-MIB. |
| NAT natSessionPrivateSrcEPBindMode | 1.3.6.1.2.1.123.1.9.1.3 | NatBindMode | read-only | This object indicates whether the bind indicated by the object natSessionPrivateSrcEPBindId is an address bind or an address port bind. Deprecated in favor of NATV2-MIB. |
| INE natSessionPrivateSrcPort | 1.3.6.1.2.1.123.1.9.1.12 | InetPortNumber | read-only | For a protocol value of TCP or UDP, this object represents the source port in the first packet of a session while in a private realm. On the other hand, when the protocol is ICMP, a NAT session is created only for query/response-type ICMP messages such as ICMP echo, Timestamp, and Information request messages, and this object represents the private-realm specific identifier in the ICMP message, as defined in RFC 792 for ICMPv4 and in RFC 4443 for ICMPv6. The value of this object must be zero when the natSessionPrivateSrcEPBindId object has zero value and value of natSessionPrivateSrcEPBindMode is addressPortBind(2). In such a case, the NAT session lookup will match any port number to this field. The value of this object must be zero when the object is not a representative field (SrcPort, DstPort, or ICMP identifier) of the session tuple in either the public realm or the private realm. Deprecated in favor of NATV2-MIB. |
| NAT natSessionProtocolType | 1.3.6.1.2.1.123.1.9.1.9 | NatProtocolType | read-only | The protocol type of this session. Deprecated in favor of NATV2-MIB. |
| IPt natSessionPublicAddrType | 1.3.6.1.2.1.123.1.9.1.15 | InetAddressType | read-only | This object specifies the address type used for natSessionPublicSrcAddr and natSessionPublicDstAddr. Deprecated in favor of NATV2-MIB. |
| IP natSessionPublicDstAddr | 1.3.6.1.2.1.123.1.9.1.18 | InetAddress | read-only | The destination IP address of the session endpoint that lies in the public network. The value of this object must be non-zero when the natSessionPrivateDstEPBindId object has a non-zero value. If the value of this object and the corresponding natSessionPrivateDstEPBindId object value are zero, then the NAT session lookup will match any IP address to this field. The type of this address is determined by the value of the natSessionPublicAddrType object. Deprecated in favor of NATV2-MIB. |
| INE natSessionPublicDstPort | 1.3.6.1.2.1.123.1.9.1.19 | InetPortNumber | read-only | When the protocol value is TCP or UDP, this object represents the destination port in the first packet of session while in the public realm. On the other hand, when the protocol is ICMP, this object is not relevant for translation and should be zero. The value of this object must be zero when the natSessionPrivateDstEPBindId object has a zero value and natSessionPrivateDstEPBindMode is addressPortBind(2). In such a scenario, the NAT session lookup will match any port number to this field. The value of this object must be zero when the object is not a representative field (SrcPort, DstPort, or ICMP identifier) of the session tuple in either the public realm or the private realm. Deprecated in favor of NATV2-MIB. |
| IP natSessionPublicSrcAddr | 1.3.6.1.2.1.123.1.9.1.16 | InetAddress | read-only | The source IP address of the session endpoint that lies in the public network. The value of this object must be zero when the natSessionPrivateSrcEPBindId object has a zero value. In such a scenario, the NAT session lookup will match any IP address to this field. The type of this address is determined by the value of the natSessionPublicAddrType object. Deprecated in favor of NATV2-MIB. |
| INE natSessionPublicSrcPort | 1.3.6.1.2.1.123.1.9.1.17 | InetPortNumber | read-only | When the protocol value is TCP or UDP, this object represents the source port in the first packet of session while in public-realm. On the other hand, when protocol is ICMP, a NAT session is created only for query/response-type ICMP messages such as ICMP echo, Timestamp, and Information request messages, and this object represents the public-realm-specific identifier in the ICMP message, as defined in RFC 792 for ICMPv4 and in RFC 4443 for ICMPv6. The value of this object must be zero when the natSessionPrivateSrcEPBindId object has a zero value and natSessionPrivateSrcEPBindMode is set to addressPortBind(2). In such a scenario, the NAT session lookup will match any port number to this field. The value of this object must be zero when the object is not a representative field (SrcPort, DstPort, or ICMP identifier) of the session tuple in either the public realm or the private realm. Deprecated in favor of NATV2-MIB. |
| natSessionTable | 1.3.6.1.2.1.123.1.9 | not-accessible | The (conceptual) table containing one entry for each NAT session currently active on this NAT device. Deprecated in favor of NATV2-MIB. | |
| TIK natSessionUpTime | 1.3.6.1.2.1.123.1.9.1.7 | TimeTicks | read-only | The uptime of this session in hundredths of a second. Deprecated in favor of NATV2-MIB. |
| natStatsAddrMapGroup | 1.3.6.1.2.1.123.2.1.5 | A collection of address-map-specific NAT statistics, to aid troubleshooting/monitoring of NAT operation. Deprecated in favor of NATV2-MIB. | ||
| natStatsInterfaceGroup | 1.3.6.1.2.1.123.2.1.3 | A collection of NAT statistics associated with the interface on which NAT is configured, to aid troubleshooting/monitoring of the NAT operation. Deprecated in favor of NATV2-MIB. | ||
| natStatsProtocolGroup | 1.3.6.1.2.1.123.2.1.4 | A collection of protocol-specific NAT statistics, to aid troubleshooting/monitoring of NAT operation. Deprecated in favor of NATV2-MIB. | ||
| U32 natTcpDefIdleTimeout | 1.3.6.1.2.1.123.1.1.5 | Unsigned32 | read-write | The default time interval that a NAT session for an established TCP connection is allowed to remain valid without any activity on the TCP connection. If the agent is capable of storing non-volatile configuration, then the value of this object must be restored after a reinitialization of the management system. Deprecated in favor of NATV2-MIB. |
| U32 natTcpDefNegTimeout | 1.3.6.1.2.1.123.1.1.6 | Unsigned32 | read-write | The default time interval that a NAT session for a TCP connection that is not in the established state is allowed to remain valid without any activity on the TCP connection. If the agent is capable of storing non-volatile configuration, then the value of this object must be restored after a reinitialization of the management system. Deprecated in favor of NATV2-MIB. |
| natTranslationGroup | 1.3.6.1.2.1.123.2.1.2 | A collection of BIND-related objects required to support management of devices supporting NAT. Deprecated in favor of NATV2-MIB. | ||
| U32 natUdpDefIdleTimeout | 1.3.6.1.2.1.123.1.1.2 | Unsigned32 | read-write | The default UDP idle timeout parameter. If the agent is capable of storing non-volatile configuration, then the value of this object must be restored after a reinitialization of the management system. Deprecated in favor of NATV2-MIB. |
RFC description
IETF standard MIB (RFC 7659) for monitoring and managing Network Address Translation (NAT) devices and their translations.
Start monitoring Vendor-neutral IETF standard (NAT-capable router, firewall, or CGN appliance) with a free 30-day trial of IPNetwork Monitor. Import MIBs, browse SNMP OIDs, create custom SNMP monitors, configure alerts, and monitor any SNMP-enabled network device from a single console.