All MIBs › NATV2-MIB › natv2InstanceFilteringBehavior
natv2InstanceFilteringBehavior
Module: NATV2-MIB
OID (symbolic): NATV2-MIB::natv2InstanceFilteringBehavior
OID (numeric): 1.3.6.1.2.1.234.2.1.1.4
Node type: OBJECT-TYPE
Type: INTEGER
Access: read-only
Description: Filtering behavior is the policy governing acceptance or the dropping of packets incoming from remote sources via a given external realm and destined to a specific three-tuple of external address, port, and protocol at the NAT instance that has been assigned in a port mapping.
endpointIndependent(0) accepts for translation packets from all combinations of remote address and port destined to the mapped external address and port via the given external realm and using the given protocol.
addressDependent(1) accepts for translation packets from all remote ports from the same remote source address destined to the mapped external address and port via the given external realm and using the given protocol.
addressAndPortDependent(2) accepts for translation only those packets with the same remote source address, port, and protocol incoming from the same external realm as identified when the applicable port map entry was created.
RFC 4787, REQ-8 recommends either endpointIndependent(0) or addressDependent(1) filtering behavior depending on whether application friendliness or security takes priority.
What is natv2InstanceFilteringBehavior?
Reports the NAT instance's inbound filtering policy, ranging from endpoint-independent, which accepts any remote source to a mapped port, to address-and-port-dependent, which only accepts the exact remote peer the mapping was created for; an admin balances this setting between application compatibility and security exposure.
Examples
Walk all instances (SNMPv2c):
snmpwalk -v2c -c public <target> 1.3.6.1.2.1.234.2.1.1.4 snmpwalk -v2c -c public <target> NATV2-MIB::natv2InstanceFilteringBehavior
Get a specific instance (index 1):
snmpget -v2c -c public <target> 1.3.6.1.2.1.234.2.1.1.4.1 snmpget -v2c -c public <target> NATV2-MIB::natv2InstanceFilteringBehavior.1
Start monitoring Vendor-neutral IETF standard (carrier-grade NAT router/firewall/gateway) with a free 30-day trial of IPNetwork Monitor. Create custom SNMP monitor using the NATV2-MIB::natv2InstanceFilteringBehavior OID value, configure state conditions and alerts, and monitor any Vendor-neutral IETF standard (carrier-grade NAT router/firewall/gateway) from a single console.
OID Breakdown
Upper-level ancestors (6 from the standard OID tree / other modules)
| Numeric OID | Name | Module |
|---|---|---|
| 1 | iso | LANART-AGENT |
| 1.3 | org | AirPair-MIB |
| 1.3.6 | dod | AirPair-MIB |
| 1.3.6.1 | internet | AirPair-MIB |
| 1.3.6.1.2 | mgmt | AXON-MIB |
| 1.3.6.1.2.1 | mib_2 | AXON-MIB |
| Numeric OID | Name | Module |
|---|---|---|
| 1.3.6.1.2.1.234 | natv2MIB | NATV2-MIB |
| 1.3.6.1.2.1.234.2 | natv2MIBInstanceObjects | NATV2-MIB |
| 1.3.6.1.2.1.234.2.1 | natv2InstanceTable | NATV2-MIB |
| 1.3.6.1.2.1.234.2.1.1 | natv2InstanceEntry | NATV2-MIB |
| 1.3.6.1.2.1.234.2.1.1.4 | natv2InstanceFilteringBehavior | NATV2-MIB |