TELDAT-TRAP-DNAT-MIB

All MIBs › TELDAT-TRAP-DNAT-MIB

Organization: Teldat, S.A.

Last Updated: 2014-01-20

Category: Teldat Router Management, Teldat Trap Notifications

Description: Defines Teldat router DNAT (destination NAT) event trap notifications.

Start monitoring vendor-neutral, standards-based MIB, any SNMPv3-capable network device (SNMP engine identity/boot/clock status) with a free 30-day trial of IPNetwork Monitor. Import MIBs, browse SNMP OIDs, create custom SNMP monitors, configure alerts, and monitor any SNMP-enabled network device from a single console.

What Is TELDAT-TRAP-DNAT-MIB?

TELDAT-TRAP-DNAT-MIB is a Teldat-specific notification-only MIB defining SNMP traps generated by the router's Destination NAT (DNAT) event subsystem, which handles inbound address/port translation for services published behind the router. It contains no polled data tables, only a series of numbered trap definitions (dnat1 through dnat5 in the sample set) carrying varbinds for source and destination addresses, and in some cases the new translated source/destination addresses. Its monitoring value is fault/event-oriented: it lets an operator be notified in real time when specific DNAT translation events occur, such as a new translation being created, which is useful for auditing inbound access to internally-hosted services. It depends on the underlying NAT subsystem configuration (rules, address pools) that determines when these events fire. It is deployed on Teldat routers performing destination NAT for exposing internal services to external networks, where TELDAT-TRAP-DNAT-MIB SNMP monitoring delivers real-time trap notification of DNAT translation events.

IPNetwork Monitor allows you to monitor SNMP objects defined in TELDAT-TRAP-DNAT-MIB. Use the built-in SNMP Monitoring Browser to explore available variables, view their current values and descriptions, and select the objects you want to monitor. You can then create SNMP monitors, configure thresholds, and receive alerts when monitored values change.

Supported Devices

Teldat router performing destination NAT

Monitoring Examples

As a trap-only MIB with no data tables, monitoring here means configuring an SNMP trap receiver to capture events like dnat2_new_src_address and dnat2_new_dst_address, which report the original and post-translation addresses for a given DNAT event, letting an administrator audit exactly which internal host received a particular inbound connection. dnat1_src_address and dnat1_dst_address on a simpler trap variant would show basic connection endpoints without translation detail. An unexpected spike in these DNAT traps could indicate scanning activity or unauthorized access attempts against exposed services. dnatEventsGroup defines the set of DNAT-related trap events the device can emit.

Imported Objects

From SNMPv2-SMI

Integer32
IpAddress
MODULE-IDENTITY
NOTIFICATION-TYPE
OBJECT-IDENTITY
OBJECT-TYPE

From SNMPv2-TC

DisplayString

From TELDAT-MIB

telEventTraps

OBJECT-IDENTITY

OIDs

OID symbolic	OID numeric	Type	Access	Description
dnatTrapsMIB	1.3.6.1.4.1.2007.1.4.160			This Module Information Base file is defined for managing received SNMP notifications generated by the DNAT event subsystem.
dnatEventsGroup	1.3.6.1.4.1.2007.1.4.160.1
dnatEventObjects1	1.3.6.1.4.1.2007.1.4.160.1.1			Event DNAT.1 IPSec is requesting DNat service for next new IPSec client.
IP dnat1SrcAddress	1.3.6.1.4.1.2007.1.4.160.1.1.1	IpAddress	accessible-for-notify	Parameter 'srcAddress' in event DNAT.1
IP dnat1DstAddress	1.3.6.1.4.1.2007.1.4.160.1.1.2	IpAddress	accessible-for-notify	Parameter 'dstAddress' in event DNAT.1
dnatEventObjects2	1.3.6.1.4.1.2007.1.4.160.1.2			Event DNAT.2 DNat has established a new translation for a new client.
IP dnat2SrcAddress	1.3.6.1.4.1.2007.1.4.160.1.2.1	IpAddress	accessible-for-notify	Parameter 'srcAddress' in event DNAT.2
IP dnat2DstAddress	1.3.6.1.4.1.2007.1.4.160.1.2.2	IpAddress	accessible-for-notify	Parameter 'dstAddress' in event DNAT.2
IP dnat2NewSrcAddress	1.3.6.1.4.1.2007.1.4.160.1.2.3	IpAddress	accessible-for-notify	Parameter 'newSrcAddress' in event DNAT.2
IP dnat2NewDstAddress	1.3.6.1.4.1.2007.1.4.160.1.2.4	IpAddress	accessible-for-notify	Parameter 'newDstAddress' in event DNAT.2
dnatEventObjects3	1.3.6.1.4.1.2007.1.4.160.1.3			Event DNAT.3 There is no match on rules DNat for a packet.
IP dnat3SrcAddress	1.3.6.1.4.1.2007.1.4.160.1.3.1	IpAddress	accessible-for-notify	Parameter 'srcAddress' in event DNAT.3
IP dnat3DstAddress	1.3.6.1.4.1.2007.1.4.160.1.3.2	IpAddress	accessible-for-notify	Parameter 'dstAddress' in event DNAT.3
dnatEventObjects4	1.3.6.1.4.1.2007.1.4.160.1.4			Event DNAT.4 IPSec is asking DNat service about translation on packet.
IP dnat4SrcAddress	1.3.6.1.4.1.2007.1.4.160.1.4.1	IpAddress	accessible-for-notify	Parameter 'srcAddress' in event DNAT.4
IP dnat4DstAddress	1.3.6.1.4.1.2007.1.4.160.1.4.2	IpAddress	accessible-for-notify	Parameter 'dstAddress' in event DNAT.4
dnatEventObjects5	1.3.6.1.4.1.2007.1.4.160.1.5			Event DNAT.5 Translation to do on packet found.
IP dnat5SrcAddress	1.3.6.1.4.1.2007.1.4.160.1.5.1	IpAddress	accessible-for-notify	Parameter 'srcAddress' in event DNAT.5
IP dnat5DstAddress	1.3.6.1.4.1.2007.1.4.160.1.5.2	IpAddress	accessible-for-notify	Parameter 'dstAddress' in event DNAT.5
IP dnat5NewSrcAddress	1.3.6.1.4.1.2007.1.4.160.1.5.3	IpAddress	accessible-for-notify	Parameter 'newSrcAddress' in event DNAT.5
IP dnat5NewDstAddress	1.3.6.1.4.1.2007.1.4.160.1.5.4	IpAddress	accessible-for-notify	Parameter 'newDstAddress' in event DNAT.5
dnatEventObjects6	1.3.6.1.4.1.2007.1.4.160.1.6			Event DNAT.6 An old IPSec 'SA' used in DNat client is now updated to the actual SA.
IP dnat6SrcAddress	1.3.6.1.4.1.2007.1.4.160.1.6.1	IpAddress	accessible-for-notify	Parameter 'srcAddress' in event DNAT.6
IP dnat6DstAddress	1.3.6.1.4.1.2007.1.4.160.1.6.2	IpAddress	accessible-for-notify	Parameter 'dstAddress' in event DNAT.6
dnatEventObjects7	1.3.6.1.4.1.2007.1.4.160.1.7			Event DNAT.7 DNat client is updated to the actual SA.
IP dnat7SrcAddress	1.3.6.1.4.1.2007.1.4.160.1.7.1	IpAddress	accessible-for-notify	Parameter 'srcAddress' in event DNAT.7
IP dnat7DstAddress	1.3.6.1.4.1.2007.1.4.160.1.7.2	IpAddress	accessible-for-notify	Parameter 'dstAddress' in event DNAT.7
dnatEventObjects8	1.3.6.1.4.1.2007.1.4.160.1.8			Event DNAT.8 Incoming packet from outside interface.
IP dnat8SrcAddress	1.3.6.1.4.1.2007.1.4.160.1.8.1	IpAddress	accessible-for-notify	Parameter 'srcAddress' in event DNAT.8
IP dnat8DstAddress	1.3.6.1.4.1.2007.1.4.160.1.8.2	IpAddress	accessible-for-notify	Parameter 'dstAddress' in event DNAT.8
I32 dnat8Protocol	1.3.6.1.4.1.2007.1.4.160.1.8.3	Integer32	accessible-for-notify	Parameter 'protocol' in event DNAT.8
dnatEventObjects9	1.3.6.1.4.1.2007.1.4.160.1.9			Event DNAT.9 Outgoing packet from inside interface.
IP dnat9SrcAddress	1.3.6.1.4.1.2007.1.4.160.1.9.1	IpAddress	accessible-for-notify	Parameter 'srcAddress' in event DNAT.9
IP dnat9DstAddress	1.3.6.1.4.1.2007.1.4.160.1.9.2	IpAddress	accessible-for-notify	Parameter 'dstAddress' in event DNAT.9
I32 dnat9Protocol	1.3.6.1.4.1.2007.1.4.160.1.9.3	Integer32	accessible-for-notify	Parameter 'protocol' in event DNAT.9
dnatEventObjects10	1.3.6.1.4.1.2007.1.4.160.1.10			Event DNAT.10 DNat translation on packet.
IP dnat10SrcAddress	1.3.6.1.4.1.2007.1.4.160.1.10.1	IpAddress	accessible-for-notify	Parameter 'srcAddress' in event DNAT.10
IP dnat10DstAddress	1.3.6.1.4.1.2007.1.4.160.1.10.2	IpAddress	accessible-for-notify	Parameter 'dstAddress' in event DNAT.10
IP dnat10NewSrcAddress	1.3.6.1.4.1.2007.1.4.160.1.10.3	IpAddress	accessible-for-notify	Parameter 'newSrcAddress' in event DNAT.10
IP dnat10NewDstAddress	1.3.6.1.4.1.2007.1.4.160.1.10.4	IpAddress	accessible-for-notify	Parameter 'newDstAddress' in event DNAT.10
dnatEventObjects11	1.3.6.1.4.1.2007.1.4.160.1.11			Event DNAT.11 IPSec SA deleted, delete client DNat.
IP dnat11SrcAddress	1.3.6.1.4.1.2007.1.4.160.1.11.1	IpAddress	accessible-for-notify	Parameter 'srcAddress' in event DNAT.11
IP dnat11DstAddress	1.3.6.1.4.1.2007.1.4.160.1.11.2	IpAddress	accessible-for-notify	Parameter 'dstAddress' in event DNAT.11
dnatEventObjects12	1.3.6.1.4.1.2007.1.4.160.1.12			Event DNAT.12 DNat client (and reciprocal client) deleted.
IP dnat12SrcAddress	1.3.6.1.4.1.2007.1.4.160.1.12.1	IpAddress	accessible-for-notify	Parameter 'srcAddress' in event DNAT.12
IP dnat12DstAddress	1.3.6.1.4.1.2007.1.4.160.1.12.2	IpAddress	accessible-for-notify	Parameter 'dstAddress' in event DNAT.12
dnatNotifications	1.3.6.1.4.1.2007.1.4.160.2
dnatNotificationsPrefix	1.3.6.1.4.1.2007.1.4.160.2.0
NTF dnatNotification1	1.3.6.1.4.1.2007.1.4.160.2.0.1			Notification of Event DNAT.1 Message: 'IPSec requesting DNat for packet $1->$2' Parameters list: $1: dnat1SrcAddress $2: dnat1DstAddress IPSec is requesting DNat service for next new IPSec client.
NTF dnatNotification2	1.3.6.1.4.1.2007.1.4.160.2.0.2			Notification of Event DNAT.2 Message: 'New client in DNat, $1->$2 translates into $3->$4' Parameters list: $1: dnat2SrcAddress $2: dnat2DstAddress $3: dnat2NewSrcAddress $4: dnat2NewDstAddress DNat has established a new translation for a new client.
NTF dnatNotification3	1.3.6.1.4.1.2007.1.4.160.2.0.3			Notification of Event DNAT.3 Message: 'No rule match for packet ($1->$2)' Parameters list: $1: dnat3SrcAddress $2: dnat3DstAddress There is no match on rules DNat for a packet.
NTF dnatNotification4	1.3.6.1.4.1.2007.1.4.160.2.0.4			Notification of Event DNAT.4 Message: 'IPSec asking DNat about packet $1->$2' Parameters list: $1: dnat4SrcAddress $2: dnat4DstAddress IPSec is asking DNat service about translation on packet.
NTF dnatNotification5	1.3.6.1.4.1.2007.1.4.160.2.0.5			Notification of Event DNAT.5 Message: 'Client DNat found, $1->$2 translates into $3->$4' Parameters list: $1: dnat5SrcAddress $2: dnat5DstAddress $3: dnat5NewSrcAddress $4: dnat5NewDstAddress Translation to do on packet found.
NTF dnatNotification6	1.3.6.1.4.1.2007.1.4.160.2.0.6			Notification of Event DNAT.6 Message: 'IPSec updating DNat client $1->$2 with new SA' Parameters list: $1: dnat6SrcAddress $2: dnat6DstAddress An old IPSec 'SA' used in DNat client is now updated to the actual SA.
NTF dnatNotification7	1.3.6.1.4.1.2007.1.4.160.2.0.7			Notification of Event DNAT.7 Message: 'DNat client $1->$2 updated with new SA' Parameters list: $1: dnat7SrcAddress $2: dnat7DstAddress DNat client is updated to the actual SA.
NTF dnatNotification8	1.3.6.1.4.1.2007.1.4.160.2.0.8			Notification of Event DNAT.8 Message: 'Incoming packet $1->$2 protocol $3' Parameters list: $1: dnat8SrcAddress $2: dnat8DstAddress $3: dnat8Protocol Incoming packet from outside interface.
NTF dnatNotification9	1.3.6.1.4.1.2007.1.4.160.2.0.9			Notification of Event DNAT.9 Message: 'Outgoing packet $1->$2 protocol $3' Parameters list: $1: dnat9SrcAddress $2: dnat9DstAddress $3: dnat9Protocol Outgoing packet from inside interface.
NTF dnatNotification10	1.3.6.1.4.1.2007.1.4.160.2.0.10			Notification of Event DNAT.10 Message: 'DNat translation $1->$2 => $3->$4' Parameters list: $1: dnat10SrcAddress $2: dnat10DstAddress $3: dnat10NewSrcAddress $4: dnat10NewDstAddress DNat translation on packet.
NTF dnatNotification11	1.3.6.1.4.1.2007.1.4.160.2.0.11			Notification of Event DNAT.11 Message: 'IPSec clearing DNat client $1->$2 with fixed SA' Parameters list: $1: dnat11SrcAddress $2: dnat11DstAddress IPSec SA deleted, delete client DNat.
NTF dnatNotification12	1.3.6.1.4.1.2007.1.4.160.2.0.12			Notification of Event DNAT.12 Message: 'DNat client $1->$2 deleted' Parameters list: $1: dnat12SrcAddress $2: dnat12DstAddress DNat client (and reciprocal client) deleted.

RFC description

SNMP notification events for destination NAT (DNAT) service requests and translation establishment.

Start monitoring Teldat router performing destination NAT (DNAT translation event traps) with a free 30-day trial of IPNetwork Monitor. Import MIBs, browse SNMP OIDs, create custom SNMP monitors, configure alerts, and monitor any SNMP-enabled network device from a single console.

Download TELDAT-TRAP-DNAT-MIB

What Is TELDAT-TRAP-DNAT-MIB?

Supported Devices

Monitoring Examples

This MIB depends on

Related MIBs

RFC description