This document is the SNMP MIB module to manage and provision the
Network Address Translation (NAT) for the Nokia SROS device.
Copyright 2009-2018 Nokia. All rights reserved. Reproduction of this
document is authorized on the condition that the foregoing copyright
notice is included.
This SNMP MIB module (Specification) embodies Nokia's proprietary
intellectual property. Nokia retains all title and ownership in the
Specification, including any revisions.
Nokia grants all interested parties a non-exclusive license to use and
distribute an unmodified copy of this Specification in connection with
management of Nokia products, and without fee, provided this copyright
notice and license appear on all copies.
This Specification is supplied 'as is', and Nokia makes no warranty,
either express or implied, as to the use, operation, condition, or
performance of the Specification.
The tmnxNatPlL2AwBlockUsageHigh notification is sent when the block
usage of a Layer-2-Aware NAT address pool reaches its high watermark
('true') or when it reaches its low watermark again ('false').
tmnxNatL2AwSubSessionUsageHigh
.1.3.6.1.4.1.6527.3.1.3.65.0.10
The tmnxNatL2AwSubSessionUsageHigh notification is sent when the
session usage of a Layer-2-Aware NAT subscriber reaches its high
watermark ('true') or when it reaches its low watermark again
('false').
tmnxNatLsnSubSessionUsageHigh
.1.3.6.1.4.1.6527.3.1.3.65.0.11
The tmnxNatLsnSubSessionUsageHigh notification is replaced with the
tmnxNatLsnSubSessionUsgHigh notification.
tmnxNatPlBlockAllocationLsn
.1.3.6.1.4.1.6527.3.1.3.65.0.12
The tmnxNatPlBlockAllocationLsn notification is sent when an outside
IP address and a range of ports is allocated to a NAT subscriber
associated with a Large Scale NAT (LSN) pool, and when this allocation
expires.
The allocated block is within the scope of the outside virtual router
instance tmnxNatNotifyOutsideVRtrID and the outside IP address
tmnxNatNotifyOutsideAddr; it starts with port tmnxNatNotifyPort and
ends with port tmnxNatNotifyPort2.
The NAT subscriber is identified with its subscriber ID
tmnxNatNotifyLsnSubId.
To further facilitate the identification of the NAT subscriber, its
type tmnxNatNotifySubscriberType, inside IP address
tmnxNatNotifyInsideAddr and inside virtual router instance
tmnxNatNotifyInsideVRtrID are provided.
The values of tmnxNatNotifyMdaChassisIndex,
tmnxNatNotifyMdaCardSlotNum and tmnxNatNotifyMdaSlotNum identify the
ISA MDA where this block is processed.
The value of tmnxNatNotifyNumber is the numerical identifier of the
NAT policy used for this allocation; it can be used for correlation of
notifications, especially with the tmnxNatPlAddrFree summary event,
that may indicate this number in the tmnxNatNotifyDescription object.
When the block allocation is made, the value of the object
tmnxNatNotifyTruthValue is 'true'; when the block allocation expires,
it is 'false'.
For the last remaining range of the subscriber, if the value of the
object tmnxNatGrpCfgNoLsnSubBlksFree is equal to 'false', the
tmnxNatPlBlockAllocationLsn notification is replaced with a
tmnxNatLsnSubBlksFree notification.
tmnxNatPlBlockAllocationL2Aw
.1.3.6.1.4.1.6527.3.1.3.65.0.13
The tmnxNatPlBlockAllocationL2Aw notification is sent when an outside
IP address and a range of ports is allocated to a NAT subscriber
associated with a Layer-2-Aware NAT pool, and when this allocation
expires.
The allocated block is within the scope of the outside virtual router
instance tmnxNatNotifyOutsideVRtrID and the outside IP address
tmnxNatNotifyOutsideAddr; it starts with port tmnxNatNotifyPort and
ends with port tmnxNatNotifyPort2.
The NAT subscriber is identified with its subscriber ID
tmnxNatNotifyL2AwSubIdent.
The NAT policy is identified with its name tmnxNatNotifyName.
When the block allocation is made, the value of the object
tmnxNatNotifyTruthValue is 'true'; when the block allocation expires,
it is 'false'.
tmnxNatResourceProblemDetected
.1.3.6.1.4.1.6527.3.1.3.65.0.14
The tmnxNatResourceProblemDetected notification is sent when the value
of the object tmnxNatResourceProblem changes.
tmnxNatResourceProblemCause
.1.3.6.1.4.1.6527.3.1.3.65.0.15
The tmnxNatResourceProblemCause notification is to describe the cause
of a NAT resource problem.
tmnxNatPlAddrFree
.1.3.6.1.4.1.6527.3.1.3.65.0.16
The tmnxNatPlAddrFree notification is sent when a range of outside IP
addresses becomes free at once.
The range starts at address tmnxNatNotifyOutsideAddr and ends with
address tmnxNatNotifyOutsideEndAddr.
It replaces a number of tmnxNatPlBlockAllocationL2Aw or
tmnxNatPlBlockAllocationLsn notifications; the allocated port blocks
associated with each IP address in the indicated range are released.
The reason why this address range is released, is described in the
tmnxNatNotifyDescription.
If the value of tmnxNatNotifyInsideVRtrID is not equal to zero, it
means that only the port blocks associated with hosts in that
particular virtual router instance are released; if the value of
tmnxNatNotifyInsideVRtrID is equal to zero, it means that all the port
blocks are released.
tmnxNatPlLsnRedActiveChanged
.1.3.6.1.4.1.6527.3.1.3.65.0.17
[CAUSE] The tmnxNatPlLsnRedActiveChanged notification is sent when the
value of the object tmnxNatPlLsnRedActive changes. The cause is
explained in the tmnxNatNotifyDescription.
[EFFECT] While the value of the object tmnxNatPlLsnRedActive is equal
to 'false':
- this system is not performing Large Scale NAT in the realm
of the virtual router instance associated with this pool; the Large
Scale NAT is supposed to be performed by its redundant peer.
- the route specified with tmnxNatVrtrInRedSteerRt is not advertised
in the realm of any inside virtual router instance associated with
this pool;
- NAT traffic matching a filter with TFilterAction equal to 'nat' is
redirected to the address specified with tmnxNatVrtrInRedPeerAddr or
dropped if tmnxNatVrtrInRedPeerAddr is not configured;
- the pool ranges associated with this pool are withdrawn from the
outside virtual router instance associated with this pool;
- the route specified with tmnxNatPlLsnRedExpPrefix is not exported
in the realm of the outside virtual router instance
associated with this pool.
[RECOVERY] If this system is supposed to assume the role of a standby
in the realm of the virtual router instance associated with this pool,
no recovery is needed. Otherwise, the recovery action will depend on
the actual cause as specified in the tmnxNatNotifyDescription.
tmnxNatPcpSrvStateChanged
.1.3.6.1.4.1.6527.3.1.3.65.0.18
[CAUSE] The tmnxNatPcpSrvStateChanged notification is sent when the
value of the object tmnxNatPcpSrvState changes. The cause is explained
in the tmnxNatPcpSrvStateDescription.
[EFFECT] While the value of the object tmnxNatPcpSrvState is equal to
'outOfService', the system drops PCP requests addressed to this
server.
[RECOVERY] The recovery action depends on the actual cause as
specified in the tmnxNatPcpSrvStateDescription.
tmnxNatFwdEntryAdded
.1.3.6.1.4.1.6527.3.1.3.65.0.19
The tmnxNatFwdEntryAdded notification is replaced with the
tmnxNatFwd2EntryAdded notification.
tmnxNatIsaMemberSessionUsageHigh
.1.3.6.1.4.1.6527.3.1.3.65.0.2
The tmnxNatIsaMemberSessionUsageHigh notification is sent when the
session usage of a NAT ISA group member reaches its high watermark
('true') or when it reaches its low watermark again ('false').
tmnxNatMdaActive
.1.3.6.1.4.1.6527.3.1.3.65.0.20
The tmnxNatMdaActive notification is sent when the value of the object
tmnxNatIsaMdaStatOperState changes from 'primary' to any other value,
or the other way around.
The value 'primary' means that the MDA is active in the group.
tmnxNatLsnSubBlksFree
.1.3.6.1.4.1.6527.3.1.3.65.0.21
The tmnxNatLsnSubBlksFree notification is sent when all port blocks
allocated to a Large Scale NAT (LSN) subscriber are released.
The NAT subscriber is identified with its subscriber ID
tmnxNatNotifyLsnSubId.
To further facilitate the identification of the NAT subscriber, its
type tmnxNatNotifySubscriberType, inside IP address
tmnxNatNotifyInsideAddr and inside virtual router instance
tmnxNatNotifyInsideVRtrID are provided.
The values of tmnxNatNotifyMdaChassisIndex,
tmnxNatNotifyMdaCardSlotNum and tmnxNatNotifyMdaSlotNum identify the
ISA MDA where the blocks were processed.
All notifications of this type are sequentially numbered with the
tmnxNatNotifyPlSeqNum.
The value of tmnxNatNotifyNumber is the numerical identifier of the
NAT policy used for this allocation; it can be used for correlation
with the tmnxNatPlBlockAllocationLsn notification; the value zero
means that this notification can be correlated with all the
tmnxNatPlBlockAllocationLsn notifications of the subscriber.
tmnxNatDetPlcyChanged
.1.3.6.1.4.1.6527.3.1.3.65.0.22
The tmnxNatDetPlcyChanged notification is sent when something changed
in the Deterministic NAT map.
[CAUSE] Such a change may be caused by a modification of the
tmnxNatDetPlcyTable or the tmnxNatDetMapTable.
[EFFECT] Traffic flows of one or more given subscribers, subject to
NAT, may be assigned a different outside IP address and/or outside
port.
[RECOVERY] Managers that rely on the offline representation of the
Deterministic NAT map should get an updated copy.
tmnxNatMdaDetectsLoadSharingErr
.1.3.6.1.4.1.6527.3.1.3.65.0.23
The tmnxNatMdaDetectsLoadSharingErr notification is sent periodically
at most every 10 seconds while a NAT ISA MDA detects that it is
receiving packets erroneously, due to incorrect load-balancing by the
ingress IOM.
The value of tmnxNatNotifyCounter is the incremental count of dropped
packets since the previous notification sent by the same MDA.
[CAUSE] The ingress IOM hardware does not support a particular NAT
function's load-balancing, for example an IOM-2 does not support
deterministic NAT.
[EFFECT] The MDA drops all incorrectly load-balanced traffic.
[RECOVERY] Upgrade the ingress IOM, or change the configuration.
tmnxNatIsaGrpOperStateChanged
.1.3.6.1.4.1.6527.3.1.3.65.0.24
The tmnxNatIsaGrpOperStateChanged notification is sent when the value
of the object tmnxNatIsaGrpOperState changes.
tmnxNatIsaGrpIsDegraded
.1.3.6.1.4.1.6527.3.1.3.65.0.25
The tmnxNatIsaGrpIsDegraded notification is sent when the value of the
object tmnxNatIsaGrpDegraded changes.
tmnxNatLsnSubIcmpPortUsgHigh
.1.3.6.1.4.1.6527.3.1.3.65.0.26
The tmnxNatLsnSubIcmpPortUsgHigh notification is sent when the ICMP
port usage of a Large Scale NAT subscriber reaches its high watermark
('true') or when it reaches its low watermark again ('false').
The subscriber is identified with its inside IP address or prefix
tmnxNatNotifyInsideAddr in the inside virtual router instance
tmnxNatNotifyInsideVRtrID.
tmnxNatLsnSubUdpPortUsgHigh
.1.3.6.1.4.1.6527.3.1.3.65.0.27
The tmnxNatLsnSubUdpPortUsgHigh notification is sent when the UDP port
usage of a Large Scale NAT subscriber reaches its high watermark
('true') or when it reaches its low watermark again ('false').
The subscriber is identified with its inside IP address or prefix
tmnxNatNotifyInsideAddr in the inside virtual router instance
tmnxNatNotifyInsideVRtrID.
tmnxNatLsnSubTcpPortUsgHigh
.1.3.6.1.4.1.6527.3.1.3.65.0.28
The tmnxNatLsnSubTcpPortUsgHigh notification is sent when the TCP port
usage of a Large Scale NAT subscriber reaches its high watermark
('true') or when it reaches its low watermark again ('false').
The subscriber is identified with its inside IP address or prefix
tmnxNatNotifyInsideAddr in the inside virtual router instance
tmnxNatNotifyInsideVRtrID.
tmnxNatLsnSubSessionUsgHigh
.1.3.6.1.4.1.6527.3.1.3.65.0.29
The tmnxNatLsnSubSessionUsgHigh notification is sent when the session
usage of a Large Scale NAT subscriber reaches its high watermark
('true') or when it reaches its low watermark again ('false').
The subscriber is identified with its inside IP address or prefix
tmnxNatNotifyInsideAddr in the inside virtual router instance
tmnxNatNotifyInsideVRtrID.
tmnxNatPlLsnMemberBlockUsageHigh
.1.3.6.1.4.1.6527.3.1.3.65.0.3
The tmnxNatPlLsnMemberBlockUsageHigh notification is sent when the
block usage of a Large Scale NAT address pool reaches its high
watermark ('true') or when it reaches its low watermark again
('false') on a particular member MDA of its ISA group.
tmnxNatInAddrPrefixBlksFree
.1.3.6.1.4.1.6527.3.1.3.65.0.30
The tmnxNatInAddrPrefixBlksFree notification is sent when all port
blocks allocated to one or more subscribers associated with a
particular set of inside addresses are released by this system.
The type of subscriber(s) is indicated by tmnxNatNotifySubscriberType.
The set of inside IP addresses is associated with the virtual router
instance indicated by tmnxNatNotifyInsideVRtrID and is of the type
indicated by tmnxNatNotifyInsideAddrType.
The set of inside IP addresses consists of the address prefix
indicated with tmnxNatNotifyInsideAddr and
tmnxNatNotifyInsideAddrPrefixLen unless these objects are empty and
zero; if tmnxNatNotifyInsideAddr is empty and
tmnxNatNotifyInsideAddrPrefixLen is zero, the set contains all IP
addresses of the indicated type.
The values of tmnxNatNotifyMdaChassisIndex,
tmnxNatNotifyMdaCardSlotNum and tmnxNatNotifyMdaSlotNum identify the
ISA MDA where the blocks were processed.
All notifications of this type are sequentially numbered with the
tmnxNatNotifyPlSeqNum.
This type of notification is typically the consequence of one or more
configuration changes; the nature of these changes is indicated in the
tmnxNatNotifyDescription.
tmnxNatFwd2EntryAdded
.1.3.6.1.4.1.6527.3.1.3.65.0.31
[CAUSE] The tmnxNatFwd2EntryAdded notification is sent when a row is
added to or removed from the tmnxNatFwd2Table by other means than
operations on the tmnxNatFwdAction; a conceptual row can be added to
or removed from the table by operations on the tmnxNatFwdAction object
group or otherwise, by means of the PCP protocol or automatically by
the system, for example when a subscriber profile is changed.
When the row is added, the value of the object tmnxNatNotifyTruthValue
is 'true'; when the row is removed, it is 'false'.
[EFFECT] The specified NAT subscriber can start receiving inbound
traffic flows.
[RECOVERY] No recovery required; this notification is the result of an
operator or protocol action.
tmnxNatDetPlcyOperStateChanged
.1.3.6.1.4.1.6527.3.1.3.65.0.32
The tmnxNatDetPlcyOperStateChanged notification is sent when the value
of the object tmnxNatDetPlcyOperState changes. The cause is explained
in the tmnxNatNotifyDescription.
tmnxNatDetMapOperStateChanged
.1.3.6.1.4.1.6527.3.1.3.65.0.33
The tmnxNatDetMapOperStateChanged notification is sent when the value
of the object tmnxNatDetMapOperState changes. The cause is explained
in the tmnxNatNotifyDescription.
tmnxNatFwd2OperStateChanged
.1.3.6.1.4.1.6527.3.1.3.65.0.34
[CAUSE] The tmnxNatFwd2OperStateChanged notification is sent when the
value of the object tmnxNatFwd2OperState changes. This is related to
the state of the ISA MDA where the forwarding entry is located, or the
availability of resources on that MDA.
In the case of Layer-2-Aware NAT subscribers, the tmnxNatFwd2OperState
is 'down' while the subscriber is not instantiated. This would
typically be a transient situation.
[EFFECT] The corresponding inward bound packets are dropped while the
operational status is 'down'.
[RECOVERY] If the ISA MDA reboots successfully, or another ISA MDA
takes over, no recovery is required. If more resources become
available on the ISA MDA, no recovery is required.
tmnxNatVrtrOutDnatOnlyRoutesHigh
.1.3.6.1.4.1.6527.3.1.3.65.0.35
[CAUSE] The tmnxNatVrtrOutDnatOnlyRoutesHigh notification is sent with
the value 'true' for tmnxNatNotifyTruthValue when the actual value of
the object tmnxNatVrtrOutDnatOnlyRoutes approaches the configured
value of tmnxNatVrtrOutDnatOnlyRouteLimit for a given virtual router
instance.
The same notification is sent with 'false' for tmnxNatNotifyTruthValue
when the value of tmnxNatVrtrOutDnatOnlyRoutes goes below the
threshold value again.
[EFFECT] While the value of tmnxNatVrtrOutDnatOnlyRoutes is between
the threshold value and the tmnxNatVrtrOutDnatOnlyRouteLimit limit,
there is no effect.
When an attempt is made to change the configuration within the virtual
router instance such that the actual value of
tmnxNatVrtrOutDnatOnlyRoutes would exceed the
tmnxNatVrtrOutDnatOnlyRouteLimit limit, the system would refuse that
request.
[RECOVERY] Within the associated NAT inside virtual router instance,
- reduce the number of prefixes (in the tmnxNatPrefixTable),
- reduce the value of tmnxNatVrtrInMaxDetSubscrLimit.
tmnxNatMapRuleChange
.1.3.6.1.4.1.6527.3.1.3.65.0.36
[CAUSE] The tmnxNatMapRuleChange notification is sent with the value
'true' for tmnxNatNotifyTruthValue when a mapping rule becomes
operational.
The same notification is sent with 'false' when a mapping rule ceases
to be operational.
The value of the vRtrID object indicates in what virtual router
instance the system applied the rule.
The value of the tmnxNatNotifyDateAndTime object indicates at what
time the system performed the change.
[EFFECT] The system applies a given mapping rule in the time interval
between the time it sends the notification with 'true' and the time it
sent the notification with 'false'.
[RECOVERY] Not required.
tmnxNatMaxNbrSubsOrHostsExceeded
.1.3.6.1.4.1.6527.3.1.3.65.0.37
[CAUSE] The tmnxNatMaxNbrSubsOrHostsExceeded notification is sent when
the maximum number of LSN/DSM/L2aware subscribers or L2aware hosts on
the member of the MDA has been exceeded.
[EFFECT] The system can't process additional subscribers/hosts of that
type on that member.
[RECOVERY] Additional ISA hardware or an upgrade of ISAs should to be
considered.
tmnxNatNbrSubsOrHostsBelowThrsh
.1.3.6.1.4.1.6527.3.1.3.65.0.38
[CAUSE] The tmnxNatNbrSubsOrHostsBelowThrsh notification is sent when
the number of LSN/DSM/L2aware subscribers or L2aware hosts dropped
below the threshold of 95%.
[EFFECT] The system can process again additional subscribers/hosts of
that type on that member.
[RECOVERY] There is no recovery required for this notification.
tmnxNatVappActive
.1.3.6.1.4.1.6527.3.1.3.65.0.39
The tmnxNatVappActive notification is sent when the value of the
object tmnxNatVappStatOperState changes from 'primary' to any other
value, or the other way around.
The value 'primary' means that the Virtual NAT Application is active
in the group.
tmnxNatLsnSubIcmpPortUsageHigh
.1.3.6.1.4.1.6527.3.1.3.65.0.4
The tmnxNatLsnSubIcmpPortUsageHigh notification is replaced with the
tmnxNatLsnSubIcmpPortUsgHigh notification.
tmnxNatVappDetectsLoadSharingErr
.1.3.6.1.4.1.6527.3.1.3.65.0.40
The tmnxNatVappDetectsLoadSharingErr notification is sent periodically
at most every 10 seconds while a Virtual NAT Application detects that
it is receiving packets erroneously, due to incorrect load-balancing
by the ingress IOM.
The value of tmnxNatNotifyCounter is the incremental count of dropped
packets since the previous notification sent by the same Virtual NAT
Application.
[CAUSE] The ingress IOM hardware does not support a particular NAT
function's load-balancing, for example an IOM-2 does not support
deterministic NAT.
[EFFECT] The Virtual NAT Application drops all incorrectly
load-balanced traffic.
[RECOVERY] Upgrade the ingress IOM, or change the configuration.
tmnxNatLsnSubUdpPortUsageHigh
.1.3.6.1.4.1.6527.3.1.3.65.0.5
The tmnxNatLsnSubUdpPortUsageHigh notification is replaced with the
tmnxNatLsnSubUdpPortUsgHigh.
tmnxNatLsnSubTcpPortUsageHigh
.1.3.6.1.4.1.6527.3.1.3.65.0.6
The tmnxNatLsnSubTcpPortUsageHigh notification is replaced with the
tmnxNatLsnSubTcpPortUsgHigh notification.
tmnxNatL2AwSubIcmpPortUsageHigh
.1.3.6.1.4.1.6527.3.1.3.65.0.7
The tmnxNatL2AwSubIcmpPortUsageHigh notification is sent when the ICMP
port usage of a Layer-2-Aware NAT subscriber reaches its high
watermark ('true') or when it reaches its low watermark again
('false').
tmnxNatL2AwSubUdpPortUsageHigh
.1.3.6.1.4.1.6527.3.1.3.65.0.8
The tmnxNatL2AwSubUdpPortUsageHigh notification is sent when the UDP
port usage of a Layer-2-Aware NAT subscriber reaches its high
watermark ('true') or when it reaches its low watermark again
('false').
tmnxNatL2AwSubTcpPortUsageHigh
.1.3.6.1.4.1.6527.3.1.3.65.0.9
The tmnxNatL2AwSubTcpPortUsageHigh notification is sent when the TCP
port usage of a Layer-2-Aware NAT subscriber reaches its high
watermark ('true') or when it reaches its low watermark again
('false').
TmnxNatAlgProtocols
timetraNatMIBModule 
tmnxNatIsaGrpTable 
tmnxNatIsaGrpEntry 
tmnxNatIsaGrpId 
tmnxNatIsaRecovActCardSlotNum 
tmnxNatPlL2AwBlockUsageHigh