-- ============================================================================ -- Copyright (c) 2004-2021 New H3C Tech. Co., Ltd. All rights reserved. -- Description: This MIB file is used for configuration of NAT. -- include :1.NAT pool -- 2.NAT out bound -- 3.NAT inside server -- 4.NAT aging-time -- 5.NAT blacklist -- 6.NAT statistics information -- 7.NAT DNS -- Reference: -- Version: V1.8 -- History: -- V1.0 2004/09/17 created by xiaoshuchao -- V1.1 2005/06/01 Modified by liguanmin -- Modify the value range of the node hh3cNATOutboundPoolIdx -- V1.2 2007/05/22 Modified by tangjiafeng -- Modify the value range of the node hh3cNATSessionPeerPort -- V1.3 2014/07/11 Modified by hupengfei -- Add the hh3cNATTotalNATSessionCount, hh3cNATEimTableCount, -- hh3cNATInboundNoPATTableCount, hh3cNATOutboundNoPATTableCount, -- hh3cNATMaxDynamicPortblock, hh3cNATMaxStaticPortblock, -- hh3cNATActiveDynamicPortblock, hh3cNATActiveStaticPortblock -- V1.4 2016/12/25 Modified by wangxiaohua -- Add the hh3cNATSessionCreateRate -- V1.5 2017/04/07 Modified by wangfuchao -- Add the hh3cNATAddrGrpStatTable -- V1.6 2019/10/10 Modified by quanxin -- Add the hh3cNATCurBandwidthRatio -- Add the hh3cNATBandwidthTraps -- V1.7 2019/12/01 Modified by z15066 -- Add the hh3cInstAddrGrpUsgTable -- Add the hh3cInstAddrGrpMemberUsgTable -- Add the hh3cInstAddrGrpUsageTraps -- V1.8 2020/12/29 Modified by w21520 -- Add the hh3cNatIPPoolGroupTable -- Add the hh3cNatIPPoolAddrUsageExceedTraps -- Add the hh3cNatIPPoolAddrUsageRecoveryTraps -- Add the hh3cInstAddrUsgTotalIPCount, hh3cInstAddrUsgUsedIPCount, -- hh3cInstAddrUsgUnusedIPCount, hh3cInstAddrMemUsgGrpIPMask -- ============================================================================ HH3C-NAT-MIB DEFINITIONS ::= BEGIN IMPORTS hh3cCommon FROM HH3C-OID-MIB ifIndex FROM IF-MIB TimeTicks, IpAddress, Integer32, Counter32, Counter64, Unsigned32, OBJECT-TYPE, MODULE-IDENTITY, NOTIFICATION-TYPE FROM SNMPv2-SMI RowStatus, DisplayString FROM SNMPv2-TC; hh3cNat MODULE-IDENTITY LAST-UPDATED "202012291440Z" -- December 29, 2020 at 14:40 GMT ORGANIZATION "New H3C Tech. Co., Ltd." CONTACT-INFO "Platform Team New H3C Tech. Co., Ltd. Hai-Dian District Beijing P.R. China http://www.h3c.com Zip:100085 " DESCRIPTION "Add the hh3cNatIPPoolGroupTable, hh3cNatIPPoolAddrUsageExceedTraps, hh3cNatIPPoolAddrUsageRecoveryTraps" REVISION "202012291440Z" -- December 29, 2020 at 14:40 GMT DESCRIPTION "This MIB contains objects to manage configuration of NAT. There are no constraints on this MIB." REVISION "201912011446Z" -- December 1, 2019 at 14:46 GMT DESCRIPTION "Add the hh3cInstAddrGrpUsgTable, hh3cInstAddrGrpMemberUsgTable, hh3cInstAddrGrpUsageTraps." REVISION "201910101752Z" -- October 10, 2019 at 17:52 GMT DESCRIPTION "Add the hh3cNATCurBandwidthRatio, hh3cNATBandwidthTraps." REVISION "201704071503Z" -- April 7, 2017 at 15:03 GMT DESCRIPTION "Add the hh3cNATAddrGrpStatTable." REVISION "201612251105Z" -- December 25, 2016 at 11:05 GMT DESCRIPTION "Add the hh3cNATSessionCreateRate." REVISION "201407111115Z" -- July 11, 2014 at 11:15 GMT DESCRIPTION "Add the hh3cNATTotalNATSessionCount, hh3cNATEimTableCount, hh3cNATInboundNoPATTableCount, hh3cNATOutboundNoPATTableCount, hh3cNATMaxDynamicPortblock, hh3cNATMaxStaticPortblock, hh3cNATActiveDynamicPortblock, hh3cNATActiveStaticPortblock." REVISION "200501201518Z" -- January 20, 2005 at 15:18 GMT DESCRIPTION "The initial revision of this MIB module." ::= { hh3cCommon 18 } -- -- Node definitions -- -- Global Variants hh3cNATGlobalVars OBJECT IDENTIFIER ::= { hh3cNat 1 } -- **************Global Variants*************** -- NAT Clear Session hh3cNATClearSession OBJECT IDENTIFIER ::= { hh3cNATGlobalVars 1 } hh3cNATClearSessionSlotNo OBJECT-TYPE SYNTAX Integer32 (1..14 | 255) MAX-ACCESS read-write STATUS current DESCRIPTION "The number of NAT board in which administrator wants to clear data of the session. In router, the value is 255 because no NAT board in it. This node only supports 'set' operation. The return value of 'get' operation is meaningless." ::= { hh3cNATClearSession 1 } -- NAT blacklist UserConnectLimitPara hh3cNATBLConnectLimitPara OBJECT IDENTIFIER ::= { hh3cNATGlobalVars 2 } hh3cNATBLConnectHighValue OBJECT-TYPE SYNTAX Integer32 (20..20000) MAX-ACCESS read-write STATUS current DESCRIPTION "The maximal connection amount. If the connection amount exceeds the value, the IP address will be added into blacklist. The IP address will not be removed from blacklist until the connection amount is less than the minimal connection amount." DEFVAL { 500 } ::= { hh3cNATBLConnectLimitPara 1 } hh3cNATBLConnectLowValue OBJECT-TYPE SYNTAX Integer32 (20..20000) MAX-ACCESS read-write STATUS current DESCRIPTION "The minimal connection amount." DEFVAL { 200 } ::= { hh3cNATBLConnectLimitPara 2 } hh3cNATBLConnectHighRate OBJECT-TYPE SYNTAX Integer32 (20..21474836) MAX-ACCESS read-write STATUS current DESCRIPTION "The maximal connection rate(in second). If the connection rate exceed the value, the IP address will be added into blacklist. The IP address will not be removed from blacklist until the connection rate is less than the minimal connection rate." DEFVAL { 250 } ::= { hh3cNATBLConnectLimitPara 3 } hh3cNATBLConnectLowRate OBJECT-TYPE SYNTAX Integer32 (20..21474836) MAX-ACCESS read-write STATUS current DESCRIPTION "The minimal connection rate(in second)." DEFVAL { 100 } ::= { hh3cNATBLConnectLimitPara 4 } hh3cNATBLSpecialConnectHighRate OBJECT-TYPE SYNTAX Integer32 (20..21474836) MAX-ACCESS read-write STATUS current DESCRIPTION "The maximal special connection rate(in second). When administrator wants to control the speed of connection, he can selects the connection speed rate or special connection rate." DEFVAL { 250 } ::= { hh3cNATBLConnectLimitPara 5 } hh3cNATBLSpecialConnectLowRate OBJECT-TYPE SYNTAX Integer32 (20..21474836) MAX-ACCESS read-write STATUS current DESCRIPTION "The minimal special connection rate(in second)." DEFVAL { 100 } ::= { hh3cNATBLConnectLimitPara 6 } -- NAT blacklist property control Enable hh3cNATBLCtrlEnable OBJECT IDENTIFIER ::= { hh3cNATGlobalVars 3 } hh3cNATBLConnectSumEnable OBJECT-TYPE SYNTAX INTEGER { enable(1), disable(2) } MAX-ACCESS read-write STATUS current DESCRIPTION "Enable or disable the connection amount control." DEFVAL { disable } ::= { hh3cNATBLCtrlEnable 1 } hh3cNATBLConnectRateEnable OBJECT-TYPE SYNTAX INTEGER { enable(1), disable(2) } MAX-ACCESS read-write STATUS current DESCRIPTION "Enable or disable the connection rate control." DEFVAL { disable } ::= { hh3cNATBLCtrlEnable 2 } -- NAT NP aging-time hh3cNATNPTimer OBJECT IDENTIFIER ::= { hh3cNATGlobalVars 4 } hh3cNATNPAgingTime OBJECT-TYPE SYNTAX INTEGER { fast(1), slow(2) } MAX-ACCESS read-write STATUS current DESCRIPTION "There are two kinds of aging time in NP. One is fast and the other is slow. Administrator can select one or other. The default is fast." DEFVAL { fast } ::= { hh3cNATNPTimer 1 } hh3cNATMibObjects OBJECT IDENTIFIER ::= { hh3cNat 2 } -- **************MibObjects*************** -- NAT address pool table hh3cNATPoolInfoTable OBJECT-TYPE SYNTAX SEQUENCE OF Hh3cNATPoolInfoEntry MAX-ACCESS not-accessible STATUS current DESCRIPTION "NAT address pool table : The address in the pool is the IP address in the global network. The pool can span 255 IP addresses.All address pools configured by administrator are recorded in this table." ::= { hh3cNATMibObjects 1 } hh3cNATPoolInfoEntry OBJECT-TYPE SYNTAX Hh3cNATPoolInfoEntry MAX-ACCESS not-accessible STATUS current DESCRIPTION "The entry of NAT address pool table." INDEX { hh3cNATPoolIdx } ::= { hh3cNATPoolInfoTable 1 } Hh3cNATPoolInfoEntry ::= SEQUENCE { hh3cNATPoolIdx Integer32, hh3cNATPoolStartIpAddr IpAddress, hh3cNATPoolEndIpAddr IpAddress, hh3cNATPoolSlotNo Integer32, hh3cNATPoolRefCounter Integer32, hh3cNATPoolRowStatus RowStatus } hh3cNATPoolIdx OBJECT-TYPE SYNTAX Integer32 (1..320) MAX-ACCESS not-accessible STATUS current DESCRIPTION "Index of the address pool: The index uniquely indicates the address pool in the system, and its range is from 1 to 320. " ::= { hh3cNATPoolInfoEntry 1 } hh3cNATPoolStartIpAddr OBJECT-TYPE SYNTAX IpAddress MAX-ACCESS read-create STATUS current DESCRIPTION "The start IP address of address pool: It must be less than or equal to the end IP address." ::= { hh3cNATPoolInfoEntry 2 } hh3cNATPoolEndIpAddr OBJECT-TYPE SYNTAX IpAddress MAX-ACCESS read-create STATUS current DESCRIPTION "The end IP address of address pool: It must be more than or equal to the start IP address." ::= { hh3cNATPoolInfoEntry 3 } hh3cNATPoolSlotNo OBJECT-TYPE SYNTAX Integer32 (1..14 | 255) MAX-ACCESS read-create STATUS current DESCRIPTION "The number of NAT board to which the address pool is bound. The address translation is processed by this NAT board . The relation between address pool and slotNo is n:1. When the address pool is not bound to the NAT board,the value is 255. " ::= { hh3cNATPoolInfoEntry 4 } hh3cNATPoolRefCounter OBJECT-TYPE SYNTAX Integer32 MAX-ACCESS read-create STATUS current DESCRIPTION "The counter of reference. An address pool can be associated with more than one ACL and the counter of reference is recorded in this field. When the address pool is not associated with ACL, the value is 0." ::= { hh3cNATPoolInfoEntry 5 } hh3cNATPoolRowStatus OBJECT-TYPE SYNTAX RowStatus MAX-ACCESS read-create STATUS current DESCRIPTION "Only support 'destroy' and 'createAndGo'. If hh3cNATPoolIdx, hh3cNATPoolStartIpAddr and hh3cNATPoolEndIpAddr were provided correctly, its value is changed 'active'." ::= { hh3cNATPoolInfoEntry 6 } -- NAT Out bound Table hh3cNATOutboundTable OBJECT-TYPE SYNTAX SEQUENCE OF Hh3cNATOutboundEntry MAX-ACCESS not-accessible STATUS current DESCRIPTION "NAT out bound table: through associating ACL number, address pool with NAT board, administrator can designate which inside IP address can be translated to global IP address in the pool and the translation is processed by which NAT board." ::= { hh3cNATMibObjects 2 } hh3cNATOutboundEntry OBJECT-TYPE SYNTAX Hh3cNATOutboundEntry MAX-ACCESS not-accessible STATUS current DESCRIPTION "The entry of NAT out bound table." INDEX { ifIndex, hh3cNATOutboundAclNo } ::= { hh3cNATOutboundTable 1 } Hh3cNATOutboundEntry ::= SEQUENCE { hh3cNATOutboundAclNo Integer32, hh3cNATOutboundPoolIdx Integer32, hh3cNATOutboundIsNoPat INTEGER, hh3cNATOutboundSlotNo Integer32, hh3cNATOutboundRowStatus RowStatus } hh3cNATOutboundAclNo OBJECT-TYPE SYNTAX Integer32 (2000..3999) MAX-ACCESS not-accessible STATUS current DESCRIPTION "The number of ACL(Access Control List). When the packet accords with the rule in the ACL, its source IP address will be translated to IP address in Address pool." ::= { hh3cNATOutboundEntry 1 } hh3cNATOutboundPoolIdx OBJECT-TYPE SYNTAX Integer32 (0..320 | 2147483647) MAX-ACCESS read-create STATUS current DESCRIPTION "The index of address pool in hh3cNATPoolInfoTable. when administrator doesn't use the address pool and use the IP address of the interface as the address of global network, the value is 2147483647." ::= { hh3cNATOutboundEntry 2 } hh3cNATOutboundIsNoPat OBJECT-TYPE SYNTAX INTEGER { true(1), false(2) } MAX-ACCESS read-create STATUS current DESCRIPTION "Whether to use no pat manner. The translation of no pat is that the translation doesn't use the port information of packet." DEFVAL { false } ::= { hh3cNATOutboundEntry 3 } hh3cNATOutboundSlotNo OBJECT-TYPE SYNTAX Integer32 (1..14 | 255) MAX-ACCESS read-create STATUS current DESCRIPTION "The number of NAT board. In router, the value is 255 because no NAT board in it." ::= { hh3cNATOutboundEntry 4 } hh3cNATOutboundRowStatus OBJECT-TYPE SYNTAX RowStatus MAX-ACCESS read-create STATUS current DESCRIPTION "Only support 'destroy' and 'createAndGo'. If hh3cNATOutboundAclNo or hh3cNATOutboundAclNo and hh3cNATOutboundPoolIdx were provided correctly, its value is changed 'active'." ::= { hh3cNATOutboundEntry 5 } -- NAT inside Server Table hh3cNATServerTable OBJECT-TYPE SYNTAX SEQUENCE OF Hh3cNATServerEntry MAX-ACCESS not-accessible STATUS current DESCRIPTION "NAT inside Server Table. Administrator can configure server in the private network which can provide service for people in the public network. The translation map is : (InsideIP , InsidePort--> GlobalIP, GlobalPort ) (InsideIP + 1 , InsidePort--> GlobalIP, GlobalPort + 1) (InsideIP + 2 , InsidePort--> GlobalIP, GlobalPort + 2) ... ... ... (InsideIP+n(=InsideIP2),InsidePort--> GlobalIP,GlobalPort+n(=GlobalPort2)) " ::= { hh3cNATMibObjects 3 } hh3cNATServerEntry OBJECT-TYPE SYNTAX Hh3cNATServerEntry MAX-ACCESS not-accessible STATUS current DESCRIPTION "The entry of NAT inside server table." INDEX { ifIndex, hh3cNATServerProType, hh3cNATServerGlobalIP, hh3cNATServerStartGlobalPort, hh3cNATServerVpnIndex } ::= { hh3cNATServerTable 1 } Hh3cNATServerEntry ::= SEQUENCE { hh3cNATServerProType Integer32, hh3cNATServerGlobalIP IpAddress, hh3cNATServerStartGlobalPort Integer32, hh3cNATServerEndGlobalPort Integer32, hh3cNATServerStartInsideIP IpAddress, hh3cNATServerEndInsideIP IpAddress, hh3cNATServerInsidePort Integer32, hh3cNATServerSlotNo Integer32, hh3cNATServerVpnIndex Integer32, hh3cNATServerAclNumber Integer32, hh3cNATServerRowStatus RowStatus } hh3cNATServerProType OBJECT-TYPE SYNTAX Integer32 (1..255) MAX-ACCESS not-accessible STATUS current DESCRIPTION "The type of protocol: icmp(1), tcp(6), udp(17) and others." ::= { hh3cNATServerEntry 1 } hh3cNATServerGlobalIP OBJECT-TYPE SYNTAX IpAddress MAX-ACCESS not-accessible STATUS current DESCRIPTION "The global IP address of Inside Server." ::= { hh3cNATServerEntry 2 } hh3cNATServerStartGlobalPort OBJECT-TYPE SYNTAX Integer32 (0..65535) MAX-ACCESS not-accessible STATUS current DESCRIPTION "The start global port of Inside Server. When the port need not be configured, the value is 0." ::= { hh3cNATServerEntry 3 } hh3cNATServerEndGlobalPort OBJECT-TYPE SYNTAX Integer32 (0..65535) MAX-ACCESS read-create STATUS current DESCRIPTION "The end global port of Inside Server. When administrator doesn't configure a series of inside server, the value is 0. If the value is not zero, the value of (GlobalPort2-GlobalPort) must be equal to (InsideIP2 - InsideIP)." ::= { hh3cNATServerEntry 4 } hh3cNATServerStartInsideIP OBJECT-TYPE SYNTAX IpAddress MAX-ACCESS read-create STATUS current DESCRIPTION "The start private IP address of Inside Server." ::= { hh3cNATServerEntry 5 } hh3cNATServerEndInsideIP OBJECT-TYPE SYNTAX IpAddress MAX-ACCESS read-create STATUS current DESCRIPTION "The end private IP address of Inside Server. When administrator doesn't configure a series of inside server, the value is 0.0.0.0." ::= { hh3cNATServerEntry 6 } hh3cNATServerInsidePort OBJECT-TYPE SYNTAX Integer32 (0..65535) MAX-ACCESS read-create STATUS current DESCRIPTION "The private port of Inside Server." ::= { hh3cNATServerEntry 7 } hh3cNATServerSlotNo OBJECT-TYPE SYNTAX Integer32 (1..14 | 255) MAX-ACCESS read-create STATUS current DESCRIPTION "The number of NAT board. In router, the value is 255 because no NAT board in it." ::= { hh3cNATServerEntry 8 } hh3cNATServerVpnIndex OBJECT-TYPE SYNTAX Integer32 (0..65535) MAX-ACCESS not-accessible STATUS current DESCRIPTION "The VPN index of server." ::= { hh3cNATServerEntry 10 } hh3cNATServerAclNumber OBJECT-TYPE SYNTAX Integer32 (1..10000) MAX-ACCESS read-create STATUS current DESCRIPTION "Number of basic or advanced ACL." ::= { hh3cNATServerEntry 11 } hh3cNATServerRowStatus OBJECT-TYPE SYNTAX RowStatus MAX-ACCESS read-create STATUS current DESCRIPTION "Only support 'destroy' and 'createAndGo'. If hh3cNATServerProType, hh3cNATServerGlobalIP, hh3cNATServerGlobalPort and hh3cNATServerInsideIP were provided correctly, its value is changed 'active'." ::= { hh3cNATServerEntry 12 } -- NAT Time out Table hh3cNATTimeOutTable OBJECT-TYPE SYNTAX SEQUENCE OF Hh3cNATTimeOutEntry MAX-ACCESS not-accessible STATUS current DESCRIPTION "NAT Time out Table. When a connection is established, if there are not any actives in this connection between the time, it will be disconnected." ::= { hh3cNATMibObjects 4 } hh3cNATTimeOutEntry OBJECT-TYPE SYNTAX Hh3cNATTimeOutEntry MAX-ACCESS not-accessible STATUS current DESCRIPTION "The entry of NAT Time out Table." INDEX { hh3cNATTimeOutProtocol } ::= { hh3cNATTimeOutTable 1 } Hh3cNATTimeOutEntry ::= SEQUENCE { hh3cNATTimeOutProtocol INTEGER, hh3cNATTimeOutTimeValue Integer32 } hh3cNATTimeOutProtocol OBJECT-TYPE SYNTAX INTEGER { tcp(1), udp(2), icmp(3), pptp(4), dns(5), tcpFin(6), tcpSyn(7), ftpCtrl(8), ftpData(9) } MAX-ACCESS not-accessible STATUS current DESCRIPTION "The type of protocol." ::= { hh3cNATTimeOutEntry 1 } hh3cNATTimeOutTimeValue OBJECT-TYPE SYNTAX Integer32 (10..86400) MAX-ACCESS read-write STATUS current DESCRIPTION "The time of time out." ::= { hh3cNATTimeOutEntry 2 } -- NAT blacklist Enable(start/stop) Table hh3cNATBLEnableTable OBJECT-TYPE SYNTAX SEQUENCE OF Hh3cNATBLEnableEntry MAX-ACCESS not-accessible STATUS current DESCRIPTION "NAT blacklist function Enable Table. In this table, administrator can decide whether to start the function of blacklist in the NAT board. When the function of blacklist can't be set for a NAT board, the number of NAT board is 256." ::= { hh3cNATMibObjects 5 } hh3cNATBLEnableEntry OBJECT-TYPE SYNTAX Hh3cNATBLEnableEntry MAX-ACCESS not-accessible STATUS current DESCRIPTION "The entry of NAT blacklist Enable Table." INDEX { hh3cNATBLEnableSlotNo } ::= { hh3cNATBLEnableTable 1 } Hh3cNATBLEnableEntry ::= SEQUENCE { hh3cNATBLEnableSlotNo Integer32, hh3cNATBLEnable INTEGER } hh3cNATBLEnableSlotNo OBJECT-TYPE SYNTAX Integer32 (1..14 | 255) MAX-ACCESS not-accessible STATUS current DESCRIPTION "The number of NAT board. When the function of blacklist can't be set for a NAT board, the value is 255." ::= { hh3cNATBLEnableEntry 1 } hh3cNATBLEnable OBJECT-TYPE SYNTAX INTEGER { enable(1), disable(2) } MAX-ACCESS read-write STATUS current DESCRIPTION "Start or stop of function of blacklist." DEFVAL { disable } ::= { hh3cNATBLEnableEntry 2 } -- NAT special IP ConnectLimitPara Table hh3cNATBLIPConnectLimitParaTable OBJECT-TYPE SYNTAX SEQUENCE OF Hh3cNATBLIPConnectLimitParaEntry MAX-ACCESS not-accessible STATUS current DESCRIPTION "The table of connection control of special IP address. In this table, administrator can decide to adopt which manner to control the connection which IP address is the special IP address." ::= { hh3cNATMibObjects 6 } hh3cNATBLIPConnectLimitParaEntry OBJECT-TYPE SYNTAX Hh3cNATBLIPConnectLimitParaEntry MAX-ACCESS not-accessible STATUS current DESCRIPTION "The entry of the table of connection control of special IP address." INDEX { hh3cNATBLIPConnectLimitParaIP } ::= { hh3cNATBLIPConnectLimitParaTable 1 } Hh3cNATBLIPConnectLimitParaEntry ::= SEQUENCE { hh3cNATBLIPConnectLimitParaIP IpAddress, hh3cNATBLIPConnectHighValue Integer32, hh3cNATBLIPConnectLowValue Integer32, hh3cNATBLIPUseSpecialConnectRate INTEGER, hh3cNATBLIPConnectLimitRowStatus RowStatus } hh3cNATBLIPConnectLimitParaIP OBJECT-TYPE SYNTAX IpAddress MAX-ACCESS not-accessible STATUS current DESCRIPTION "The special IP address. The IP is private IP address." ::= { hh3cNATBLIPConnectLimitParaEntry 1 } hh3cNATBLIPConnectHighValue OBJECT-TYPE SYNTAX Integer32 (20..20000) MAX-ACCESS read-create STATUS current DESCRIPTION "The maximal connection amount. It must be more than the minimal connection amount." DEFVAL { 500 } ::= { hh3cNATBLIPConnectLimitParaEntry 2 } hh3cNATBLIPConnectLowValue OBJECT-TYPE SYNTAX Integer32 (20..20000) MAX-ACCESS read-create STATUS current DESCRIPTION "The minimal connection amount. It must be less than the maximal connection amount." DEFVAL { 200 } ::= { hh3cNATBLIPConnectLimitParaEntry 3 } hh3cNATBLIPUseSpecialConnectRate OBJECT-TYPE SYNTAX INTEGER { true(1), false(2) } MAX-ACCESS read-create STATUS current DESCRIPTION "Whether to use the special connection rate control." DEFVAL { false } ::= { hh3cNATBLIPConnectLimitParaEntry 4 } hh3cNATBLIPConnectLimitRowStatus OBJECT-TYPE SYNTAX RowStatus MAX-ACCESS read-create STATUS current DESCRIPTION "Only support 'destroy' and 'createAndGo'. If hh3cNATBLIPConnectHighValue, hh3cNATBLIPConnectLowValue and hh3cNATBLIPUseSpecialConnectRate were provided correctly, its value is changed 'active'." ::= { hh3cNATBLIPConnectLimitParaEntry 5 } -- NAT blacklist Manager Table hh3cNATBLManagerTable OBJECT-TYPE SYNTAX SEQUENCE OF Hh3cNATBLManagerEntry MAX-ACCESS not-accessible STATUS current DESCRIPTION "The management table of blacklist. The table doesn't support 'getnext' operation." ::= { hh3cNATMibObjects 7 } hh3cNATBLManagerEntry OBJECT-TYPE SYNTAX Hh3cNATBLManagerEntry MAX-ACCESS not-accessible STATUS current DESCRIPTION "The entry of management table of blacklist." INDEX { hh3cNATBLIpAdress, hh3cNATBLSlotNo } ::= { hh3cNATBLManagerTable 1 } Hh3cNATBLManagerEntry ::= SEQUENCE { hh3cNATBLIpAdress IpAddress, hh3cNATBLSlotNo Integer32, hh3cNATBLConSum Integer32, hh3cNATBLConSpd INTEGER } hh3cNATBLIpAdress OBJECT-TYPE SYNTAX IpAddress MAX-ACCESS not-accessible STATUS current DESCRIPTION "The IP address of entry of blacklist." ::= { hh3cNATBLManagerEntry 1 } hh3cNATBLSlotNo OBJECT-TYPE SYNTAX Integer32 (1..14) MAX-ACCESS not-accessible STATUS current DESCRIPTION "The number of NAT board." ::= { hh3cNATBLManagerEntry 2 } hh3cNATBLConSum OBJECT-TYPE SYNTAX Integer32 MAX-ACCESS read-only STATUS current DESCRIPTION "The connection amount." ::= { hh3cNATBLManagerEntry 3 } hh3cNATBLConSpd OBJECT-TYPE SYNTAX INTEGER { red(1), yellow(2), green(3) } MAX-ACCESS read-only STATUS current DESCRIPTION "The state of connection rate: red(1) : the connection rate is above the upper limit. yellow(2): the connection rate is between the upper and lower limit. green(3) : the connection rate is below the lower limit." ::= { hh3cNATBLManagerEntry 4 } -- NAT Statistics Info hh3cNATStatTable OBJECT-TYPE SYNTAX SEQUENCE OF Hh3cNATStatEntry MAX-ACCESS not-accessible STATUS current DESCRIPTION "The statistics information table of NAT module." ::= { hh3cNATMibObjects 8 } hh3cNATStatEntry OBJECT-TYPE SYNTAX Hh3cNATStatEntry MAX-ACCESS not-accessible STATUS current DESCRIPTION "The entry of statistics information table of NAT module." INDEX { hh3cNATStatNATBoardNo } ::= { hh3cNATStatTable 1 } Hh3cNATStatEntry ::= SEQUENCE { hh3cNATStatNATBoardNo Integer32, hh3cNATStatActiveTblCount Counter32, hh3cNATStatActiveTblCountInNP Counter32, hh3cNATStatActiveNatTblCount Counter32, hh3cNATStatActiveSvrTblCount Counter32, hh3cNATStatActivePoolTblCount Counter32, hh3cNATStatNumOfUsedPort Counter32, hh3cNATStatNumOfGoodPkt Counter32, hh3cNATStatNumOfBadPkt Counter32, hh3cNATStaticSessionCount Integer32, hh3cNATFragmentSessionCount Integer32, hh3cNATSequenceSessionCount Integer32, hh3cNATLogCount Integer32 } hh3cNATStatNATBoardNo OBJECT-TYPE SYNTAX Integer32 (1..14 | 255) MAX-ACCESS not-accessible STATUS current DESCRIPTION "The number of NAT board. In router, the value is 255 because no NAT board in it." ::= { hh3cNATStatEntry 1 } hh3cNATStatActiveTblCount OBJECT-TYPE SYNTAX Counter32 MAX-ACCESS read-only STATUS current DESCRIPTION "Active PAT session count In software." ::= { hh3cNATStatEntry 2 } hh3cNATStatActiveTblCountInNP OBJECT-TYPE SYNTAX Counter32 MAX-ACCESS read-only STATUS current DESCRIPTION "Active PAT session count In NP." ::= { hh3cNATStatEntry 3 } hh3cNATStatActiveNatTblCount OBJECT-TYPE SYNTAX Counter32 MAX-ACCESS read-only STATUS current DESCRIPTION "Active NO-PAT session count." ::= { hh3cNATStatEntry 4 } hh3cNATStatActiveSvrTblCount OBJECT-TYPE SYNTAX Counter32 MAX-ACCESS read-only STATUS current DESCRIPTION "Active SERVER session count." ::= { hh3cNATStatEntry 5 } hh3cNATStatActivePoolTblCount OBJECT-TYPE SYNTAX Counter32 MAX-ACCESS read-only STATUS current DESCRIPTION "Active address pool session count." ::= { hh3cNATStatEntry 6 } hh3cNATStatNumOfUsedPort OBJECT-TYPE SYNTAX Counter32 MAX-ACCESS read-only STATUS current DESCRIPTION "The number of used port in NP." ::= { hh3cNATStatEntry 7 } hh3cNATStatNumOfGoodPkt OBJECT-TYPE SYNTAX Counter32 MAX-ACCESS read-only STATUS current DESCRIPTION "The number of good packet in NP." ::= { hh3cNATStatEntry 8 } hh3cNATStatNumOfBadPkt OBJECT-TYPE SYNTAX Counter32 MAX-ACCESS read-only STATUS current DESCRIPTION "The number of bad packet in NP." ::= { hh3cNATStatEntry 9 } hh3cNATStaticSessionCount OBJECT-TYPE SYNTAX Integer32 MAX-ACCESS read-only STATUS current DESCRIPTION "Active STATIC session count." ::= { hh3cNATStatEntry 10 } hh3cNATFragmentSessionCount OBJECT-TYPE SYNTAX Integer32 MAX-ACCESS read-only STATUS current DESCRIPTION "Active fragment packet session count." ::= { hh3cNATStatEntry 11 } hh3cNATSequenceSessionCount OBJECT-TYPE SYNTAX Integer32 MAX-ACCESS read-only STATUS current DESCRIPTION "Active session table count hash by private IP." ::= { hh3cNATStatEntry 12 } hh3cNATLogCount OBJECT-TYPE SYNTAX Integer32 MAX-ACCESS read-only STATUS current DESCRIPTION "Buffered Nat LOG table count." ::= { hh3cNATStatEntry 13 } -- nat session hh3cNATSessionTable OBJECT-TYPE SYNTAX SEQUENCE OF Hh3cNATSessionEntry MAX-ACCESS not-accessible STATUS current DESCRIPTION "The nat session information table. There is the address translation information in the table. The sketch map of connection is pc1(private Net)------------------>NAT Device ------------------>Server(public Net) InsideIP, InsidePort---->translating to GlobalIP, GlobalPort------>PeerIP, PeerPort. " ::= { hh3cNATMibObjects 9 } hh3cNATSessionEntry OBJECT-TYPE SYNTAX Hh3cNATSessionEntry MAX-ACCESS not-accessible STATUS current DESCRIPTION "The entry of session information table." INDEX { hh3cNATSessionHashNumber, hh3cNATSessionProtocol, hh3cNATSessionInsideIP, hh3cNATSessionInsidePort, hh3cNATSessionPeerIP, hh3cNATSessionPeerPort, hh3cNATSessionVpnIndex } ::= { hh3cNATSessionTable 1 } Hh3cNATSessionEntry ::= SEQUENCE { hh3cNATSessionHashNumber Integer32, hh3cNATSessionProtocol Integer32, hh3cNATSessionGlobalIP IpAddress, hh3cNATSessionGlobalPort Integer32, hh3cNATSessionInsideIP IpAddress, hh3cNATSessionInsidePort Integer32, hh3cNATSessionPeerIP IpAddress, hh3cNATSessionPeerPort Integer32, hh3cNATSessionVpnIndex Integer32, hh3cNATSessionTTL Integer32, hh3cNATSessionStatus Integer32, hh3cNATSessionLeftTime TimeTicks } hh3cNATSessionHashNumber OBJECT-TYPE SYNTAX Integer32 (1..300000) MAX-ACCESS not-accessible STATUS current DESCRIPTION "The row number of the hash table." ::= { hh3cNATSessionEntry 1 } hh3cNATSessionProtocol OBJECT-TYPE SYNTAX Integer32 (1..255) MAX-ACCESS not-accessible STATUS current DESCRIPTION "The protocol type of session." ::= { hh3cNATSessionEntry 2 } hh3cNATSessionGlobalIP OBJECT-TYPE SYNTAX IpAddress MAX-ACCESS read-only STATUS current DESCRIPTION "The global IP of session. " ::= { hh3cNATSessionEntry 3 } hh3cNATSessionGlobalPort OBJECT-TYPE SYNTAX Integer32 (0..65535) MAX-ACCESS read-only STATUS current DESCRIPTION "The global port of session." ::= { hh3cNATSessionEntry 4 } hh3cNATSessionInsideIP OBJECT-TYPE SYNTAX IpAddress MAX-ACCESS not-accessible STATUS current DESCRIPTION "The Inside IP of session." ::= { hh3cNATSessionEntry 5 } hh3cNATSessionInsidePort OBJECT-TYPE SYNTAX Integer32 (0..65535) MAX-ACCESS not-accessible STATUS current DESCRIPTION "The Inside port of session." ::= { hh3cNATSessionEntry 6 } hh3cNATSessionPeerIP OBJECT-TYPE SYNTAX IpAddress MAX-ACCESS not-accessible STATUS current DESCRIPTION "The peer IP of session." ::= { hh3cNATSessionEntry 7 } hh3cNATSessionPeerPort OBJECT-TYPE SYNTAX Integer32 (0..65535) MAX-ACCESS not-accessible STATUS current DESCRIPTION "The peer port of session." ::= { hh3cNATSessionEntry 8 } hh3cNATSessionVpnIndex OBJECT-TYPE SYNTAX Integer32 (0..255) MAX-ACCESS not-accessible STATUS current DESCRIPTION "The VPN index of session." ::= { hh3cNATSessionEntry 9 } hh3cNATSessionTTL OBJECT-TYPE SYNTAX Integer32 MAX-ACCESS read-only STATUS current DESCRIPTION "The TTL of session." ::= { hh3cNATSessionEntry 10 } hh3cNATSessionStatus OBJECT-TYPE SYNTAX Integer32 MAX-ACCESS read-only STATUS current DESCRIPTION "The status of session." ::= { hh3cNATSessionEntry 11 } hh3cNATSessionLeftTime OBJECT-TYPE SYNTAX TimeTicks MAX-ACCESS read-only STATUS current DESCRIPTION "The Left time of session." ::= { hh3cNATSessionEntry 12 } hh3cNATStaticConfTable OBJECT-TYPE SYNTAX SEQUENCE OF Hh3cNATStaticConfEntry MAX-ACCESS not-accessible STATUS current DESCRIPTION "Static Nat configuration table." ::= { hh3cNATMibObjects 10 } hh3cNATStaticConfEntry OBJECT-TYPE SYNTAX Hh3cNATStaticConfEntry MAX-ACCESS not-accessible STATUS current DESCRIPTION "Configure static Nat." INDEX { hh3cNATStaticInsideIp } ::= { hh3cNATStaticConfTable 1 } Hh3cNATStaticConfEntry ::= SEQUENCE { hh3cNATStaticInsideIp IpAddress, hh3cNATStaticGlobalIp IpAddress, hh3cNATStaticRowStatus RowStatus } hh3cNATStaticInsideIp OBJECT-TYPE SYNTAX IpAddress MAX-ACCESS not-accessible STATUS current DESCRIPTION "Inside ip address." ::= { hh3cNATStaticConfEntry 1 } hh3cNATStaticGlobalIp OBJECT-TYPE SYNTAX IpAddress MAX-ACCESS read-create STATUS current DESCRIPTION "Global Ip address." ::= { hh3cNATStaticConfEntry 2 } hh3cNATStaticRowStatus OBJECT-TYPE SYNTAX RowStatus MAX-ACCESS read-create STATUS current DESCRIPTION "Only support 'destroy' and 'createAndGo'. If hh3cNATStaticInsideIp and hh3cNATStaticGlobalIp were provided correctly, its value is changed 'active'." ::= { hh3cNATStaticConfEntry 3 } hh3cNATStaticEnableTable OBJECT-TYPE SYNTAX SEQUENCE OF Hh3cNATStaticEnableEntry MAX-ACCESS not-accessible STATUS current DESCRIPTION "Active the static Nat on interface." ::= { hh3cNATMibObjects 11 } hh3cNATStaticEnableEntry OBJECT-TYPE SYNTAX Hh3cNATStaticEnableEntry MAX-ACCESS not-accessible STATUS current DESCRIPTION "Active the static Nat on interface." INDEX { ifIndex } ::= { hh3cNATStaticEnableTable 1 } Hh3cNATStaticEnableEntry ::= SEQUENCE { hh3cNATStaticEnable INTEGER } hh3cNATStaticEnable OBJECT-TYPE SYNTAX INTEGER { disable(0), enable(1) } MAX-ACCESS read-write STATUS current DESCRIPTION "Enable/disable the static Nat on the interface(hh3cNatStaticEnableIfIndex). disable (0) enable (1) " ::= { hh3cNATStaticEnableEntry 2 } hh3cNATDnsMapTable OBJECT-TYPE SYNTAX SEQUENCE OF Hh3cNATDnsMapEntry MAX-ACCESS not-accessible STATUS current DESCRIPTION "This table is used to set mapping of DNS." ::= { hh3cNATMibObjects 12 } hh3cNATDnsMapEntry OBJECT-TYPE SYNTAX Hh3cNATDnsMapEntry MAX-ACCESS not-accessible STATUS current DESCRIPTION "The entry of hh3cNATDnsMapTable." INDEX { hh3cNATDnsMapDomainName } ::= { hh3cNATDnsMapTable 1 } Hh3cNATDnsMapEntry ::= SEQUENCE { hh3cNATDnsMapDomainName DisplayString, hh3cNATDnsMapGlobalIp IpAddress, hh3cNATDnsMapGlobalPort Integer32, hh3cNATDnsMapProtocolType INTEGER, hh3cNATDnsMapLastUseTime TimeTicks, hh3cNATDnsMapRowStatus RowStatus } hh3cNATDnsMapDomainName OBJECT-TYPE SYNTAX DisplayString MAX-ACCESS not-accessible STATUS current DESCRIPTION "Domain name." ::= { hh3cNATDnsMapEntry 1 } hh3cNATDnsMapGlobalIp OBJECT-TYPE SYNTAX IpAddress MAX-ACCESS read-create STATUS current DESCRIPTION "Global IP address." ::= { hh3cNATDnsMapEntry 2 } hh3cNATDnsMapGlobalPort OBJECT-TYPE SYNTAX Integer32 (1..65535) MAX-ACCESS read-create STATUS current DESCRIPTION " Global port number." ::= { hh3cNATDnsMapEntry 3 } hh3cNATDnsMapProtocolType OBJECT-TYPE SYNTAX INTEGER { any(0), typeTCP(1), typeUDP(2) } MAX-ACCESS read-create STATUS current DESCRIPTION "TCP Transmission Control Protocol. UDP User Datagram Protocol." ::= { hh3cNATDnsMapEntry 4 } hh3cNATDnsMapLastUseTime OBJECT-TYPE SYNTAX TimeTicks MAX-ACCESS read-create STATUS current DESCRIPTION "Its value is the time that the device uses from startup to last use 'Dns Map'record. If the value is 0,the device never use this record." ::= { hh3cNATDnsMapEntry 5 } hh3cNATDnsMapRowStatus OBJECT-TYPE SYNTAX RowStatus MAX-ACCESS read-create STATUS current DESCRIPTION "Only support 'destroy' and 'createAndGo'. If hh3cNATDnsMapDomainName, hh3cNATDnsMapGlobalIp and hh3cNATDnsMapGlobalPortor hh3cNATDnsMapDomainName, hh3cNATDnsMapGlobalIp, hh3cNATDnsMapGlobalPort and hh3cNATDnsMapProtocolType were provided correctly, its value is changed 'active'." ::= { hh3cNATDnsMapEntry 6 } -- new NAT statistics hh3cNATStatVer2Table OBJECT-TYPE SYNTAX SEQUENCE OF Hh3cNATStatVer2TableEntry MAX-ACCESS not-accessible STATUS current DESCRIPTION "The new statistics of NAT." ::= { hh3cNATMibObjects 13 } hh3cNATStatVer2TableEntry OBJECT-TYPE SYNTAX Hh3cNATStatVer2TableEntry MAX-ACCESS not-accessible STATUS current DESCRIPTION "An entry (conceptual row) representing NAT statistics information." INDEX { hh3cNATStatChassis, hh3cNATStatSlot, hh3cNATStatCPUID } ::= { hh3cNATStatVer2Table 1 } Hh3cNATStatVer2TableEntry ::= SEQUENCE { hh3cNATStatChassis Unsigned32, hh3cNATStatSlot Unsigned32, hh3cNATStatCPUID Unsigned32, hh3cNATTotalNATSessionCount Unsigned32, hh3cNATEimTableCount Unsigned32, hh3cNATInboundNoPATTableCount Unsigned32, hh3cNATOutboundNoPATTableCount Unsigned32, hh3cNATMaxDynamicPortblock Unsigned32, hh3cNATMaxStaticPortblock Unsigned32, hh3cNATActiveDynamicPortblock Unsigned32, hh3cNATActiveStaticPortblock Unsigned32, hh3cNATSessionCreateRate Unsigned32, hh3cNATCurBandwidthRatio Unsigned32 } hh3cNATStatChassis OBJECT-TYPE SYNTAX Unsigned32(0..65534) MAX-ACCESS not-accessible STATUS current DESCRIPTION "An IRF member device ID." ::= { hh3cNATStatVer2TableEntry 1 } hh3cNATStatSlot OBJECT-TYPE SYNTAX Unsigned32(0..65534) MAX-ACCESS not-accessible STATUS current DESCRIPTION "The slot where the card resides." ::= { hh3cNATStatVer2TableEntry 2 } hh3cNATStatCPUID OBJECT-TYPE SYNTAX Unsigned32(0..7) MAX-ACCESS not-accessible STATUS current DESCRIPTION "CPU ID." ::= { hh3cNATStatVer2TableEntry 3 } hh3cNATTotalNATSessionCount OBJECT-TYPE SYNTAX Unsigned32 MAX-ACCESS read-only STATUS current DESCRIPTION "The number of current NAT sessions." ::= { hh3cNATStatVer2TableEntry 4 } hh3cNATEimTableCount OBJECT-TYPE SYNTAX Unsigned32 MAX-ACCESS read-only STATUS current DESCRIPTION "The number of current EIM tables." ::= { hh3cNATStatVer2TableEntry 5 } hh3cNATInboundNoPATTableCount OBJECT-TYPE SYNTAX Unsigned32 MAX-ACCESS read-only STATUS current DESCRIPTION "The number of current NO-PAT tables built on NAT inbound translation." ::= { hh3cNATStatVer2TableEntry 6 } hh3cNATOutboundNoPATTableCount OBJECT-TYPE SYNTAX Unsigned32 MAX-ACCESS read-only STATUS current DESCRIPTION "The number of current NO-PAT tables built on NAT outbound translation." ::= { hh3cNATStatVer2TableEntry 7 } hh3cNATMaxDynamicPortblock OBJECT-TYPE SYNTAX Unsigned32 MAX-ACCESS read-only STATUS current DESCRIPTION "The number of current NAT444 dynamic port blocks." ::= { hh3cNATStatVer2TableEntry 8 } hh3cNATMaxStaticPortblock OBJECT-TYPE SYNTAX Unsigned32 MAX-ACCESS read-only STATUS current DESCRIPTION "The number of current NAT444 static port blocks." ::= { hh3cNATStatVer2TableEntry 9 } hh3cNATActiveDynamicPortblock OBJECT-TYPE SYNTAX Unsigned32 MAX-ACCESS read-only STATUS current DESCRIPTION "The number of current active NAT444 dynamic port blocks." ::= { hh3cNATStatVer2TableEntry 10 } hh3cNATActiveStaticPortblock OBJECT-TYPE SYNTAX Unsigned32 MAX-ACCESS read-only STATUS current DESCRIPTION "The number of current active NAT444 static port blocks." ::= { hh3cNATStatVer2TableEntry 11 } hh3cNATSessionCreateRate OBJECT-TYPE SYNTAX Unsigned32 MAX-ACCESS read-only STATUS current DESCRIPTION "The rate of nat session create." ::= { hh3cNATStatVer2TableEntry 12 } hh3cNATCurBandwidthRatio OBJECT-TYPE SYNTAX Unsigned32(0..100) MAX-ACCESS read-only STATUS current DESCRIPTION "The value of the current CGN card bandwidth usage." ::= { hh3cNATStatVer2TableEntry 13 } -- Nodes of NAT Address Group Statistics hh3cNATAddrGrpStatTable OBJECT-TYPE SYNTAX SEQUENCE OF Hh3cNATAddrGrpStatTableEntry MAX-ACCESS not-accessible STATUS current DESCRIPTION "The statistics of NAT address groups." ::= { hh3cNATMibObjects 14 } hh3cNATAddrGrpStatTableEntry OBJECT-TYPE SYNTAX Hh3cNATAddrGrpStatTableEntry MAX-ACCESS not-accessible STATUS current DESCRIPTION "An entry (conceptual row) representing NAT address group statistics." INDEX { hh3cNATAddrGrpStatChassis, hh3cNATAddrGrpStatSlot, hh3cNATAddrGrpStatCPUID, hh3cNATAddrGrpStatAddrGrpNum } ::= { hh3cNATAddrGrpStatTable 1 } Hh3cNATAddrGrpStatTableEntry ::= SEQUENCE { hh3cNATAddrGrpStatChassis Unsigned32, hh3cNATAddrGrpStatSlot Unsigned32, hh3cNATAddrGrpStatCPUID Unsigned32, hh3cNATAddrGrpStatAddrGrpNum Unsigned32, hh3cNATAddrGrpStatFailAllocPort Unsigned32, hh3cNATAddrGrpStatAddrGrpSessCnt Counter64 } hh3cNATAddrGrpStatChassis OBJECT-TYPE SYNTAX Unsigned32(0..65534) MAX-ACCESS not-accessible STATUS current DESCRIPTION "An IRF member device ID." ::= { hh3cNATAddrGrpStatTableEntry 1 } hh3cNATAddrGrpStatSlot OBJECT-TYPE SYNTAX Unsigned32(0..65534) MAX-ACCESS not-accessible STATUS current DESCRIPTION "The slot where the card resides." ::= { hh3cNATAddrGrpStatTableEntry 2 } hh3cNATAddrGrpStatCPUID OBJECT-TYPE SYNTAX Unsigned32(0..7) MAX-ACCESS not-accessible STATUS current DESCRIPTION "CPU ID." ::= { hh3cNATAddrGrpStatTableEntry 3 } hh3cNATAddrGrpStatAddrGrpNum OBJECT-TYPE SYNTAX Unsigned32(0..65535) MAX-ACCESS not-accessible STATUS current DESCRIPTION "The NAT address group number." ::= { hh3cNATAddrGrpStatTableEntry 4 } hh3cNATAddrGrpStatFailAllocPort OBJECT-TYPE SYNTAX Unsigned32 MAX-ACCESS read-only STATUS current DESCRIPTION "The count of NAT port allocation failures." ::= { hh3cNATAddrGrpStatTableEntry 5 } hh3cNATAddrGrpStatAddrGrpSessCnt OBJECT-TYPE SYNTAX Counter64 MAX-ACCESS read-only STATUS current DESCRIPTION "The session count of current NAT address group." ::= { hh3cNATAddrGrpStatTableEntry 6 } -- Describe objects for CGN bandwidth usage trap hh3cNATBandwidthTraps OBJECT IDENTIFIER ::= { hh3cNATMibObjects 15 } hh3cNATBandwidthPrefix OBJECT IDENTIFIER ::= { hh3cNATBandwidthTraps 0 } hh3cNATBandwidthTrap NOTIFICATION-TYPE OBJECTS { hh3cNATBandwidthRatio, hh3cNATChassis, hh3cNATSlot, hh3cNATCpu } STATUS current DESCRIPTION "Send trap when the bandwidth usage of a CGN card has reached the hh3cNATBandwidthRatio." ::= { hh3cNATBandwidthPrefix 1 } hh3cNATBandwidthRecoveryTrap NOTIFICATION-TYPE OBJECTS { hh3cNATChassis, hh3cNATSlot, hh3cNATCpu } STATUS current DESCRIPTION "Send trap when the CGN card bandwidth usage has dropped below the threshold." ::= { hh3cNATBandwidthPrefix 2 } hh3cNATBandwidthTrapObjects OBJECT IDENTIFIER ::= { hh3cNATBandwidthTraps 1 } hh3cNATBandwidthRatio OBJECT-TYPE SYNTAX Unsigned32 UNITS "percent" MAX-ACCESS accessible-for-notify STATUS current DESCRIPTION "The usage of CGN card bandwidth." ::= { hh3cNATBandwidthTrapObjects 1 } hh3cNATChassis OBJECT-TYPE SYNTAX Unsigned32(0..65534) MAX-ACCESS accessible-for-notify STATUS current DESCRIPTION "An IRF member device ID." ::= { hh3cNATBandwidthTrapObjects 2 } hh3cNATSlot OBJECT-TYPE SYNTAX Unsigned32(0..65534) MAX-ACCESS accessible-for-notify STATUS current DESCRIPTION "The slot where the card resides." ::= { hh3cNATBandwidthTrapObjects 3 } hh3cNATCpu OBJECT-TYPE SYNTAX Unsigned32(0..7) MAX-ACCESS accessible-for-notify STATUS current DESCRIPTION "CPU ID." ::= { hh3cNATBandwidthTrapObjects 4 } -- Describe objects for NAT Instance Address Group Resource Usage hh3cInstAddrGrpUsgTable OBJECT-TYPE SYNTAX SEQUENCE OF Hh3cInstAddrGrpUsgEntry MAX-ACCESS not-accessible STATUS current DESCRIPTION "The usage of NAT instance address group resources(port-block usage)." ::= { hh3cNATMibObjects 16 } hh3cInstAddrGrpUsgEntry OBJECT-TYPE SYNTAX Hh3cInstAddrGrpUsgEntry MAX-ACCESS not-accessible STATUS current DESCRIPTION "The resource usage info of an address group." INDEX { hh3cInstAddrUsgInstName, hh3cInstAddrUsgGrpIndex } ::= { hh3cInstAddrGrpUsgTable 1 } Hh3cInstAddrGrpUsgEntry ::= SEQUENCE { hh3cInstAddrUsgInstName OCTET STRING, hh3cInstAddrUsgGrpIndex Unsigned32, hh3cInstAddrUsgInstIndex Unsigned32, hh3cInstAddrUsgGrpUsage Unsigned32, hh3cInstAddrUsgTotalIPCount Unsigned32, hh3cInstAddrUsgUsedIPCount Unsigned32, hh3cInstAddrUsgUnusedIPCount Unsigned32 } hh3cInstAddrUsgInstName OBJECT-TYPE SYNTAX OCTET STRING(SIZE (1..32)) MAX-ACCESS not-accessible STATUS current DESCRIPTION "NAT instance name." ::= { hh3cInstAddrGrpUsgEntry 1 } hh3cInstAddrUsgGrpIndex OBJECT-TYPE SYNTAX Unsigned32(1..65536) MAX-ACCESS not-accessible STATUS current DESCRIPTION "NAT address group ID." ::= { hh3cInstAddrGrpUsgEntry 2 } hh3cInstAddrUsgInstIndex OBJECT-TYPE SYNTAX Unsigned32(1..127) MAX-ACCESS read-only STATUS current DESCRIPTION "NAT instance index." ::= { hh3cInstAddrGrpUsgEntry 3 } hh3cInstAddrUsgGrpUsage OBJECT-TYPE SYNTAX Unsigned32(0..100) UNITS "percent" MAX-ACCESS read-only STATUS current DESCRIPTION "The usage of address group resources." ::= { hh3cInstAddrGrpUsgEntry 4 } hh3cInstAddrUsgTotalIPCount OBJECT-TYPE SYNTAX Unsigned32(0..65536) MAX-ACCESS read-only STATUS current DESCRIPTION "The total number of NAT addresses." ::= { hh3cInstAddrGrpUsgEntry 5 } hh3cInstAddrUsgUsedIPCount OBJECT-TYPE SYNTAX Unsigned32(0..65536) MAX-ACCESS read-only STATUS current DESCRIPTION "The number of NAT addresses used." ::= { hh3cInstAddrGrpUsgEntry 6 } hh3cInstAddrUsgUnusedIPCount OBJECT-TYPE SYNTAX Unsigned32(0..65536) UNITS "percent" MAX-ACCESS read-only STATUS current DESCRIPTION "The number of NAT addresses not in use." ::= { hh3cInstAddrGrpUsgEntry 7 } -- Describe objects for NAT Instance Address Group Member Resource Usage hh3cInstAddrGrpMemberUsgTable OBJECT-TYPE SYNTAX SEQUENCE OF Hh3cInstAddrGrpMemberUsgEntry MAX-ACCESS not-accessible STATUS current DESCRIPTION "The usage of CGN address group member resources(port-block usage)." ::= { hh3cNATMibObjects 17 } hh3cInstAddrGrpMemberUsgEntry OBJECT-TYPE SYNTAX Hh3cInstAddrGrpMemberUsgEntry MAX-ACCESS not-accessible STATUS current DESCRIPTION "The resource usage info of an address group member." INDEX { hh3cInstAddrMemUsgInstName, hh3cInstAddrMemUsgGrpIndex, hh3cInstAddrMemUsgGrpStartIP } ::= { hh3cInstAddrGrpMemberUsgTable 1 } Hh3cInstAddrGrpMemberUsgEntry ::= SEQUENCE { hh3cInstAddrMemUsgInstName OCTET STRING, hh3cInstAddrMemUsgGrpIndex Unsigned32, hh3cInstAddrMemUsgGrpStartIP IpAddress, hh3cInstAddrMemUsgGrpEndIP IpAddress, hh3cInstAddrMemUsgInstIndex Unsigned32, hh3cInstAddrMemUsgGrpUsage Unsigned32, hh3cInstAddrMemUsgGrpIPMask OCTET STRING } hh3cInstAddrMemUsgInstName OBJECT-TYPE SYNTAX OCTET STRING(SIZE (1..32)) MAX-ACCESS not-accessible STATUS current DESCRIPTION "NAT instance name." ::= { hh3cInstAddrGrpMemberUsgEntry 1 } hh3cInstAddrMemUsgGrpIndex OBJECT-TYPE SYNTAX Unsigned32(1..65536) MAX-ACCESS not-accessible STATUS current DESCRIPTION "NAT address group ID." ::= { hh3cInstAddrGrpMemberUsgEntry 2 } hh3cInstAddrMemUsgGrpStartIP OBJECT-TYPE SYNTAX IpAddress MAX-ACCESS not-accessible STATUS current DESCRIPTION "NAT address group member start IP address." ::= { hh3cInstAddrGrpMemberUsgEntry 3 } hh3cInstAddrMemUsgGrpEndIP OBJECT-TYPE SYNTAX IpAddress MAX-ACCESS read-only STATUS current DESCRIPTION "NAT address group member end IP address." ::= { hh3cInstAddrGrpMemberUsgEntry 4 } hh3cInstAddrMemUsgInstIndex OBJECT-TYPE SYNTAX Unsigned32(1..127) MAX-ACCESS read-only STATUS current DESCRIPTION "NAT instance index." ::= { hh3cInstAddrGrpMemberUsgEntry 5 } hh3cInstAddrMemUsgGrpUsage OBJECT-TYPE SYNTAX Unsigned32(0..100) UNITS "percent" MAX-ACCESS read-only STATUS current DESCRIPTION "The usage of address group member resources." ::= { hh3cInstAddrGrpMemberUsgEntry 6 } hh3cInstAddrMemUsgGrpIPMask OBJECT-TYPE SYNTAX OCTET STRING ( SIZE(0..32) ) MAX-ACCESS read-only STATUS current DESCRIPTION "NAT address mask." ::= { hh3cInstAddrGrpMemberUsgEntry 7 } -- Describe objects for NAT Instance Address Group Usage Trap hh3cInstAddrGrpUsageTraps OBJECT IDENTIFIER ::= { hh3cNATMibObjects 18 } hh3cInstAddrGrpUsagePrefix OBJECT IDENTIFIER ::= { hh3cInstAddrGrpUsageTraps 0 } hh3cInstAddrGrpUsageTrap NOTIFICATION-TYPE OBJECTS { hh3cInstAddrTrapInstName, hh3cInstAddrTrapGrpIndex, hh3cInstAddrTrapInstIndex, hh3cInstAddrTrapUsgThreshold } STATUS current DESCRIPTION "Send trap when hh3cInstAddrUsgGrpUsage reached the threshold." ::= { hh3cInstAddrGrpUsagePrefix 1 } hh3cInstAddrGrpUsageRecovTrap NOTIFICATION-TYPE OBJECTS { hh3cInstAddrTrapInstName, hh3cInstAddrTrapGrpIndex, hh3cInstAddrTrapInstIndex } STATUS current DESCRIPTION "Send trap when dropped below the threshold." ::= { hh3cInstAddrGrpUsagePrefix 2 } hh3cInstAddrGrpUsageTrapInfo OBJECT IDENTIFIER ::= { hh3cInstAddrGrpUsageTraps 1 } hh3cInstAddrTrapInstName OBJECT-TYPE SYNTAX DisplayString(SIZE (1..32)) MAX-ACCESS accessible-for-notify STATUS current DESCRIPTION "NAT instance name." ::= { hh3cInstAddrGrpUsageTrapInfo 1 } hh3cInstAddrTrapGrpIndex OBJECT-TYPE SYNTAX Unsigned32(1..65536) MAX-ACCESS accessible-for-notify STATUS current DESCRIPTION "NAT address group ID." ::= { hh3cInstAddrGrpUsageTrapInfo 2 } hh3cInstAddrTrapInstIndex OBJECT-TYPE SYNTAX Unsigned32(1..127) MAX-ACCESS accessible-for-notify STATUS current DESCRIPTION "NAT instance index." ::= { hh3cInstAddrGrpUsageTrapInfo 3 } hh3cInstAddrTrapUsgThreshold OBJECT-TYPE SYNTAX Unsigned32(0..100) UNITS "percent" MAX-ACCESS accessible-for-notify STATUS current DESCRIPTION "NAT address group usage reached the threshold." ::= { hh3cInstAddrGrpUsageTrapInfo 4 } -- Describe objects for NAT IP Pool Address Group Table hh3cNatIPPoolGroupTable OBJECT-TYPE SYNTAX SEQUENCE OF Hh3cNatIPPoolGroupEntry MAX-ACCESS not-accessible STATUS current DESCRIPTION "The usage of NAT IP pool address group resources." ::= { hh3cNATMibObjects 19 } hh3cNatIPPoolGroupEntry OBJECT-TYPE SYNTAX Hh3cNatIPPoolGroupEntry MAX-ACCESS not-accessible STATUS current DESCRIPTION "The resource usage info of an IP pool address group." INDEX { hh3cNatIPPoolName } ::= { hh3cNatIPPoolGroupTable 1 } Hh3cNatIPPoolGroupEntry ::= SEQUENCE { hh3cNatIPPoolName OCTET STRING, hh3cNatIPPoolAddrUsage Unsigned32, hh3cNatIPPoolTotalCount Unsigned32, hh3cNatIPPoolUsedCount Unsigned32, hh3cNatIPPoolUnusedCount Unsigned32 } hh3cNatIPPoolName OBJECT-TYPE SYNTAX OCTET STRING(SIZE (1..32)) MAX-ACCESS not-accessible STATUS current DESCRIPTION "NAT IP pool name." ::= { hh3cNatIPPoolGroupEntry 1 } hh3cNatIPPoolAddrUsage OBJECT-TYPE SYNTAX Unsigned32(0..100) MAX-ACCESS read-only STATUS current DESCRIPTION "The usage of NAT IP pool address group resources." ::= { hh3cNatIPPoolGroupEntry 2 } hh3cNatIPPoolTotalCount OBJECT-TYPE SYNTAX Unsigned32(0..65536) MAX-ACCESS read-only STATUS current DESCRIPTION "The total number of NAT addresses." ::= { hh3cNatIPPoolGroupEntry 3 } hh3cNatIPPoolUsedCount OBJECT-TYPE SYNTAX Unsigned32(0..65536) MAX-ACCESS read-only STATUS current DESCRIPTION "The number of NAT addresses used." ::= { hh3cNatIPPoolGroupEntry 4 } hh3cNatIPPoolUnusedCount OBJECT-TYPE SYNTAX Unsigned32(0..65536) MAX-ACCESS read-only STATUS current DESCRIPTION "The number of NAT addresses not in use." ::= { hh3cNatIPPoolGroupEntry 5 } -- Describe objects for NAT IP Pool Address Group Usage Trap hh3cNatIPPoolAddrUsageExceedTraps OBJECT IDENTIFIER ::= { hh3cNATMibObjects 20 } hh3cNatIPPoolAddrUsageExceedPrefix OBJECT IDENTIFIER ::= { hh3cNatIPPoolAddrUsageExceedTraps 0 } hh3cNatIPPoolAddrUsageExceedTrap NOTIFICATION-TYPE OBJECTS { hh3cNatTrapIPPoolName, hh3cNatTrapIPPoolAddrUsage } STATUS current DESCRIPTION "Send trap when NatIPPoolAddrUsageExceed reached the threshold." ::= { hh3cNatIPPoolAddrUsageExceedPrefix 1 } hh3cNatIPPoolAddrUsageRecoveryTrap NOTIFICATION-TYPE OBJECTS { hh3cNatTrapIPPoolName, hh3cNatTrapIPPoolAddrUsage } STATUS current DESCRIPTION "Send trap when dropped below the threshold." ::= { hh3cNatIPPoolAddrUsageExceedPrefix 2 } hh3cNatIPPoolAddrUsageTrapExceed OBJECT IDENTIFIER ::= { hh3cNatIPPoolAddrUsageExceedTraps 1 } hh3cNatTrapIPPoolName OBJECT-TYPE SYNTAX OCTET STRING(SIZE (1..32)) MAX-ACCESS accessible-for-notify STATUS current DESCRIPTION "NAT IP pool name." ::= { hh3cNatIPPoolAddrUsageTrapExceed 1 } hh3cNatTrapIPPoolAddrUsage OBJECT-TYPE SYNTAX Unsigned32(0..100) MAX-ACCESS accessible-for-notify STATUS current DESCRIPTION "NAT IP pool address usage." ::= { hh3cNatIPPoolAddrUsageTrapExceed 2 } END