-- This module defines enterprise MIBs for NAT
--
-- Copyright (c) 1999-2004, Juniper Networks, Inc.
-- All rights reserved.NETSCREEN-NAT-MIB DEFINITIONS::=BEGINIMPORTSnetscreenNAT
FROM NETSCREEN-SMI
Integer32,IpAddress,MODULE-IDENTITY,OBJECT-TYPEFROM SNMPv2-SMI
DisplayStringFROM SNMPv2-TC
;
netscreenNATMibModule MODULE-IDENTITYLAST-UPDATED"200503032022Z"-- March 03, 2005ORGANIZATION"Juniper Networks, Inc."CONTACT-INFO"Customer Support
1194 North Mathilda Avenue
Sunnyvale, California 94089-1206
USA
Tel: 1-800-638-8296
E-mail: customerservice@juniper.net
HTTP://www.juniper.net"DESCRIPTION"Added dip pool utilization attribute"REVISION"200503030000Z"-- March 03, 2005DESCRIPTION"This module defines the managed objects for Netscreen NAT"REVISION"200405030000Z"-- May 03, 2004DESCRIPTION"Modified copyright and contact information"REVISION"200403030000Z"-- March 03, 2004DESCRIPTION"Converted to SMIv2 by Longview Software"REVISION"200306030000Z"-- June 03, 2003DESCRIPTION"Change VIP configuration per physical interface"REVISION"200105270000Z"-- May 27, 2001DESCRIPTION"Creation Date"::={ netscreenNAT 0}
NsNatDipEntry ::=SEQUENCE{
nsNatDipIndex Integer32,
nsNatDipId Integer32,
nsNatDipLow IpAddress,
nsNatDipHigh IpAddress,
nsNatDipIfIp IpAddress,
nsNatDipIfNetmask IpAddress,
nsNatDipPTEnable INTEGER,
nsNatDipVsys Integer32,
nsNatDipUtil Integer32}
NsNatMipEntry ::=SEQUENCE{
nsNatMipIndex Integer32,
nsNatMipIp IpAddress,
nsNatMipNetmask IpAddress,
nsNatMipHost IpAddress,
nsNatMipIfIp IpAddress,
nsNatMipIfNetmask IpAddress,
nsNatMipVsys Integer32}
NsNatVipCfgEntry ::=SEQUENCE{
nsNatVipCfgIndex Integer32,
nsNatVipCfgIp IpAddress,
nsNatVipCfgPort Integer32,
nsNatVipCfgService DisplayString,
nsNatVipCfgStatus INTEGER,
nsNatVipCfgLoadBalance INTEGER}
NsNatVipServerEntry ::=SEQUENCE{
nsNatVipServerIndex Integer32,
nsNatVipServerVIP IpAddress,
nsNatVipServerService Integer32,
nsNatVipServerLoadBalance INTEGER,
nsNatVipServerIp IpAddress,
nsNatVipServerWeight Integer32,
nsNatVipServerStatus INTEGER}nsNatMipTable OBJECT-TYPESYNTAXSEQUENCEOF NsNatMipEntry
MAX-ACCESSnot-accessibleSTATUScurrentDESCRIPTION"Mapped IP(MIP) is a direct one-to-one maping of traffic
destined for one IP address ot another IP address. On
NetScreen device, MIP addresses for tunnel and untrusted
interfaces can be created."::={ netscreenNAT 1}nsNatMipEntry OBJECT-TYPESYNTAX NsNatMipEntry
MAX-ACCESSnot-accessibleSTATUScurrentDESCRIPTION"An entry containing attributes of a mip address"INDEX{ nsNatMipIndex }
::={ nsNatMipTable 1}nsNatMipIndex OBJECT-TYPESYNTAXInteger32(0..2147483647)MAX-ACCESSread-onlySTATUScurrentDESCRIPTION"A unique value for each address. Its value ranges between 0
and 65535 and may not be contingous."::={ nsNatMipEntry 1}nsNatMipIp OBJECT-TYPESYNTAXIpAddressMAX-ACCESSread-onlySTATUScurrentDESCRIPTION"mip address. A MIP must be in the same subnet as the tunnel
interface to which it is linked to; however, for the untrusted
interface, a MIP does not need to be in the same subnet. In
either case, a MIP must not be the same as the interface
address or be in any DIP pool that might also be on that
subnet."::={ nsNatMipEntry 2}nsNatMipNetmask OBJECT-TYPESYNTAXIpAddressMAX-ACCESSread-onlySTATUScurrent
DESCRIPTION"Subnet mask for this MIP."::={ nsNatMipEntry 3}nsNatMipHost OBJECT-TYPESYNTAXIpAddressMAX-ACCESSread-onlySTATUScurrentDESCRIPTION"Host ip address mip mapping to."::={ nsNatMipEntry 4}nsNatMipIfIp OBJECT-TYPESYNTAXIpAddressMAX-ACCESSread-onlySTATUScurrentDESCRIPTION"Interface's ip address that a MIP is linked to."::={ nsNatMipEntry 5}nsNatMipIfNetmask OBJECT-TYPESYNTAXIpAddressMAX-ACCESSread-onlySTATUScurrentDESCRIPTION"Interface's netmask that a MIP is linked to."::={ nsNatMipEntry 6}nsNatMipVsys OBJECT-TYPESYNTAXInteger32MAX-ACCESSread-only
STATUScurrentDESCRIPTION"Virtual system this mip belongs to."::={ nsNatMipEntry 7}nsNatDipTable OBJECT-TYPESYNTAXSEQUENCEOF NsNatDipEntry
MAX-ACCESSnot-accessibleSTATUScurrentDESCRIPTION"A DIP(Dynamic IP) pool is a range of IP addresses from which
the NetScreen device can dynamically take addresses to use when
performing NAT on the source IP address of outgoing or incoming
IP packets."::={ netscreenNAT 2}nsNatDipEntry OBJECT-TYPESYNTAX NsNatDipEntry
MAX-ACCESSnot-accessibleSTATUScurrentDESCRIPTION"An entry containing attributes of a dynamic address"INDEX{ nsNatDipIndex }::={ nsNatDipTable 1}nsNatDipIndex OBJECT-TYPESYNTAXInteger32(0..2147483647)
MAX-ACCESSread-onlySTATUScurrentDESCRIPTION"A unique value for each address. Its value ranges between 0
and 65535 and may not be contigous."::={ nsNatDipEntry 1}nsNatDipId OBJECT-TYPESYNTAXInteger32MAX-ACCESSread-onlySTATUScurrentDESCRIPTION"DIP pool id."::={ nsNatDipEntry 2}nsNatDipLow OBJECT-TYPESYNTAXIpAddressMAX-ACCESSread-onlySTATUScurrentDESCRIPTION"Start IP Address Range. The range of addresses in a DIP pool
must be in the same subnet as the interface IP address, but the
DIP pool should not contain the interface IP or any MIP or VIP
address that might on that subnet."::={ nsNatDipEntry 3}nsNatDipHigh OBJECT-TYPESYNTAXIpAddressMAX-ACCESSread-onlySTATUScurrent
DESCRIPTION"End IP Address Range. The range of addresses in a DIP pool
must be in the same subnet as the interface IP address, but the
DIP pool should not contain the interface IP or any MIP or VIP
address that might on that subnet."::={ nsNatDipEntry 4}nsNatDipIfIp OBJECT-TYPESYNTAXIpAddressMAX-ACCESSread-onlySTATUScurrentDESCRIPTION"Interface's ip address that a DIP is linked to."::={ nsNatDipEntry 5}nsNatDipIfNetmask OBJECT-TYPESYNTAXIpAddressMAX-ACCESSread-onlySTATUScurrentDESCRIPTION"interface's ip address that a DIP is linked to."::={ nsNatDipEntry 6}nsNatDipPTEnable OBJECT-TYPESYNTAXINTEGER{disable(0),enabled(1)}MAX-ACCESSread-only
STATUScurrentDESCRIPTION"Enable Port Translation"::={ nsNatDipEntry 7}nsNatDipVsys OBJECT-TYPESYNTAXInteger32MAX-ACCESSread-onlySTATUScurrentDESCRIPTION"virtual system this dip belongs to"::={ nsNatDipEntry 8}nsNatDipUtil OBJECT-TYPESYNTAXInteger32MAX-ACCESSread-onlySTATUScurrentDESCRIPTION"dip pool utilzation for this entry. Only applicable to fixed dip. If this is not a fixed dip this will return 0"::={ nsNatDipEntry 9}nsNatVip OBJECTIDENTIFIER::={ netscreenNAT 3}nsNatVipCfgTable OBJECT-TYPESYNTAXSEQUENCEOF NsNatVipCfgEntry
MAX-ACCESSnot-accessibleSTATUScurrentDESCRIPTION
"VIP(Virtual IP) allows you to map routable IP addresses to
internal servers, therby providing transparent connections for
a NAT networks to the Internet. This table collects all VIP
configurations in NetScreen device."::={ nsNatVip 1}nsNatVipCfgEntry OBJECT-TYPESYNTAX NsNatVipCfgEntry
MAX-ACCESSnot-accessibleSTATUScurrentDESCRIPTION"Each entry in the nsNatVipCfgTable holds a set of
configuration parameters associated with an instance of VIP."INDEX{ nsNatVipCfgIndex }::={ nsNatVipCfgTable 1}nsNatVipCfgIndex OBJECT-TYPESYNTAXInteger32(0..2147483647)MAX-ACCESSread-onlySTATUScurrentDESCRIPTION"A unique value for each vip configuation. Its value ranges
between 1 and 65535 and may not be contingous."::={ nsNatVipCfgEntry 1}nsNatVipCfgIp OBJECT-TYPESYNTAXIpAddress
MAX-ACCESSread-onlySTATUScurrentDESCRIPTION"The IP address for the VIP, which must be in the same subnet
as the untrusted interface and can even be the same address as
the untrusted interface."::={ nsNatVipCfgEntry 2}nsNatVipCfgPort OBJECT-TYPESYNTAXInteger32MAX-ACCESSread-onlySTATUScurrentDESCRIPTION"The port number for communication between the trusted server
and the untrusted interfce on the NetScreen device."::={ nsNatVipCfgEntry 3}nsNatVipCfgService OBJECT-TYPESYNTAXDisplayString(SIZE(0..255))MAX-ACCESSread-onlySTATUScurrentDESCRIPTION"Service for the server on the trusted interface."::={ nsNatVipCfgEntry 4}nsNatVipCfgStatus OBJECT-TYPESYNTAXINTEGER{
not-available(0),available(1)}MAX-ACCESSread-onlySTATUScurrentDESCRIPTION"The status of the server on the trusted/DMZ interface."::={ nsNatVipCfgEntry 5}nsNatVipCfgLoadBalance OBJECT-TYPESYNTAXINTEGER{null(0),round-robin(1),weighted-round-robin(2),least-conns(3),weighted-least-conns(4)}MAX-ACCESSread-onlySTATUScurrentDESCRIPTION"Load balance algorithm for the Virtual IP servers."::={ nsNatVipCfgEntry 6}nsNatVipServerTable OBJECT-TYPESYNTAXSEQUENCEOF NsNatVipServerEntry
MAX-ACCESSnot-accessibleSTATUScurrentDESCRIPTION"Ballancing the loads on NetScreen servers allow traffic
intended for a server(one IP address on the untrusted network)
to be mapped to several different IP addresses on the DMZ or
trusted network. There can be up to eight servers in one load
balancing group, which apperas as a single virtual server.This
table collects all the server pool configurations for the
virtual ip server."::={ nsNatVip 2}nsNatVipServerEntry OBJECT-TYPESYNTAX NsNatVipServerEntry
MAX-ACCESSnot-accessibleSTATUScurrentDESCRIPTION"An entry containing attributes of a vip configuration's server
pool."INDEX{ nsNatVipServerIndex }::={ nsNatVipServerTable 1}nsNatVipServerIndex OBJECT-TYPESYNTAXInteger32(0..2147483647)MAX-ACCESSread-onlySTATUScurrentDESCRIPTION
"A unique value for each vip server configuation. Its value
ranges between 1 and 65535 and may not be contigous."::={ nsNatVipServerEntry 1}nsNatVipServerVIP OBJECT-TYPESYNTAXIpAddressMAX-ACCESSread-onlySTATUScurrentDESCRIPTION"The IP address for the VIP."::={ nsNatVipServerEntry 2}nsNatVipServerService OBJECT-TYPESYNTAXInteger32MAX-ACCESSread-onlySTATUScurrentDESCRIPTION"Service provideing through the VIP."::={ nsNatVipServerEntry 3}nsNatVipServerLoadBalance OBJECT-TYPESYNTAXINTEGER{null(0),round-robin(1),weighted-round-robin(2),least-conns(3),weighted-least-conns(4)
}MAX-ACCESSread-onlySTATUScurrentDESCRIPTION"Load balance algorithm for the vitural IP servers."::={ nsNatVipServerEntry 4}nsNatVipServerIp OBJECT-TYPESYNTAXIpAddressMAX-ACCESSread-onlySTATUScurrentDESCRIPTION"Virtual IP server's IP address."::={ nsNatVipServerEntry 5}nsNatVipServerWeight OBJECT-TYPESYNTAXInteger32MAX-ACCESSread-onlySTATUScurrentDESCRIPTION"Loadbalance algorithm weight."::={ nsNatVipServerEntry 6}nsNatVipServerStatus OBJECT-TYPESYNTAXINTEGER{down(0),up(1)}
MAX-ACCESSread-onlySTATUScurrentDESCRIPTION"Virtual IP server's status."::={ nsNatVipServerEntry 7}END